Changelog

A list of all new updates and improvements to the Curity Identity Server and related tech,
such as open source library, tools, and SDKs.

    • Curity Identity Server

      Product

      9.1.0

      • Database clients in the Admin UI
      • Account multi-tenancy support
      • Sign-up action feature added
      • Better feedback of password policy violations
      Read more →
    • HAAPI Android SDK

      SDK

      4.1.0

      • When using HaapiManager, a HaapiManagerUnexpectedException can be thrown when an unexpected exception occurs that may be caused by javax.net.ssl.SSLProtocolException or java.io.IOException. [HSA-335]
      Read more →
    • HAAPI Android UI SDK

      SDK

      4.1.0

      • When BankId authenticator is used and the BankId application is not installed on the device, the Haapi flow is not interrupted. Instead, a view is presented. The view displays a QRCode that can be scanned by a device that has BankId .BankId v5 requires to have Generate Autostart Qr Code set to true.BankId v6 displays automatically the QRCode.
      • BankId v5 requires to have Generate Autostart Qr Code set to true.
      • BankId v6 displays automatically the QRCode.
      • Improvements to the logging information provided by the framework. [HSA-298]Adds masking for Sensitive Data via configuration propertyAdds tags for Mapping and UI Component to facilitate tracing the logs.
      • Adds masking for Sensitive Data via configuration property
      • Adds tags for Mapping and UI Component to facilitate tracing the logs.
      Read more →
    • idsvr-helm

      Open Source

      idsvr-0.12.23

      • Updated version of Curity Identity Server to 9.1.0
      Read more →
    • Curity Identity Server

      Product Revisions

      9.0.1

        Read more →
      • idsvr-helm

        Open Source

        idsvr-0.12.22

        • Updated version of Curity Identity Server to 9.0.1
        Read more →
      • Curity Identity Server

        Product

        9.0.0

        • OpenID Wallet Authenticator
        • Demo Wallet
        • Password policies
        • Java 21
        • DPoP-protected refresh tokens for HAAPI on Android
        Read more →
      • HAAPI Android SDK

        SDK

        4.0.0

        • HaapiConfiguration can be configured with TokenBoundConfiguration. [HSA-289]OAuthTokenManager supports the server configuration issue-token-bound-authorization-code by using TokenBoundConfiguration. [HSA-289]
        • OAuthTokenManager supports the server configuration issue-token-bound-authorization-code by using TokenBoundConfiguration. [HSA-289]
        Read more →
      • HAAPI Android UI SDK

        SDK

        4.0.0

        • WidgetConfiguration.Builder can be configured with TokenBoundConfiguration. [HSA-289]
        Read more →
      • idsvr-helm

        Open Source

        idsvr-0.12.21

        • Updated version of Curity Identity Server to 9.0.0
        Read more →
      • Curity Identity Server

        Product

        8.7.0

        • Password policies
        • DynamoDB support for database clients
        • HAAPI passkey and WebAuthn support for Android
        Read more →
      • HAAPI Android SDK

        SDK

        3.4.0

        • The model parsing for properties in Step and Action. [HSA-313]
        Read more →
      • HAAPI Android UI SDK

        SDK

        3.4.0

        • Support for native WebAuthn Authorization. [HSA-293]A new setting useNativeWebAuthnSupport in WidgetConfiguration allows to enable the native WebAuthn support behavior. It is currently an experimental feature.It requires a version of the Curity Identity Server that includes HAAPI support for WebAuthn on Android (starting from 8.7.0).
        • A new setting useNativeWebAuthnSupport in WidgetConfiguration allows to enable the native WebAuthn support behavior. It is currently an experimental feature.
        • It requires a version of the Curity Identity Server that includes HAAPI support for WebAuthn on Android (starting from 8.7.0).
        • When user interaction is triggered on a QRCode image, it can open an installed application or an external browser. [HSA-309]
        Read more →
      • HAAPI iOS Driver

        SDK

        3.2.0

        • HaapiTokenManager and HaapiClient can return a Dpop to support this configuration issue-token-bound-authorization-code. [HSI-244]It requires a version of the Curity Identity Server that supports token binding (starting from 8.7.0).
        • It requires a version of the Curity Identity Server that supports token binding (starting from 8.7.0).
        Read more →
      • HAAPI iOS SDK

        SDK

        3.2.0

        • HaapiManager can return a Dpop to support this configuration issue-token-bound-authorization-code. [HSI-244]It requires a version of the Curity Identity Server that supports token binding (starting from 8.7.0).
        • It requires a version of the Curity Identity Server that supports token binding (starting from 8.7.0).
        Read more →
      • HAAPI iOS UI Kit

