@auth0/auth0-spa-js - npm Package Versions

v1.19.0 (2021-10-11)

Full Changelog

Added

• [SDK-2794] Return token response in getTokenSilently #803 (stevehobbsdev)
• [SDK-2793] Ability to define a custom now provider #802 (frederikprijck)

v1.18.0 (2021-09-15)

Full Changelog

Added

• [SDK-2750] Expose mfa_token from the mfa_required error when getting new tokens #789 (frederikprijck)

Changed

• [SDK-2759] Re-scoping cookies and transactions to client ID #796 (stevehobbsdev)
• [SDK-2320] Throw login_required error in SPA SDK if running in a cross-origin is… #790 (frederikprijck)

Fixed

• [SDK-2692] Remember organization ID for silent authentication #788 (stevehobbsdev)

v1.17.1 (2021-09-03)

Full Changelog

Fixed

• Correct cache interface #779 (employee451)

v1.17.0 (2021-08-03)

Full Changelog

Added

• Add useFormData to enable application/x-www-form-urlencoded requests #768 (stevehobbsdev)

Changed

• Allow providing a domain that includes http or https. #768 (stevehobbsdev)

v1.16.1 (2021-07-07)

Full Changelog

Fixed

• Changes to logout and cache synchronicity #758 (stevehobbsdev)

v1.16.0 (2021-07-05)

Full Changelog

Added

• [SDK-2555] Extensible Cache #743 (stevehobbsdev)

v1.15.0 (2021-04-29)

Full Changelog

Added

• Add Popup cancelled event #724 (degrammer)

Fixed

• Fix popup blocker showing for loginWithPopup in Firefox & Safari #732 (stevehobbsdev)

v1.14.0 (2021-03-22)

Full Changelog

Added

• feat(loginWithRedirect): add redirectMethod option #717 (slaywell)
• Export errors for type checking #716 (adamjmcgrath)

Changed

• Add screen_hint parameter to BaseLoginOptions #721 (damieng)

Fixed

• Updated minor syntax, to allow for TypeScript compiler to be happier #714 (kachihro)
• Revert [SDK-2183] Add warning when requested scopes differ from retrieved scopes #712 (frederikprijck)

v1.13.6 (2021-01-07)

Full Changelog

Changed

• Update docs for getIdTokenClaims and getUser #690 (adamjmcgrath)
• [SDK-2238] Only use timeout promise when using fetchWithTimeout without a worker #689 (frederikprijck)
• Do not use AbortController in the worker if not available #679 (stevehobbsdev)
• Do not send useCookiesForTransactions to authorize request #673 (frederikprijck)

Fixed

• Remove the nonce check in handleRedirectCallback #678 (stevehobbsdev)

Security

• Update wait-on to solve security vulnerability #687 (frederikprijck)
• [Security] Bump ini from 1.3.5 to 1.3.7 #672 (dependabot-preview[bot])

v1.13.5 (2020-12-08)

Full Changelog

Changed

• [SDK-2173] Expand on behaviour of checkSession in docs #666 (stevehobbsdev)
• [SDK-2183] Add warning when requested scopes differ from retrieved scopes #665 (frederikprijck)
• [SDK-2170] Avoid the possibility to do simultaneous calls to the token endpoint #664 (frederikprijck)
• [SDK-2025] Internal module refactor #661 (stevehobbsdev)
• [SDK-2039] Change cache lookup mechanism #652 (frederikprijck)

Fixed

• [SDK-1739] Recover and logout when throwing invalid_grant on Refresh Token #668 (frederikprijck)

Remarks

This release updates the getUser return type to be more correct. Instead of returning Promise<TUser>, it now returns Promise<TUser | undefined>, which might lead to an Object is possible 'undefined' compiler error in situation where the return value is not checked for being undefined while having set the TypeScript's --strictNullChecks compiler flag to true.