megachangelog
Fix4.17.3

v4.17.3 Bug Fixes

This release includes critical bug fixes for encryption of IDP intent tokens, IDP linking authorization logic, translation of authentication strings, and organization-level auth method permissions.

4.17.3 (2026-09-04)

Bug Fixes

  • crypto: use authenticated encryption for IDP intent tokens (41b1114)
  • login: authorize IDP linking via enrollment guard, not isSessionValid (a53fbc4)
  • login: translate authentication and OTP strings (#12668) (739e91e), closes #12481 #12226
  • security: check auth method permission on the user's organization (20f0984)
securityauthenticationidpcryptobugfix

Source: original entry ↗