        SDK

        3.2.0

        • A message error mentioning the app scheme is shown when displaying an error for no alternative routes after trying to open an external application. [HSI-253]
        • issue-token-bound-authorization-code is supported when using HaapiFlowViewModel or HaapiFlowViewController. [HSI-244]It requires a version of the Curity Identity Server that supports token binding (starting from 8.7.0).
        • It requires a version of the Curity Identity Server that supports token binding (starting from 8.7.0).
        Read more →
      • idsvr-helm

        Open Source

        idsvr-0.12.20

        • Updated version of Curity Identity Server to 8.7.0
        • Add path as a parameter for probes #79
        • Add ingressClassName field to Ingress resources. #80
        Read more →
      • idsvr-helm

        Open Source

        idsvr-0.12.18

        • Added the following configuration options
        • curity.runtime.lifecycle: Adds a lifecycle configuration to the deployment runtime if specified in the values file.
        • curity.runtime.terminationGracePeriodSeconds: The time to wait for the pod to terminate gracefully with default value 30.
        • curity.runtime.affinity: The affinity rules for the runtime pods.
        • curity.runtime.topologySpreadConstraints: The topology spread constraints for the runtime pods.
        Read more →
      • Curity Identity Server

        Product Revisions

        8.6.1

          Read more →
        • idsvr-helm

          Open Source

          idsvr-0.12.17

          • Updated version of Curity Identity Server to 8.6.1
          • Cluster conf job also runs on pre-rollback helm hook
          Read more →
        • Curity Identity Server

          Product

          8.6.0

          • Passkeys authenticator
          • BankID v6 for consentors and new intent message support
          • Improved endpoint editing for OAuth endpoints in the admin UI
          Read more →
        • HAAPI Android SDK

          SDK

          3.3.0

          • Adds new buildParameters method in WebAuthnRegistrationClientOperationStep to fix operation submission parameters, deprecating the previous existing one. [HSA-292]
          Read more →
        • HAAPI Android UI SDK

          SDK

          3.3.0

          • A long press on a MessageView can copy the text to the clipboard manager. [HSA-196]
          • A new setting useDefaultExternalBrowser in WidgetConfiguration allows to replace ChromeTab usage with the default external browser. [HSA-258]
          • The username and password fields support autofill hints. [HSA-151]
          Read more →
        • HAAPI iOS Driver

          SDK

          3.1.0

          • The attestation key ID and the state from the last CAT request are not reset when HaapiTokenManager.clear is invoked. [HSI-231]
          Read more →
        • HAAPI iOS SDK

          SDK

          3.1.0

          • The BankId url parameters duplication that causes the BankId app to trigger incorrectly. [HSI-243]
          Read more →
        • HAAPI iOS UI Kit

          SDK

          3.1.0

          • Two new attributes are added to TextAppearance: kern and lineHeightMultiple. [HSI-216]
          • A new HaapiFlowViewControllerRepresentable class that is safe to use with iOS 17. [HSI-229]
          • A new AuthenticatorSelectionPresentation tabs has been added. [HSI-215]
          • A long press on a MessageView can copy the text to the UIPasteboard. [HSI-233]
          • A new setting useDefaultExternalBrowser in HaapiUIKitConfiguration allows to replace ASWebAuthenticationSession usage with the default external browser. [HSI-203]
          • The username field supports autofill. [HSI-36]
          • When user interaction is triggered on a QRCode image, it can open an installed application or an external browser. [HSI-235]
          Read more →
        • idsvr-helm

          Open Source

          idsvr-0.12.16

          • Updated version of Curity Identity Server to 8.6.0
          Read more →
        • Curity Identity Server

          Product Revisions

          8.5.3

            Read more →
          • idsvr-helm

            Open Source

            idsvr-0.12.15

            • Updated version of Curity Identity Server to 8.5.3
            Read more →
          • Curity Identity Server

            Product Revisions

            8.5.2

              Read more →
            • idsvr-helm

              Open Source

              idsvr-0.12.14

              • Fixed the name of mounted post commit script ConfigMaps
              Read more →
            • idsvr-helm

              Open Source

              idsvr-0.12.13

              • Updated version of Curity Identity Server to 8.5.2
              • Allow to add custom post commit scripts with curity.config.postCommitScripts
              Read more →
            • Curity Identity Server

              Product Revisions

              8.5.1

                Read more →
              • nginx_phantom_token_module

                Open Source

                1.5.0

                • Builds for NGINX Plus R29 / 30, with new distros for Amazon 2023 and Debian 12
                Read more →
              • idsvr-helm

                Open Source

                idsvr-0.12.12

                • Updated version of Curity Identity Server to 8.5.1
                Read more →
              • nginx_oauth_proxy_module

                Open Source

                1.4.0

                • Builds for NGINX Plus R29 / 30, with new distros for Amazon 2023 and Debian 12
                Read more →
              • Curity Identity Server

                Product

                8.5.0

                • Action Bundles
                • BankID v6 including new BankID back-channel authenticator for CIBA
                • OAuth metadata
                Read more →
              • idsvr-helm

