Changelog

A list of all new updates and improvements to the Curity Identity Server and related tech,
such as open source library, tools, and SDKs.

    • Curity Identity Server

      Product

      9.3.0

      • Native support for the token handler pattern has been unveiled
      • Multi-tenancy support is final (JDBC, JSON)
      • Discoverable credentials for passkeys has been added
      Read more →
    • idsvr-helm

      Open Source

      idsvr-0.12.27

      • Updated version of Curity Identity Server to 9.3.0
      Read more →
    • Curity Identity Server

      Product Revisions

      8.0.1

        Read more →
      • HAAPI iOS Driver

        SDK

        4.1.3

        • Add missing public visibility for HaapiLogger.appendLogSink. [HSI-283]
        Read more →
      • Curity Identity Server

        Product Revisions

        9.2.2

          Read more →
        • idsvr-helm

          Open Source

          idsvr-0.12.26

          • Updated version of Curity Identity Server to 9.2.2
          Read more →
        • HAAPI iOS Driver

          SDK

          4.1.2

          • HaapiLogger can be hooked up with a LogSink to export logs in a different channel. [HSI-283]
          Read more →
        • Curity Identity Server

          Product Revisions

          9.2.1

            Read more →
          • idsvr-helm

            Open Source

            idsvr-0.12.25

            • Updated version of Curity Identity Server to 9.2.1
            Read more →
          • Curity Identity Server

            Product

            9.2.0

            • Extended, standardized token exchange support
            • Updated multi-tenancy support (still experimental)
            • Introduction of token handler service (experimental)
            • Better customizability for user-facing screens in the HAAPI Android UI SDK
            Read more →
          • HAAPI Android SDK

            SDK

            4.2.0

            • HaapiManager now provides utility methods that can parse HaapiResponses and TokenResponses for testing purposes. [HSA-281]
            Read more →
          • HAAPI Android UI SDK

            SDK

            4.2.0

            • HAAPI UI Widget UI customization [HSA-279]HAAPI UI Widget framework models are published and made available for customization. [HSA-281]Experimental support for custom UI Models mappings extensibility is available via DataMappersFactory. [HSA-281]Experimental support for custom fragments via FragmentResolver. [HSA-280]
            • HAAPI UI Widget framework models are published and made available for customization. [HSA-281]
            • Experimental support for custom UI Models mappings extensibility is available via DataMappersFactory. [HSA-281]
            • Experimental support for custom fragments via FragmentResolver. [HSA-280]
            Read more →
          • idsvr-helm

            Open Source

            idsvr-0.12.24

            • Allow custom annotations for Job objects
            • Updated version of Curity Identity Server to 9.2.0
            Read more →
          • Curity Identity Server

            Product

            9.1.0

            • Database clients in the Admin UI
            • Account multi-tenancy support
            • Sign-up action feature added
            • Better feedback of password policy violations
            Read more →
          • HAAPI Android SDK

            SDK

            4.1.0

            • When using HaapiManager, a HaapiManagerUnexpectedException can be thrown when an unexpected exception occurs that may be caused by javax.net.ssl.SSLProtocolException or java.io.IOException. [HSA-335]
            Read more →
          • HAAPI Android UI SDK

            SDK

            4.1.0

            • When BankId authenticator is used and the BankId application is not installed on the device, the Haapi flow is not interrupted. Instead, a view is presented. The view displays a QRCode that can be scanned by a device that has BankId .BankId v5 requires to have Generate Autostart Qr Code set to true.BankId v6 displays automatically the QRCode.
            • BankId v5 requires to have Generate Autostart Qr Code set to true.
            • BankId v6 displays automatically the QRCode.
            • Improvements to the logging information provided by the framework. [HSA-298]Adds masking for Sensitive Data via configuration propertyAdds tags for Mapping and UI Component to facilitate tracing the logs.
            • Adds masking for Sensitive Data via configuration property
            • Adds tags for Mapping and UI Component to facilitate tracing the logs.
            Read more →
          • HAAPI iOS UI Kit

            SDK

            4.1.1

            • Debug and info logs for traceability when using client operations such as BankId. [HSI-242]
            Read more →
          • idsvr-helm

            Open Source

            idsvr-0.12.23

            • Updated version of Curity Identity Server to 9.1.0
            Read more →
          • Curity Identity Server

            Product Revisions

            9.0.1

              Read more →
            • idsvr-helm

              Open Source

              idsvr-0.12.22

              • Updated version of Curity Identity Server to 9.0.1
              Read more →
            • HAAPI iOS Driver

              SDK

              4.1.0

              • An invalid_state does not occur when using different "clientIds" and HaapiTokenManagerBuilder.setName is not invoked. [HSI-270]
              Read more →
            • HAAPI iOS SDK

              SDK

              4.1.0

              • Framework now provides a utility HaapiModel that exposes a model factory API to create model instances for testing purposes. [HSI-268]
              • Framework models now conform to Codable to facilitate testing. [HSI-111]
              Read more →
            • Curity Identity Server

              Product

              9.0.0

              • OpenID Wallet Authenticator
              • Demo Wallet
              • Password policies
              • Java 21
              • DPoP-protected refresh tokens for HAAPI on Android
              Read more →
            • HAAPI Android SDK

