Auth0.AuthenticationApi

Added

• Adds RAR support #1026 (kailash-b)

Full Changelog

Added

• Adds id token validation in CIBA flow #1003 (kailash-b)
• Accepts expected nonce value from user for Id token validation #971 (kailash-b)

Security

• Bump Microsoft.IdentityModel.Protocols.OpenIdConnect and System.IdentityModel.Tokens.Jwt from 8.17.0 to 8.18.0 #1004 (kailash-b)
• Bump actions/upload-pages-artifact from 4 to 5 #1004 (kailash-b)
• Upgrade codecov-action to 6.0.0 and deploy-pages to 5.0 #977 (kailash-b)

Full Changelog

Security

• Bump Microsoft.IdentityModel.Protocols.OpenIdConnect and System.IdentityModel.Tokens.Jwt to v8.17.0 #955 (kailash-b)

Full Changelog

Fixed

• Fix Base64Url encoding and harden authentication input validation #919 (kailash-b)

Security

• Upgrade Microsoft.IdentityModel.Protocols.OpenIdConnect & System.IdentityModel.Tokens.Jwt to 8.16.0 #922 (kailash-b)

Full Changelog

Added

• feat(mgmt): Adds support to manage App Access configuration #904 (kailash-b)

Full Changelog

Added

• Updates ClientApplicationType Enum to include newly added app_types #901 (kailash-b)

Full Changelog

Added

• Adds support for managing DPoP configuration #891 (kailash-b)

Fixed

• Make OrganizationMember.Roles nullable #895 (g1n93r)

Security

• Bump actions/checkout from v5 to v6 #896 (kailash-b)
• Bump System.IdentityModel.Tokens.Jwt to 8.15.0 #896 (kailash-b)
• Bump Microsoft.IdentityModel.Protocols.OpenIdConnect to 8.15.0 #896 (kailash-b)
• Bump Newtonsoft.Json from 13.0.3 to 13.0.4 #889 (kailash-b)

Full Changelog

Added

• Adds support to manage Native to SSO configuration on clients #885 (kailash-b)

Full Changelog

Added

• Adds support for getting connections enabled for a specific client #877 (mikejr83 / kailash-b)
• Adds CancellationToken parameter in IUsersClient.DeleteAsync #873 (kailash-b)

Fixed

• Allowing TokenLifeType to be null #878 (chris31389 / kailash-b)
• Fix inconsistent naming in Organizations.DeleteMemberAsync #876 (kailash-b)

Security

• Upgrade Dependencies #879 (kailash-b)

Full Changelog

Added

• Add support for DomainAliasesConfig in SelfService SSO create request #847 (kailash-b)

Deprecated

• feat: Deprecate GetImpersonationUrlAsync #839 (kailash-b)

Fixed

• fix: Use case-insensitive string comparer for HTTP header parsing #857 (mikejr83)

Security

• deps: Bump Microsoft.IdentityModel.Protocols.OpenIdConnect and System.IdentityModel.Tokens.Jwt to 8.13.0 #846 (kailash-b)
• deps: Upgrade dependencies #841 (kailash-b)

Full Changelog

Added

• feature: Add support for managing Network ACLs #828 (kailash-b)

Changed

• fix: data-type from int to float for Branding related configs #824 (kailash-b)

Security

• chore: Upgrade version of System.IdentityModel.Tokens.Jwt and Microsoft.IdentityModel.Protocols.OpenIdConnect #825 (kailash-b)

Full Changelog

Added

• Add support for v2/jobs/get-errors API #819 (kailash-b)
• Use Polysharp to take advantage of latest language features #813 (kailash-b)

Deprecated

• Deprecate EnabledClients in Connections in favour of Get and Update EnabledClients #821 (kailash-b)

Fixed

• Fix query generation in GetAllAsync #820 (kailash-b)

Full Changelog

Added

• Allow monitoring Token Quota limits on every M2M authentication call #808 (kailash-b)
• Add support for Delete authenticators registered to a user #810 (kailash-b)
• Adds missing fields in Tenant Settings and Tenant flags #809 (kailash-b)
• Adds support to update Token Quota at different levels #805 (kailash-b)

Changed

• Change scope from string to dynamic in LogEntry #811 (kailash-b)

Fixed

• Fix typo in RelyingPartyIdentifier #812 (kailash-b)

Full Changelog

Added

• Adds support to Enroll / Verify / List / Challenge / Delete Multi Factor Authenticators #798 (czf / kailash-b)
• Adds missing backchannel logout initiators #796 (dmarjoram)

Fixed

• Fix for PasswordlessEmailRequest passing literal NULL when no client_secre… #800 (kailash-b)

Full Changelog

Added

• Add missing fields in SelfServiceSso config #793 (kll2105)
• Adds support for email verification_method in ConnectionOptions #792 (hdmoreland)
• Support for LogFilterStream #791 (iamsushantk)

