- Added early‑access support for sender‑constrained tokens using DPoP (RFC9449) to bind tokens to the client application.
- Released SDKs for iOS Swift and Android Kotlin, with JavaScript, React, Python and others coming soon.
- Improves security by mitigating token theft and allows longer‑lived access tokens without increasing authentication risk.