              SDK

              4.0.0

              • HaapiConfiguration can be configured with TokenBoundConfiguration. [HSA-289]OAuthTokenManager supports the server configuration issue-token-bound-authorization-code by using TokenBoundConfiguration. [HSA-289]
              • OAuthTokenManager supports the server configuration issue-token-bound-authorization-code by using TokenBoundConfiguration. [HSA-289]
              Read more →
            • HAAPI Android UI SDK

              SDK

              4.0.0

              • WidgetConfiguration.Builder can be configured with TokenBoundConfiguration. [HSA-289]
              Read more →
            • HAAPI iOS Driver

              SDK

              4.0.0

              • HaapiTokenManager.getHaapiToken(forceFresh:dpopNonce:completionHandler:) and HaapiTokenManager.getHaapiTokenWithForceFresh:dpopNonce:completionHandler: are added to replace the deprecated/obsolete ones. [HSI-48]
              Read more →
            • idsvr-helm

              Open Source

              idsvr-0.12.21

              • Updated version of Curity Identity Server to 9.0.0
              Read more →
            • Curity Identity Server

              Product

              8.7.0

              • Password policies
              • DynamoDB support for database clients
              • HAAPI passkey and WebAuthn support for Android
              Read more →
            • HAAPI Android SDK

              SDK

              3.4.0

              • The model parsing for properties in Step and Action. [HSA-313]
              Read more →
            • HAAPI Android UI SDK

              SDK

              3.4.0

              • Support for native WebAuthn Authorization. [HSA-293]A new setting useNativeWebAuthnSupport in WidgetConfiguration allows to enable the native WebAuthn support behavior. It is currently an experimental feature.It requires a version of the Curity Identity Server that includes HAAPI support for WebAuthn on Android (starting from 8.7.0).
              • A new setting useNativeWebAuthnSupport in WidgetConfiguration allows to enable the native WebAuthn support behavior. It is currently an experimental feature.
              • It requires a version of the Curity Identity Server that includes HAAPI support for WebAuthn on Android (starting from 8.7.0).
              • When user interaction is triggered on a QRCode image, it can open an installed application or an external browser. [HSA-309]
              Read more →
            • HAAPI iOS Driver

              SDK

              3.2.0

              • HaapiTokenManager and HaapiClient can return a Dpop to support this configuration issue-token-bound-authorization-code. [HSI-244]It requires a version of the Curity Identity Server that supports token binding (starting from 8.7.0).
              • It requires a version of the Curity Identity Server that supports token binding (starting from 8.7.0).
              Read more →
            • HAAPI iOS SDK

              SDK

              3.2.0

              • HaapiManager can return a Dpop to support this configuration issue-token-bound-authorization-code. [HSI-244]It requires a version of the Curity Identity Server that supports token binding (starting from 8.7.0).
              • It requires a version of the Curity Identity Server that supports token binding (starting from 8.7.0).
              Read more →
            • HAAPI iOS UI Kit

              SDK

              3.2.0

              • A message error mentioning the app scheme is shown when displaying an error for no alternative routes after trying to open an external application. [HSI-253]
              • issue-token-bound-authorization-code is supported when using HaapiFlowViewModel or HaapiFlowViewController. [HSI-244]It requires a version of the Curity Identity Server that supports token binding (starting from 8.7.0).
              • It requires a version of the Curity Identity Server that supports token binding (starting from 8.7.0).
              Read more →
            • idsvr-helm

              Open Source

              idsvr-0.12.20

              • Updated version of Curity Identity Server to 8.7.0
              • Add path as a parameter for probes #79
              • Add ingressClassName field to Ingress resources. #80
              Read more →
            • idsvr-helm

              Open Source

              idsvr-0.12.18

              • Added the following configuration options
              • curity.runtime.lifecycle: Adds a lifecycle configuration to the deployment runtime if specified in the values file.
              • curity.runtime.terminationGracePeriodSeconds: The time to wait for the pod to terminate gracefully with default value 30.
              • curity.runtime.affinity: The affinity rules for the runtime pods.
              • curity.runtime.topologySpreadConstraints: The topology spread constraints for the runtime pods.
              Read more →
            • Curity Identity Server

              Product Revisions

              8.6.1

                Read more →
              • idsvr-helm

                Open Source

                idsvr-0.12.17

                • Updated version of Curity Identity Server to 8.6.1
                • Cluster conf job also runs on pre-rollback helm hook
                Read more →
              • Curity Identity Server

                Product

                8.6.0

                • Passkeys authenticator
                • BankID v6 for consentors and new intent message support
                • Improved endpoint editing for OAuth endpoints in the admin UI
                Read more →
              • HAAPI Android SDK

                SDK

                3.3.0

                • Adds new buildParameters method in WebAuthnRegistrationClientOperationStep to fix operation submission parameters, deprecating the previous existing one. [HSA-292]
                Read more →
              • HAAPI Android UI SDK

                SDK

                3.3.0

                • A long press on a MessageView can copy the text to the clipboard manager. [HSA-196]
                • A new setting useDefaultExternalBrowser in WidgetConfiguration allows to replace ChromeTab usage with the default external browser. [HSA-258]
                • The username and password fields support autofill hints. [HSA-151]
                Read more →
              • HAAPI iOS Driver