                Open Source

                idsvr-0.12.11

                • #70 Add serviceAccountAnnotations for customize annotation
                • Updated version of Curity Identity Server to 8.5.0
                Read more →
              • Curity Identity Server

                Product Revisions

                8.4.1

                  Read more →
                • idsvr-helm

                  Open Source

                  idsvr-0.12.10

                  • Updated version of Curity Identity Server to 8.4.1
                  Read more →
                • Curity Identity Server

                  Product

                  8.4.0

                  • Database clients with GraphQL API and DevOps Dashboard support
                  • New iOS UI SDK for the Hypermedia Authentication API
                  • Custom procedures for the pre-authorized grant
                  Read more →
                • HAAPI Android SDK

                  SDK

                  3.2.0

                  • HaapiConfiguration now provides a configuration property useAttestation to enable/disable key-attestation. [HSA-257]
                  Read more →
                • HAAPI Android UI SDK

                  SDK

                  3.2.0

                  • Internal model mappings improvements. [HSA-256]
                  • Automatic AccessToken fetch improvements. [HSA-252]
                  Read more →
                • HAAPI iOS Driver

                  SDK

                  3.0.0

                  • Configuration to set maximum allowed retries for HaapiTokenManager to retry attestation if a DCError.serverUnavailable occurs. [HSI-191]
                  Read more →
                • HAAPI iOS SDK

                  SDK

                  3.0.0

                  • HaapiConfiguration now provides a property attestationConfiguration to configure DeviceCheck attestation on physical devices. [HSI-195] [HSI-182]A configuration property useAttestation to enable/disable DeviceCheck attestation. [HSI-195]A configuration property attestationMaxRetries to configure retry mechanism. [HSI-182]
                  • A configuration property useAttestation to enable/disable DeviceCheck attestation. [HSI-195]
                  • A configuration property attestationMaxRetries to configure retry mechanism. [HSI-182]
                  • Problem type to represent an error when there's a mismatch between the session and access token. [HSI-158]
                  Read more →
                • HAAPI iOS UI Kit

                  SDK

                  3.0.0

                  • The Haapi UIKit framework is created. [HSI-108]
                  Read more →
                • idsvr-helm

                  Open Source

                  idsvr-0.12.9

                  • Updated version of Curity Identity Server to 8.4.0
                  Read more →
                • Curity Identity Server

                  Product Revisions

                  8.3.2

                    Read more →
                  • idsvr-helm

                    Open Source

                    idsvr-0.12.8

                    • Updated version of Curity Identity Server to 8.3.2
                    Read more →
                  • Curity Identity Server

                    Product Revisions

                    8.3.1

                      Read more →
                    • idsvr-helm

                      Open Source

                      idsvr-0.12.7

                      • Updated version of Curity Identity Server to 8.3.1
                      Read more →
                    • HAAPI Android UI SDK

                      SDK

                      3.1.1

                      • Improvements to the polling logic while waiting for server response. [HSA-245]
                      Read more →
                    • Curity Identity Server

                      Product

                      8.3.0

                      • Second release of Verifiable Credential Issuance, now with RAR support
                      • Token introspectors in the Java SDK for use in Token Procedure Plugins
                      • New metrics for the HTTP client connection pool
                      Read more →
                    • idsvr-helm

                      Open Source

                      idsvr-0.12.6

                      • Updated version of Curity Identity Server to 8.3.0
                      • Do not set Runtime Deployment replicas if autoscaling is enabled
                      • revisionHistoryLimit is now configurable
                      Read more →
                    • Curity Identity Server

                      Product Revisions

                      8.2.1

                        Read more →
                      • idsvr-helm

                        Open Source

                        idsvr-0.12.5

                        • Updated version of Curity Identity Server to 8.2.1
                        Read more →
                      • Curity Identity Server

                        Product

                        8.2.0

                        • Experimental Verifiable Credential Issuance (VCI) support
                        • New reference and composite claims types
                        • Token issuers in the SDK for token procedure plugins
                        Read more →
                      • idsvr-helm

                        Open Source

                        idsvr-0.12.4

                        • Fix an issue with resources on runtime nodes #64
                        • Re-order HPA metrics
                        • Updated version of Curity Identity Server to 8.2.0
                        Read more →
                      • idsvr-helm

                        Open Source

                        idsvr-0.12.3

                        • Updated version of Curity Identity Server to 8.1.2
                        Read more →
                      • Curity Identity Server

                        Product Revisions

                        8.1.1

                          Read more →
                        • idsvr-helm

                          Open Source

                          idsvr-0.12.2

                          • Updated version of Curity Identity Server to 8.1.1
                          Read more →
                        • Curity Identity Server

                          Product

                          8.1.0

                          • Template areas on Authentication Actions
                          • Android UI SDK updates
                          • Opt-in MFA attributes in GraphQL and the DevOps Dashboard
                          • Lots of small fixes and updates
                          Read more →
                        • HAAPI Data Model

