Logto v1.37.0 is here with a built-in Account Center app, richer JWT customization using application context, and configurable ID token claims. It also fixes custom-domain redirect issues and improves sign-up and social linking flow stability.
This release introduces the Account Center single-page app as a built-in Logto application for end users:
Documentation: Account settings by Account API
Application context (for example app name, description, and custom data) is now available in JWT customizer scripts for:
This enables app-aware JWT claim customization.
You can now configure additional claims included in ID tokens via Console or Management API:
custom_dataidentitiesrolesorganizationsorganization_rolesFixed an invalid_redirect_uri issue for built-in Account Center and Demo app under custom-domain requests.
redirect_uri could be based on a custom domain.getTenantUrls now accepts an optional runtime endpoint. Built-in metadata generation for Account Center and Demo app now includes envSet.endpoint, so redirect/logout URIs automatically include the active custom domain.Fixed an issue where the "Tell us about yourself" section did not appear during sign-up when only optional custom profile fields were configured.
Fixed a broken social account linking flow in this scenario:
username + email are both enabled as required sign-up identifiers.Previously, the link_social parameter was not propagated after username fulfillment, causing link context to be lost before email verification. The flow now appends and preserves link_social so the expected link-and-sign-in behavior works correctly.