CHANGELOG.md

Change Log

v2.43.0 (2022-10-10)

Full Changelog

Added

• Add option to include response headers in the result #744 (adamjmcgrath)

v2.42.0 (2022-05-23)

Full Changelog

Added

• chore: add branding theme routes #725 (alejofernandez)

v2.41.0 (2022-05-20)

Full Changelog

Added

• Added ClientsManager.rotateClientSecret method #721 (sbmelvin)

v2.40.0 (2022-02-11)

Full Changelog

Added

• [CAUTH-1270]: feat(attack protection): add three features (bf, sipt, bpd) #705 (sdwvit)

v2.39.0 (2022-01-31)

Full Changelog

Added

• feat: update draft deploy #702 (TwelveNights)

v2.38.1 (2022-01-27)

Full Changelog

Fixed

• Fix wrong property in assignRolestoUser #700 (adamjmcgrath)
• signIn method should provide using audience prop in userData #699 (maxism)

v2.38.0 (2022-01-26)

Full Changelog

Changed

• refactor to es6 syntax with classes #665 (hornta)

Fixed

• [SDK-3030] Wrong url when doing assign users with a callback #686 (adamjmcgrath)

v2.37.0 (2021-10-14)

Full Changelog

Added

• Add support for checking connection status #662 (frederikprijck)

Fixed

• Fix undefined tokenProvider when access token is provided. #642 (Gilighost)

v2.36.2 (2021-09-20)

Full Changelog

Security

• [Snyk] Security upgrade rest-facade from 1.13.0 to 1.13.1 #653 (snyk-bot)
• [Snyk] Security upgrade axios from 0.21.1 to 0.21.3 #649 (snyk-bot)

v2.36.1 (2021-07-28)

Fixed

• Fix docs for rate limit default maxRetries #640 (jimmyjames)
• Fix updateCustomTextByLanguage #638 (davidpatrick)

Full Changelog

v2.36.0 (2021-07-23)

Added

• [SDK-2666] Update endpoint methods to document allowance of 'from' and 'take' checkpoint pagination parameters #634 (evansims)

Full Changelog

v2.35.1 (2021-06-21)

Fixed

• Update setUniversalLoginTemplate example to correctly reflect documentation #624 (mendhak)
• Use id instead of action_id as per the mgmt api. #622 (stevezau)

Full Changelog

v2.35.0 (2021-05-17)

Added

• Add method to verify OTP received via email #620 (alexesprit)
• [actionsManager] Adding new Actions Managment APIs #570 (shushen)

Full Changelog

v2.34.2 (2021-04-12)

Fixed

• [SDK-2484] Encode user ids on patch/update/delete #608 (davidpatrick)

Full Changelog

v2.34.1 (2021-04-01)

Fixed

• Small fix to ManagementTokenProvider Cache #604 (davidpatrick)

Security

• Bump y18n from 4.0.0 to 4.0.1 #602 (dependabot-preview)
• Security upgrade jwks-rsa from 1.10.0 to 1.12.1 #601 (snyk-bot)

v2.34.0 (2021-03-24)

Added

• feat(orgs): Support Organization feature #592 (mcastany)
• Org idtoken validation support #597 (davidpatrick)
• Allow passwordless SMS code verification to use token endpoint #591 (jimmyjames)

Changed

• Doc Updates #599 (davidpatrick)
• Update get role users docs #587 (jhiner)
• revokeRefreshToken method is missing in docs #584

Security

• [Security] Bump elliptic from 6.5.3 to 6.5.4 #589 (dependabot-preview[bot])

Full Changelog

v2.33.0 (2021-02-05)

Added

• feat: add revokeRefreshToken #579 (andreafspeziale)
• ULP-2609/ULP-2914: add page templates support to /branding #574 (sebadoom)

Full Changelog

v2.32.0 (2021-01-21)

Added

• Additional options on getByEmail [SDK-2268]#577 (davidpatrick)
• [SDK-2261] Add forwardFor support to passwordless calls #576 (frederikprijck)
• Adding Support for Guardian factor settings endpoints #569 (JayHelton)

Full Changelog

v2.31.1 (2021-01-05)

Fixed

• Expose getJobErrors to management client #563 (davidaubin19)
• Fix passing a custom User-Agent to Axios. #562 (djanowski)
• Expose assignUsersToRole to ManagementClient #561 (davidaubin19)

Security

• [Security] Bump axios from 0.19.2 to 0.21.1 #565 (dependabot-preview[bot])