                          SDK

                          1.3.0

                          • Add new problem type for mismatch between session and HAAPI access token
                          Read more →
                        • idsvr-helm

                          Open Source

                          idsvr-0.12.1

                          • Fixed an issue in runtime ingress
                          • Use configured ImagePullPolicy in cluster-conf job and convertKeystore job
                          • Updated version of Curity Identity Server to 8.1.0
                          Read more →
                        • HAAPI Android SDK

                          SDK

                          3.1.0

                          • Problem type to represent an error when there's a mismatch between the session and access token. [HSA-238]
                          Read more →
                        • HAAPI Android UI SDK

                          SDK

                          3.1.0

                          • The logic which assigns the action buttons style. [HSA-214]
                          • Improvements to the text styling of interaction forms headers. [HSA-213]
                          • Improvements to the text styling of Content and Heading messages. [HSA-217]
                          • Updated authenticator selector icons. [HSA-215]
                          • Improvements to the rendering of Headers in Selection UI representation. [HSA-223]
                          • Improvements to Form inter items spacing rendering. [HSA-221]
                          • Improvements to text content placement in Form. [HSA-235]
                          • Improvements to Consent screen items spacing rendering. [HSA-242]
                          Read more →
                        • nginx_phantom_token_module

                          Open Source

                          1.4.0

                          • Builds for NGINX Plus R28 and NGINX 1.23.2
                          Read more →
                        • nginx_oauth_proxy_module

                          Open Source

                          1.3.0

                          • Builds for NGINX Plus R28 and NGINX 1.23.2
                          Read more →
                        • aws-sns-sms-plugin

                          Open Source

                          v1.0.0

                          • Added AWS SNS support for sending SMS to users.
                          Read more →
                        • Curity Identity Server

                          Product

                          8.0.0

                          • A simplified UI mode for new users and common cases
                          • Android UI SDK for HAAPI
                          • Write token procedures as Java plugins
                          • Passkey functionality in supported browsers
                          • Native WebAuthn and passkey support for HAAPI on iOS
                          • GraphQL account listing for DynamoDB
                          • FAPI 2.0 Security Profile compliance
                          Read more →
                        • HAAPI Android SDK

                          SDK

                          3.0.0

                          • HaapiClientOperation models to support native Webauthn Authorization. [HSA-143]It requires a version of the Curity Identity Server that includes HAAPI support for the WebAuthn authenticator.
                          • It requires a version of the Curity Identity Server that includes HAAPI support for the WebAuthn authenticator.
                          Read more →
                        • HAAPI Android UI SDK

                          SDK

                          3.0.0

                          • HAAPI UI Widget SDK is released providing a UI implementation for executing an Haapi Flow authentication. [HSA-70]
                          Read more →
                        • HAAPI Data Model

                          SDK

                          1.2.0

                          • Add issuer to authorization responses (RFC-9207).
                          • Add definition of WebAuthn registration and authentication client operations.
                          Read more →
                        • HAAPI iOS SDK

                          SDK

                          2.5.0

                          • HaapiClientOperation models are added to support native WebAuthn Authorization. [HSI-105]It requires a version of the Curity Identity Server that includes HAAPI support for the WebAuthn authenticator.
                          • It requires a version of the Curity Identity Server that includes HAAPI support for the WebAuthn authenticator.
                          Read more →
                        • idsvr-helm

                          Open Source

                          idsvr-0.12.0

                          • BREAKING* if ingress was used previously it has to be updated with the new values, check the README for more information
                          • Added curity.runtime.logging.resources, curity.admin.logging.resources and logging.resources to control resources in logging containers
                          • imagePullPolicy is also applied in the Job defined in cluster-conf.yaml
                          • Added PodDisruptionBudget
                          • Updated version of Curity Identity Server to 8.0.0
                          Read more →
                        • nonce-authenticator

                          Open Source

                          1.0.0

                          • First release
                          Read more →
                        • OAuth Tools

                          Tools

                          3.3.0

                          • [OT-123] Add tooltips in Workspace icons
                          • [OT-129] Add confirmation when clearing localStorage and Cookies from menu
                          • Fixed a visual issue in Create Token flow
                          Read more →
                        • OAuth Tools

                          Tools

                          3.2.1

                          • Fixed an issue causing the Curity Playground to have the wrong url
                          Read more →
                        • OAuth Tools

                          Tools

                          3.2.0

                          • The panel displaying results in most Flows on the right is now resizable
                          • When Curity Playground is added, all the demo collections are also created too
                          • Adding the Curity Playground runs discovery, fetching the OpenID metadata
                          • When a new collection is created it is now added in the bottom of the list of existing collections
                          • Fixed an issue with large Workspace names
                          Read more →
                        • Curity Identity Server

