> This page is for Applications Protection.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.humansecurity.com/llms.txt.

## Version 2.0.0

* Enforcer functions as either OnClientRequest handler or ResponseProvider handler depending on Credentials Intelligence
* Added support for Credentials Intelligence, including:
  * Support for `v2` and `multistep_sso` CI protocols
  * Support for extracting credentials from headers, query params, and request bodies with `json` and `x-www-form-urlencoded` content types
  * Sending a header to the origin when compromised credentials are identified
  * Sending additional S2S activity automatically or adding a request header so that the origin can send the activity manually
  * Support for automatic additional S2S login successful reporting methods `header`, `status`, `body`, and `custom`
  * Support for optionally sending the raw username on the additional S2S activity
* Preferred TLS cipher names on risk and async activities
* Content type header reported on risk activity
* Renamed `s2s_error_message` field to `error_message`