Connect2id

OpenID Connect and OAuth 2.0 for fintech, verified identity providers, innovative startups and enterprises

[Connect2id @connect2id]

Type-safe Rich Authorization Request (RAR) support in v10.12 of the #OAuth 2.0 / #OIDC SDK https://t.co/ZI9yrEhymI

[Connect2id @connect2id]

The much anticipated STS API to ease federated logins with the @connect2id server is here
https://t.co/mePqYqWsUV

[Connect2id @connect2id]

The #OAuth 2.0 #JWT authZ grant (RFC 7523), somewhat of a mystery to developers, has great utility for backend services that need user-linked access tokens https://t.co/R9B8tJ8v5T

[Vladimir Dzhuvinov 🇪🇺 🇧🇬 @dzhuvi]

The x.509 cert chain meets the #openid trust chain, @openidjp summit Tokyo 🇯🇵 2024

https://t.co/IlLLqsT6Ko

[Connect2id @connect2id]

Connect2id server 14.9 introduces automatic purge scan rate limiting for deployments with #AWS DynamoDB
https://t.co/hZJhai01PW

[Connect2id @connect2id]

But what is #OpenID Federation 1.0? https://t.co/kUa4NodHX6

[Connect2id @connect2id]

v11.5 of the #OpenID Connect SDK is now capable of resolving #OpenID Federation 1.0 trust chains with custom #HTTP clients https://t.co/AkGMDunAIx

[Connect2id @connect2id]

Every now and then developers ask us how the Nimbus JOSE+JWT library maps between JSON entities and Java classes https://t.co/BN9ElkmyA9

[Connect2id @connect2id]

The #Redis connector in the Connect2id server gets a sweeping update. The maximum concurrent session quota is per user is increased from 10 to 25.
https://t.co/vNT5vUGtCl

[Connect2id @connect2id]

The #OAuth / #OpenID Connect SDK can now work with custom HTTP clients, such as #Apache HttpClient or OkHttp
https://t.co/griyn2koXw

[Connect2id @connect2id]

You can now use #AWS CloudHSM to secure and verify JWTs with the HMAC-based HS256, HS384 and HS512 JWS algorithms. Credits Ulrich Winter https://t.co/pzFIoI3wZ4

[Connect2id @connect2id]

v10.15 of the #OAuth / #OpenID Connect SDK received an important fix that affected client X.509 certificate extraction in Jakarta Servlet deployments. Credits Jesper Öst https://t.co/Xl9ANz16jy

[Connect2id @connect2id]

Another contribution in Nimbus JOSE+JWT 9.32 is EC JWS / JWT support for the Android biometric or PIN prompt. Credits Stian Svedenborg https://t.co/CnzyIZGX8Y

[Connect2id @connect2id]

Thanks to the generous contribution of Egor Puzanov the Nimbus JOSE+JWT lib can how handle JSON Web Encryption (JWE) to multiple recipients https://t.co/9QG2HeRPVt

[Connect2id @connect2id]

The redirect_uri validation in the #OAuth SDK incorporates new lessons from the OAuth Security Workshop 2023
https://t.co/LnrvtDPoWN

[Connect2id @connect2id]

#OAuth DPoP becomes RFC 9449
https://t.co/fSN5DfcjGq

[Connect2id @connect2id]

In #OAuth RAR the JSON objects that express the "authorization_details" have an explicit "type" to aid their parsing and validation. Connect2id server deployments can now check the RAR types in requests automatically, plugin code is no longer needed
https://t.co/m9Ihtzc7aC

[Connect2id @connect2id]

Preview of the upcoming public JWE to multiple recipients https://t.co/9QG2HeRPVt

[Connect2id @connect2id]

Examples show the new Nimbus JOSE+JWT facility for sourcing JWKs with rate-limiting, caching, retrial and outage support
https://t.co/XTV5tWfcF6

[Connect2id @connect2id]

One recognised drawback of refresh token rotation is that it can lead to false positives for legitimate OAuth 2.0 clients with a slow or poor network connection. How to mitigate that?
https://t.co/eCWEeitBpQ