Legacy releases

Social login support.

Biometric authentication support.

iOS SDK now supports Swift Package Manager.

Android and iOS SDKs now provide a revokeAccessToken method to revoke OAuth tokens, but preserve session.

Removed Config.getInstance(Context).

Removed FRAuth Builder.

Removed FRUserViewModel.

Removed public var value from SingleValueCallback.

Removed FRURLProtocolResponseEvaluationCallback.

Removed FRURLProtocol.validatedURLs.

Removed the deprecated FRAuth.shared.next() (public func next) method.

WebAuthn’s thrown error message text has been changed to align with the specification.

Renamed getAuthorizeUrl method to getAuthCodeByIframe.

Removed the single parameter from createVerifier function.

Removed nonce function.

Cross-platform (Android, iOS and JavaScript) support for social login requires Identity Cloud, or AM 7.1 or later.

The SDK’s officially supported identity providers for social login are Apple, Facebook, and Google.

Mobile biometric authentication for both the Android and iOS SDKs requires Identity Cloud, or AM 7.1 or later.

Set up social login.

Biometric authentication support.

Added SDK troubleshooting, which covers cross-domain (third-party) cookie failures, and Apple’s WebKit limitations concerning WebAuthn and "platform authenticators" (such as Touch ID).

Centralized login support.

Token management, WebAuthn, logout, and refresh token grant enhancements (Android, iOS, JavaScript).

Centralized login.

Support for AM 7.

Support for self-registration and self-service trees. To determine the level of support, see Supported Callbacks.

Support for web authentication (WebAuthn).

Support for suspended authentication.

Added processing for new callbacks:

Support for obtaining the "Page Header" and "Page Description" values from a Page node.

Implement default jailbreak/rooted device detection (Android).

Implement default jailbreak/rooted device detection (iOS).

Added the ForgeRock Authenticator module

Support for transactional authorization.

Updated the ability to customize endpoint locations.

New method to Intercept and modify REST calls.

Added handling of new callbacks.

Support for Apple’s "Secure Enclave".

Support in the ForgeRock JavaScript SDK for localStorage, or your own, custom, token storage implementation, as an alternative to indexedDB.

Added ability to override the session cookie name, in all ForgeRock SDKs.

How to Intercept and modify REST calls (all SDKs).

How to Set up transactional authorization (all SDKs).

Blog: Use polyfills (JavaScript SDK).