Company
Date Published
Author
Dan Moore
Word count
517
Language
English
Hacker News points
None

Summary

FusionAuth version 1.34, released in February 2022, introduces several enhancements, including comprehensive support for PKCE across its internal infrastructure to bolster security in OAuth processes, a reworked delivery of Client Id and Client Secret for improved compliance with OpenID Connect Identity Providers, and built-in support for a 512-bit PBKDF2 key length to accommodate common password hashing practices. These updates aim to enhance security, compatibility, and ease of integration without requiring modifications to existing external integrations. Users are encouraged to review the release notes thoroughly and test their integrations, especially when using the OIDC Identity Provider, before upgrading in production environments. The release offers detailed guidance for both self-hosted and cloud deployments, ensuring that users can smoothly transition to the new version.