Overview

This minor update introduces changes for the Authlete Management Console. This new version if available from May 28th (Thu).

Management Console

Implemented new global sidebar component to facilitate navigation within the management console.

Added the following attester root certificate settings to service settings :

clientAttesterRoots → Trusted root certificates used to verify the certificate chain specified in the x5c header parameter of the Client Attestation JWT
clientAttesterRootsEnabled → When on, the list of trusted root certificates is used when verifying the certificate chain of Client Attestation JWTs
clientAttesterRootsOnly → When on, only the configured trusted root certificates are used (system-installed root certificates are not used)
keyAttesterRoots → Trusted root certificates used to verify the certificate chain specified in the x5c header parameter of the Key Attestation JWT
keyAttesterRootsEnabled → When on, the list of trusted root certificates is used when verifying the certificate chain of Key Attestation JWTs
keyAttesterRootsOnly → When on, only the configured trusted root certificates are used (system-installed root certificates are not used)

Implemented UI for OpenID Connect Back-Channel Logout 1.0
Optimized UX for new entity creation
Fixed input fields for Verified Claims (IDA) settings to keep them consistent with the rest of the console
Fixed an issue where the service creation button would be visible to a user without the required permissions
Fixed an issue where actions on the flexible access token management UI would be visible to a user without the required permissions
Improved UI for loopback redirection URI
Improved UI for Federation > Trust Anchors settings
Fixed an issue where scrolling could be used to modify the value of some fields