                          Product Revisions

                          7.6.1

                            Read more →
                          • idsvr-helm

                            Open Source

                            idsvr-0.11.12

                            • Updated version of Curity Identity Server to 7.6.1
                            Read more →
                          • OAuth Tools

                            Tools

                            3.1.0

                            • Updated used libraries for security reasons
                            Read more →
                          • Curity Identity Server

                            Product

                            7.6.0

                            • Brand new SAML authenticator with SP metadata support
                            • SAML support in the Dynamic Authenticator
                            • Environment badge in the Admin UI
                            • New authenticator listing page in the Admin UI
                            Read more →
                          • HAAPI Android SDK

                            SDK

                            2.4.0

                            • HTTP headers provider in the HaapiConfiguration. [HSA-163]
                            Read more →
                          • HAAPI iOS SDK

                            SDK

                            2.4.0

                            • HTTP headers provider in HaapiManager. [HSI-134]
                            Read more →
                          • idsvr-helm

                            Open Source

                            idsvr-0.11.11

                            • Updated version of Curity Identity Server to 7.6
                            Read more →
                          • idsvr-helm

                            Open Source

                            idsvr-0.11.10

                            • Customize pod labels, annotations, and volumes #52
                            • Add post-hook manifest #51
                            Read more →
                          • grafana

                            Open Source

                            v3.1.0

                            • Added panels for HTTP client metrics
                            Read more →
                          • Curity Identity Server

                            Product Revisions

                            7.5.1

                              Read more →
                            • idsvr-helm

                              Open Source

                              idsvr-0.11.9

                              • Updated version of Curity Identity Server to 7.5.1
                              Read more →
                            • Curity Identity Server

                              Product

                              7.5.0

                              • Update to the authentication action SDK to be able to restart a pipeline
                              • New actions were added that can restart the authentication pipeline, request user acknowledgement, and manually link accounts
                              • New metrics for monitoring HTTP clients are included
                              Read more →
                            • HAAPI Android SDK

                              SDK

                              2.3.0

                              • Kotlin version is updated to 1.6.21. [HSA-83]
                              • HaapiManager.submit() can provide a Map<String, Any> instead of a Map<String, String>. [HSA-140]
                              Read more →
                            • HAAPI iOS Driver

                              SDK

                              2.3.0

                              • Error is thrown when HaapiManager.start() was invoked more than once per app run. HaapiManager.start() can now be invoked multiple times during the application lifetime. [HSI-126]
                              • Apple rejection when Bitcode is enabled in the application. [HSI-129]
                              Read more →
                            • HAAPI iOS SDK

                              SDK

                              2.3.0

                              • Invalid escaping value for client operations. [HSI-119]
                              • Error is thrown when HaapiManager.start() was invoked more than once per app run. HaapiManager.start() can now be invoked multiple times during the application lifetime. [HSI-126]
                              • Apple rejection when Bitcode is enabled in the application. [HSI-129]
                              Read more →
                            • idsvr-helm

                              Open Source

                              idsvr-0.11.8

                              • Updated version of Curity Identity Server to 7.5.0
                              Read more →
                            • Curity Identity Server

                              Product Revisions

                              7.4.3

                                Read more →
                              • OAuth Tools

                                Tools

                                3.0.0

                                • Fixed a number of visual bugs on modals
                                • [OT-119] Improved the stability of the import configuration functionality
                                • [OT-109] The Environments on the app have been redesigned to workspaces
                                • [OT-120] Added the option to clear all cookies for websites visited inside the app
                                Read more →
                              • idsvr-helm

                                Open Source

                                idsvr-0.11.7

                                • Updated version of Curity Identity Server to 7.4.3
                                Read more →
                              • idsvr-helm

                                Open Source

                                idsvr-0.11.6

                                • Add support for separate resource limits #46
                                • Use the v2beta2 syntax for CPU and Memory autoscaling #50
                                Read more →
                              • Curity Identity Server

                                Product Revisions

                                7.4.1

                                  Read more →
                                • nginx_oauth_proxy_module

                                  Open Source

                                  1.2.0

                                  • Fixed an issue where the module was checking for an origin header for GET requests.
                                  • When the module is running in the web origin's domain, the origin header is only sent for data changing commands.
                                  • Therefore when oauth_proxy_cors_enabled =off is configured, the origin header is only validated for data changing commands.
                                  Read more →
                                • netid-authenticator

                                  Open Source

                                  1.3.0

                                  • Added support for the BLOCKED_USER error response from NetID.
                                  Read more →
                                • Curity Identity Server

                                  Product

                                  7.4.0

                                  • Updated and improved client administration and facilities menu in the admin UI
                                  • New actions: Send Email, Selector, Update Account and Copy Attribute
                                  • GraphQL support for listing DCR clients stored in DynamoDB
                                  • New metrics for monitoring relational databases
                                  Read more →
                                • Curity Identity Server

