R103

New features

• We changed the way how we're handling errors coming from 3rd party IdP's.
• We increased the timeout when waiting for an authentication using a 3rd party IdP
• Custom workflows now support private key JWT
• The custom event schema is now extended with location, device and client information
• We now show an error when the user name contains a space while this was not allowed
• Created CM SPI implementation to send out sms and voice OTP

Bug Fixes

• SameSite is now set regardless of the used flow
• When we hit a time-out during authentication using a 3rd party IdP, we will now return a correct error
• Calling the endSession endpoint with an expired token, now no longer returns an error but ends the session and redirects to the post logout URL.
• We now no longer allow '/' to be part of the name of a process to avoid unexpected behaviour
• we fixed an issue where the UDH no longer accepted 2 claims with the same name
• we fixed an issue where we disclosed information of underlaying components
• we fixed an error where re-submitting a form was not possible
• we fixed an issue where a user couldn't resend an email in the registration flow
• We fixed an issue where now the process will restart if the user click on back/forward button in e.g. the reset password process