From 10c1513081cc3e7cffa9ac6e715485d575ac77c0 Mon Sep 17 00:00:00 2001 From: Anirudh Date: Fri, 28 Aug 2026 10:50:13 +0530 Subject: [PATCH] ESD-66431: Version bump --- .version | 2 +- CHANGELOG.md | 6 ++++++ 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/.version b/.version index 142464b..af88ba8 100644 --- a/.version +++ b/.version @@ -1 +1 @@ -0.11.0 \ No newline at end of file +0.11.1 diff --git a/CHANGELOG.md b/CHANGELOG.md index 15bc4ef..c405068 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,11 @@ # Change Log +## [0.11.1](https://github.com/auth0/Guardian.Android/tree/0.11.1) (2026-08-28) +[Full Changelog](https://github.com/auth0/Guardian.Android/compare/0.11.0...0.11.1) + +**Fixed** +- Fix `ClassCastException` when fetching a rich consent with an Android Keystore-backed enrollment key (see [PR](https://github.com/auth0/Guardian.Android/pull/151)). `RichConsentsAPIClient` signed the DPoP assertion by casting the enrollment `PrivateKey` to `java.security.interfaces.RSAPrivateKey`; hardware-backed `AndroidKeyStoreRSAPrivateKey` does not implement that interface, so `fetch()` crashed. The assertion is now signed via `java.security.Signature` ("SHA256withRSA"), which accepts any `PrivateKey` — restoring compatibility with both Keystore and plain in-memory RSA keys. + ## [0.11.0](https://github.com/auth0/Guardian.Android/tree/0.11.0) (2026-07-23) [Full Changelog](https://github.com/auth0/Guardian.Android/compare/0.10.2...0.11.0)