                                  Product Revisions

                                  7.3.2

                                    Read more →
                                  • netid-authenticator

                                    Open Source

                                    1.2.2

                                    • Updated the code to the latest changes in the NetID API. The resulting subject is now decided upon these four properties ordered by precedence: personalNumber, userId, userUniqueName, requestedUserId. The properties themselves are added as subject attributes to the result of authentication.
                                    Read more →
                                  • HAAPI iOS Driver

                                    SDK

                                    2.2.2

                                    • SKIP_INSTALL to false in the build settings. [HSI-118]
                                    Read more →
                                  • HAAPI iOS SDK

                                    SDK

                                    2.2.2

                                    • SKIP_INSTALL to false in the build settings. [HSI-118]
                                    Read more →
                                  • Curity Identity Server

                                    Product

                                    7.3.0

                                    • Ability to perform attribute-based access control with a new Authorization Manager
                                    • Introduction of the Dynamic Authenticator that enables hundreds of federations with a single authenticator
                                    • Actions now can use a specialized mechanizm to communicate with each other during their execution without affecting the final attributes
                                    • The Email Authenticator now supports a phishing-protectant code as an alternative to hyperlinks
                                    Read more →
                                  • nginx_phantom_token_module

                                    Open Source

                                    1.3.0

                                    • New builds for Ubuntu 22, Debian 11 and CentOS 9
                                    • New NGINX Plus R27 and R26 builds
                                    • Build Support for NGINX 1.23
                                    • Use JSON error responses
                                    Read more →
                                  • nginx_oauth_proxy_module

                                    Open Source

                                    1.1.0

                                    • New builds for Ubuntu 22, Debian 11 and CentOS 9
                                    • New NGINX Plus R27 and R26 builds
                                    • Build Support for NGINX 1.23
                                    • Fixed log message 'header already sent' written on error responses
                                    Read more →
                                  • HAAPI iOS Driver

                                    SDK

                                    2.2.1

                                    • Build settings to generate a valid XCFramework that can be reviewed or placed on the App Store. [HSI-114]
                                    Read more →
                                  • HAAPI iOS SDK

                                    SDK

                                    2.2.1

                                    • Build settings to generate a valid XCFramework that can be reviewed or placed on the App Store. [HSI-114]
                                    Read more →
                                  • OAuth Tools

                                    Tools

                                    2.3.0

                                    • [OT-107] Fixed an issue that could cause the app to crash if an environment is deleted
                                    • [OT-106] Hardware acceleration is now disabled
                                    • [OT-103] The Guide in the sidebar has been improved
                                    • [OT-108] Fixed an issue that caused minimize/maximize to not work when double-clicking the app header
                                    • [OT-105] The application header is moved to a slim sidebar allowing for more usable space
                                    • [OT-81] Redesigned the error page to provide more information
                                    Read more →
                                  • aws-token-publisher

                                    Open Source

                                    1.0.0

                                    • The first demo version of the AWS Split Token Publisher Event Listener;
                                    • Uses the Curity Identity Server SDK version 7.2.0
                                    Read more →
                                  • Curity Identity Server

                                    Product

                                    7.2.0

                                    • Support for the EdDSA signing algorithm
                                    • DCR clients available with a user account in GraphQL
                                    • GraphQL account schema can now be extended
                                    • Mutual TLS client authentication using Subject Alternative Names (SAN)
                                    Read more →
                                  • HAAPI Android SDK

                                    SDK

                                    2.2.0

                                    • Changelogs for driver and sdk. [HSA-52]
                                    • The Haapi SDK now provides Token Revocation functionality. [HSA-61]
                                    Read more →
                                  • HAAPI iOS SDK

                                    SDK

                                    2.2.0

                                    • The Haapi SDK now provides Token Revocation functionality. [HSI-93]
                                    • OAuthTokenManager now provides a token revocation interface for access and refresh tokens.
                                    Read more →
                                  • github-authenticator

                                    Open Source

                                    1.5.0

                                    • Updated SDK version to 7.1. The plugin now uses Java 17. Fixed error message.
                                    Read more →
                                  • HAAPI iOS Driver

                                    SDK

                                    2.1.1

                                    • Changelogs for driver and sdk. [HSI-84]
                                    • The framework can be imported and linked in projects targeting deployment versions below iOS 14 when using SPM and drag-and-drop import. [HSI-82]
                                    • Now provides compile time availability check information for OS version
                                    Read more →
                                  • HAAPI iOS SDK

                                    SDK

                                    2.1.1

                                    • Changelogs for driver and sdk. [HSI-84]
                                    • The framework can be imported and linked in projects targeting deployment versions below iOS 14 when using SPM and drag-and-drop import. [HSI-82]
                                    • Now provides compile time availability check information for OS version
                                    Read more →
                                  • OAuth Tools

