Skip to content

Version 1.4.0

Latest
Latest

Choose a tag to compare

View all tags
@mihir-pradhan mihir-pradhan released this 16 Sep 18:27
· 2 commits to main since this release
1.4.0
b84eb79
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Version 1.4.0

Changes

  • Added nonce support to createAuthUrl and the token exchange, and exposed the nonce claim on Token
  • Added dest_app_name, dest_app_id, display_username, max_age and prompt parameters via a new AuthUrlOptions builder
  • Replaced certificate pinning with a bundled trust store that performs full certificate chain validation
  • Reduced the outgoing JWT expiration from 1 hour to 5 minutes to match the other Duo SDKs
  • Added the CA bundle version and pinning status to the user agent string
  • Added a KEYS file and README instructions for verifying signed release artifacts
  • Upgraded the example app to Spring Boot 3.x, which requires Java 17; the SDK still supports Java 8
Assets 2
Loading