@auth0/auth0-react - npm Package Versions

v1.12.1 (2023-01-12)

Full Changelog

Security

• Upgrade @auth0/auth0-spa-js to 1.22.6 #468 (ewanharris)

This patch release is identical to 1.12.0 but has been released to ensure tooling no longer detects a vulnerable version of jsonwebtoken being used by @auth0/auth0-spa-js.

Even though 1.22.5 of @auth0/auth0-spa-js was not vulnerable for the related CVE because of the fact that jsonwebtoken is a devDependency of @auth0/auth0-spa-js, we are cutting a release to ensure build tools no longer report our SDK's that use @auth0/auth0-spa-js as vulnerable to the mentioned CVE.

v2.0.0-beta.0 (2022-12-12)

Auth0-React v2 includes many significant changes compared to v1:

• Removal of polyfills from bundles
• Introduction of authorizationParams and logoutParams for properties sent to Auth0
• Removal of buildAuthorizeUrl and buildLogoutUrl
• Removal of redirectMethod on loginWithRedirect in favour of openUrl
• Removal of localOnly from logout in favour of openUrl
• Renaming of ignoreCache to cacheMode and introduction of cache-only
• Use application/x-www-form-urlencoded by default
• Do not fallback to refreshing tokens via iframe by default
• Changes to default scopes and removal of advancedOptions.defaultScope
• Removal of claimCheck on withAuthenticationRequired

As with any major version bump, v2 of Auth0-React contains a set of breaking changes. Please review the migration guide thoroughly to understand the changes required to migrate your application to v2.

v1.12.0 (2022-10-12)

Full Changelog

Added

• [SDK-3666] Support multiple providers #416 (ewanharris)

v1.11.0 (2022-09-13)

Full Changelog

Added

• Enrich onRedirectCallback method with User object (#400) #401 (devjmetivier)

v1.10.2 (2022-06-22)

Full Changelog

Fixed

• Correctly extend Error for OAuthError #367 (mjbcopland)

v1.10.1 (2022-04-28)

Full Changelog

Fixed

• Make sure handleRedirectCallback is only called once in StrictMode React 18 #355 (adamjmcgrath)

v1.10.0 (2022-04-19)

Full Changelog

Added

• Update React and other deps #350 (adamjmcgrath)

Fixed

• appState is an optional argument #341 (adamjmcgrath)

v1.9.0 (2022-01-14)

Full Changelog

Added

• Update to auth0-spa-js@1.19.3 #319 (adamjmcgrath)
• Memoize context value in auth0-provider #318 (claycoleman)

Fixed

• Avoid potential multiple invocations of loginWithRedirect #311 (kweiberth)
• Add connection property to Auth0ProviderOptions #283 (stevehobbsdev)

v1.8.0 (2021-09-20)

Full Changelog

Added

• Bump Auth0-SPA-JS to 1.18.0 #279 (adamjmcgrath)

v1.7.0 (2021-09-06)

Full Changelog

Added

• Bump SPA JS to 1.17.1 #270 (adamjmcgrath)