Previous incidents

Background

We have recently resolved a bug related to the issuance of access tokens when using custom domain endpoints. Previously, even when a custom domain endpoint was used to request an access token, the issuer (the iss field) would still default to our standard domain (tenant-id.logto.app). We are pleased to announce that this issue has been fixed, and now the iss field will automatically reflect the domain used in the request.

Action required

If you are using a custom...

The false positive timeout issue has been mitigated recently after adding BetterStack IPs to the whitelist. We've cleaned up those incidents for accuracy. We'll keep an eye on it.

Postmortem is available here.