Starstruk Logo MarkStarstruk

v3.4.12

deepseek-ai/DeepSeek-Coder-V2v3.4.12Jun 17, 2026by github-actions[bot]

AI Summary

Security-focused bug fix release for Zitadel improving JWT validation logic for Identity Providers.

Key Highlights

  • Always validate exp and iat claims of JWT IdPs.
  • Manage and validate audience in JWT IdP configuration.
  • Client ID verification added during code exchange and refresh token flows.

New Features

  • JWT IdP validation improvements
  • Client ID verification

Full Release Notes

## [3.4.12](https://github.com/zitadel/zitadel/compare/v3.4.11...v3.4.12) (2026-06-17)


### Bug Fixes

* always validate exp and iat claims of JWT IdPs ([d1c3aa8](https://github.com/zitadel/zitadel/commit/d1c3aa84af8fcb0f33910ada30b866f4afb551ac))
* client_id verification during code exchange and refresh token flows ([5b1708e](https://github.com/zitadel/zitadel/commit/5b1708e0e650398f0ebc3341714f0798b0118917))
* **jwt idp:** manage and validate audience ([42f629d](https://github.com/zitadel/zitadel/commit/42f629d8c8e63eb0721ece3aac9f88a62d6c04d5))