29 June 2026
Production release: 29 June 2026
Staging release: 25 June 2026
29 June 2026
Section titled “29 June 2026”Features
Section titled “Features”Support for Trade Style Names in Organization APIs: Added tradeStyleNames field in the Get Organization by ID and Search Organization APIs to enhance organization data retrieval.
Skip Invitation Support for Adding Users to Organizations: Enabled skipping invitations for configured applications when adding users to organizations.
Support for mTLS Endpoint in Organization User API: Introduced mTLS support for the POST /organizations/{orgId}/users endpoint, aligning with TID service requirements.
Increase Maximum Length for Organization Primary Contact Email: Updated the email field constraint to support up to 254 characters, adhering to RFC 5321 standards.
Support for Application Logo Retrieval API: Launched a new API to retrieve application consent logos, enhancing application branding capabilities.
GraphQL Resolvers for Device Applications and Accounts: Added resolvers to list applications and accounts associated with devices.
GraphQL Changes for Application List: Enhanced GraphQL endpoints to include API products and accounts in application list responses.
New API for User Profile Picture Download: Introduced an endpoint for downloading user profile pictures with authorization checks.
Support for Privileged User Authorization in Search APIs: Modified accounts and users search APIs to support privileged user authorization.
Include Organization Name in Dealer DoingBusinessWith API Response: Enhanced API response to include customer organization names for better context.
Remove Non-OSR Logic: Deprecated old non-OSR code and removed the OSR feature flag for streamlined operations.
IAM Active-Active Disaster Recovery Validation: Validated and documented the active-active disaster recovery setup for IAM.
Analytics Proposal Review and Implementation Plan: Conducted a detailed review of proposed analytics metrics and defined an implementation plan.
Batched Authorization for GraphQL Optimization: Updated the authorizer to handle batched authorization requests, reducing the N+1 problem in GraphQL.
Move Datadog Custom Tracing to OpenTelemetry: Transitioned custom tracing from Datadog to OpenTelemetry for better vendor abstraction.
Update Non-Null Fields in GraphQL Schema: Reviewed and updated GraphQL schema types to make fields nullable by default, ensuring better compatibility.
Authorization Support for Organizations: Enhanced the authorization layer to support permissions checks against organizations.
Infra Changes for Country, Region, and Language API: Implemented infrastructure changes to support a new API for countries, regions, and languages.
Bug Fixes
Section titled “Bug Fixes”Manage Request Resend for Expired Requests: Fixed an issue where expired manage requests could not be resent, allowing status updates to PENDING.
User Role Sync Retry Issue: Resolved a retry loop issue in user role sync for REMOVE events, ensuring roles are retained for re-added users.
GraphQL Groups Resolver Null Response Issue: Fixed a bug where the groups resolver returned null for valid group queries in Apollo GraphQL.
Scope Prefix Edit Restriction in API Products: Ensured scopePrefix in API products is non-editable after creation and unique across the stack.
Invitation Workflow Errors for Non-Hierarchical Organizations: Addressed issues with error messages and email template handling in invitation workflows.
Admin Invite for Self-Join Declined Users: Fixed a conflict error preventing admins from inviting users who had previously declined self-join requests.
Cancel Invite from Developer Console UI: Resolved a validation error preventing invite cancellations from the developer console.
Profile Picture API Gateway Configuration Issue: Updated API Gateway settings to return rendered binary images instead of Base64-encoded text.
Error Code Mismatch in Device API: Aligned error codes for schema and business rule validations in the Devices API.
Exceeding Query Parameter Limit in Address API: Fixed a 500 error when exceeding the query parameter limit in the GET Address by ID API.
Malformed URL in Invitation Endpoint: Corrected an extra forward slash in the invitation resend endpoint URL.
Cascade Deletion for Nested Groups: Fixed an issue where nested groups were not deleted during cascade deletion.
RSQL Filter Validation in Organization Users API: Resolved a 500 error when invalid RSQL filters were passed in the List Users of an Organization API.
Resource Not Found Error in Users BLU: Addressed frequent “Relation not found” errors in the Users BLU.
Latency Increase in User Roles API: Optimized the GET users/{userId}/roles API to reduce response time.
Fix for Protected CDH Error Code: Updated the error code for protected CDH deletion to 403 (Forbidden) for better accuracy.
Request Body Validation in Group Users API: Fixed missing type information and added examples for the POST /groups/{groupId}/users endpoint.
Schema Validation for Searchable Fields: Resolved mismatches and asymmetries in _searchable field configurations across entity relationships.
Groups Resolver for Devices: Created resolvers to handle groups on devices using the list_groups_of_device API.
Soft Delete Behavior Alignment for Profiles Sync: Ensured consistent soft delete behavior across IAM sync sources.
Remove Forward Slash in Invitation Endpoint: Corrected malformed URLs in the invitation service.
Nested Group Deletion Issue: Fixed cascade deletion for nested groups by updating event listeners.
Validation Against Ingested Tables: Conducted validation against ingested tables for accounts, organizations, and addresses.
Latency Issue in User Roles API: Optimized database calls to reduce latency in the GET users/{userId}/roles API.
Fix for Invalid RSQL Filters in Organization Users API: Resolved a 500 error when invalid filters were passed in the List Users of an Organization API.
Relation Not Found Error in Users BLU: Addressed frequent “Relation not found” errors in the Users BLU.
Fix for Protected CDH Error Code: Updated the error code for protected CDH deletion to 403 (Forbidden) for better accuracy.