We are pleased to announce the release of the Curity Identity Server 6.3.

This minor release is a major one for Brazil as it includes compliance with the Open Banking Brazil profile of OpenID Connect. With this comes a lot of generally useful, financial-grade security features that are helpful regardless of where in the world you use the product.

Support for PAR, JAR, JARM and encrypted request objects

The Curity Identity Server now supports:

• Pushed Authorization Requests (PAR),
• JWT Secured Authorization Request (JAR),
• JWT Secured Authorization Response Mode (JARM),
• Encrypted request objects.

These additions do not bring any breaking changes but make sure to see the upgrade guide if you are using request objects already.

Amazon DynamoDB support

The Curity Identity Server now supports Amazon DynamoDB; our first supported NoSQL database. In addition, the component is entirely open source and is our most complete open source data source available, making it an ideal model for those building data sources that need to manage accounts, validate credentials, store devices, etc.

As always, the new release also includes a number of fixes and smaller enhancements. One especially noteworthy improvement is a performance fix to client secret validation. Upgrading should be smooth, so all customers on 6.X are recommended to upgrade promptly.

Read the release notes for more details.

Release Webinar

On Thursday, July 8, at 15:00 CEST we will host a short webinar to explore what’s new in 6.3. We will go through the release notes, highlighting new features, fixes and, enhancements.