English

release

Logto 2023 May update

Logto product updates for May 2023

Gao

Founder

5/30/2023less than a minute read

Stop wasting weeks on user auth

Launch secure apps faster with Logto. Integrate user auth in minutes, and focus on your core product.

Get started

This month, we’ve improved our product quality and published several some articles that demonstrate how to use Logto as an OAuth or OIDC Identity Provider:

Try Logto Today

Cloud and Pricing

Logto Cloud is set to officially launch this summer! Get ready for an amazing experience.
We're currently putting the finishing touches on our pricing plans. They are designed to take into account your user engagement level, ensuring that you receive fair and reasonable billing even if your app experiences sudden user spikes.

Feature updates

Introducing the "Always issue Refresh Token" configuration for web apps

Always issue Refresh Token toggle

Turning on this toggle ensures that Refresh Tokens are always issued, regardless of whether prompt=consent was included in the authorization request or if offline_access was specified in the scope.

POST /users/:userId/identities to link a social identity to a user
POST /connectors/:connectorId/authorization-uri to get the authorization URI for a connector

OpenAPI (Swagger) improvements

Except interaction APIs, API response schemas and status codes are now available in /api/swagger.json. It’s also available in https://docs.logto.io/api/.

OpenAPI documentation

Patch updates

Improved compatibility by parsing requests with application/json content-type for /oidc APIs.
Automated synchronization of trusted social email and phone information for newly registered users, irrespective of the sign-up identifier configuration.
- For example: Previously, if the "email" was not set as a sign-up identifier (meaning a valid email connector had to be configured and enabled) and Google sign-in was added, the emails from new users would not be synchronized.
- Starting from v1.4.0, this requirement has been removed, as "social sign-in only" scenarios are not uncommon in real-world cases.
Disable PKCE requirement for Traditional Web apps. Now Logto should be able to integrated with most projects that support OAuth identity providers such as ChatGPT plugins.

Try Logto Today

Cloud and Pricing

Logto Cloud is set to officially launch this summer! Get ready for an amazing experience.

We're currently putting the finishing touches on our pricing plans. They are designed to take into account your user engagement level, ensuring that you receive fair and reasonable billing even if your app experiences sudden user spikes.

Feature updates

Introducing the "Always issue Refresh Token" configuration for web apps

POST /users/:userId/identities to link a social identity to a user

POST /connectors/:connectorId/authorization-uri to get the authorization URI for a connector

Patch updates

Improved compatibility by parsing requests with application/json content-type for /oidc APIs.

Automated synchronization of trusted social email and phone information for newly registered users, irrespective of the sign-up identifier configuration.

For example: Previously, if the "email" was not set as a sign-up identifier (meaning a valid email connector had to be configured and enabled) and Google sign-in was added, the emails from new users would not be synchronized.
Starting from v1.4.0, this requirement has been removed, as "social sign-in only" scenarios are not uncommon in real-world cases.

Disable PKCE requirement for Traditional Web apps. Now Logto should be able to integrated with most projects that support OAuth identity providers such as ChatGPT plugins.

Cloud and Pricing#

Feature updates#

Introducing the "Always issue Refresh Token" configuration for web apps#

Added Management APIs to help link social identities to user#

OpenAPI (Swagger) improvements#

Patch updates#

Cloud and Pricing#

Feature updates#

Introducing the "Always issue Refresh Token" configuration for web apps#

Added Management APIs to help link social identities to user#

OpenAPI (Swagger) improvements#

Patch updates#

Cloud and Pricing

Feature updates

Introducing the "Always issue Refresh Token" configuration for web apps

Added Management APIs to help link social identities to user

OpenAPI (Swagger) improvements

Patch updates

Cloud and Pricing

Feature updates

Introducing the "Always issue Refresh Token" configuration for web apps

Added Management APIs to help link social identities to user

OpenAPI (Swagger) improvements

Patch updates