Full Changelog

Added

• Adding support for managing branding theme #784 (kailash-b)
• Add support for managing Branding Phone Notification Templates #783 (kailash-b)
• Add support for managing Branding Phone Provider settings #780 (kailash-b)

Fixed

• Update ChangeLog with for v7.30.0 #782 (kailash-b)

Full Changelog

Added

• Adds support for managing SNS configuration - Push Notification - MFA policies #775 (kailash-b)
• Update documentation to clarify LoginHint.Issuer field usage in CIBA context #773 (kailash-b)
• Add support for /guardian end-points #771 (kailash-b)

Changed

• Allow Optional AssignMembershipOnLogin field to be nullable #776 (kailash-b)

Full Changelog

Added

• Add support to manage /flows endpoints #765 (kailash-b)
• Add support to Update a Custom Domain #763 (kailash-b)
• Adds CnameApiKey to CustomDomainVerificationResponse (#757) #764 (tmschlot)

Fixed

• Added missing user ID field in Device Credentials class #768 (Mohsens22)
• Added missing fields to LogEntry (#766) #767 (Mohsens22)

Full Changelog

Added

• Adds support for managing Forms #760 (kailash-b)
• Adds support for CIBA #755 (kailash-b)

Full Changelog

Added

• Adds support for managing custom-text and partial-prompts #749 (kailash-b)
• Adds support for Self-Service-Profile endpoints #747 (kailash-b)
• Support PhoneNumber as a flexible identifier #746 (kailash-b)

Changed

• Adds Checkpoint Pagination support for fetching all connections #752 (kailash-b)

Note this change can cause compilation errors (ambiguous invocation) in cases where the code was calling GetAllAsync method in ConnectionsClient with only the first parameter. The users are recommended to choose the pagination explicitly after going through the recommendations in the documentation

Full Changelog

Added

• Adds support for CYOK end-points #744 (kailash-b)
• Adds support for BYOK end-points #743 (kailash-b)
• Adds missing EmailTemplate types #742 (kailash-b)
• Support CheckPointPagination for fetching all clients #741 (kailash-b)
• Adds Integration information in Actions response #740 (kailash-b)

Full Changelog

Added

• Adds support for HRI #738 (kailash-b)
• Adds support for session management and refresh-tokens #737 (kailash-b)
• Organization support for client credentials #733 (kailash-b)

Full Changelog

Added

• Add support for Managing SCIM configuration #726 (kailash-b)
• Adds 'is_signup_enabled' for OrganisationConnection #724 (kailash-b)

Fixed

• Fixes issue where SendInvitationEmail is not defaulting to True #728 (kailash-b)

Full Changelog

Changed

• Add show_as_button to organizations connection #706 (jpealing-fiscaltec)
• Update LogStreamType to include all types #713 (frederikprijck)
• Support JWT Access Token Profile values in TokenDialect #714 (stevehobbsdev)

Full Changelog

Fixed

• Do not crash when User.Locale and UserInfo.Locale are an object #699 (frederikprijck)
• Ensure AsyncAgedCache is correctly updated #693 (frederikprijck)

Full Changelog

Changed

• Target .NET Framework 4.6.2 instead of 4.5.2 #687 (frederikprijck)

Note: This release drops support for .NET Framework 4.5.2, 4.6.0 and 4.6.1, which have no longer been supported by Microsoft since April 2022.

Full Changelog

Added

• Add OIDC back channel logout #682 (mfolker-sage)

Full Changelog

Added

• Add support for Pushed Authorization Request #677 (frederikprijck)

Fixed

• Ensure external_id is defined as string instead of int #679 (frederikprijck)
• Add Grants to IManagementApiClient #681 (pabrodez)

Full Changelog

Added

• Add Organizations in Client Credentials #673 (frederikprijck)

Full Changelog

Changed

• Add customize_mfa_in_postlogin_action to TenantSettings #670 (frederikprijck)
• Add passkey properties to AuthenticationMethod #669 (frederikprijck)

Full Changelog

Added

• Add roles to OrganizationMember #661 (frederikprijck)
• Add fields to Organizations Get All Members #660 (frederikprijck)
• Add external_id on Job #658 (frederikprijck)
• Add show_as_button to ConnectionBase.cs #647 (dylanAtWork)

Changed

• Move IsDomainConnection down into ConnectionBase #656 (amummaprojectmanager)

Full Changelog

Changed

• added generic get/set metadata methods on UserBase #646 (MichaelPruefer)

Full Changelog

Changed

• Support providing Organization when resetting password #635 (frederikprijck)
• Add cross_origin_authentication on Clients #643 (frederikprijck)

Full Changelog

Changed

• Add Name to Org Update Request #639 (amummaprojectmanager)

