> ## Documentation Index
> Fetch the complete documentation index at: https://docs.authsignal.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SDK & API updates

> Monthly updates to Authsignal SDKs and APIs.

<Update label="June 2026">
  ## Mobile SDKs

  * Fetching [push challenges](/sdks/client/mobile/push-verification) now returns public custom action and user data points, for building richer push verification screens. [iOS 2.9.0](https://github.com/authsignal/authsignal-ios/releases/tag/v2.9.0), [Android 3.10.0](https://github.com/authsignal/authsignal-android/releases/tag/v3.10.0), [React Native 2.13.0](https://github.com/authsignal/react-native-authsignal/releases/tag/v2.13.0), [Flutter 2.4.2](https://github.com/authsignal/authsignal-flutter/releases/tag/v2.4.2).
  * [Passkey sync](/sdks/client/mobile/passkeys) via the WebAuthn Signal API comes to mobile. Passkeys removed server-side are now reflected in the platform's passkey UI. [iOS 2.10.0](https://github.com/authsignal/authsignal-ios/releases/tag/v2.10.0), [Android 3.11.0](https://github.com/authsignal/authsignal-android/releases/tag/v3.11.0), [React Native 2.14.0](https://github.com/authsignal/react-native-authsignal/releases/tag/v2.14.0), [Flutter 2.7.0](https://github.com/authsignal/authsignal-flutter/releases/tag/v2.7.0).
  * Flutter's `push.addCredential` now accepts an optional `pushToken` to register the device token at enrolment. [Flutter 2.6.0](https://github.com/authsignal/authsignal-flutter/releases/tag/v2.6.0).
  * The Android SDK upgrades to Ktor 3, a major version bump that also rolls through the Flutter and React Native wrappers. [Android 4.0.0](https://github.com/authsignal/authsignal-android/releases/tag/v4.0.0), [React Native 3.0.0](https://github.com/authsignal/react-native-authsignal/releases/tag/v3.0.0), [Flutter 3.0.0](https://github.com/authsignal/authsignal-flutter/releases/tag/v3.0.0).
  * New [`push.updateCredential`](/sdks/client/mobile/push-verification) refreshes a device's push token after enrolment, with no user session or track call required. [iOS 2.11.0](https://github.com/authsignal/authsignal-ios/releases/tag/v2.11.0), [Android 4.1.0](https://github.com/authsignal/authsignal-android/releases/tag/v4.1.0), [React Native 3.1.0](https://github.com/authsignal/react-native-authsignal/releases/tag/v3.1.0).

  ## Web SDK

  * Adds a [targeted push authenticator challenge](/sdks/client/web/push-verification) that sends the push to a specific enrolled device. [Browser 1.18.0](https://github.com/authsignal/authsignal-browser/releases/tag/v1.18.0).
  * [Passkey](/sdks/client/web/passkeys) authentication now supports immediate mediation. [Browser 1.19.0](https://github.com/authsignal/authsignal-browser/releases/tag/v1.19.0).
</Update>

<Update label="May 2026">
  ## Mobile SDKs

  * App Attest now uses a server-issued `nonce` in place of the token's `idempotencyKey`, and Flutter gains App Attest support. [iOS 2.7.0](https://github.com/authsignal/authsignal-ios/releases/tag/v2.7.0), [Android 3.8.0](https://github.com/authsignal/authsignal-android/releases/tag/v3.8.0), [React Native 2.11.0](https://github.com/authsignal/react-native-authsignal/releases/tag/v2.11.0), [Flutter 2.4.0](https://github.com/authsignal/authsignal-flutter/releases/tag/v2.4.0).
  * `push.enroll` accepts an optional `pushToken` to register the device token at enrolment. [iOS 2.8.0](https://github.com/authsignal/authsignal-ios/releases/tag/v2.8.0), [Android 3.9.0](https://github.com/authsignal/authsignal-android/releases/tag/v3.9.0), [React Native 2.12.0](https://github.com/authsignal/react-native-authsignal/releases/tag/v2.12.0).
  * [Flutter 2.4.0](https://github.com/authsignal/authsignal-flutter/releases/tag/v2.4.0): adds `getDeviceId()`, passkey `isSupported()` / `shouldPromptToCreatePasskey()`, credential options for push / QR / in-app, a full PIN API, and Flutter web support.

  ## Web SDK

  * Passkey sync via the WebAuthn Signal API. Passkeys removed server-side are now reflected in the browser's passkey picker. [Browser 1.17.0](https://github.com/authsignal/authsignal-browser/releases/tag/v1.17.0).

  ## Server SDKs

  * [.NET 4.4.0](https://github.com/authsignal/authsignal-dotnet/releases/tag/v4.4.0): adds `Username` on authenticator enrolment models.

  ## Server API

  * [OIDC redirect flow](/authentication-methods/oidc-providers/redirect-flow) now uses an opaque `authorizationToken` plus a client-generated `codeVerifier` / `codeChallenge`.
  * [Update device](/api-reference/server-api/update-device) accepts a `rememberedUntil` timestamp.
  * Passkey authenticator responses include the WebAuthn `username`.
</Update>