Highlights
Set up AI agent access from the Portal.
Dynamic clients have moved to a new AI Agents (Dynamic) page under Applications, with Overview, CIMD and DCR tabs. You can now turn on and configure CIMD there, including which domains to trust, so you no longer need to edit project configuration. This release should also fix the MCP compatibility problems with Codex and Claude on the web. We tested both CIMD and DCR with Claude Code, Claude.ai, Codex and ChatGPT. See Auth for MCP to set it up.
Let users review and revoke the apps they've authorized.
A new Authorized Apps page in the user settings lists the third-party apps and AI agents a user has approved, and lets them revoke access to any of them.
API resources now work with every type of application.
Any application can now request an API resource, not just machine-to-machine apps and dynamic clients. Each API resource and scope has an access policy that decides which kinds of client can use it, and the API resource page in the Portal has been redesigned around it.
Upgrade notes
This release includes breaking changes. Read BREAKING-CHANGES.md before upgrading.
Other changes
- The consent screen is easier to read: requested permissions are split into what signing in grants and what the app asked for, and permissions that added nothing are gone
- Admin API mutations are limited to 1,000 per minute per project, and the Portal shows a retry message when the limit is hit
- Source maps are no longer served by default. Set
SOURCE_MAP_ENABLED=trueto serve them, andSOURCE_MAP_SENTRY_TOKENto put them behind basic auth - New CLI command to remove a project's data from the database
- DCR accepts loopback redirect URIs on any port for native clients
- Dynamic client logos are loaded through Authgear, so viewing them no longer reveals the user's IP address to the client
- Audit Log custom date ranges now include a time of day, and the Audit Log opens on the last 30 days instead of today
- The Portal project list is sorted alphabetically
- Token responses now always include the granted
scope - Fixed: sorting the Users list by last login used the previous login instead
- Fixed: settings dialogs opened below the fold on long pages
- Fixed: the Scopes table cut off its right-hand columns
- Misc bug fixes and security improvements