Version 23.1.0

• [MINOR] Add OpenTelemetry support for passkey operations (#2795)
• [MINOR] Add passkey registration support for WebView (#2769)
• [MINOR] Add callback for OneAuth for measuring Broker Discovery Client Perf (#2796)
• [MINOR] Add new span name for DELEGATION_CERT_INSTALL's telemetry (#2790)
• [MINOR] Refactor getAccountByLocalAccountId (#2781)
• [MINOR] Add OTel Benchmarker (#2786)
• [MINOR] WebApps AccountId Registry (#2787)
• [MINOR] Take flight value for whether to show webcp flow in weview or not in brokerless scenarios. (#2784)
• [MINOR] getAllSsoTokens method for Edge (#2774)
• [MINOR] WebApps AccountId Registry (#2787)
• [MINOR] Expose WebApps APIs (#2793)
• [MINOR] Add domainHint support to authorization request (#2792)
• [PATCH] Fix auth method blocked error handling (#2804)

Version 23.0.2

• [MAJOR] Add KeyStoreBackedSecretKeyProvider (#2674)
• [MINOR] Add Open Id configuration issuer validation reporting in OpenIdProviderConfigurationClient (#2751)
• [MINOR] Add helper method to record elapsed time (#2768)
• [MINOR] Implement TenantUtil (#2761)
• [MAJOR] Update proguard rules in common (#2756)
• [MINOR] Add query parameter for Android Release OS Version (#2754)
• [MINOR] Add client scenario to JwtRequestBody (#2755)
• [MINOR] Awaiting MFA Delegate now automatically returns the AuthMethods to be used when calling MFA Challenge (#2764)
• [MINOR] SDK now handles SMS as strong authentication method #2766
• [MINOR] Added error handling when webcp redirects have browser protocol #2767
• [PATCH] Fix for app link redirect from CCT due to forced browser preference (#2775)

Version 22.1.0

• [PATCH] Fix Switch browser back stack (#2750)
• [MINOR] Move ests telemetry behind feature flag (#2742)
• [MINOR] Update Broker ATS flow for Resource Account (#2704)
• [PATCH] Handle BadTokenException gracefully in CBA dialogs (#2731)
• [MINOR] Enable ShouldPreserveWebViewFlowOnSslError in Common (#2741)
• [MINOR] Add AAD authority validation for DUNA flow (#2740)
• [PATCH] Fix DualScreenActivity theme color constant (#2737)
• [MINOR] [SDL Assessment task] Secure webview settings (#2715)
• [MINOR] Fix for App Link Usage in DUNA / SSO scenarios (#2745)
• [MINOR] Add aea app to DUNA browser safelist (#2747)

Version 22.0.3

Version 22.0.3

• [PATCH] Fix DualScreenActivity theme color constant (#2737)

Version 22.0.1

• [PATCH] Handling https scheme for device enrollment link (#2732)
• [PATCH] Remove System Gesture Inset (#2730)

Version 22.0.0

• [MINOR] Ensure username is set in Broker Result when UiRequiredException is sent in the result (#2720)
• [MINOR] Add support to allow OneAuth to run silent/invisible authorization flow (#2722)
• [MINOR] Full edge to edge support (#2721)
• [MAJOR] Bump TargetSdk to 35, minSdk to 24, AGP to 8.10.0 (#2713)
• [MINOR] Improve tenant-based flighting for broker supporting code (#2717)
• [PATCH] Fix caching of secret key during unwrap (#2659)
• [MINOR] Replace AbstractSecretKeyLoader with ISecretKeyProvider (#2666)
• [MINOR] Update IP phone app teams signature constants to use SHA-512 format (#2700)
• [MINOR] Using Baggage to propagate attributes from parent Span (#2671)
• [PATCH] Fix a few small switch browser bugs (#2710)
• [MINOR] Update Nimbus version (#2724)
• [MINOR] Using tenant based flighting for webcp (#2723)
• [PATCH] Fix for enrollment id not sent to /token from local controller (#2726)

Version 21.4.0

• [MINOR] Updating handling of ssl error received in Android WebView's onReceivedSslError callback (#2691)
• [MINOR] Fixing the sign in screens when edge to edge is enabled (#2665)
• [MINOR] Showing webcp flow in webview (#2673)
• [MINOR] Native auth: Make native auth MFA feature more backward compatible(#2669)
• [MINOR] Flighting webcp in webview (#2686)
• [MINOR] Construct broker app link redirect based on broker pkg name (#2682)
• [MINOR] Update keyword to suppress camera consent (#2694)
• [MINOR] Using utid for webcp flow whenever (#2695)

Version 21.3.0

• [MINOR] changes accommodating the WrappedKeyAlgoIdentifier module (#2667)

Version 21.2.0

• [MINOR] Implement a WebView handler to facilitate broker app installation via the Play Store (#2643)
• [MINOR] Add Get AAD device ID API for resource account (#2644)
• [MINOR] Expose a JavaScript API in brokered Webviews to facilitate Improved Same Device NumberMatch (#2617)
• [MINOR] Add API for resource account provisioning (API only) (#2640)
• [PATCH] Fixing error in construction of LegacyFido2ApiManager (#2654)

Version 21.1.0

• [PATCH] Allow generating wrapping key without PURPOSE_WRAP_KEY with Flight (#2633)
• [MINOR] Adding a state parameter to prevent phish attacks, in “switch_browser” flow. (#2631)
• [MINOR] Move camera logic to CameraPermissionRequestHandler and add SdmQrPinManager (#2630)
• [MINOR] Pass Work Profile existence, OS Version, and Manufacturer to ESTS (#2627)
• [MINOR] Add telemetry for the switch browser protocol (#2612)
• [MINOR] Native auth: user can now register email as new strong authentication method when MFA is required (#2639)