SCIM router gated; banned user tokens rejected

2.195.0 (2026-07-30)

Features

• gate SCIM router behind an experimental feature flag (#2639) (0fde049)

Bug Fixes

• accept offline_access OAuth scope for MCP refresh clients (#2630) (059b86c)
• auditlogs: add missing events to docs (3e5d493)
• auditlogs: remove unused mfa code audit log events (2909344)
• auditlogs: remove unused recovery codes audit log events (d4ca02a)
• persist last_sign_in_at on v2 refresh token issuance (#2655) (fc654b0)
• reject AT from banned users (#2642) (b6878c2)
• update google.golang.org/grpc to v1.82.1 (#2651) (4a596c0)

Checksums

SHA1

auth-v2.195.0-arm64.tar.gz:

44443ae530499ba3f28d58c1b85279a2a2cd8acb

auth-v2.195.0-darwin-arm64.tar.gz:

655d5895c6fbb1fd59a8141e1008e1cb1af40f56

auth-v2.195.0-x86.tar.gz:

de1edc563852906e231a71f12d0646348ec9179a

auth-v2.195.0-amd64.tar.xz:

03cd27cf64b42b83e75bbdccbe23a2b5154cd759

auth-v2.195.0-arm64.tar.xz:

71eeaf68bc4d213da2c18271ca7f4d0f70f30160

SHA256

auth-v2.195.0-arm64.tar.gz:

e0d42fcca6b0ad0e7c88c69aee2e7cdb67649e5da285b76a3512e7b1e42c4d1a

auth-v2.195.0-darwin-arm64.tar.gz:

8e8e676e2570d7d60ecf20d5e4bb1d850b7a3348c931a340ca4ab1137de1965b

auth-v2.195.0-x86.tar.gz:

26256174b8f30ddcecadd41e392cb73132b837226ec764f8a7b45f7d78a1c8d5

auth-v2.195.0-amd64.tar.xz:

6f8065fcd708df7c09c83e1fb96b0c9507f6e2600e6a78a540153b92a49cd1f9

auth-v2.195.0-arm64.tar.xz:

49aa6a9578756d4f19e6f65aa9298021de8fbb9d952bf86b3806cf8e760932ae