Get the (almost) daily changelog

Enhanced Authentication & Custom Credentials

  1. Custom Credential System: You can now create and manage custom authentication credentials using the new CustomCredential system. This powerful new feature supports multiple authentication methods:

    • OAuth2 RFC 6749: Full OAuth2 implementation for secure third-party integrations
    • HMAC Signing: Cryptographic message authentication for enhanced security
    • Bearer Token: Simple token-based authentication for API access
  2. Bearer Authentication Plans: Implement secure token-based authentication with BearerAuthenticationPlan. Key features include:

    • token: Your secure bearer token value
    • headerName: Custom header name (defaults to ‘Authorization’)
    • bearerPrefixEnabled: Toggle ‘Bearer ’ prefix inclusion (defaults to true)
  3. Enhanced Webhook Credentials: Webhook integrations now support advanced authentication through WebhookCredential.authenticationPlan, enabling secure webhook communications with OAuth2, HMAC, or Bearer authentication.

  4. Server Authentication: Secure your server endpoints with credential-based authentication using Server.credentialId to link your custom credentials to webhook destinations.

  5. Tool Authentication Integration: API request tools can now use custom credentials for secure external API calls via ApiRequestTool.credentialId, eliminating the need to embed sensitive authentication details directly in tool configurations.