                SDK

                3.1.0

                • The attestation key ID and the state from the last CAT request are not reset when HaapiTokenManager.clear is invoked. [HSI-231]
                Read more →
              • HAAPI iOS SDK

                SDK

                3.1.0

                • The BankId url parameters duplication that causes the BankId app to trigger incorrectly. [HSI-243]
                Read more →
              • HAAPI iOS UI Kit

                SDK

                3.1.0

                • Two new attributes are added to TextAppearance: kern and lineHeightMultiple. [HSI-216]
                • A new HaapiFlowViewControllerRepresentable class that is safe to use with iOS 17. [HSI-229]
                • A new AuthenticatorSelectionPresentation tabs has been added. [HSI-215]
                • A long press on a MessageView can copy the text to the UIPasteboard. [HSI-233]
                • A new setting useDefaultExternalBrowser in HaapiUIKitConfiguration allows to replace ASWebAuthenticationSession usage with the default external browser. [HSI-203]
                • The username field supports autofill. [HSI-36]
                • When user interaction is triggered on a QRCode image, it can open an installed application or an external browser. [HSI-235]
                Read more →
              • idsvr-helm

                Open Source

                idsvr-0.12.16

                • Updated version of Curity Identity Server to 8.6.0
                Read more →
              • Curity Identity Server

                Product Revisions

                8.5.3

                  Read more →
                • idsvr-helm

                  Open Source

                  idsvr-0.12.15

                  • Updated version of Curity Identity Server to 8.5.3
                  Read more →
                • Curity Identity Server

                  Product Revisions

                  8.5.2

                    Read more →
                  • idsvr-helm

                    Open Source

                    idsvr-0.12.14

                    • Fixed the name of mounted post commit script ConfigMaps
                    Read more →
                  • idsvr-helm

                    Open Source

                    idsvr-0.12.13

                    • Updated version of Curity Identity Server to 8.5.2
                    • Allow to add custom post commit scripts with curity.config.postCommitScripts
                    Read more →
                  • Curity Identity Server

                    Product Revisions

                    8.5.1

                      Read more →
                    • nginx_phantom_token_module

                      Open Source

                      1.5.0

                      • Builds for NGINX Plus R29 / 30, with new distros for Amazon 2023 and Debian 12
                      Read more →
                    • idsvr-helm

                      Open Source

                      idsvr-0.12.12

                      • Updated version of Curity Identity Server to 8.5.1
                      Read more →
                    • nginx_oauth_proxy_module

                      Open Source

                      1.4.0

                      • Builds for NGINX Plus R29 / 30, with new distros for Amazon 2023 and Debian 12
                      Read more →
                    • Curity Identity Server

                      Product

                      8.5.0

                      • Action Bundles
                      • BankID v6 including new BankID back-channel authenticator for CIBA
                      • OAuth metadata
                      Read more →
                    • idsvr-helm

                      Open Source

                      idsvr-0.12.11

                      • #70 Add serviceAccountAnnotations for customize annotation
                      • Updated version of Curity Identity Server to 8.5.0
                      Read more →
                    • Curity Identity Server

                      Product Revisions

                      8.4.1

                        Read more →
                      • idsvr-helm

                        Open Source

                        idsvr-0.12.10

                        • Updated version of Curity Identity Server to 8.4.1
                        Read more →
                      • Curity Identity Server

                        Product

                        8.4.0

                        • Database clients with GraphQL API and DevOps Dashboard support
                        • New iOS UI SDK for the Hypermedia Authentication API
                        • Custom procedures for the pre-authorized grant
                        Read more →
                      • HAAPI Android SDK

                        SDK

                        3.2.0

                        • HaapiConfiguration now provides a configuration property useAttestation to enable/disable key-attestation. [HSA-257]
                        Read more →
                      • HAAPI Android UI SDK

                        SDK

                        3.2.0

                        • Internal model mappings improvements. [HSA-256]
                        • Automatic AccessToken fetch improvements. [HSA-252]
                        Read more →
                      • HAAPI iOS Driver

                        SDK

                        3.0.0

                        • Configuration to set maximum allowed retries for HaapiTokenManager to retry attestation if a DCError.serverUnavailable occurs. [HSI-191]
                        Read more →
                      • HAAPI iOS SDK

                        SDK

                        3.0.0

                        • HaapiConfiguration now provides a property attestationConfiguration to configure DeviceCheck attestation on physical devices. [HSI-195] [HSI-182]A configuration property useAttestation to enable/disable DeviceCheck attestation. [HSI-195]A configuration property attestationMaxRetries to configure retry mechanism. [HSI-182]
                        • A configuration property useAttestation to enable/disable DeviceCheck attestation. [HSI-195]
                        • A configuration property attestationMaxRetries to configure retry mechanism. [HSI-182]
                        • Problem type to represent an error when there's a mismatch between the session and access token. [HSI-158]
                        Read more →
                      • HAAPI iOS UI Kit

                        SDK

                        3.0.0

                        • The Haapi UIKit framework is created. [HSI-108]
                        Read more →
                      • idsvr-helm

                        Open Source

                        idsvr-0.12.9

                        • Updated version of Curity Identity Server to 8.4.0
                        Read more →
                      • Curity Identity Server

