English
Logto 2023 May update
Logto product updates for May 2023
This month, we’ve improved our product quality and published several some articles that demonstrate how to use Logto as an OAuth or OIDC Identity Provider:
- Streamline OAuth and OIDC Authentication with Logto
- Implement ChatGPT plugins user authentication with Logto
- Simplify Outline authentication with Logto
Cloud and Pricing
- Logto Cloud is set to officially launch this summer! Get ready for an amazing experience.
- We're currently putting the finishing touches on our pricing plans. They are designed to take into account your user engagement level, ensuring that you receive fair and reasonable billing even if your app experiences sudden user spikes.
Feature updates
Introducing the "Always issue Refresh Token" configuration for web apps
Turning on this toggle ensures that Refresh Tokens are always issued, regardless of whether prompt=consent
was included in the authorization request or if offline_access
was specified in the scope.
Added Management APIs to help link social identities to user
- POST
/users/:userId/identities
to link a social identity to a user - POST
/connectors/:connectorId/authorization-uri
to get the authorization URI for a connector
OpenAPI (Swagger) improvements
Except interaction APIs, API response schemas and status codes are now available in /api/swagger.json
. It’s also available in https://docs.logto.io/api/.
Patch updates
- Improved compatibility by parsing requests with
application/json
content-type for/oidc
APIs. - Automated synchronization of trusted social email and phone information for newly registered users, irrespective of the sign-up identifier configuration.
- For example: Previously, if the "email" was not set as a sign-up identifier (meaning a valid email connector had to be configured and enabled) and Google sign-in was added, the emails from new users would not be synchronized.
- Starting from v1.4.0, this requirement has been removed, as "social sign-in only" scenarios are not uncommon in real-world cases.
- Disable PKCE requirement for Traditional Web apps. Now Logto should be able to integrated with most projects that support OAuth identity providers such as ChatGPT plugins.