11.3.5 Release Notes
HYPR 11.3.5 is a patch to the 11.3.0 Enterprise Channel Release.
The Enterprise Release Channel follows a quarterly upgrade cycle, ensuring a stable and predictable update process. This schedule provides organizations with ample time to test, adapt, and implement changes while minimizing disruptions to business operations. With each release, customers receive the latest security, performance, and feature enhancements, allowing them to stay up to date with improvements while maintaining operational stability.
The per-item record for this release and every prior release is maintained in the Changelog.
Minimum Supported Versions
| Release Date | HYPR Product | Minimum Requirement | Notes |
|---|---|---|---|
| September 4 | HYPR Passwordless for Windows 11.3.4 | Windows (10 "2004", 11) | Reboot required if upgrading from 7.6 or below; Security Key Support for YubiKey 5 Series with firmware 5.X, YubiKey Bio Multi-Protocol Edition, IDEMIA ID-One on Cosmo 8.2, Feitian K9 Plus and K40 Plus and its offshoots |
| September 4 | HYPR Passwordless for Mac 11.3.4 | macOS (High Sierra, Mojave, Catalina, Big Sur, Monterey, Ventura, Sonoma 14.1 [not 14.0], Sequoia, Tahoe) | Security Key Support for YubiKey 5 Series with firmware 5.X and Feitian ePass K9 Plus, K40 Plus and their respective offshoots |
| July 24 | HYPR Mobile App for Android 11.3.1 | Android 9.0+ | |
| August 19 | HYPR Mobile App for iOS 11.3.2 | iOS 12.4+ | |
| September 17 | HYPR Server 11.3.5 | Java Development Kit (JDK) 17 | Upgrade to 7.10 required before upgrading to 8.0.0 or higher |
| August 1 | HYPR SDK for Android 11.3.2 | Android 9.0+ | |
| August 19 | HYPR SDK for iOS 11.3.2 | iOS 12.4+ | |
| September 17 | HYPR SDK for Java 11.3.5 | Java Development Kit (JDK) 17+ |
All HYPR components are fully compatible across the three previous/subsequent minor (X.X) HYPR releases.
HYPR Control Center
Enhancements
▸ OAuth Client Assertions Without iat and jti
The OAuth client credentials token exchange now accepts a client assertion that omits the iat (issued at) or jti (JWT ID) claim. Both are optional under RFC 7523 §3, and assertions that include them are validated exactly as before. An assertion is still accepted only once, whether or not it carries a jti. The exp claim remains required.
How long an assertion may live is bounded from iat when it is present and from server time when it is not. That ceiling is one hour by default. It can be raised where an identity provider cannot issue assertions inside it, but the setting applies to every OAuth client on the tenant rather than to that provider alone, and a longer ceiling leaves any captured assertion usable for longer. Raise it only where a provider requires it, and contact HYPR Support to do so.
An assertion that fails validation returns 1201046. See Access Tokens: OAuth.
Bug Fixes
HYPR Affirm
-
Fixed the issuing country list overlapping page content when a different country was selected during document verification.
-
Fixed a verification flow configured with only an AML check or only an OFAC check failing every applicant.
-
Fixed entering a phone number that did not match the number on record showing a code mismatch page instead of the one-time passcode page.
-
Fixed the notified approver receiving no link to join the chat when a verification was escalated to live chat.
-
Fixed location being reported as zero latitude and longitude on retries after distance thresholds were reached.
-
Fixed the back button being unavailable during motion and face capture.
HYPR Server
- HYPR Server can now be configured to work with an outbound proxy that requires RSA key exchange on JDK 17.0.18 and later. Contact HYPR Support for the configuration.
Events
The following events were added in this release:
AFFIRM_WORKFLOW_LOCATION_CLIENT_DATA_RETRIEVED(IDENTITY_VERIFICATION) — location reported by the requester's client was retrieved during a verification.AFFIRM_WORKFLOW_LOCATION_IP_DATA_RETRIEVED(IDENTITY_VERIFICATION) — location derived from the requester's IP address was retrieved during a verification.
To see all HYPR events, see Audit Trail Event Descriptions.
Error Messages
To see all HYPR errors by component, see HYPR Error Codes Troubleshooting Table.
APIs
You can find detailed descriptors and other API calls in HYPR's full Postman API set here.
The Changelog holds the per-item record of bug fixes and known issues for this release and every prior release.