Skip to content

Release v19.98.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Oct 03:27
v19.98.0
3df2e6a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Webhooks and external services that authenticate with OAuth client credentials can now request a specific scope, and the kernel reuses access tokens until shortly before they expire instead of fetching a new token for every batch.

Added

  • Optional OAuth scope on webhook and external-service OAuth authorization, in the .NET client builders, the gRPC contracts and the Workbench forms. Existing registrations without a scope keep working unchanged (#5139)

Changed

  • The kernel caches client-credentials access tokens per token endpoint, client, scope and secret, shares one in-flight token request between concurrent senders, refreshes a token shortly before it expires, and retries a webhook delivery once with a fresh token when the receiver answers 401 Unauthorized (#5139)

Fixed

  • Testing an OAuth authorization from the Workbench now uses the configured scope, and a webhook is no longer sent with an empty Bearer header when no token could be acquired (#5139)
Assets 2
Loading