MCSDK now handles app state changes automatically, triggering suspend and resume events when the app moves between the background and foreground. SDK-828
(Android) Support Theametrix-SDK and prevent crashing during usage. KHC-7821, SDK-985
Update the list of third-party licenses provided by the RequestLicensesEvent. SDK-945
Optimised key share handling for TLS-1.3 connections. This should ensure that almost all servers are happy with the key shares offered by the client, thus avoiding an extra round trip where the server asks for a key for its desired key sharing algorithm. SDK-780
(Android) Fix the library loading on ARM64 MTE enabled devices. KHC-7689 ,SDK-990, SDK-900.
Updated SSL Library. SDK-658
Starting with MCSDK 15.16, SHA-1 will no longer be supported for TLS connections.SDK-658
Starting with MCSDK 15.16 we no longer support cipher suites involving the CCM-8 mode for TLS connections. Note that "regular" CCM mode is not affected, it is only the CCM variant that shortens the integrity check value to only 8 bytes, that is no longer permitted. We don't expect this to have any impact in practice as using CCM-8 seems an unlikely server side configuration. SDK-658
Introduce a new HTTP stack that ensures that only one TCP connection is used for multiple requests towards the same host in case of HTTP2. For HTTP1.1 the amount of TCP requests towards the same host is tried to keep at a minimum, however, in order to avoid long queuing time of single requests multiple TCP connections to the same host might be opened. In order to get the best performance it is recommended to use HTTP2. Additionally, the new stack decreased the overall process time on client side for each single HTTP request. SDK-788, SDK-791
(Android) We now require at least API level 24(Android 7), previously the minimum required was API level 21(Android 5). This is required by a third party library libuv which is an important part of our improved HTTP stack. SDK-986
Added KSMGetSdkStateEvent, KSMGetSdkStateResultEvent and KSMLoggedIn state under iOS, and GetSdkStateEvent, GetSdkStateResultEvent and SdkState.LOGGED_IN under Android. With this new events it is possible at any time to retrieve the current state of the SDK. SDK-867
(Android) Improved detection of the “Godfather” malware family by introducing two new risk indicators:
MaliciousApp[4](1040000)
MaliciousApp[4](2040000)
These indicators are intended to detect malware-specific characteristics associated with Godfather.
A detailed description of the new risk indicators is available in the Risk Bit documentation(v2.0). DS-9376, SDK-736
(Android)Fix for parallel loading of webviews with and without cert-pinning. SA2-3130, SDK-935
No more singleton certificate validation, each webview instance now has an own validation instance
API CHANGE cp1 and cp2 (enable/disable certificate pinning), now need the webview as a parameter in addition to the certificates
PinningProxy.cp1(webView, certChain)
PinningProxy.cp2(webView,certChain)
API CHANGE cp15 (setting the connection timeout), now needs also the webview as a parameter in addition to the timeout
PinningProxy.cp15(webView, timeOut)
Added the optional flag useKobilTruststore to the KSMCreateHttpCommonRequestResultEvent under iOS and to the CreateHttpCommonRequestEvent under Android. If set to true the SDK will use the ssmsSSLBundle from the sdk_config.xml for the certificate pinning of the request and in the case the astServerBackend parameter in the mc_config.json is set to ssms. In case that the astServerBackend parameter in the mc_config.json is set to maverick, the tlsBundle of the sdk_config.jwt is used for the certificate pinning of the request. SDK-873, SDK-915
Added KSMGetUserListEvent, KSMGetUserListResultEvent and KsUserListEntry under iOS and GetUserListEvent, GetUserListResultEvent and UserListEntry under Android. With this new events it is possible at any time to retrieve all activated users, those that have been activated in the case the astServerBackend in the mc_config.json was set to ssms, and also those that have been activated in the case the astServerBackend in the mc_config.json was set to maverick. The flag isSsmsUser in the KsUserListEntry on iOS and the UserListEntry on Android help to distinguish between the two types of users. SDK-869
Added the astClientID as parameter to the KSOfflineLoginResultEvent and KSSetAuthorisationCodeResultEvent under iOS as also to the OfflineLoginResultEvent and SetAuthorisationCodeResultEvent under Android. SDK-868
It is possible now to delete all activated shift users by passing an empty user identifier and tenant id to the DeleteUserEvent under Android or the KSDeleteUserEvent under iOS. SDK-829