Release 3.8.0

Downloads

Documentation

• User manual
• REST API reference
• Java API docs

Changelog

New features:

• UY-917 offline_access scope and support in OAuth AS
• UY-918 prompt parameter support for OAuth
• UY-999 Drop support for Hazelcast
• UY-1068 Support logo for OTP credential
• UY-1082 Additional message in forms: notification to the inviting person
• UY-1136 Preselection of language during OAuth authentication
• UY-1176 Change Java target version to 11
• UY-1182 Improve sign-in performance on large accounts
• UY-1187 Cyclic dependencies update for 3.8.0
• UY-1192 Attribute introspection endpoint
• UY-1193 Public PKCE clients should be accepted without providing a credential
• UY-1200 Support for allowed scopes configurable per oauth client
• UY-1201 unity types should not depend on log4j-core
• UY-1100 Add confirmation request for Clear action on credentials

Bugs fixed:

• UY-143 Runtime refreshing of endpoint authenticators not working
• UY-1064 Non conformant authentication error for the OAuth token endpoint
• UY-1197 Authentication options combo incorrectly presents entry derived from saml metadata
• UY-1199 Invalid support for cache-control in OIDC metadata downloader
• UY-1202 Incorrectly processing invitation to normal enquiry
• UY-1203 Invitation creation time is always empty
• UY-1205 Performance degradation of mass group attributes query in 2.7
• UY-1206 Read only mode is not respected by MVEL expression field
• UY-1211 Wrongly set user in logging context