                                    Tools

                                    2.2.0

                                    • Fixed some issues with modal that caused buttons or content to be cropped in small browser windows
                                    • [OT-54] Include the error_description on errors created by server responses, if it exists
                                    • Small enhancements in the client tab of the environments modal
                                    • Fixed an issue that caused parameters to be sent after being url decoded
                                    • [OT-92] The response in Userinfo Flow is now decoded and verified, if it is signed.
                                    • [OT-85] Add logout button in Interactive flows (Code, Implicit, Hybrid)
                                    Read more →
                                  • netid-authenticator

                                    Open Source

                                    1.2.1

                                    • Added missing Swedish translations.
                                    Read more →
                                  • HAAPI Android SDK

                                    SDK

                                    2.1.1

                                    • Crash in SDK when HaapiManager.start is invoked. [HSA-57]
                                    Read more →
                                  • HAAPI iOS Driver

                                    SDK

                                    2.1.0

                                    • Nonce and at_hash support for DPoP messages. [HSI-83]
                                    • The HAAPI Driver and HAAPI SDK frameworks can now support the new DPoP processing algorithm that was introduced in Curity Identity Server 7.1.0.
                                    Read more →
                                  • HAAPI iOS SDK

                                    SDK

                                    2.1.0

                                    • Nonce and at_hash support for DPoP messages. [HSI-83]
                                    • The HAAPI Driver and HAAPI SDK frameworks can now support the new DPoP processing algorithm that was introduced in Curity Identity Server 7.1.0.
                                    Read more →
                                  • linkedin-authenticator

                                    Open Source

                                    1.5.0

                                    • Updated the Curity Identity Server SDK to version 7.1.0. The plugin now uses Java 17.
                                    Read more →
                                  • bitbucket-authenticator

                                    Open Source

                                    1.3.0

                                    • Updated the Curity Identity Server SDK to version 7.1.0.
                                    • Fixed using the plugin behind a proxy.
                                    Read more →
                                  • slack-authenticator

                                    Open Source

                                    1.4.0

                                    • Updated the Curity Identity Server SDK to version 7.1.0.
                                    • Fixed using the plugin behind a proxy.
                                    Read more →
                                  • windows-live-authenticator

                                    Open Source

                                    1.3.0

                                    • Updated the Curity Identity Server SDK to version 7.1.0.
                                    • Fixed using the plugin behind a proxy.
                                    Read more →
                                  • stackexchange-authenticator

                                    Open Source

                                    1.2.0

                                    • Updated the Curity Identity Server SDK to version 7.1.0.
                                    • Fixed using the plugin behind a proxy.
                                    Read more →
                                  • box-authenticator

                                    Open Source

                                    1.3.0

                                    • Updated the Curity Identity Server SDK to version 7.1.0.
                                    • Fixed using the plugin behind a proxy.
                                    Read more →
                                  • mobile-connect-authenticator

                                    Open Source

                                    1.0.0

                                    • Updated the Curity Identity Server SDK to version 7.1.0.
                                    • Fixed using the plugin behind a proxy.
                                    Read more →
                                  • dropbox-authenticator

                                    Open Source

                                    1.0.0

                                    • Updated the Curity Identity Server SDK to version 7.1.0.
                                    • Fixed using the plugin behind a proxy.
                                    Read more →
                                  • salesforce-authenticator

                                    Open Source

                                    1.0.0

                                    • Updated the Curity Identity Server SDK to version 7.1.0.
                                    • Fixed using the plugin behind a proxy.
                                    Read more →
                                  • netid-authenticator

                                    Open Source

                                    1.2.0

                                    • Added configuration for trust store and key store.
                                    • Removed the HTTP client from the configuration.
                                    Read more →
                                  • linkedin-authenticator

                                    Open Source

                                    1.4.0

                                    • Fixed the authenticator callback so that it works behind a proxy.
                                    Read more →
                                  • HAAPI Android SDK

                                    SDK

                                    2.1.0

                                    • Nonce and at_hash support for DPoP messages. [HSA-48]
                                    • Time source property to the configuration for driver/sdk. It may avoid any problems that could occur during any exchanges between client-server (clock skewed by over 1 minute for example). [HSA-51]
                                    • DCR fallback including new authentication methods such as secret, mtls and JWT assertion. [HSA-27]
                                    Read more →
                                  • Curity Identity Server

                                    Product

                                    7.1.0

                                    • Look and feel is configurable in the admin UI
                                    • Graphical overview of OAuth client configuration
                                    • Use of HAAPI with devices that have out of sync clocks
                                    Read more →
                                  • netid-authenticator

                                    Open Source

                                    1.1.0

                                    • Removed reliance on connection to secmaker's showroom.
                                    Read more →
                                  • criipto-authenticator

