- Added the
web.refreshTokenCookie.maxAge
property, which controls the expiration time (if any) of refresh token cookies. - Added the
authorizationServerId
property, which allows the developer to specify the Okta Authorization Server to use (instead of relying on auto-discovery). - Added the
web.oauth2.password.defaultScope
property, which sets the default scopes (if any) that are sent during a Password Grant request.
For a full list of changes in version 7.0, see the changelog.