                        Product Revisions

                        8.3.2

                          Read more →
                        • idsvr-helm

                          Open Source

                          idsvr-0.12.8

                          • Updated version of Curity Identity Server to 8.3.2
                          Read more →
                        • Curity Identity Server

                          Product Revisions

                          8.3.1

                            Read more →
                          • idsvr-helm

                            Open Source

                            idsvr-0.12.7

                            • Updated version of Curity Identity Server to 8.3.1
                            Read more →
                          • HAAPI Android UI SDK

                            SDK

                            3.1.1

                            • Improvements to the polling logic while waiting for server response. [HSA-245]
                            Read more →
                          • Curity Identity Server

                            Product

                            8.3.0

                            • Second release of Verifiable Credential Issuance, now with RAR support
                            • Token introspectors in the Java SDK for use in Token Procedure Plugins
                            • New metrics for the HTTP client connection pool
                            Read more →
                          • idsvr-helm

                            Open Source

                            idsvr-0.12.6

                            • Updated version of Curity Identity Server to 8.3.0
                            • Do not set Runtime Deployment replicas if autoscaling is enabled
                            • revisionHistoryLimit is now configurable
                            Read more →
                          • Curity Identity Server

                            Product Revisions

                            8.2.1

                              Read more →
                            • idsvr-helm

                              Open Source

                              idsvr-0.12.5

                              • Updated version of Curity Identity Server to 8.2.1
                              Read more →
                            • Curity Identity Server

                              Product

                              8.2.0

                              • Experimental Verifiable Credential Issuance (VCI) support
                              • New reference and composite claims types
                              • Token issuers in the SDK for token procedure plugins
                              Read more →
                            • idsvr-helm

                              Open Source

                              idsvr-0.12.4

                              • Fix an issue with resources on runtime nodes #64
                              • Re-order HPA metrics
                              • Updated version of Curity Identity Server to 8.2.0
                              Read more →
                            • idsvr-helm

                              Open Source

                              idsvr-0.12.3

                              • Updated version of Curity Identity Server to 8.1.2
                              Read more →
                            • Curity Identity Server

                              Product Revisions

                              8.1.1

                                Read more →
                              • idsvr-helm

                                Open Source

                                idsvr-0.12.2

                                • Updated version of Curity Identity Server to 8.1.1
                                Read more →
                              • Curity Identity Server

                                Product

                                8.1.0

                                • Template areas on Authentication Actions
                                • Android UI SDK updates
                                • Opt-in MFA attributes in GraphQL and the DevOps Dashboard
                                • Lots of small fixes and updates
                                Read more →
                              • HAAPI Data Model

                                SDK

                                1.3.0

                                • Add new problem type for mismatch between session and HAAPI access token
                                Read more →
                              • idsvr-helm

                                Open Source

                                idsvr-0.12.1

                                • Fixed an issue in runtime ingress
                                • Use configured ImagePullPolicy in cluster-conf job and convertKeystore job
                                • Updated version of Curity Identity Server to 8.1.0
                                Read more →
                              • HAAPI Android SDK

                                SDK

                                3.1.0

                                • Problem type to represent an error when there's a mismatch between the session and access token. [HSA-238]
                                Read more →
                              • HAAPI Android UI SDK

                                SDK

                                3.1.0

                                • The logic which assigns the action buttons style. [HSA-214]
                                • Improvements to the text styling of interaction forms headers. [HSA-213]
                                • Improvements to the text styling of Content and Heading messages. [HSA-217]
                                • Updated authenticator selector icons. [HSA-215]
                                • Improvements to the rendering of Headers in Selection UI representation. [HSA-223]
                                • Improvements to Form inter items spacing rendering. [HSA-221]
                                • Improvements to text content placement in Form. [HSA-235]
                                • Improvements to Consent screen items spacing rendering. [HSA-242]
                                Read more →
                              • nginx_phantom_token_module

                                Open Source

                                1.4.0

                                • Builds for NGINX Plus R28 and NGINX 1.23.2
                                Read more →
                              • nginx_oauth_proxy_module

                                Open Source

                                1.3.0

                                • Builds for NGINX Plus R28 and NGINX 1.23.2
                                Read more →
                              • aws-sns-sms-plugin

                                Open Source

                                v1.0.0

                                • Added AWS SNS support for sending SMS to users.
                                Read more →
                              • Curity Identity Server

                                Product

                                8.0.0

                                • A simplified UI mode for new users and common cases
                                • Android UI SDK for HAAPI
                                • Write token procedures as Java plugins
                                • Passkey functionality in supported browsers
                                • Native WebAuthn and passkey support for HAAPI on iOS
                                • GraphQL account listing for DynamoDB
                                • FAPI 2.0 Security Profile compliance
                                Read more →
                              • HAAPI Android SDK

                                SDK

                                3.0.0

                                • HaapiClientOperation models to support native Webauthn Authorization. [HSA-143]It requires a version of the Curity Identity Server that includes HAAPI support for the WebAuthn authenticator.
                                • It requires a version of the Curity Identity Server that includes HAAPI support for the WebAuthn authenticator.
                                Read more →
                              • HAAPI Android UI SDK

