loading
Preparing LoginRadius developer resources
Mission: Help enterprises accelerate digital transformation with our fully-managed Customer IAM technology.
Skip to main content

Core API Release 38.3.0

ยท 2 min read
Subscribe via RSS

This release of the LoginRadius Core API introduces the new features, improvements, and bug fixes included in this release.

Changelog

Added

  • OAuth/OIDC consent management: Introduced a user-consent layer for OAuth 2.0 and OIDC authorization flows. This includes new endpoints for retrieving and submitting consent (/oidc/consent and /oauth/consent) and a durable store for user approvals.

  • Per-IP rate limiting: Implemented a Redis-backed IP rate-limiting middleware to protect against bots and abusive traffic by enforcing limits per source IP.

  • Multipurpose Email Token API enhancements: Added support for a sendemail flag across all email types in the /emailtoken/{tokentype} API, allowing tokens to be generated and emails to be dispatched in a single request.

  • Forgot passkey flow: Added support for the "Forgot Passkey" flow within Identity Orchestration workflows.

  • Audit integration control: Provided an option to disable the syncing of Config Read Logs to upstream SIEM integrations.

Improved

  • Audit log metadata: Enhanced v2 audit logs for OAuth/OIDC routes to include metadata for Dynamic Client Registration (DCR) and Client ID Metadata (CIMD).

  • Tenant creation visibility: Added Audit V2 logging for the Tenant Creation API to improve operational tracking.

  • Management API integration support: Added the capability to create third-party integrations via the Management API, with updated OpenAPI specifications for runtime support.

Fixed

  • CAPTCHA enforcement in 2FA: Fixed an issue that allowed CAPTCHA validation to be bypassed in the login flow when MFA was enabled.

Please reach out to LoginRadius Support for any further queries.