1. Blog
  2. Curity
Curity Identity Server 11.5: passkeys across domains, custom hashing, refreshed Admin UI

Key Takeaways

  • Passkeys now work across multiple domains via Related Origin Requests

  • A new Password Transformer plugin type lets you bring your own password hashing, with Argon2 and SCrypt available as an open source plugin

  • The Admin UI is rebuilt around the Curity 2026 brand identity and adapts to smaller desktop screens

On this page

Curity Identity Server 11.5 is out. Here's what we've been building:

Passkeys now work across multiple domains

Passkeys now work across multiple domains. Both the Passkeys and WebAuthn authenticators support Related Origin Requests, so a credential registered on one domain can be used on another. HAAPI web clients hosted on a different host than the Identity Server can now run registration and assertion ceremonies too. If you run several brands or country domains off one identity platform, this is the change that removes a workaround.

You can now plug in your own password hashing algorithm

The new Password Transformer plugin type lets you extend the server with your own password hashing algorithms. An open source plugin providing Argon2 and SCrypt is available on GitHub, ready to use or to build on.

The Admin UI has a new look and works on smaller screens

The Admin UI now carries the Curity 2026 brand identity and adapts properly to smaller desktop screens, with stacked multi-pane layouts, independently scrolling panes and automatic sidebar collapsing.

Two breaking changes in OAuth handling

The iss claim of a JWT is now validated by default on introspection and revocation, and unknown countries are no longer treated as valid country codes in Geolocation actions. Both are breaking changes, so read the upgrade guide before you deploy. HAAPI clients can also now use DPoP-bound access tokens.

Everything else in 11.5

An experimental Curity Kubernetes Operator, a new MuleSoft Token Handler OAuth Proxy, back and forward navigation in the Login Web Application and a long list of smaller improvements.

Want to learn more about the release? On Friday, October 2, at 14:00 CEST we will run a release webinar where the product team will take us through the new features and enhancements. Register to attend live.

You can find the full release notes, go-through webinar and everything else you need on the Developer Portal.

Want to try it? Get started with a free trial and see what 11.5 can do for your architecture.

Curity

Written by

Curity

Find blog posts written by Curity's product engineers, discussing topics related to identities, APIs and how to secure digital services.