SDK & API updates

​

Mobile SDKs

• App Attest now uses a server-issued nonce in place of the token’s idempotencyKey, and Flutter gains App Attest support. iOS 2.7.0, Android 3.8.0, React Native 2.11.0, Flutter 2.4.0.
• push.enroll accepts an optional pushToken to register the device token at enrolment. iOS 2.8.0, Android 3.9.0, React Native 2.12.0.
• Flutter 2.4.0: adds getDeviceId(), passkey isSupported() / shouldPromptToCreatePasskey(), credential options for push / QR / in-app, a full PIN API, and Flutter web support.

​

Web SDK

• Passkey sync via the WebAuthn Signal API. Passkeys removed server-side are now reflected in the browser’s passkey picker. Browser 1.17.0.

​

Server SDKs

• .NET 4.4.0: adds Username on authenticator enrolment models.

​

Server API

• OIDC redirect flow now uses an opaque authorizationToken plus a client-generated codeVerifier / codeChallenge.
• Update device accepts a rememberedUntil timestamp.
• Passkey authenticator responses include the WebAuthn username.