Version Number : 3.0.32

Overview

This minor update introduces changes for Authlete 3.0. This new version is available from May 28th (Thu).

New Features & Improvements

Platform components update

Upgraded Jarkarta, DataNucleus, HikariCP, Mockito, and other maven dependencies to supported versions for Jetty 12 and Java 25.

Direct endpoints clean up

Cleaned up deprecated code in service and client direct endpoints.

Specs support

OpenID Connect Back-Channel Logout 1.0 support

Implemented support for OpenID Connect Back-Channel Logout 1.0. For more information, check the documentation here.

Bug fixes

Grant Management replace flow fix

Fixed an issue where the token endpoint would fail with A050101 whenever grant_management_action=replace was used with the authorization code grant type.

Invalid URI error fix

Fixed an issue where calling /auth/authorization with parameters that include an invalid URI such as request_uri=invalid\ would result in a 500 error.

Persistent token cleanup fix

Fixed an issue where some persistent tokens would be targeted by the token clean up job if they haven’t been used for a certain period of time.

Loopback redirection URI fix

Fixed an issue where a service with loopbackRedirectionUriVariable=true and openid included in the authorization request’s scope would cause the /token call to fail with invalid_grant, even though the client sends the same redirect_uri at both /authorization and /token.

Other

N/A