2018.25

Better /userinfo Errors

The following information has been added to the userinfo endpoint's error response:

• authorization_uri
• realm
• resource
• a list of required scopes in the scope parameter

Bugs Fixed in 2018.25

• In certain situations, if a call was made to the OAuth 2.0/OIDC /authorize endpoint with response_mode set to okta_post_message, an HTTP 500 error would return. (OKTA-175326)
• Removing all permissions on a schema attribute would return a READ_ONLY permission. The response now correctly contains a READ_WRITE permission. (OKTA-173030)
• If an Authorization Server's redirect_uri was too long, an HTTP 500 error would return. (OKTA-171950)
• The phoneExtension property would not be returned in GET requests to the Factors API's catalog endpoint. (OKTA-108859)

Previously Released Early Access Features 2018.25 Update

The following features have already been released as Early Access. To enable them, contact Support.