Release v2.3.6

Added

• Error handler to show correct message when backend gives a timeout

Fixed

• RDP with domain not propperly excluding configured users
• Added timeout to calls during authorization

Dependencies

• OTP Server 1.2.2

Release v2.3.5

Added

• ARM64 compatibility

Fixed

• RDP not allowing to cache user and password

Dependencies

• OTP Server 1.2.2

Release v2.3.4

Fixed

• Offline compatibility with login with the local application

Dependencies

• OTP Server 1.2.2

Release v2.3.3

Fixed

• Fixed an issue where updates triggered by commands were not properly updating values

Dependencies

• OTP Server 1.2.2

Release v2.3.2

Security

• [CVE-2026-40372] Mitigada vulnerabilidad de Verificación Incorrecta de Firma Criptográfica en el componente de protección de datos de Microsoft (Microsoft.AspNetCore.DataProtection).
  • Actualización de dependencias criptográficas internas a versiones propias.
  • Referencias:
    • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40372
    • https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/CVE-2026-40372

Dependencies

• OTP Server 1.2.2

Release v2.3.1

Added

• New button on the installer to verify the validity of the configuration
• Trim the target host and secret to prevent accidental adding of spaces and other illegal characters

Changed

• When remembering a password, if a password is no longer valid, it automatically cleans it. It is no longer required to manually forget the password

Fixed

• Autologin failing

Dependencies

• OTP Server 1.2.2

Release v2.3.0

Added

• SMS UI to be able to authorize with the received sms code

Fixed

• Manually added username on the cached user registry with an invalid format crashing the provider

Dependencies

• OTP Server 1.2.2

Release v2.2.1

Added

• Specific error message when the authorization gets canceled

Dependencies

• OTP Server 1.2.2

Release v2.2.0

Added

• Compatibility with older versions than Windows 10. Targetting Window 8 but the implementation should be compatible with other versions too.
• During Online authorization, Logon now gets the backend response externalUsername as credential instead of the user input

Changed

• Curl library intead of using schannel it now uses openSSL
• Fixed characters like ñ breaking the request and getting a 400 error
• Fixed not being able to configure an OTP when connected via RDP

Release v2.1.1

Added

• Improvements to the logs and telemetry to provide a better support.
• Check to prevent user from starting the login if no username was inserted

Changed

• Ordered the installed scenarios documentation order to match the dropdown
• Fixed installer not applying property changes if a feature was being enabled/disabled
• Fixed installer broken navigation using the back button during maintaince mode

Dependencies

• OTP Server 1.2.1