Orchestration SDKs

Orchestration SDK for JavaScript changelog

Orchestration SDK for JavaScript 2.3.0

September 25, 2026

Key features

PingOne Recognize

The Journey client now supports PingOne Recognize enrollment and authentication callbacks, providing privacy-preserving facial biometrics for enrollment and sign-in in authentication journeys.

Learn more in Integrating PingOne Recognize.

Enhancements

  • Enhanced WebAuthn.isConditionalMediationSupported to now accept an optional journey step. In addition to checking browser support, the method now also reports whether the server requested conditional mediation for that step, so the result reflects the journey’s configuration.

  • Custom storage configuration types are now exported from the OIDC client, so you can write strongly typed custom storage implementations in TypeScript.

Orchestration SDK for JavaScript 2.2.0

September 16, 2026

Enhancements

  • Added MetadataCollector support for DaVinci flows to support exchanging custom SDK metadata.

  • Added JSON client config helper re-exports from the respective client packages, so a single import can build a client configuration from the unified JSON config.

  • Added create-journey-step export so a Journey step is easy to deserialize after it has been serialized.

Breaking Changes

  • Changed the device client tokenStore configuration to accept a CustomStorageObject instead of the legacy TokenStoreObject.

    This is a breaking change for custom token-store implementations. Learn more in Incompatible changes.

Changes

  • Changed FIDO/WebAuthn DOMException handling in DaVinci flows to catch errors and send them to DaVinci instead of failing generically.

  • Removed the @forgerock/javascript-sdk dependency from device-client.

  • Fixed the HTTP header to send ping-sdk instead of forgerock-sdk.

Orchestration SDK for JavaScript 2.1.1

August 10, 2026

Fixes

  • Fixed the OIDC client to always include prompt=none on background authorization calls, for both standard and PAR flows.

Orchestration SDK for JavaScript 2.1.0

July 8, 2026

Key features

Pushed Authorization Requests (PAR)

PAR sends OAuth 2.0 authorization parameters directly to the server before the redirect begins, keeping them out of the browser URL and reducing the chance of them being tampered with or exposed in logs or referrer headers.

Learn more in Configuring JavaScript apps for Pushed Authorization Requests.

Standardized JSON configuration

All SDK modules now support a shared JSON object or file for configuration. This makes it straightforward to manage settings across environments and to share a single configuration file across Android, iOS, and JavaScript.

Learn more in:

Added

  • Added PollingCollector for DaVinci flows.

  • Added QrCodeCollector for DaVinci flows.

  • Added BooleanCollector and ValidatedBooleanCollector to support Checkbox input types in DaVinci forms.

  • Added PhoneNumberExtensionCollector for phone number fields that include an extension.

  • Added ValidatedPasswordCollector for password fields with embedded policy validation.

  • Added ImageCollector for IMAGE form fields in DaVinci forms.

  • Added subscribe method to journey and OIDC client instances.

  • Added WebAuthn conditional mediation (passkey autofill) support.

  • Added user.session() method for silent OIDC session verification (prompt=none).

Updated

  • Updated rich-text support of the ReadOnlyCollector to handle links in Translatable Rich Text (Forms).

Fixed

  • Fixed RTK Query cache lookups in cache.getLatestResponse() and cache.getResponseWithId().

  • Fixed resume() to correctly forward redirect query parameters from the authorization response.

  • Fixed JourneyLoginFailure not being returned when the server sends a login failure response.

Orchestration SDK for JavaScript 2.0.0

April 15, 2026

Key features

Initial release

The initial release of the Orchestration SDK for JavaScript is now available with new features and additional support.

This release supports the following key features:

Enhancements

  • Added well-known OIDC endpoint discovery support.

    The journey client can now fetch configuration from the .well-known/openid-configuration endpoint. The realm path is automatically inferred from the well-known issuer URL.

    Learn more in Configuring the Journey module in JavaScript.

Fixes

  • Fixed error handling in the storage client and davinci-client.

    • Added isGenericError type guard to sdk-utilities for runtime error validation.

    • Fixed storage client to properly catch errors from custom storage implementations, honoring the errors-as-values contract.

    • Improved davinci-client error handling to use explicit error checks instead of try-catch.

DaVinci client for JavaScript 1.3.0

November 25, 2025

Enhancements

DaVinci client for JavaScript 1.2.0

July 8, 2025

Enhancements

  • Added support for PingOne Forms one-time passcode (MFA) components DEVICE_REGISTRATION, DEVICE_AUTHENTICATION, and PHONE_NUMBER.

DaVinci client for JavaScript 1.1.0

April 17, 2025

Enhancements

  • Added support for additional PingOne Form fields.

    • Label

    • Checkbox

    • Dropdown

    • Combobox

    • Radio list

    • Flow link

  • Added support for social sign on with supported external IDPs.

    Supported external IDPs:

    • Apple

    • Facebook

    • Google

  • Added the ability to call start with query parameters which the DaVinci client appends to the /authorize call.

  • Added request middleware to amend outgoing HTTP requests, for example to override Accept-Language headers.

  • Added ability to validate PingOne Form fields.

  • Added support for default values in PingOne Form fields.

Updated

  • Updated dependency on @forgerock/javascript-sdk to 4.7.0.

  • Updated error node to now be submittable to help the app recover from an error state.

  • Updated the checks to determine what node state the DaVinci Client is in based on the response from PingOne.

DaVinci client 1.0.0

December 16, 2024

Enhancements

  • Initial release of the DaVinci client JavaScript.