From: Roman K. <ro...@un...> - 2024-11-08 10:54:55
|
Dear Subscribers, A new patch release 4.0.3 is now available. The following has been released: - *Support for key ID in JWT:* in the OpenID Connect (OIDC) flow, after exchanging an authorization code for an ID token, your OIDC clients can now validate the ID token and confirm that Unity-IdM is the signing authority. The OAuth /jwk public endpoint has been updated to expose the key IDs, and the key ID used to sign the JWT token is now included in the JWT token header. - *Fix for Console OAuth IdP editor:* When a user updates the OAuth IdP configuration and sets the “Token signing algorithm” to an ECC-based option with an invalid signing credential, submitting the configuration fails, causing the updated IdP configuration to be discarded. This patch addresses this issue. All relevant links are available here: https://unity-idm.eu/releases/release-4-0-3/ Best regards, Roman |