                                    Open Source

                                    1.2.0

                                    • The authenticator now correctly works behind a proxy. The SDK has been updated to 7.02. and the plugin now uses Java 17.
                                    Read more →
                                  • OAuth Tools

                                    Tools

                                    2.1.1

                                    • Fixed an issue caused in 2.1.0 that made the app unresponsive
                                    Read more →
                                  • OAuth Tools

                                    Tools

                                    2.1.0

                                    • [OT-99] Add support for Linux build of the OAuth Tools app.
                                    • [OT-98] Add menu item to allow users to clear their app state.
                                    • [OT-100] Add menu item to allow users to logout from the app.
                                    • [OT-101] Fixed an issue that caused some modals to have their header clipped.
                                    • [OT-102] Fixed an issue that caused the injected top bar to persist if there was a redirect back to the app without user interaction.
                                    Read more →
                                  • netid-authenticator

                                    Open Source

                                    1.0.1

                                    • Fixed path to a template.
                                    Read more →
                                  • Curity Identity Server

                                    Product

                                    7.0.0

                                    • New GraphQL user management API
                                    • User management in the DevOps Dashboard
                                    • Federated login for the admin UI
                                    • Apple M1 Docker support
                                    • User-facing screens have a new, default look and feel
                                    • Redesigned deployment page in the admin UI
                                    • Improved token procedure documentation
                                    • Java 17 upgrade
                                    Read more →
                                  • HAAPI Data Model

                                    SDK

                                    1.1.0

                                    • Remove maxItems constraint from the actions in a polling step.
                                    Read more →
                                  • OAuth Tools

                                    Tools

                                    2.0.1

                                    • [OT-97] Fixed an issue in the OAuth Tools app that caused the default config to use the wrong url of the authorization server
                                    • [OT-96] Added a _What's new_ section, visible during updates to inform about changes that might affect users
                                    Read more →
                                  • HAAPI Android Driver

                                    SDK

                                    2.0.2

                                    • New exception when a device fails to fulfill the attestation requirements.
                                    Read more →
                                  • nginx_oauth_proxy_module

                                    Open Source

                                    1.0.0

                                    • Initial version
                                    Read more →
                                  • HAAPI Android Driver

                                    SDK

                                    2.0.1

                                    • Minification on the produced libraries is disabled.
                                    Read more →
                                  • HAAPI Android SDK

                                    SDK

                                    2.0.1

                                    • Minification on the produced libraries is disabled.
                                    Read more →
                                  • Curity Identity Server

                                    Product

                                    6.8.0

                                    • Tab completion for token procedures and history menu in the admin UI
                                    • Higher-level Android and iOS HAAPI SDKs
                                    • Dynamic clients exposed in the DevOps dashboard
                                    • Apple M1 support for macOS
                                    • New Entrust IDaaS authenticator
                                    • Includes 24 customer-requested improvements and fixes
                                    Read more →
                                  • HAAPI Android Driver

                                    SDK

                                    2.0.0

                                    • Configure docs generation and refine Javadocs of the new SDK. [HSA-32]
                                    • Haapi Driver is based on HAAPI SDK version 1.0.2. [HSA-26]
                                    • HAAPI Driver is created. [HSA-23]
                                    Read more →
                                  • HAAPI Android SDK

                                    SDK

                                    2.0.0

                                    • Helpers for ExternalBrowserClientOperationStep.
                                    • HaapiManager can throw exceptions instead of returning a Result type. [HSA-30]
                                    • HAAPI SDK is providing HAAPI models. [HSA-24]
                                    Read more →
                                  • HAAPI iOS Driver

                                    SDK

                                    2.0.0

                                    • HAAPI Driver framework is created. [HSI-76]
                                    Read more →
                                  • HAAPI iOS SDK

                                    SDK

                                    2.0.0

                                    • The HAAPI SDK is now providing HAAPI models. [HSI-76]
                                    Read more →
                                  • OAuth Tools

                                    Tools

                                    2.0.0

                                    • [OT-86] Added support for Apple Silicon
                                    • [OT-95] The scheme the application uses internally has been changed from `app://oauth.tools` to `oauth.tools://app`.
                                    Read more →
                                  • OAuth Tools

                                    Tools

                                    1.4.2

                                    • [OT-93] Fixed an issue that caused Introspection flow to not work
                                    Read more →
                                  • OAuth Tools

                                    Tools

                                    1.4.1

                                    • [OT-90] Claims modal position fix
                                    • [OT-87] Claims parameter value encoded incorrectly
                                    • [OT-82] Token request includes trailing `&`
                                    • [OT-83] Create JWT flow from token is not added in a group
                                    • [OT-88] Disable Run button in PAR when appropriate
                                    Read more →
                                  • entrust-idaas

                                    Open Source

                                    1.1.0

                                    • Added support for the claims request parameter e.g., to get groups and authenticator info
                                    • Added descriptions to config options
                                    Read more →

                                Copyright Curity 2022