nextjs-auth0

Fixed

• [SDK-3887] Always honor auth0Logout config for v1 #1105 (adamjmcgrath)

Fixed

• SDK-3887 Always honor auth0Logout config #1104 (adamjmcgrath)

Fixed

• Fix issue where storeIDToken config not used by getAccessToken #1091 (adamjmcgrath)

Fixed

• Remove type from export in d.ts files #1037 (ewanharris)

Added

• SDK-3862 Add support for JWT client authentication #1029 (ewanharris)

Fixed

• withMiddlewareAuthRequired returnTo should be a relative url #1028 (adamjmcgrath)
• Infer user exists if WithPageAuthRequired page is rendered #1014 (adamjmcgrath)

Added

• SDK-3807 Add custom session stores #993 (adamjmcgrath)

Fixed

• afterCallback return type fix #954 (alexmalev)
• fix/rerenders: useMemo to avoid unnecessary rerenders #945 (stavros-liaskos)

⚠️ BREAKING CHANGES

• Refactor session lifecycle #787 (adamjmcgrath)
• Rearrange exports for RSC and add experimental RSC route to example #913 (adamjmcgrath)
• Improved callback errors #835 (adamjmcgrath)
• Prevent mixing named exports and own instances #825 (adamjmcgrath)
• Allow to override the user prop in server-side rendered pages #800 (Widcket)
• Return 204 from /api/auth/me when logged out #791 (Widcket)

Added

• Next.js Middlware support #815 (adamjmcgrath)
• Add testing utility for generating session cookies #816 (Widcket)
• Add updateUser #855 (adamjmcgrath)
• Add support for configuring the built-in handlers #826 (Widcket)
• Add support for configuring the default handlers #840 (Widcket)
• Add logout options #877 (adamjmcgrath)
• Add option to not store the ID token by default #809 (Widcket)
• At error cause to AT error when it's from a failed grant #878 (adamjmcgrath)
• Default error handler #823 (adamjmcgrath)
• Allow response customization in afterCallback #838 (adamjmcgrath)
• Improve API docs #796 (Widcket)
• Improve errors #782 (Widcket)

See V2 Migration Guide for full details.

⚠️ BREAKING CHANGES

• Rearrange exports for RSC and add experimental RSC route to example #913 (adamjmcgrath)

Fixed

• WithMiddlewareAuthRequired should return 401 for /api routes #909 (adamjmcgrath)

Fixed

• Fix edge cookie support for Next < 13.0.1 #900 (adamjmcgrath)

Added

• Add error cause to AT error when it's from a failed grant #878 (adamjmcgrath)
• Add logout options #877 (adamjmcgrath)

Fixed

• Fix for new req.cookie interface #894 (adamjmcgrath)

Fixed

• status getter is not enumerable so needs to be added to NextResponse #875 (adamjmcgrath)

• Change updateUser to updateSession #855 (adamjmcgrath)
• Add support for configuring the default handlers #840 (Widcket)
• Allow response customization in afterCallback #838 (adamjmcgrath)
• Improved callback errors #835 (adamjmcgrath)
• Add support for configuring the built-in handlers #826 (Widcket)
• Prevent mixing named exports and own instances #825 (adamjmcgrath)
• Default error handler #823 (adamjmcgrath)
• Fix intermittent build issues #818 (adamjmcgrath)
• Add testing utility for generating session cookies #816 (Widcket)
• Next.js Middlware support #815 (adamjmcgrath)
• Fix v1 cookie tests #810 (adamjmcgrath)
• Do not store the ID token by default #809 (Widcket)
• Allow to override the user prop in server-side rendered pages #800 (Widcket)
• Improve API docs #796 (Widcket)
• Return 204 from /api/auth/me when logged out #791 (Widcket)
• Refactor session lifecycle #787 (adamjmcgrath)
• Improve errors #782 (Widcket)

See V2 Migration Guide for full details.

Added

• Fix updates to session not reflected in async getServerSideProps #843 (adamjmcgrath)

Fixed

• Add Props and Query to GetServerSidePropsWrapper type #731 (adamjmcgrath)

Added

• SDK-3332 Constrain session lifecycle to withPageAuthrequired to avoid Next warning #664 (adamjmcgrath)

Added

• Add some useful props to the callback error #625 (adamjmcgrath)
• Update to next 12 #612 (adamjmcgrath)

Fixed

• Fix Fast Refresh for WithPageAuthRequired #653 (adamjmcgrath)
• Handle request errors on useUser hook SDK-3227 #639 (Widcket)
• Add default to PageRoute type parameter #632 (grantbdev)
• throw if you try to refresh with no rt #624 (adamjmcgrath)
• Should be able to set rollingDuration as false (when rolling is false) #623 (adamjmcgrath)
• Fix types in client-side withPageAuthRequired #574 (slaypni)

Added

• Include message body in 302 responses #564 (michielvangendt)

Fixed

• Honor configured sameSite in transient cookies so you can login to iframe using 'none' #571 (adamjmcgrath)
• Cookies with samesite=none must have the secure attr set #570 (adamjmcgrath)
• Improve types in server-side withPageAuthRequired #554 (misoton665)

Fixed

• Fix issue where error reporting wrong instanceof #543 (adamjmcgrath)

Security

• Enforce configured host on user supplied returnTo #557 (adamjmcgrath)

Fixed

• [Snyk] Upgrade openid-client from 4.8.0 to 4.9.0 #518 (snyk-bot)