v1.6.0

Added

• SDK-2818 Export error classes #508 (adamjmcgrath)
• SDK-2529 Add ability to pass custom params to refresh grant and code exchange #507 (adamjmcgrath)
• SDK-2813 Add afterRefresh hook #506 (adamjmcgrath)

Fixed

• Fix types in server-side withPageAuthRequired #512 (Widcket)

v1.5.0

Added

• Add IE11 support #432 (Widcket)

v1.4.2

Fixed

• Fix reflected XSS from the callback handler's error query parameter CVE-2021-32702 (adamjmcgrath)

v1.4.0

Added

• withPageAuthRequired CSR now adds user to wrapped component props #405 (adamjmcgrath)

Fixed

• env var substitutions now means you can define AUTH0_BASE_URL from VERCEL_URL in next.config.js #404 (adamjmcgrath)

v1.3.1

Fixed

• Use window.location.toString() as the default returnTo value #370 (Widcket)
• returnTo should be encoded as it contains url unsafe chars #365 (adamjmcgrath)

v1.3.0

Added

• Organizations support #343 (adamjmcgrath)

v1.2.0

Added

• Export UserContext for overriding default hook initialisation behaviour #325 (adamjmcgrath)

Fixed

• returnTo should respect application’s basePath configuration #317 (Widcket)

v1.1.0

Added

• Add redirect_uri option to callback handler #298 (mariano)

Fixed

• Chunked cookies should not exceed browser max #301 (adamjmcgrath)
• Cleanup unused cookies when switching between chunked and unchunked #303 (adamjmcgrath)
• New tokens should be applied to existing session after handleProfile #307 (adamjmcgrath)

v1.0.0

New features

• New suite of frontend tools:
  • useUser hook and UserProvider to simplify checking and managing the user’s logged in state on the client.
  • withPageAuthRequired higher order component to protect client side routes.
• New handleAuth feature to reduce the amount of boilerplate required to set up the server side authentication handlers.
• Simpler server side API where creation of an SDK instance is handled by the SDK.

Breaking changes

For a full list of breaking changes and migration guide, checkout the V1_MIGRATION_GUIDE.md

v1.0.0-beta.2

Additions

• Added afterRefetch hook option to handleProfile to modify the session after refetching it.