                                SDK

                                3.0.0

                                • HAAPI UI Widget SDK is released providing a UI implementation for executing an Haapi Flow authentication. [HSA-70]
                                Read more →
                              • HAAPI Data Model

                                SDK

                                1.2.0

                                • Add issuer to authorization responses (RFC-9207).
                                • Add definition of WebAuthn registration and authentication client operations.
                                Read more →
                              • HAAPI iOS SDK

                                SDK

                                2.5.0

                                • HaapiClientOperation models are added to support native WebAuthn Authorization. [HSI-105]It requires a version of the Curity Identity Server that includes HAAPI support for the WebAuthn authenticator.
                                • It requires a version of the Curity Identity Server that includes HAAPI support for the WebAuthn authenticator.
                                Read more →
                              • idsvr-helm

                                Open Source

                                idsvr-0.12.0

                                • BREAKING* if ingress was used previously it has to be updated with the new values, check the README for more information
                                • Added curity.runtime.logging.resources, curity.admin.logging.resources and logging.resources to control resources in logging containers
                                • imagePullPolicy is also applied in the Job defined in cluster-conf.yaml
                                • Added PodDisruptionBudget
                                • Updated version of Curity Identity Server to 8.0.0
                                Read more →
                              • nonce-authenticator

                                Open Source

                                1.0.0

                                • First release
                                Read more →
                              • OAuth Tools

                                Tools

                                3.3.0

                                • [OT-123] Add tooltips in Workspace icons
                                • [OT-129] Add confirmation when clearing localStorage and Cookies from menu
                                • Fixed a visual issue in Create Token flow
                                Read more →
                              • OAuth Tools

                                Tools

                                3.2.1

                                • Fixed an issue causing the Curity Playground to have the wrong url
                                Read more →
                              • OAuth Tools

                                Tools

                                3.2.0

                                • The panel displaying results in most Flows on the right is now resizable
                                • When Curity Playground is added, all the demo collections are also created too
                                • Adding the Curity Playground runs discovery, fetching the OpenID metadata
                                • When a new collection is created it is now added in the bottom of the list of existing collections
                                • Fixed an issue with large Workspace names
                                Read more →
                              • Curity Identity Server

                                Product Revisions

                                7.6.1

                                  Read more →
                                • idsvr-helm

                                  Open Source

                                  idsvr-0.11.12

                                  • Updated version of Curity Identity Server to 7.6.1
                                  Read more →
                                • OAuth Tools

                                  Tools

                                  3.1.0

                                  • Updated used libraries for security reasons
                                  Read more →
                                • Curity Identity Server

                                  Product

                                  7.6.0

                                  • Brand new SAML authenticator with SP metadata support
                                  • SAML support in the Dynamic Authenticator
                                  • Environment badge in the Admin UI
                                  • New authenticator listing page in the Admin UI
                                  Read more →
                                • HAAPI Android SDK

                                  SDK

                                  2.4.0

                                  • HTTP headers provider in the HaapiConfiguration. [HSA-163]
                                  Read more →
                                • HAAPI iOS SDK

                                  SDK

                                  2.4.0

                                  • HTTP headers provider in HaapiManager. [HSI-134]
                                  Read more →
                                • idsvr-helm

                                  Open Source

                                  idsvr-0.11.11

                                  • Updated version of Curity Identity Server to 7.6
                                  Read more →
                                • idsvr-helm

                                  Open Source

                                  idsvr-0.11.10

                                  • Customize pod labels, annotations, and volumes #52
                                  • Add post-hook manifest #51
                                  Read more →
                                • grafana

                                  Open Source

                                  v3.1.0

                                  • Added panels for HTTP client metrics
                                  Read more →
                                • Curity Identity Server

                                  Product

                                  7.5.0

                                  • Update to the authentication action SDK to be able to restart a pipeline
                                  • New actions were added that can restart the authentication pipeline, request user acknowledgement, and manually link accounts
                                  • New metrics for monitoring HTTP clients are included
                                  Read more →
                                • HAAPI Android SDK

                                  SDK

                                  2.3.0

                                  • Kotlin version is updated to 1.6.21. [HSA-83]
                                  • HaapiManager.submit() can provide a Map<String, Any> instead of a Map<String, String>. [HSA-140]
                                  Read more →
                                • HAAPI iOS Driver

                                  SDK

                                  2.3.0

                                  • Error is thrown when HaapiManager.start() was invoked more than once per app run. HaapiManager.start() can now be invoked multiple times during the application lifetime. [HSI-126]
                                  • Apple rejection when Bitcode is enabled in the application. [HSI-129]
                                  Read more →
                                • HAAPI iOS SDK

                                  SDK

                                  2.3.0

                                  • Invalid escaping value for client operations. [HSI-119]
                                  • Error is thrown when HaapiManager.start() was invoked more than once per app run. HaapiManager.start() can now be invoked multiple times during the application lifetime. [HSI-126]
                                  • Apple rejection when Bitcode is enabled in the application. [HSI-129]
                                  Read more →
                                • Curity Identity Server

                                  Product Revisions

                                  7.4.3

                                    Read more →
                                  • OAuth Tools

                                    Tools

                                    3.0.0

                                    • Fixed a number of visual bugs on modals
                                    • [OT-119] Improved the stability of the import configuration functionality
                                    • [OT-109] The Environments on the app have been redesigned to workspaces
                                    • [OT-120] Added the option to clear all cookies for websites visited inside the app
                                    Read more →
                                  • Curity Identity Server

