R103

New features

• We changed the way how we're handling errors coming from 3rd party IdP's.

• We increased the timeout when waiting for an authentication using a 3rd party IdP

• Custom workflows now support private key JWT

• The custom event schema is now extended with location, device and client information

• We now show an error when the user name contains a space while this was not allowed

• Created CM SPI implementation to send out sms and voice OTP

Bug Fixes

• SameSite is now set regardless of the used flow

• When we hit a time-out during authentication using a 3rd party IdP, we will now return a correct error

• Calling the endSession endpoint with an expired token, now no longer returns an error but ends the session and redirects to the post logout URL.

• We now no longer allow '/' to be part of the name of a process to avoid unexpected behaviour

• we fixed an issue where the UDH no longer accepted 2 claims with the same name

• we fixed an issue where we disclosed information of underlaying components

• we fixed an error where re-submitting a form was not possible

• we fixed an issue where a user couldn't resend an email in the registration flow

• We fixed an issue where now the process will restart if the user click on back/forward button in e.g. the reset password process