Fix4.15.3
Bug fixes in token exchange, email verification, and login flows
This release includes fixes for client and scope validation in token exchange, ensures external users' emails are verified before auto-linking, centers text for IDP buttons without icons, and guards the default redirect URI in OIDC/SAML failure paths.
4.15.3 (2026-06-22)
Bug Fixes
- added client and scope validation for token exchange (e2886a6)
- ensure external user's email is verified before auto-linking (c97012f)
- login: center text for generic IDP buttons without icons (#12211) (aadc664), closes #12182
- login: guard defaultRedirectUri in OIDC/SAML FailedPrecondition paths (0382659)
securityauthoidcsamlbug-fix
Source: original entry ↗