v4.0.0-beta.13

🛠️ Changes

• chore: refresh the token set when calling getAccessToken instead of the middleware (fixes: #1851 and #1841)
• feat: add idToken to beforeSessionSaved hook (closes: #1840)
• fix: ensure builds succeed without AUTH0_DOMAIN set (closes: #1849)
• chore: allow specifying client assertion config via env vars

v4.0.0-beta.12

🛠️ Changes

• chore: add note about RP-Initiated logout
• chore: warn instead of throwing error when using insecure requests flag in prod (closes: #1846)
• chore: remove warning for prod env with non-https (closes: #1847)

v4.0.0-beta.11

🛠️ Changes

• feat: introduce updateSession helper (closes: #1836)
• feat: private_key_jwt authentication method
• fix: peerDependencies for React 19 (closes: #1844)
• chore: allowInsecureRequests for mock OIDC server during development (closes: #1846)

v4.0.0-beta.10

🛠️ Changes

• chore: add more description in error log on discovery errors (closes: #1832)
• chore: migration guide
• chore: include typeVersions for type resolution (fixes: #1816)
• fix: only dist files should be published (fixes: #1825)
• feat: add PAR support
• feat: allow customizing auth routes (closes: #1834)
• chore: set secure cookie attribute based on app base URL protocol (closes: #1821)

v4.0.0-beta.9

🛠️ Changes

• fix: clear session before redirecting to /v2/logout (closes #1826)
• feature: add Auth0Provider to pass initialUser (closes: #1823)
• fix: getAccessToken types should not return null (closes: #1831)

v4.0.0-beta.8

🛠️ Changes

• Fixes documentation for allowed logout URL
• Falls back to /v2/logout endpoint when the end_session_endpoint is not enabled for a tenant
• Adds docs about default claims from ID token populated in the user object
• Prevent revalidation when user is not authenticated in useUser() hook
• Fix error handling in useUser() hook (closes #1817)
• Export types under /types sub-module (closes #1824 and #1810)
• Exports errors under /errors sub-module
• getAccessToken() method throws an error when an access token could not be obtained to allow handling by the caller (closes #1820 and #1819)
• Add warning when cookie size exceeds 4096 bytes

v4.0.0-beta.7

🛠️ Changes

• Updated README.md
• Bumped up the version

v4.0.0-beta.5

🛠️ Changes

• Bumping up the version

v4.0.0-beta.4

🛠️ Changes

• Adds e2e tests.
• Removes error on env vars when undefined during build.

v4.0.0-beta.3

🛠️ Changes

• Bug fixes
• Addressing the following customer issues.
  • #1797
  • #1795
  • #1794