auth0-java

1.3.1 (2017-11-01)

Full Changelog
Closed issues

• NullPointerException, StdDeserializer #78

Fixed

• Upgrade Jackson-databind dependency #82 (LuisSaybe)

1.4.0 (2017-11-30)

Full Changelog

Added

• Add user_id setter #93 (lbalmaceda)
• Add /v2/users-by-email endpoint #87 (lbalmaceda)

Breaking changes

• Include a proper SignUp response #92 (lbalmaceda)

1.5.0 (2017-12-07)

Full Changelog

Added

• Resource server #77 (mfarsikov)

1.5.1 (2018-03-01)

Full Changelog

Fixed

• Support password policy error response #108 (lbalmaceda)
• Close ResponseBody buffer after read #101 (lbalmaceda)

1.6.0 (2018-06-04)

Full Changelog

Added

• Expose additional error response properties in the Exception #123 (lbalmaceda)
• Add email-templates endpoints #117 (lbalmaceda)

1.7.0 (2018-06-11)

Full Changelog

Added

• Support pagination on the Clients entity #124 (lbalmaceda)
• Add Resend verification email functionality #120 (minhlongdo)

Deprecated

• Deprecate ClientsEntity#list() method #128 (lbalmaceda)

Security

• Security fix and dependencies update #129 (lbalmaceda)

1.8.0 (2018-07-13)

Full Changelog

Added

• Allow to update the Management API token #141 (lbalmaceda)
• Allow to set search_engine version for Users API #140 (lbalmaceda)
• Make Connections accept include_totals parameter #135 (lbalmaceda)
• Add pagination support to Client Grants, Grants, Resource Servers and Rules #132 (lbalmaceda)

Deprecated

• Deprecate old list methods that do not support pagination #136 (lbalmaceda)

1.9.0 (2018-09-25)

Full Changelog

Added

• Allow to retrieve Rate Limit headers #153 (rvillablanca)
• Add web_origins attribute to the Client class #148 (lbalmaceda)
• Application (aka Client) description field support #147 (rrybalkin)

1.9.1 (2018-10-23)

Full Changelog

Security

• Use jackson-databind 2.9.7 #168 (lbalmaceda)

1.10.0 (2019-01-03)

Full Changelog

Added

• Add Serializable to the user data. #178 (dfredell)
• Include grant_types in Client #166 (osule)

Fixed

• Closing response body on RateLimitException #175 (j-m-x)

Security

• Bump jackson-databind to patch security issues. #181 (gkwang)

1.11.0 (2019-03-14)

Full Changelog

Added

• Add "mark_email_as_verified" property to PasswordChangeTicket #189 (akvamalin)

1.13.2 (2019-05-01)

Full Changelog

Fixed

• Dynamically obtain the project version for telemetry #201 (lbalmaceda)

1.13.3 (2019-05-22)

Full Changelog

Fixed

• Add missing metadata field to Connection object #206 (AlisonT1230)

Security

• Bump dependencies and solve security issues #209 (lbalmaceda)

Full Changelog

Fixed

• Fix for issue #198: Core Authorization fails when adding Roles to User #199 (jakbutler)

Full Changelog

Added

• Add support for Core Authorization's User Roles and Permissions #193 (jakbutler)

Full Changelog

Added

• Update Telemetry format and allow to customize it #195 (lbalmaceda)

Changed

• Remove default version for search_engine #194 (lbalmaceda)

1.0.0 (2017-01-30)

Reworked Auth0 SDK for java by providing better support for non-Android application (for Android please use Auth0.Android).

The changes from v0 includes:

• OAuth 2.0 endpoints in Authentication API
• Sync calls by default
• Added Management API endpoints
• Better error handling for Auth and Management API erros

Auth API

The implementation is based on the Authentication API Docs.

Create a new AuthAPI instance by providing the client data from the dashboard.

AuthAPI auth = new AuthAPI("{YOUR_DOMAIN}", "{YOUR_CLIENT_ID}", "{YOUR_CLIENT_SECRET}");

Management API

The implementation is based on the Management API Docs.

Create a new ManagementAPI instance by providing the domain from the client dashboard and the API Token. Click here for more information on how to obtain a valid API Token.

ManagementAPI mgmt = new ManagementAPI("{YOUR_DOMAIN}", "{YOUR_API_TOKEN}");

The Management API is divided into different entities. Each of them have the list, create, update, delete and update methods plus a few more if corresponds. The calls are authenticated using the API Token given in the ManagementAPI instance creation and must contain the scope required by each entity. See the javadoc for details on which scope is expected for each call.

• Client Grants: See Docs. Access the methods by calling mgmt.clientGrants().
• Clients: See Docs. Access the methods by calling mgmt.clients().
• Connections: See Docs. Access the methods by calling mgmt.connections().
• Device Credentials: See Docs. Access the methods by calling mgmt.deviceCredentials().
• Logs: See Docs. Access the methods by calling mgmt.logEvents().
• Rules: See Docs. Access the methods by calling mgmt.rules().
• User Blocks: See Docs. Access the methods by calling mgmt.userBlocks().
• Users: See Docs. Access the methods by calling mgmt.users().
• Blacklists: See Docs. Access the methods by calling mgmt.blacklists().
• Emails: See Docs. Access the methods by calling mgmt.emailProvider().
• Guardian: See Docs. Access the methods by calling mgmt.guardian().
• Stats: See Docs. Access the methods by calling mgmt.stats().
• Tenants: See Docs. Access the methods by calling mgmt.tenants().
• Tickets: See Docs. Access the methods by calling mgmt.tickets().

Full Changelog

Added

• UserProfile has now the following properties: givenName, familyName, userMetadata, appMetadata and emailVerified #28 (hzalaz)
• New method AuthenticationAPIClient#token(code, redirectURI) to call /oauth/token endpoint. #27 (arcseldon, hzalaz)

Fixed

• UserProfile was not properly parsed from JSON #28 (hzalaz)

Breaking changes

The method AuthenticationAPIClient#token(code, codeVerifier, redirectURI) was replaced by AuthenticationAPIClient#token(String, String). To perform a request to /oauth/token you need to provide either a client_secret (private clients) or the code_verifier (public clients) used to generate the challenge sent to /authorize.

AuthenticationAPIClient client = new AuthenticationAPIClient(new Auth0("your_clientId", "your_domain"));

// Public clients
client
     .token("code", "redirect_uri")
     .setCodeVerifier("code_verifier")
     .start(new Callback<Credentials> {...});

// Private clients
 client
     .token("code", "redirect_uri")
     .setClientSecret("client_secret")
     .start(new Callback<Credentials> {...});

Full Changelog

Implemented enhancements:

• Migrate Jackson usage to Gson #26 (lbalmaceda)

Merged pull requests:

• Make ParameterBuilder ignore null parameters #25 (lbalmaceda)
• Do not add request body if there's nothing to add #23 (nikolaseu)

Full Changelog

Merged pull requests:

• Customise Telemetry info #21 (lbalmaceda)