SDK & API updates - Authsignal

June 2026

Mobile SDKs

Fetching push challenges now returns public custom action and user data points, for building richer push verification screens. iOS 2.9.0, Android 3.10.0, React Native 2.13.0, Flutter 2.4.2.
Passkey sync via the WebAuthn Signal API comes to mobile. Passkeys removed server-side are now reflected in the platform’s passkey UI. iOS 2.10.0, Android 3.11.0, React Native 2.14.0, Flutter 2.7.0.
Flutter’s push.addCredential now accepts an optional pushToken to register the device token at enrolment. Flutter 2.6.0.
The Android SDK upgrades to Ktor 3, a major version bump that also rolls through the Flutter and React Native wrappers. Android 4.0.0, React Native 3.0.0, Flutter 3.0.0.
New push.updateCredential refreshes a device’s push token after enrolment, with no user session or track call required. iOS 2.11.0, Android 4.1.0, React Native 3.1.0.

Adds a targeted push authenticator challenge that sends the push to a specific enrolled device. Browser 1.18.0.
Passkey authentication now supports immediate mediation. Browser 1.19.0.

May 2026

App Attest now uses a server-issued nonce in place of the token’s idempotencyKey, and Flutter gains App Attest support. iOS 2.7.0, Android 3.8.0, React Native 2.11.0, Flutter 2.4.0.
push.enroll accepts an optional pushToken to register the device token at enrolment. iOS 2.8.0, Android 3.9.0, React Native 2.12.0.
Flutter 2.4.0: adds getDeviceId(), passkey isSupported() / shouldPromptToCreatePasskey(), credential options for push / QR / in-app, a full PIN API, and Flutter web support.

Passkey sync via the WebAuthn Signal API. Passkeys removed server-side are now reflected in the browser’s passkey picker. Browser 1.17.0.

OIDC redirect flow now uses an opaque authorizationToken plus a client-generated codeVerifier / codeChallenge.
Update device accepts a rememberedUntil timestamp.
Passkey authenticator responses include the WebAuthn username.