3.4.12 (2026-06-17) Bug Fixes always validate exp and iat claims of JWT IdPs (d1c3aa8) client_id verification during code exchange and refresh token flows (5b1708e) jwt idp: manage and validate audience (42f629d)
