For AI agents: a documentation index is available at the root level at /llms.txt. Append /llms.txt to any URL for a page-level index, or .md for the markdown version of any page.
Version 4.1.1
Added
- Support Regex configuration for sensitive route
- Added
orig_cookie_vid field across all Enforcer activities
Version 4.1.0
Added
- Support for Cross-Tab Session (CTS) extraction from
pxcts cookie
- Support for JWT-based User Identifiers extraction from cookies or headers
Fixed
- Decoded cookie (
px_cookie) now included in risk API request for sensitive route calls
- Decoded cookie (
px_cookie) now included in block activities when a valid cookie exists
Version 4.0.1
Changed
- Updated composer requirements for psr/log dependency
Version 4.0.0
Changed
- Updated minimum PHP version from 5.5 to 7.2.5
- Updated Guzzle HTTP client from 6.0 to 7.0
Fixed
- Removed
<script> tags from test fixture that caused “headers already sent” errors in unit tests
Version 3.10.2
Fixed
- Bug that caused custom parameters not to be added to async activities
Version 3.10.1
Fixed
- Bug in block page challenge rendering on 3rd party configuration
Version 3.10.0
Added
- Support for first party
- Support for CI V2 hashing protocol
Fixed
- Bug in client IP extraction feature
Version 3.9.1
Fixed
- URLs with query params did not render properly on new block page
Version 3.9.0
Added
- Custom logo added to JSON block response
Changed
- Updated block page to use new template
Version 3.8.0
Added
- Support for credentials intelligence protocols
v1 and multistep_sso
- Support for login successful reporting methods
header, status, and custom
- Support for automatic sending of
additional_s2s activity
- Support for manual sending of
additional_s2s activity via header or API call
- Support for sending raw username on
additional_s2s activity
- New
request_id field to all Enforcer activities
Changed
- Login credentials extraction handles body encoding based on
Content-Type request header
- Successful login credentials extraction automatically triggers risk_api call without needing to enable sensitive routes
Version 3.7.8
Fixed
- Minor index not found verbosity error fixed
