descope/go-sdk v1.6.10

on GitHub

Breaking changes

• Configurable expiration time of JWT: We added support to configure the JWT's expiration time, using the UpdateJWTWithCustomClaims function.
  Please notice that this update breaks compilation, and requires anyone currently using this command to pass 0 (which translates to 'no change', leaving the expiration set based on the project's configuration).
• Self-service SSO configuration link: Up until now, the GenerateSSOConfigurationLink command generated a link to the project's sso-config flow. Now that the SSO Setup Suite is out - the link that's generated will be for the suite. On top of that, extra configuration parameters have been added, including email and templateID.
  This update breaks compilation, and requires anyone currently using this command to pass 2 empty strings ("") at the end of it.
• Export snapshot - extended configurations: In order to support extended configurations upon snapshot export, we added a new ExportSnapshotRequest struct that can accept different output formats.
  This update breaks compilation, and requires anyone currently using this command to pass an extra nil.

Enhancements

• Third Party Apps - Inbound: To support general CRUD of our new feature 'Third Party Applications' (also known as Inbound Apps) - we added various functions, including the option to create, update and revoke a consent from an app. Read more in the SDK's README.
• Anonymous user creation via management SDK: Just like our option to generate an impersonated JWT, we added the option to generate an anonymous user's JWT. Read more about anonymous users in our documentation.
• Management command support for User ID: On top of the existing Login ID support, we made sure that all management commands can work with the user's User ID as well. This includes commands such as User.Update, User.Delete, etc.
• Audit search paging: With the new size and page parameters, the audit's Search function becomes much more flexible to your needs. Notice that the maximum size per page is 1000 records.
• Total results count for audit query: We added a new SearchAll audit function, that supports all Search capabilities - but also returns the number of records.
• Search users by dates: An option to filter user searches based on their creation time or modified time, using the UserSearchOptions object.
• Authentication Method usage via management SDK: For each authentication method, there's a configuration that can disable it from API/SDK usage, to avoid any unwanted public access. This doesn't include flow usage, and from now on will also not include management API usage.
• TOTP seed deletion via management SDK: The function RemoveTOTPSeed supports removing a TOTP seed for a specific user, based on their login ID.
• FGA cache update: For an upcoming FGA feature, we added another property when initiating the Descope client called FGACacheURL. This is of course not a mandatory configuration. More details to come!