New features in subscription management
Allowing unit increase only
To improve security, we are introducing a feature that allows subscription units to be increased only. This will also be the default setting for new applications.
Previously, our system offered two endpoints that permitted both increases and decreases:
- Changeset Endpoint: Allowed users to apply a changeset that could modify subscription values.
- Absolute Value Endpoint: Permitted both increases and decreases.
With this update, service providers can now update units from “unsafe” contexts, such as desktop applications or web frontends, without the risk of decreasing values.
Authentication with bearer token
We are also introducing support for bearer tokens from our Identity and Access Management (IAM) for third-party and standard applications, enabling them to increase subscription units. This feature will be configurable by the provider. Previously, third-party hosted applications could only access these endpoints using a provisioning token or by requesting a custom token via support ticket.