                                    Product Revisions

                                    7.4.1

                                      Read more →
                                    • nginx_oauth_proxy_module

                                      Open Source

                                      1.2.0

                                      • Fixed an issue where the module was checking for an origin header for GET requests.
                                      • When the module is running in the web origin's domain, the origin header is only sent for data changing commands.
                                      • Therefore when oauth_proxy_cors_enabled =off is configured, the origin header is only validated for data changing commands.
                                      Read more →
                                    • netid-authenticator

                                      Open Source

                                      1.3.0

                                      • Added support for the BLOCKED_USER error response from NetID.
                                      Read more →
                                    • Curity Identity Server

                                      Product

                                      7.4.0

                                      • Updated and improved client administration and facilities menu in the admin UI
                                      • New actions: Send Email, Selector, Update Account and Copy Attribute
                                      • GraphQL support for listing DCR clients stored in DynamoDB
                                      • New metrics for monitoring relational databases
                                      Read more →
                                    • Curity Identity Server

                                      Product Revisions

                                      7.3.2

                                        Read more →
                                      • netid-authenticator

                                        Open Source

                                        1.2.2

                                        • Updated the code to the latest changes in the NetID API. The resulting subject is now decided upon these four properties ordered by precedence: personalNumber, userId, userUniqueName, requestedUserId. The properties themselves are added as subject attributes to the result of authentication.
                                        Read more →
                                      • HAAPI iOS Driver

                                        SDK

                                        2.2.2

                                        • SKIP_INSTALL to false in the build settings. [HSI-118]
                                        Read more →
                                      • HAAPI iOS SDK

                                        SDK

                                        2.2.2

                                        • SKIP_INSTALL to false in the build settings. [HSI-118]
                                        Read more →
                                      • Curity Identity Server

                                        Product

                                        7.3.0

                                        • Ability to perform attribute-based access control with a new Authorization Manager
                                        • Introduction of the Dynamic Authenticator that enables hundreds of federations with a single authenticator
                                        • Actions now can use a specialized mechanizm to communicate with each other during their execution without affecting the final attributes
                                        • The Email Authenticator now supports a phishing-protectant code as an alternative to hyperlinks
                                        Read more →
                                      • nginx_phantom_token_module

                                        Open Source

                                        1.3.0

                                        • New builds for Ubuntu 22, Debian 11 and CentOS 9
                                        • New NGINX Plus R27 and R26 builds
                                        • Build Support for NGINX 1.23
                                        • Use JSON error responses
                                        Read more →
                                      • nginx_oauth_proxy_module

                                        Open Source

                                        1.1.0

                                        • New builds for Ubuntu 22, Debian 11 and CentOS 9
                                        • New NGINX Plus R27 and R26 builds
                                        • Build Support for NGINX 1.23
                                        • Fixed log message 'header already sent' written on error responses
                                        Read more →
                                      • HAAPI iOS Driver

                                        SDK

                                        2.2.1

                                        • Build settings to generate a valid XCFramework that can be reviewed or placed on the App Store. [HSI-114]
                                        Read more →
                                      • HAAPI iOS SDK

                                        SDK

                                        2.2.1

                                        • Build settings to generate a valid XCFramework that can be reviewed or placed on the App Store. [HSI-114]
                                        Read more →
                                      • OAuth Tools

                                        Tools

                                        2.3.0

                                        • [OT-107] Fixed an issue that could cause the app to crash if an environment is deleted
                                        • [OT-106] Hardware acceleration is now disabled
                                        • [OT-103] The Guide in the sidebar has been improved
                                        • [OT-108] Fixed an issue that caused minimize/maximize to not work when double-clicking the app header
                                        • [OT-105] The application header is moved to a slim sidebar allowing for more usable space
                                        • [OT-81] Redesigned the error page to provide more information
                                        Read more →
                                      • aws-token-publisher

                                        Open Source

                                        1.0.0

                                        • The first demo version of the AWS Split Token Publisher Event Listener;
                                        • Uses the Curity Identity Server SDK version 7.2.0
                                        Read more →
                                      • Curity Identity Server

                                        Product

                                        7.2.0

                                        • Support for the EdDSA signing algorithm
                                        • DCR clients available with a user account in GraphQL
                                        • GraphQL account schema can now be extended
                                        • Mutual TLS client authentication using Subject Alternative Names (SAN)
                                        Read more →
                                      • HAAPI Android SDK

                                        SDK

                                        2.2.0

                                        • Changelogs for driver and sdk. [HSA-52]
                                        • The Haapi SDK now provides Token Revocation functionality. [HSA-61]
                                        Read more →
                                      • HAAPI iOS SDK

                                        SDK

                                        2.2.0

                                        • The Haapi SDK now provides Token Revocation functionality. [HSI-93]
                                        • OAuthTokenManager now provides a token revocation interface for access and refresh tokens.
                                        Read more →
                                      • github-authenticator

                                        Open Source

                                        1.5.0

                                        • Updated SDK version to 7.1. The plugin now uses Java 17. Fixed error message.
                                        Read more →
                                      • HAAPI iOS Driver