Fixed

• Add post_login_prompt to OrganizationRequireBehavior #637 (frederikprijck)

Full Changelog

Added

• Add Grants endpoint #633 (frederikprijck)
• Support Organization Name #631 (frederikprijck)

Full Changelog

Fixed

• Add ClientId to EmailVerificationTicket #629 (bellascalzi1)

Full Changelog

Added

• Add support for Client Credentials endpoint support in Management API #607 (frederikprijck)
• Added cancellation token to device credentials request #619 (msmolka)

Full Changelog

Added

• Added revoke refresh token endpoint support #617 (msmolka)

Full Changelog

Changed

• Move IDisposable to IAuthenticationApiClient #611 (frederikprijck)

Full Changelog

Added

• Add Factor Management Endpoints #608 (frederikprijck)

Full Changelog

Added

• Add support for Client Assertion #605 (frederikprijck)
• Add support for the connection status API #601 (Hawxy)

Full Changelog

Changed

• Rework IdTokenValidator to be able to use a proxy #596 (frederikprijck)
• Add support for Ephemeral sessions #593 (frederikprijck)

Full Changelog

Changed

• [SDK-3641] Support stage property in Breached Password Detection configuration #591 (ewanharris)

Full Changelog

Changed

• Support EnabledConnections in OrganizationCreateRequest #585 (ssurowiec)

Full Changelog

Fixed

• Moving IDisposable on to IManagementApiClient #581 (kevbite)

Full Changelog

Added

• Add interfaces for Management Clients #569 (DerKobe)

Full Changelog

Changed

• Add display_name to ConnectionCreateRequest and ConnectionUpdateRequest #573 (rinkeb)

Full Changelog

Changed

• Add ProvisioningTicketUrl #562 (zzanol)

Security

• [Snyk] Security upgrade Newtonsoft.Json from 12.0.3 to 13.0.1 #560 (crew-security)
• [Snyk] Security upgrade Microsoft.IdentityModel.Protocols.OpenIdConnect from 5.6.0 to 6.5.0 #559 (snyk-bot)

Full Changelog

Added

• Add support for Rules Configs endpoints #552 (caldwell0414)

Changed

• Add ID Token validation to device-code and passwordless #553 (frederikprijck)

Note that with this release, ID Token validation has been added when retrieving a token using any of the Device Code or Passwordless flows. There might be a rare occasion where this could break your application, in the situation where you are using invalid ID Tokens. However, typically this should not cause any issues as ID Tokens are supposed to be valid. If they aren't, you probably want to get notified about it as soon as possible.

Prior to this change, those methods would return the tokens without checking the validaty of your ID Token. However, given the fact that this should realy be an edge case, and we believe it's a good idea to inform you about invalid tokens sooner rather than later, we decided to introduce this change in a minor release.

Full Changelog

Added

• Implement Attack Protection Endpoints #547 (frederikprijck)

Full Changelog

Added

• Retrieve and Update the Enabled Phone Factors #544 (frederikprijck)

Full Changelog

Changed

• Increase delay between subsequent retries #540 (frederikprijck)

Fixed

• add webauthn-* enrollment auth methods #539 (frederikprijck)
• Support updating all guardian factors #536 (frederikprijck)

Full Changelog

Added

• Support setting access token after instantiation of ManagementApiClient #532 (mfolker)
• Add auth0-forwarded-for header to passwordless sms authentication for… #530 (rhyswilliamszip)

Full Changelog

Added

• Add Keys Endpoints #527 (colinbobolin)
• Added Prompt Client to Management API SDK #522 (hakuna-matata-in)

Changed

• [SDK-2548] Support unpaginated requests for some endpoints #525 (frederikprijck)

Full Changelog

Added

• Add support for Actions Management APIs #517 (frederikprijck)

Fixed

• Ensure Checkpoint Pagination works when no next is returned #520 (frederikprijck)

Full Changelog

Added

• Add cancellation token support #513 (hawxy)
• Implement automatic rate-limit handling #512 (frederikprijck)
• Add connection property to OrganizationConnection #511 (frederikprijck)
• Update pagination interface to support 'from' and 'take' checkpoint pagination parameters #507 (evansims)

Fixed

• GetAllMemberRolesAsync should return a list of Role instances #514 (frederikprijck)
• Ensure CustomDomainVerification.Methods can be serialized #509 (frederikprijck)

Note: In the situation where you are providing your own implementation for IManagementConnection or IAuthenticationConnection, upgrading to 7.9.0 will require changing your implementations to also include the optional CancellationToken parameters.

Full Changelog

Fixed

• Make GuardianFactor serialization a bit more resilient to new factor names #504 (frederikprijck)
• Set ClientSecret if defined when using PKCE #503 (frederikprijck)

Full Changelog

Added

• [SDK-2438] Add support for Organizations in Management API #489 (frederikprijck)