Connect2id server 6.7.2

6.7.2 is a maintenance release of the Connect2id server. It has fixes for three discovered bugs, enhances token inspection logging and also updates dependencies in the SQL connector and the crypto (BouncyCastle) stacks.

Check the release notes below for details.

The next release will introduce support for the end-session endpoint, as specified in the OpenID Connect Session Management draft.

Download

To download a ZIP package of Connect2id server 6.7.2:

https://connect2id.com/assets/products/server/download/6.7.2/Connect2id-server.zip

(SHA-256: e6a051230d648c501d9d6f2dc451aa00336e0b6ea59f323530769e40f60e4bdb)

As WAR package only:

https://connect2id.com/assets/products/server/download/6.7.2/c2id.war

(SHA-256: 3e25c1814910142be6f67abca573266adf892953fe99447b060cfda2a9e721dc)

Questions?

Get in touch with Connect2id support.


Release notes

6.7.2 (2017-05-30)

Configuration

  • No changes

Web API

  • /monitor/v1/metrics

    • Adds new [infinispan-cache-name].sqlStore.pool.ConnectionCreation histogram of SQL connection acquisition time (for PostgreSQL, MySQL and H2 backends).

Issues

  • Enhances logging of token inspection when the token is determined to be no longer valid due to a more recent revocation event. Adds logging of the token issue timestamp, the exact matching revocation event type and its timestamp (issue authz-server/137).

  • Fixes max_idle time application to Infinispan cache entries for subject sessions (issue session-store/61).

  • Fixes NPE during token introspection with invalid client_id (issue server/286).

  • Fixes default error_description override on authorisation session DELETE (issue server/284).

  • Ensures no transitive dependencies for legacy JCIP annotation package (issue server/283).

Dependencies

  • Upgrades to com.nimbusds:oauth2-authz-store:5.14.3

  • Upgrades to com.nimbusds:oidc-session-store:5.2.3

  • Switches MySQL JDBC connector to org.mariadb.jdbc:mariadb-java-client:2.0.1

  • Upgrades to com.nimbusds:infinispan-cachestore-sql:2.5.8

  • Upgrades to com.zaxxer:HikariCP:2.6.2

  • Upgrades to org.bouncycastle:bcprov-jdk15on:1.57

  • Upgrades to org.bouncycastle:bcpkix-jdk15on:1.57