v3.4.12

parruda/swarmv3.4.12Jun 17, 2026by github-actions[bot]

AI Summary

A bug fix release for Zitadel focusing on security improvements within JWT Identity Provider (IdP) validation and token exchange flows.

Key Highlights

Fixed validation of exp and iat claims for JWT IdPs
Fixed client_id verification during code exchange and refresh token flows
Improved JWT IdP audience management and validation

Full Release Notes

## [3.4.12](https://github.com/zitadel/zitadel/compare/v3.4.11...v3.4.12) (2026-06-17)


### Bug Fixes

* always validate exp and iat claims of JWT IdPs ([d1c3aa8](https://github.com/zitadel/zitadel/commit/d1c3aa84af8fcb0f33910ada30b866f4afb551ac))
* client_id verification during code exchange and refresh token flows ([5b1708e](https://github.com/zitadel/zitadel/commit/5b1708e0e650398f0ebc3341714f0798b0118917))
* **jwt idp:** manage and validate audience ([42f629d](https://github.com/zitadel/zitadel/commit/42f629d8c8e63eb0721ece3aac9f88a62d6c04d5))