3.13.0

Added

• Expanding Flexible Factors Grant Android Support #896 (utkrishtsahu)
• fix: Prevent DPoP replay protection error due to OkHttp retry #902 (pmathew92)

3.12.2

Added

• RSA encryption padding change from PKCS1Padding to OAEPWithSHA1And… #834 (utkrishtsahu)
• refactor: Replace synchronized block with AtomicReference for DPoP nonce management #895 (pmathew92)

3.12.1

Deprecated

• refactor: Deprecated the PasskeyAuthProvider class #890 (pmathew92)

Fixed

• fix: Fixing the memory leak introduced in the DPoP flow #891 (pmathew92)

3.12.0

Changes

Added

• feat: Add support for organization to custom token exchange #885 (pmathew92)

Changed

• refactor: Updating MRRT token store logic #884 (pmathew92)

3.11.0

Added

• feat: Added option to pass AuthenticationAPIClient to SecureCredentialsManager class #879 (pmathew92)
• feat: add configurable biometric authentication policies for SecureCredentialsManager #867 (subhankarmaiti)

Fixed

• fix: Fixes the IV overwrite when trying to encrypt multiple credentials #882 (pmathew92)

3.10.0

Added

• SDK-6103 Added support for My Account API. #847 (utkrishtsahu)

3.9.1

Fixed

• fix: Fixed the transitive dependency issue on generated aar file #858 (pmathew92)

3.9.0

Added

• feat: Add support for DPoP #850 (pmathew92)
• feat : support to pass organization while signing-up and signing-in with passkeys #843 (pmathew92)
• Exposes UserProfile to return contents of id token without refreshing credentials #840 (NandanPrabhu)

Updated

• userInfo api in the AuthenticationAPIClient class now takes a tokenType parameter with a default value of Bearer.

3.8.0

Added

• Added support to enroll passkeys with My Account API #837 (pmathew92)

3.7.0

Added

• Add support for Multi-Resource Refresh Token (MRRT) #811 (pmathew92)
• Allow updating the logout and authorize url #822 (utkrishtsahu)