Overview

This minor update introduces changes for Authlete 3.0. This new version was made available on March 3rd (Mon).

Management Console

Settings reset issue fix

Fixed an issue where certain service and client settings were cleared/reset as a side effect when saving other unrelated settings.

Unavailable actions issue fix

Fixed an issue where the Service and Client creation buttons would be disabled after a user accepted an invite including admin permissions.

Settings UI update

Added audit logs to organization settings UI.

Logs search issue fix

Fixed an issue where user was unable to search logs if the user field was missing.

Field description fix

Fixed description text for Identity Evidence Types field.

Client overview feature

Added a client overview panel at the top of the hero section on client page.

Audit logs feature update

Implemented date range filter for audit logs.

FAPI settings UI update

Updated service settings UI for FAPI settings.

IdP

Audit logs GET endpoint update

Updated audit logs GET endpoint to return logs based on organization instead of user.

User invitation error messaging improvements

Updated error message when trying to invite non-existent user on environment where password login is disabled.

Audit logs retrieval

Added functionality to retrieve audit logs using organization token.

JVM crashes fix

Fixed an issue where Java Virtual Machine would crash when running the IdP with an M4 processor.

User information display fix

Fixed an issue where the user information would not show on security.login.oidc event.

Audit logs events update

Updated list of audit logs events :

• Added the SECURITY_LOGIN_OIDC event
• Added the SECURITY_MFA_CREATE event
• Added the SECURITY_MFA_DELETE event
• Added the SECURITY_PASSWORD_UPDATE event
• Renamed the SECURITY_MFA_LOGIN event to SECURITY_LOGIN_MFA
• Renamed the USER_ACCEPTINVITE event to USER_INVITE_ACCEPT
• Renamed the USER_DECLINEINVITE event to USER_INVITE_DECLINE

Specs support

SD-JWT VC media type update

Updated media type of SD-JWT VC from vc+sd-jwt to dc+sd-jwt to comply with OAuth-SD-JWT VC PR 268.

OID4VCI Key Proof JWT update

Updated our implementation of OID4VCI to support the did:jwk method in the kid parameter in Key Proof JWT.

Bug fixes

Table isolation fix

Fixed an issue where incorrect use of persistence managers would prevent table isolation feature from functioning properly.

Client identifier extraction fix

Fixed inconsistencies in client identifier extraction and authentication across API endpoints.

Other

N/A