Duende BFF Security Framework v4.2.0

Released: Jun 10, 2026

Updates in v4.2.0

Features

  • You can now specify a custom IAccessTokenRetriever through YARP route or cluster metadata.

Fixes

  • Cookie name prefix constants (__Host-, __Secure-) now correctly include the trailing hyphen.