Version 2.0.0
- Enforcer functions as either OnClientRequest handler or ResponseProvider handler depending on Credentials Intelligence
- Added support for Credentials Intelligence, including:
- Support for
v2andmultistep_ssoCI protocols - Support for extracting credentials from headers, query params, and request bodies with
jsonandx-www-form-urlencodedcontent types - Sending a header to the origin when compromised credentials are identified
- Sending additional S2S activity automatically or adding a request header so that the origin can send the activity manually
- Support for automatic additional S2S login successful reporting methods
header,status,body, andcustom - Support for optionally sending the raw username on the additional S2S activity
- Support for
- Preferred TLS cipher names on risk and async activities
- Content type header reported on risk activity
- Renamed
s2s_error_messagefield toerror_message
