What’s New

Added the ability to customize how the ForgeRock SDK stores tokens and data.

Added support for Android App Links that use the http/https scheme for redirect URIs in centralized login apps.

Added support for Android 15.

Added support for the PingOne Protect Marketplace nodes.

Added support for the PingOne Protect Marketplace nodes.

Exposed the realm, success URL and failure URL values within Token.

Added client-side support for the upcoming ReCaptchaEnterpriseCallback callback.

Added centralized login support for PingFederate servers.

Added client-side support for the upcoming ReCaptchaEnterpriseCallback callback.

Added support for the PingOne Protect Marketplace nodes.

Added support for signing off from PingOne to the centralized login flow.

Added the ability to dynamically configure the SDK by collecting values from a PingOne or server’s OpenID Connect .well-known endpoint.

Added support for signing off from PingOne when using the centralized login flow with OAuth 2.0.

Added the ability to dynamically configure the SDK by collecting values from the server’s OpenID Connect .well-known endpoint.

Added support for integration with PingOne Protect.

Added the name of the device to the recovery codes page.

Added a logoutRedirectUri parameter to the FRUser.logout() method.

Added a platformHeader configuration property to control whether the SDK adds the X-Requested-Platform header to all outgoing connections.

Added privacy manifest files to ForgeRock SDK for iOS modules.

Added a new module for future integration with PingOne Protect.

Added an interface for customizing the biometric UI prompts when device binding or signing.

Added support for the TextInput callback.

Added a new module for future integration with PingOne Protect.

Added an interface for customizing the biometric UI prompts when device binding or signing.

Added support for the TextInput callback.

Added a new module for future integration with PingOne Protect.

Added the ability to include the supplied device name when displaying recovery codes.

Added the ability to use values from an OpenID Connect .well-known URL to automatically configure the SDK paths.

Fixed an SDK crash during device binding on Android 9 devices.

Support for CAPTCHA nodes.

Added ability to override default prefix string given to storage keys.

Added an FRQRCode utility class to determine if a step has a QR code and handle the data to display.

Added ability to customize cookie headers in outgoing requests from the SDK.

Added ability to add custom claims when verifying signatures from bound devices.

Added client-side support for the upcoming AppIntegrity callback.

Added client-side support for the upcoming AppIntegrity callback.

Added a new ephemeralAuthSession browser type for iOS13 and later.

Added iat and nbf claims to the device binding JWS payload.

Added ability to insert custom claims when performing device signing verification.

Updated the detection of Jailbreak status.

Added Gradle 8 and JDK 17 support.

Added Android 14 support.

Added verification of key pairs during device binding enrollment by using Google Key Attestation.

Added issued at (iat) and not before (nbf) claims to JSON Web tokens used for device binding and signing verification.

Added a requirement to declare a list of URLs in the Token Vault Proxy configuration. These generate an allowlist of origins to which the proxy can forward requests.

Added a logLevel configuration property to specify the level of logging the SDK performs.

Added a customLogger configuration property to specify a replacement for the native console.log that the SDK uses by default.

Added support for interceptors in the authenticator module

Added an interface for refreshing access tokens

Added support for policy advice from IG in JSON format

Added support for interceptors in the authenticator module.

Added support for mfauth deep links in the authenticator sample app.

Added an interface for refreshing access tokens.

Added support for policy advice from IG in JSON format.

Added support in preparation for upcoming Token Vault.

Support for device profiling callbacks (DeviceProfileCallback)

Support for web authentication (WebAuthn) journeys and trees.

Added support in the HTTPClient for receiving transactional authorization advice in JSON format.

Added support for Passkeys.

Added the ability to provide a device name when registering WebAuthN devices.

Added support for enforcing policies in the Authenticator SDK.

Added SwiftUI quick start sample code.

Upgraded the Google Fido client to support Passkeys.

Added the ability to provide a device name when registering WebAuthN devices.

Added support for enforcing policies in the Authenticator SDK.

Added the ability to provide a device name when registering WebAuthN devices.

Updated ESModule (ESM) bundle.

Updated tags in the GitHub repo to be prefixed with the package name. For example, javascript-sdk-${tag}.