---
title: "Web App SDK release notes for v9.4"
slug: "s3suite94-reference-releasenotes-web-release-notes-for-v94-1"
updated: 2026-10-27T18:42:16Z
published: 2026-10-27T18:42:16Z
canonical: "docs.onespan.com/s3suite94-reference-releasenotes-web-release-notes-for-v94-1"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.onespan.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Web App SDK release notes for v9.4

January 14, 2026

Web App SDK: 9.4.0.33

## New in this Version

- Improved the readability of Tutorial web app source code by handing Promises using async/wait instead of .then()/catch.
- The web page that you use to configure the tutorial web app now supports the configuration of multiple versions of the iOS and Android Tutorial apps.
- The WebAuthn [conditional UI](/dpoa/docs/s3suite94-web-implementing-authentication-in-your-web-app#webauthn-credential-selection-ui) works with Quick Authentication.
- The logs generated by Nok Nok's [App IQ](/dpoa/docs/s3suite94-web-using-the-app-sdk#app-iq) error reporting service contain the username field in the data record.
- The App SDK can [silently register a new passkey](/dpoa/docs/s3suite94-web-implementing-authentication-in-your-web-app#automatically-create-a-passkey). Just check a box in the Server FIDO policy to allow end users to sign up and create a passkey in one step.
- The App SDK is updated to support Public Key Credential Hints [set by a FIDO policy on the Server](/dpoa/docs/s3suite94-configure-fido2-authenticators#specify-desired-fido2-attributes). These settings control the presentation of the user interface for specific authenticators (security key, passkey on this device, and passkey on a different device), enabling more granular UI selection than was possible with Authenticator Attachment.
- Internet Explorer is no longer supported.

## Issue Fixed in this Version

- Fed App, the Federated Credential Management page that Nok Nok ships with the Web App SDK, supports only the response mode of query.

Previous Behavior: Fed App supports only the response mode of query, which is not secure.

New Behavior: Fed App can send the response_mode OIDC parameter as form_post, which is the most secure mode for authorization code flow.

## Prerequisites

- Apache Tomcat 10.1 or later
- Eclipse latest version

**Note**: No changes are required to upgrade your app from the Web App SDK 9.3 to the Web App SDK 9.4.