Full Changelog

v2.31.0 (2020-12-08)

Added

• Updated documentation on Link Users #558 (davidpatrick)
• Add support for new passwordless endpoint #556 (nbandarchi)

Fixed

• Adds importUsersJob to ManagementClient #553 (mikemeerschaert)

Full Changelog

v2.30.0 (2020-10-22)

Added

• Provide headers on mgmt token fetch #543 (davidpatrick)

Changed

• [SDK-1975] Use exponential backoff rather than rate limit headers #538 (adamjmcgrath)

Fixed

• Bumps Rest-Facade Dependencies #542 (davidpatrick)
• Fix deprecation warning in importUserJobs #537 (JCQuintas)

Full Changelog

v2.29.0 (2020-09-23)

Added

• Adding support for prompts and custom texts #533 (davidpatrick)
• Adding call to invalidate all remembered browsers. #528 (tandrup)
• Adding docs for secondary and federated identity email verification #519 (jimmyjames)

Changed

• Update dependencies #535 (davidpatrick)
• Update jwks-rsa dependency to avoid DeprecationWarning Buffer() #534 (jalie)

Security

• [Security] Bump node-fetch from 2.6.0 to 2.6.1 #532 (dependabot-preview[bot])

Full Changelog

v2.28.0 (2020-08-27)

Added

• Added support for Log Streams #518 (cv711)

Removed

• Remove bluebird #520 (mattiasnixell)

Security

• [Security] Bump elliptic from 6.5.2 to 6.5.3 #521 (dependabot-preview[bot])

Full Changelog

v2.27.1 (2020-07-23)

Changed

• Use [REDACTED] instead of [SANITIZED] when cleaning errors #515 (jimmyjames)

Security

• Sanitize Headers on Errors #507 (jimmyjames)
• Bump lodash from 4.17.15 to 4.17.19 #506 (dependabot[bot])

Full Changelog

v2.27.0 (2020-06-30)

Added

• feat(migrations): adds migrations manager #503 (CriGoT)
• Added deleteUserByEmail to ConnectionsManager #502 (MatthewBacalakis)
• feat(guardian): support policies, selected-provider, message-types methods [MFA-310]#501 (pmalouin)

Fixed

• fix: management methods throwing error on access #500 (pmalouin)
• fix: guardian-related code examples #499 (pmalouin)

Full Changelog

v2.26.0 (2020-06-05)

Added

• JobsManager handling importUsers response payload #492 (davidpatrick)

Deprecated

• Deprecate importUsers in favor of importUsersJob #494 (davidpatrick)

Fixed

• Bump codecov - npm audit fix #495 (davidpatrick)

Security

• Fixes dependency vulnerabilities from webpack #498 (davidpatrick)

Full Changelog

v2.25.1 (2020-05-03)

Fixed

• Return response.data where Axios is used #484 (taylorbryant)

Full Changelog

v2.25.0 (2020-04-29)

Changed

• Deprecate Request lib #475 (davidpatrick)

Fixed

• Fix typos #480 (pgrimaud)
• Update getRulesConfigs docs to include callback #473 (akvamalin)

Security

• Dependency bump #481 (davidpatrick)
• [Security] Bump acorn from 6.2.1 to 6.4.1 #471 (dependabot-preview[bot])

Full Changelog

v2.24.0 (2020-03-06)

Fixed

• Update and fix JSDocs related to JobsManager #469 (orangain)
• Fixes test on supportedAlgorithms #466 (davidpatrick)
• Fixes calls on passwordless endpoints #465 (davidpatrick)

Full Changelog

v2.23.0 (2020-02-21)

Added

• [DXEX-455] Allow custom headers to be set in Management/Auth Clients. #460 (seejee)

Changed

• Updates node-jwks-rsa #461 (davidpatrick)

Fixed

• Update lru-memoizer dependency to avoid DeprecationWarning Buffer() #459 (jalie)
• getUsersInRole Docs #457 (davidpatrick)

Security

• [Security] Bump codecov from 3.5.0 to 3.6.5 #462 (dependabot-preview[bot])

Full Changelog

v2.22.0 (2020-01-24)

Added

• Support for Hooks API #440 (astanciu)

Full Changelog

v2.21.0 (2020-01-15)

Added

• Improved OIDC compliance #446 (davidpatrick)

Changed

• Add client secret to refreshToken and remove ID token validation #433 (joshcanhelp)

Security

• [Security] Bump handlebars from 4.1.2 to 4.5.3 #441 (dependabot-preview[bot])
• Update rest-facade dependency #436 (joshcanhelp)

