8.0.0-beta.1

Full Changelog

Added

• Add get user country method for passwordless #267 (glena)
• Login with password realm grant via /oauth/token #265 (glena)

Changed

• Add standard fields to parseHash and normalize responses to camelCase #261 (glena)
• Add Whitelist of authorize parameters #258 (glena)

Fixed

• Send cookies on CORS call #259 (glena)

7.6.0

Full Changelog

Closed issues

• Remove the getConnections function #196

Changed

• fail if localstorage is not available to store the autogenerated nonce #262 (glena)

Deprecated

• Deprecate and warn about getConnections #263 (hzalaz)

8.0.0-alpha.2

Full Changelog

Closed issues

• redirectUri should not be mandatory in the constructor #249
• responseMode should be part of the constructor params #247
• Check if all the methods accepts the same parames from constructor #246

Added

• Preload window for popup signup and login #256 (glena)
• Quirks mode and deprecations warning #255 (glena)
• Added responseMode, all methods uses the same params from construct, redirectUri is not mandatory #253 (glena)
• Added sso data client #251 (glena)
• V8 Popup mode #245 (glena)
• Added nonce and status to mitigate replay attacks #244 (glena)

Changed

• Fix nonce mismatch check #254 (glena)

7.5.0

Full Changelog

Closed issues

• silentAuthentication does not use auth0 constructor options #235

Added

• Added nonce to mitigate replay attacks #242 (glena)
• Audience scope constructor options #237 (glena)

8.0.0-alpha.1

Full Changelog

Added

• Change webauth structure + Allow to abort requests #240 (glena)
• added extra options + snake to camel all the options #236 (glena)
• V8: Signup and passwordless #232 (glena)
• Webauth redirect login/callback #231 (glena)

7.4.0

Full Changelog

Added

• Add userinfo and tokeninfo to auth0.js #227 (glena)
• Handle fetching new tokens (aka refresh of tokens) using authorize prompt none in an iframe #226 (glena)

7.3.0

Full Changelog

Changed

• Add CSRF token when using popup mode and user and pass login #218 (hernanhht)
• Bump winchan@0.1.4 #213 (cristiandouce)

Fixed

• Use response_type on startPasswordless #217 (glena)

7.2.1

Full Changelog

Fixed

• Fix popup mode when no id_token is returned #206 (rolodato)

7.2.0

Full Changelog

Closed issues:

• Logout function is using deprecated endpoint #190
• Remove dependency on unmaintained query-string module #184
• Security Vulnerability in indirect dependency "Negotiator" #178
• reqwest version used expect a window object #170
• Use new v2/logout endpoint #74

Added:

• Allow to use v2 logout endpoint #201 (hzalaz)

Changed:

• Bump to latest reqwest@2.0.5 #202 (cristiandouce)
• Use qs@6.2.1 instead nore-querystring fork #200 (hzalaz)
• Bump winchan version #199 (cristiandouce)