nextjs-auth0

Added

• SDK-2818 Export error classes #508 (adamjmcgrath)
• SDK-2529 Add ability to pass custom params to refresh grant and code exchange #507 (adamjmcgrath)
• SDK-2813 Add afterRefresh hook #506 (adamjmcgrath)

Fixed

• Fix types in server-side withPageAuthRequired #512 (Widcket)

Added

• Add IE11 support #432 (Widcket)

Fixed

• Fix reflected XSS from the callback handler's error query parameter CVE-2021-32702 (adamjmcgrath)

Added

• withPageAuthRequired CSR now adds user to wrapped component props #405 (adamjmcgrath)

Fixed

• env var substitutions now means you can define AUTH0_BASE_URL from VERCEL_URL in next.config.js #404 (adamjmcgrath)

Fixed

• Use window.location.toString() as the default returnTo value #370 (Widcket)
• returnTo should be encoded as it contains url unsafe chars #365 (adamjmcgrath)

Added

• Organizations support #343 (adamjmcgrath)

Added

• Export UserContext for overriding default hook initialisation behaviour #325 (adamjmcgrath)

Fixed

• returnTo should respect application’s basePath configuration #317 (Widcket)

Added

• Add redirect_uri option to callback handler #298 (mariano)

Fixed

• Chunked cookies should not exceed browser max #301 (adamjmcgrath)
• Cleanup unused cookies when switching between chunked and unchunked #303 (adamjmcgrath)
• New tokens should be applied to existing session after handleProfile #307 (adamjmcgrath)

New features

• New suite of frontend tools:
  • useUser hook and UserProvider to simplify checking and managing the user’s logged in state on the client.
  • withPageAuthRequired higher order component to protect client side routes.
• New handleAuth feature to reduce the amount of boilerplate required to set up the server side authentication handlers.
• Simpler server side API where creation of an SDK instance is handled by the SDK.

Breaking changes

For a full list of breaking changes and migration guide, checkout the V1_MIGRATION_GUIDE.md

Additions

• Added afterRefetch hook option to handleProfile to modify the session after refetching it.

Additions

• Added a new way to configure the custom profile url. Now it can be configured with an environment variable as well.

Changes

• The way to configure the custom login url has changed. Instead of passing it in every call to withPageAuthRequired now it can be configured with an environment variable.
• The Vercel configuration docs have been updated with the latest guidance.

Fixes

• Fixed a logout issue related to custom IdPs.

• Updating dependencies with security issues

Install

npm install @auth0/nextjs-auth0@beta

New features

• New suite of frontend tools:
  • useUser hook and UserProvider to simplify checking and managing the user’s logged in state on the client.
  • withPageAuthRequired higher order component to protect client side routes.
• New handleAuth feature to reduce the amount of boilerplate required to set up the server side authentication handlers.
• Simpler server side API where creation of an SDK instance is handled by the SDK.

Breaking changes

For a full list of breaking changes and migration guide, checkout the V1_MIGRATION_GUIDE.md

Changes

• AggregateError#message from Issuer.discover includes stack trace #236 (adamjmcgrath)
• Prevent caching the /me request #233 (adamjmcgrath)
• Added error handling to useUser [SDK-2236] #229 (Widcket)
• Rename loading to isLoading #222 (Widcket)
• Prepare application to be deployable with Vercel #218 (frederikprijck)
• Added withCSRAuthRequired HOC [SDK-2120] #209 (Widcket)
• [SDK-2057] Express mw tests #191 (adamjmcgrath)
• Add withAuth HOC [SDK-2120] #189 (Widcket)
• Add frontend hook tests [SDK-2117] #188 (Widcket)
• Add frontend hook CH: Added #187 (Widcket)