Full Changelog

v2.20.0 (2019-09-17)

Added

• expose createEmailTemplate, getEmailTemplate, updateEmailTemplates vi… #416 (rameshanandakrishnan)

Security

• Sanitize Error Request Data #424 (davidpatrick)
• [Security] Bump mixin-deep from 1.3.1 to 1.3.2 #421 (dependabot-preview[bot])

Full Changelog

v2.18.1 (2019-08-08)

Added

• Implement auth0-forwarded-for header passing in Authentication Client #401 (kjarmicki)

Changed

• Improve JobManager (get errors + parse error message when importing users) #407 (jbauth0)

Full Changelog

v2.18.0 (2019-07-23)

Changed

• Encode id param on GET #374 (luisrudge)

Full Changelog

v2.18.0 (2019-06-26)

Full Changelog

Added

• Add Management API support for Branding and Prompts endpoints. #370 (chrisscott)

v2.17.1 (2019-05-22)

Full Changelog

Fixed

• Fix telemetry header #362 (lbalmaceda)

v2.17.0 (2019-04-15)

Full Changelog

Added

• Add method to assign users to a role #348 (pushpabrol)
• Add support for roles and permissions #344 (pushpabrol)

v2.16.0 (2019-03-18)

Full Changelog

Added

• Add support for Auth0 Grants #343 (jsmpereira)

v2.15.0 (2019-03-11)

Full Changelog

Added

• Add users-exports endpoint #340 (arjenvanderende)

Fixed

• Don't validate id_token when alg is HS256 and there is no clientSecret #330 (luisrudge)

v2.14.0 (2018-11-12)

Full Changelog

Added

• Add method to refresh a token using a refresh_token #313 (modeswitch)
• Add all Guardian APIs #311 (stevezau)
• Add Custom Domains methods #310 (stevezau)
• Add send_completion_email and upsert params for importUsers #270 (Floppy)

Deprecated

• Deprecate UsersManager.deleteAll and deleteAllUsers wrapper methods #309 (M-Zuber)

v2.13.0 (2018-09-28)

Full Changelog

Added

• Add id_token validation (HS256 and RS256) #295 (luisrudge)

v2.12.0 (2018-08-09)

Full Changelog

Added

• Added authorizationCodeGrant method to OAuthAuthenticator #290 (cwurtz)
• Add Guardian Enrollments endpoints #278 (fmedinac)

v2.11.0 (2018-07-25)

Full Changelog

Added

• Added Pagination Docs for a Client Grants, Resouce Servers and Rules #282 (cocojoe)
• Added rules config methods #227 (dctoon)

Fixed

• Get access token before importing users #267 (Floppy)

v2.10.0 (2018-05-29)

Full Changelog

Added

• Adding pagination docs for clients/connections #268 (luisrudge)

Fixed

• Fix deleteUserMultifactor naming #259 (luisrudge)

v2.9.3 (2018-03-01)

Full Changelog

Fixed

• Add client secret to passwordGrant #217 (luisrudge)

v2.9.2 (2018-01-16)

Full Changelog

Security

• Update rest facade #232 (luisrudge)

v2.9.1 (2017-12-08)

Full Changelog

Fixed

• fixed missing data object error #224 (dctoon)

v2.9.0 (2017-12-07)

Full Changelog

Added

• Added support for /users-by-email method. #218 (kopertop)
• Add retry functionality for management api requests #215 (dctoon)

v2.8.0 (2017-09-30)

Full Changelog

Added

• Added tokenProvider functionality #196 (dctoon)

Fixed

• Fix wrapPropertyMethod mistake for updateClientGrant #202 (danedmunds)

v2.7.1 (2017-09-30)

Full Changelog

Fixed

• Fix auth/users.getInfo to return JSON (fixes #158) #192 (pilwon)

Security

• Update request to address ReDoS vulnerability #206 (dancrumb)

v2.7.0 (2017-06-28)

Full Changelog

Added

• Add password grant method #189 (hzalaz)
• Retrieve a user's Guardian enrollments #181 (joshuaali)
• Add get user logs #176 (amiram)

Changed

• Update packages and utilize error classes from rest-facade correctly (Fixes #154) #183 (charsleysa)

Fixed

• Fix impersonation to send AT in the params. #190 (hzalaz)
• Fixed minor typo in DatabaseAuthenticator module #184 (scostello-paanalytics)
• fix: avoid possible prototype override protection bypass #170 (AlmaasAre)