v5.1.2

Security

• Bump addressable version per CVE-2021-32740 #276 (lostapathy)

v5.1.0

v5.1.0 (2021-04-09)

Full Changelog

Added

• Org idtoken validation guidance #267 (davidpatrick)
• Adds Branding endpoints #266 (davidpatrick)
• Organizations feature #264 (davidpatrick)
• Add Organizations support to Authentication API Client #263 (davidpatrick)
• Add api_identifier as an accepted configurable #261 (QWYNBG)
• add name param to connections api #260 (QWYNBG)****

v5.0.0

v5.0.0 (2020-10-22)

This release addresses some long standing issues with the library that could only be addressed in a major. We have also removed APIv1 endpoints and other deprecated methods.

Migration from v4 to v5

Top Level Structs

The following top level structs were colliding with other libraries, this was addressed in #183 and have been namespaced with ::Auth0::

• ApiToken changed to ::Auth0::ApiToken
• Permission changed to ::Auth0::Permission
• AccessToken changed to ::AccessToken::AccessToken

Api2 Users create_user method

This method was requiring you send in a name, which was optional, but didn't require connection_name which isn't optional. This was fixed in #244.

Auth0::Api::V2::Users.create_user(name, options = {}) has changed to Auth0::Api::V2::Users.create_user(connection_name, options = {})

APIv1 End of Life

APIv1 endpoints were deprecated in 4.x and now have been removed in v5. They reached end-of-life in the Public Cloud on 13 July 2020. Migration from v1 to v2 has been documented here https://auth0.com/docs/product-lifecycle/deprecations-and-migrations/migrate-to-management-api-v2

Catching 429 Errors

In 4.x RateLimitEncountered was inheriting from Auth0::Unsupported in order for backwards compatibility. This class is now inheriting Auth0::HTTPError. If you are catching 429 errors with Auth0::Unsupported then you will need to migrate to catching with Auth0::HTTPError.

Changes

Full Changelog

Fixed

• Don't define structs as top-level constants (breaking changes) #183 (makimoto)
• Fix create_user implementation (breaking changes) #244 (davidpatrick)

Removed

• Removed Deprecations (breaking changes) #245 (davidpatrick)

v4.17.0

v4.17.0 (2020-10-19)

Full Changelog

Added

• Add pagination to user permissions #241 (davidpatrick)

Deprecated

• Addressable URI Escape #240 (davidpatrick)

v4.16.0

v4.16.0 (2020-10-02)

Full Changelog

Added

• New Email Verification Fields #237 (davidpatrick)

Security

• Bump actionview from 6.0.3.2 to 6.0.3.3 #236 (dependabot[bot])

v4.14.0

Full Changelog

Deprecated

• Deprecate mgmt v1 calls #230 (davidpatrick)

Removed

• Remove iat claim value check #229 (lbalmaceda)

Fixed

• Handle missing reset header #228 (Widcket)

v4.13.0

Added

• Add prompts endpoints #205 (unhappychoice)

Fixed

• Fix missing to_json #212 (qortex)

v4.12.0

Added

• Improve OIDC compliance [SDK-987] #225 (Widcket)

Security

• Bump activesupport from 6.0.3 to 6.0.3.1 #221 (dependabot[bot])
• Bump actionpack from 6.0.3 to 6.0.3.1 #220 (dependabot[bot])

v4.11.0

Added

• [SDK-1542] Add client secret to Passwordless flow since it is now required #217 (stevehobbsdev)

v4.10.0

Added

• Added support for name_filter parameter [SDK-1607] #214 (Widcket)
• Pass client_id, audience at Auth0::Api::V2::ClientGrants#client_grants #209 (hkdnet)
• Add rubocop-rails #200 (tknzk)

Security

• Update rack requirement from ~> 1.6.4 to ~> 2.1.2 #206 (dependabot[bot])
• Update rake requirement from ~> 10.4 to ~> 13.0 #207 (dependabot[bot])
• Update dependencies and CI script #210 (lbalmaceda)