2.10.2

2.10.2 (2023-10-04)

Full Changelog

Fixed

• Destroy TWA Launcher at unbind #690 (poovamraj)
• Use ThreadPool to launch browser for authentication #689 (poovamraj)

Security

• Update Okio to resolve CVE-2023-3635 #687 (jimmyjames)
• build(dependencies): Update OkHttp to 4.11.0 [SDK-4501] #684 (evansims)

2.10.1

2.10.1 (2023-08-01)

Full Changelog

Fixed

• Handle SecurityException thrown while launching the browser #677 (poovamraj)

2.10.0

2.10.0 (2023-07-18)

Full Changelog

Added

• Return refreshed Credentials in CredentialsManagerException to avoid logout #666 (poovamraj)
• [SDK-4413] Support Organization Name #669 (poovamraj)
• Add more error pairs to isMultifactorCodeInvalid [SDK-4194] #664 (poovamraj)

Fixed

• Avoid null pointer exception because of error description #667 (poovamraj)
• Revert changes from #654. Fix renew Credentials logic #670 (poovamraj)

Security

• chore(security): Update and pin Graddle workflow actions #671 (evansims)

2.9.3

2.9.3 (2023-05-19)

Full Changelog

Fixed

• Consider SocketException as network error #659 (poovamraj)
• [ESD-28245] Fix not propagating error values from server #658 (poovamraj)

2.9.2

2.9.2 (2023-05-05)

Full Changelog

Fixed

• Add required scopes to token and renewAuth requests #654 (poovamraj)
• Added rule to support Proguard in full mode #652 (poovamraj)

2.9.1

2.9.1 (2023-04-18)
Full Changelog

Fixed

Update dependencies #641 (poovamraj)

⚠️ Breaking Change
This version of Auth0.Android enables developers to use the library when building projects that target the API level 31.

Developers using this version of Auth0.Android will need to update the the compileSdkVersion in their build.gradle to version 31. It's still possible to use targetSdkVersion lower than 31, but it's recommended to migrate as soon as possible.

When migrating to targetSdkVersion 31 and targeting Android 12 or higher, activities, services, or broadcast receivers that use intent filters, must now explicitly declare the android:exported attribute for these app components.

2.9.0

2.9.0 (2023-03-16)

Full Changelog

Added

• Added forceRefresh option to getCredentials #637 (poovamraj)
• Add Invalid refresh token flag #635 (poovamraj)
• [SDK-3348] Implement trusted web activity support #631 (poovamraj)
• Allow authorizeUrl and logoutUrl customisation #622 (poovamraj)
• Add AuthenticationException.isTooManyAttempts error #615 (tomhusson-toast)

Fixed

• Gson crashes when minified with R8 strict mode #634 (wiyarmir)

2.8.1

2.8.1 (2023-01-11)

Full Changelog

This patch release does not contain any functional changes, but is being released using an updated signing key for verification as part of our commitment to best security practices.
Please review the README note for additional details.

2.8.0

2.8.0 (2022-07-05)

Full Changelog

Added

• [SDK-3329] Improved ID token exception API #577 (poovamraj)
• [SDK-3144] Add user property to Credentials #569 (adamjmcgrath)
• [SDK-3353] Validate claims for ID Token received in Authentication API Client #575 (poovamraj)
• [SDK-3346] Implemented coroutine support #563 (poovamraj)

Changed

• [SDK-3358] Improve Android README #579 (adamjmcgrath)
• [SDK-3352] Expire credentials based on access token alone #572 (adamjmcgrath)

Deprecated

• Remove user_metadata use case from addSignUpParameters #567 (adamjmcgrath)

Fixed

• [SDK-3452] Network Exception Issue Fix #580 (poovamraj)
• [SDK-3350] Empty credentials before continuing should throw CredentialsManagerException #576 (poovamraj)
• [SDK-3354] Deserialize UserProfile.createdAt as ISO8601 #571 (adamjmcgrath)
• [SDK-3082] Avoid config change to handle authentication #566 (poovamraj)
• createdAt should be deserialized as ISO8601 UTC (not local time) #564 (adamjmcgrath)

Security

• Security: Update OkHttp to 4.10.0 #574 (evansims)
• Security: Bump Kotlin Stdlib to 1.6.20 to address CVE-2022-24329 #552 (evansims)
• Bump OkHttp version #551 (lbalmaceda)

2.7.0

Full Changelog

Changed

• Implement Thread Safe Credential Manager #542 (poovamraj)