                                        SDK

                                        2.1.1

                                        • Changelogs for driver and sdk. [HSI-84]
                                        • The framework can be imported and linked in projects targeting deployment versions below iOS 14 when using SPM and drag-and-drop import. [HSI-82]
                                        • Now provides compile time availability check information for OS version
                                        Read more →
                                      • HAAPI iOS SDK

                                        SDK

                                        2.1.1

                                        • Changelogs for driver and sdk. [HSI-84]
                                        • The framework can be imported and linked in projects targeting deployment versions below iOS 14 when using SPM and drag-and-drop import. [HSI-82]
                                        • Now provides compile time availability check information for OS version
                                        Read more →
                                      • OAuth Tools

                                        Tools

                                        2.2.0

                                        • Fixed some issues with modal that caused buttons or content to be cropped in small browser windows
                                        • [OT-54] Include the error_description on errors created by server responses, if it exists
                                        • Small enhancements in the client tab of the environments modal
                                        • Fixed an issue that caused parameters to be sent after being url decoded
                                        • [OT-92] The response in Userinfo Flow is now decoded and verified, if it is signed.
                                        • [OT-85] Add logout button in Interactive flows (Code, Implicit, Hybrid)
                                        Read more →
                                      • netid-authenticator

                                        Open Source

                                        1.2.1

                                        • Added missing Swedish translations.
                                        Read more →
                                      • HAAPI Android SDK

                                        SDK

                                        2.1.1

                                        • Crash in SDK when HaapiManager.start is invoked. [HSA-57]
                                        Read more →
                                      • HAAPI iOS Driver

                                        SDK

                                        2.1.0

                                        • Nonce and at_hash support for DPoP messages. [HSI-83]
                                        • The HAAPI Driver and HAAPI SDK frameworks can now support the new DPoP processing algorithm that was introduced in Curity Identity Server 7.1.0.
                                        Read more →
                                      • HAAPI iOS SDK

                                        SDK

                                        2.1.0

                                        • Nonce and at_hash support for DPoP messages. [HSI-83]
                                        • The HAAPI Driver and HAAPI SDK frameworks can now support the new DPoP processing algorithm that was introduced in Curity Identity Server 7.1.0.
                                        Read more →
                                      • linkedin-authenticator

                                        Open Source

                                        1.5.0

                                        • Updated the Curity Identity Server SDK to version 7.1.0. The plugin now uses Java 17.
                                        Read more →
                                      • bitbucket-authenticator

                                        Open Source

                                        1.3.0

                                        • Updated the Curity Identity Server SDK to version 7.1.0.
                                        • Fixed using the plugin behind a proxy.
                                        Read more →
                                      • slack-authenticator

                                        Open Source

                                        1.4.0

                                        • Updated the Curity Identity Server SDK to version 7.1.0.
                                        • Fixed using the plugin behind a proxy.
                                        Read more →
                                      • windows-live-authenticator

                                        Open Source

                                        1.3.0

                                        • Updated the Curity Identity Server SDK to version 7.1.0.
                                        • Fixed using the plugin behind a proxy.
                                        Read more →
                                      • stackexchange-authenticator

                                        Open Source

                                        1.2.0

                                        • Updated the Curity Identity Server SDK to version 7.1.0.
                                        • Fixed using the plugin behind a proxy.
                                        Read more →
                                      • box-authenticator

                                        Open Source

                                        1.3.0

                                        • Updated the Curity Identity Server SDK to version 7.1.0.
                                        • Fixed using the plugin behind a proxy.
                                        Read more →
                                      • mobile-connect-authenticator

                                        Open Source

                                        1.0.0

                                        • Updated the Curity Identity Server SDK to version 7.1.0.
                                        • Fixed using the plugin behind a proxy.
                                        Read more →
                                      • dropbox-authenticator

                                        Open Source

                                        1.0.0

                                        • Updated the Curity Identity Server SDK to version 7.1.0.
                                        • Fixed using the plugin behind a proxy.
                                        Read more →
                                      • salesforce-authenticator

                                        Open Source

                                        1.0.0

                                        • Updated the Curity Identity Server SDK to version 7.1.0.
                                        • Fixed using the plugin behind a proxy.
                                        Read more →
                                      • netid-authenticator

                                        Open Source

                                        1.2.0

                                        • Added configuration for trust store and key store.
                                        • Removed the HTTP client from the configuration.
                                        Read more →
                                      • linkedin-authenticator

                                        Open Source

                                        1.4.0

                                        • Fixed the authenticator callback so that it works behind a proxy.
                                        Read more →
                                      • HAAPI Android SDK

                                        SDK

                                        2.1.0

                                        • Nonce and at_hash support for DPoP messages. [HSA-48]
                                        • Time source property to the configuration for driver/sdk. It may avoid any problems that could occur during any exchanges between client-server (clock skewed by over 1 minute for example). [HSA-51]
                                        • DCR fallback including new authentication methods such as secret, mtls and JWT assertion. [HSA-27]
                                        Read more →
                                      • Curity Identity Server

