react-native-auth0

Added

• Provide option to pass custom redirect url #813 (poovamraj)
• Support SFSafariViewController #800 (poovamraj)
• Support additional parameters for forceRefresh in iOS #801 (poovamraj)

Fixed

• Handle incomplete promise in web authentication #798 (poovamraj)
• Fix metadata type in CreateUserOptions #789 (poovamraj)

Fixed

• ESD-30932 Improve error handling #720 (poovamraj)

Security

• Update Auth0.Android to resolve CVE-2023-3635 #750 (poovamraj)

Fixed

• Make authorize and clearSession parameters optional #701 (poovamraj)

Security

• chore(deps): bump semver from 5.7.1 to 5.7.2 in /example #692 (dependabot[bot])
• chore(deps): bump fast-xml-parser from 4.2.4 to 4.2.7 in /example #693 (dependabot[bot])

v3.0.0 (2023-08-10)

Full Changelog

💡 Check the Migration Guide to understand the changes required to migrate your application to v3.

Added

• Credentials are returned as part of authorize methods in hooks
• Support for organizations name in login
• Added sample app in the repository
• Expo plugin is updated to latest version
• Added 'openid profile email' as mandatory scopes
• Option to forceRefresh is added in getCredentials
• Added hasValidCredentials to hooks
• More options to authorize using Hooks
  • authorizeWithSMS
  • authorizeWithEmail
  • authorizeWithOOB
  • authorizeWithOTP
  • authorizeWithRecoveryCode

Changed

• Custom Scheme is now optional in Expo
• Migrated the codebase to Typescript
• Use Native SDKs (Auth0.Android and Auth0.Swift) for Web Authentication
• Credentials object in Android will return expiresIn instead of expiresAt
• max_age parameter is changed to maxAge in WebAuth.authorize()
• customScheme is now part of ClearSessionOptions instead of ClearSessionParameters in clearSession
• Minimum supported version for iOS is bumped to 13
• Revoke Token and Change Password now return void instead of an empty object

Removed

• Removed the type property returned in the Credentials object in Android. Use tokenType instead.
• skipLegacyListener has been removed in authorize and clearSession

Security

• chore(deps): bump word-wrap from 1.2.3 to 1.2.4 #682 (dependabot[bot])
• chore: Expand .semgrepignore exclusions to tests #679 (evansims)
• chore(deps-dev): bump semver from 6.3.0 to 7.5.2 #657 (dependabot[bot])

v3.0.0-beta.3 (2023-07-11)

Full Changelog

Added

• Export types as part of root #649 (poovamraj)

v3.0.0-beta.2 (2023-07-10)

Full Changelog

💡 Check the Migration Guide to understand the changes required to migrate your application to v3.

Added

• Credentials are returned as part of authorize methods in hooks
• Added sample app in the repository
• Expo plugin is updated to latest version
• Added 'openid profile email' as mandatory scopes
• Option to forceRefresh is added in getCredentials
• Added hasValidCredentials to hooks
• More options to authorize using Hooks
• authorizeWithSMS
• authorizeWithEmail
• authorizeWithOOB
• authorizeWithOTP
• authorizeWithRecoveryCode

Changed

• Custom Scheme is now optional in Expo
• Migrated the codebase to Typescript
• Use Native SDKs (Auth0.Android and Auth0.Swift) for Web Authentication
• Credentials object in Android will return expiresIn instead of expiresAt
• max_age parameter is changed to maxAge in WebAuth.authorize()
• customScheme is now part of ClearSessionOptions instead of ClearSessionParameters in clearSession
• Minimum supported version for iOS is bumped to 13
• Revoke Token and Change Password now return void instead of an empty object

Removed

• Removed the type property returned in the Credentials object in Android. Use tokenType instead.
• skipLegacyListener has been removed in authorize and clearSession

Supported Versions

• Minimum supported version for iOS is bumped to 13
• Minimum supported version for Expo is bumped to 48

Fixed

• Fix Auth0.Swift transitive dependencies #649 (poovamraj)

Fixed

• Fix Auth0 pod version to constant #647 (poovamraj)

Added

• getCredentials hook now updates user state #584 (KMathisGit)

Fixed

• Added tokenType to credentials returned in Android #621 (poovamraj)
• ESD-27178 Fix browser not found issue not being surfaced #611 (poovamraj)

Fixed

• Run requireAuth on UI thread #591 (poovamraj)

Added

• Allow additional options for authorize and support custom LAPolicy #526 (chrismcleod)
• Initialized flag on useAuth0 hook #561 (cranberyxl)

Fixed

• Fixing .hide() on iOS #570 (stigi)

Security

• chore: Bump yarn.lock dependencies #580 (evansims)
• chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2 #567 (dependabot[bot])
• Security: Bump Dependencies #565 (evansims)

Added

• Enable custom params for login methods #557 (poovamraj)
• Add support for static linking on iOS #555 (Widcket)

Fixed

• Return a unix timestamp for expiresIn #551 (cranberyxl)

Added

• SDK-3738 Option to clear session only in Credentials Manager #543 (poovamraj)

Fixed

• SDK-3736 Fix: Options Parameter not being passed in Hooks authorize method #542 (poovamraj)

Fixed

• Avoid config changes to handle authentication #534 (poovamraj)
• SDK-3718 Allow passing extra parameters when logging in with passwordRealm #532 (ewanharris)
• Removed Activity from Android library to avoid prompt #533 (poovamraj)

v2.14.0 (2022-10-07)

📣 Major improvements now generally available

This release brings the much requested features to the React Native Auth0 SDK:

• Support for Expo #424 (sdacunha)
• Built-in Secure Credentials Manager #501 (poovamraj)
• Support for React Hooks #500 (stevehobbsdev)

Full Changelog

Added

• Add remaining fields for signing up a user #498 (travisobregon)

Changed

• Default scopes for authorize call (hooks only) #522 (stevehobbsdev)

Full Changelog

Added

• Add Expo config plugin (SDK 41+) #424 (sdacunha)
• [SDK-3591] New Hook API supporting login and logout #500 (stevehobbsdev)
• [SDK-3537] Credential manager for React Native #501 (poovamraj)

Changed

• Update peer dependency for React #509 (poovamraj)

Fixed

• Move Podspec to the root #490 (Widcket)

Fixed

• SDK-3458 Support RN version 69 #488 (poovamraj)

Security

• Bump simple-plist from 1.1.0 to 1.3.1 #478 (dependabot[bot])
• Bump async from 2.6.3 to 2.6.4 #472 (dependabot[bot])

Changed

• [Snyk] Security upgrade crypto-js from 3.3.0 to 4.0.0 #457 (snyk-bot)

Fixed

• Fix iOS module import for Expo SDK 44 #455 (Bardiamist)
• Fix promise that never completes SDK-3216 #464 (Widcket)

Added

• #409 Implement timeout support to networking Client #423 (mnylen)

Fixed

• Fix android java doc task #450 (poovamraj)