                                        Product

                                        7.1.0

                                        • Look and feel is configurable in the admin UI
                                        • Graphical overview of OAuth client configuration
                                        • Use of HAAPI with devices that have out of sync clocks
                                        Read more →
                                      • netid-authenticator

                                        Open Source

                                        1.1.0

                                        • Removed reliance on connection to secmaker's showroom.
                                        Read more →
                                      • criipto-authenticator

                                        Open Source

                                        1.2.0

                                        • The authenticator now correctly works behind a proxy. The SDK has been updated to 7.02. and the plugin now uses Java 17.
                                        Read more →
                                      • OAuth Tools

                                        Tools

                                        2.1.1

                                        • Fixed an issue caused in 2.1.0 that made the app unresponsive
                                        Read more →
                                      • OAuth Tools

                                        Tools

                                        2.1.0

                                        • [OT-99] Add support for Linux build of the OAuth Tools app.
                                        • [OT-98] Add menu item to allow users to clear their app state.
                                        • [OT-100] Add menu item to allow users to logout from the app.
                                        • [OT-101] Fixed an issue that caused some modals to have their header clipped.
                                        • [OT-102] Fixed an issue that caused the injected top bar to persist if there was a redirect back to the app without user interaction.
                                        Read more →
                                      • netid-authenticator

                                        Open Source

                                        1.0.1

                                        • Fixed path to a template.
                                        Read more →
                                      • Curity Identity Server

                                        Product

                                        7.0.0

                                        • New GraphQL user management API
                                        • User management in the DevOps Dashboard
                                        • Federated login for the admin UI
                                        • Apple M1 Docker support
                                        • User-facing screens have a new, default look and feel
                                        • Redesigned deployment page in the admin UI
                                        • Improved token procedure documentation
                                        • Java 17 upgrade
                                        Read more →
                                      • HAAPI Data Model

                                        SDK

                                        1.1.0

                                        • Remove maxItems constraint from the actions in a polling step.
                                        Read more →
                                      • OAuth Tools

                                        Tools

                                        2.0.1

                                        • [OT-97] Fixed an issue in the OAuth Tools app that caused the default config to use the wrong url of the authorization server
                                        • [OT-96] Added a _What's new_ section, visible during updates to inform about changes that might affect users
                                        Read more →
                                      • HAAPI Android Driver

                                        SDK

                                        2.0.2

                                        • New exception when a device fails to fulfill the attestation requirements.
                                        Read more →
                                      • nginx_oauth_proxy_module

                                        Open Source

                                        1.0.0

                                        • Initial version
                                        Read more →
                                      • HAAPI Android Driver

                                        SDK

                                        2.0.1

                                        • Minification on the produced libraries is disabled.
                                        Read more →
                                      • HAAPI Android SDK

                                        SDK

                                        2.0.1

                                        • Minification on the produced libraries is disabled.
                                        Read more →
                                      • Curity Identity Server

                                        Product

                                        6.8.0

                                        • Tab completion for token procedures and history menu in the admin UI
                                        • Higher-level Android and iOS HAAPI SDKs
                                        • Dynamic clients exposed in the DevOps dashboard
                                        • Apple M1 support for macOS
                                        • New Entrust IDaaS authenticator
                                        • Includes 24 customer-requested improvements and fixes
                                        Read more →
                                      • HAAPI Android Driver

                                        SDK

                                        2.0.0

                                        • Configure docs generation and refine Javadocs of the new SDK. [HSA-32]
                                        • Haapi Driver is based on HAAPI SDK version 1.0.2. [HSA-26]
                                        • HAAPI Driver is created. [HSA-23]
                                        Read more →
                                      • HAAPI Android SDK

                                        SDK

                                        2.0.0

                                        • Helpers for ExternalBrowserClientOperationStep.
                                        • HaapiManager can throw exceptions instead of returning a Result type. [HSA-30]
                                        • HAAPI SDK is providing HAAPI models. [HSA-24]
                                        Read more →
                                      • HAAPI iOS Driver

                                        SDK

                                        2.0.0

                                        • HAAPI Driver framework is created. [HSI-76]
                                        Read more →
                                      • HAAPI iOS SDK

                                        SDK

                                        2.0.0

                                        • The HAAPI SDK is now providing HAAPI models. [HSI-76]
                                        Read more →
                                      • OAuth Tools

                                        Tools

                                        2.0.0

                                        • [OT-86] Added support for Apple Silicon
                                        • [OT-95] The scheme the application uses internally has been changed from `app://oauth.tools` to `oauth.tools://app`.
                                        Read more →
                                      • OAuth Tools

                                        Tools

                                        1.4.2

                                        • [OT-93] Fixed an issue that caused Introspection flow to not work
                                        Read more →
                                      • OAuth Tools

                                        Tools

                                        1.4.1

                                        • [OT-90] Claims modal position fix
                                        • [OT-87] Claims parameter value encoded incorrectly
                                        • [OT-82] Token request includes trailing `&`
                                        • [OT-83] Create JWT flow from token is not added in a group
                                        • [OT-88] Disable Run button in PAR when appropriate
                                        Read more →
                                      • entrust-idaas

                                        Open Source

                                        1.1.0

                                        • Added support for the claims request parameter e.g., to get groups and authenticator info
                                        • Added descriptions to config options
                                        Read more →

                                    Copyright Curity 2022