auth0-python

⚠️ Breaking Changes

• management.organization_templates client removed along with ListOrganizationTemplatesPaginatedResponseContent and OrganizationTemplateAssignedOrganization. Four connection providers dropped the -mcp suffix (asana-mcp becomes asana, atlassian-mcp becomes atlassian, gitlab-mcp becomes gitlab, slack-mcp becomes slack) and nine values removed entirely (docusign-mcp, figma-mcp, gusto-mcp, heroku-mcp, intercom-mcp, pagerduty-mcp, supabase-mcp, vercel-mcp, xero-mcp) #890 (fern-api[bot])

Added

• Guardian MFA settings (GET/PUT /api/v2/guardian/settings), email and phone factor settings, organizations search, resource servers search, experimentation client, anonymous sessions support on clients and tenant settings, resource server anonymous access token configuration, and GatewayTimeoutError for HTTP 504 #890 (fern-api[bot])

⚠️ Breaking Changes

• Client app_type b2b_integration removed (configure via b2b_integration_configuration instead); EventStreamCloudEventContextTenant.tenant_id renamed to id #888 (fern-api[bot])

Added

• Organization templates client, client B2B integration configuration, network ACL HTTP message signatures and key deletion, connection profile SCIM provisioning, OIDC/Okta pushed authorization request support, SAML discovery_url/oidc_metadata/cross_app_access_resource_app options, tenant local_resource_discovery flag, forms server_key, post-credential-validation action trigger and consent-tenant-scopes screen group, and UnprocessableEntityError for HTTP 422 #888 (fern-api[bot])

Fixed

• Raw management.connections client now surfaces 422 errors; raw management.connections.scim_configuration now surfaces 409 errors; management.users.organizations.list docstring updated for checkpoint pagination #888 (fern-api[bot])

Added

• feat: Add My Organization client access control, Connection Profile Cross-App Access support, Network ACL keys management, and OIDC space-delimited scope support #886 (fern-api[bot])

Fixed

• fix: Raw clients for forms and flows now surface additional error responses instead of failing unhandled, corrected a docstring field name #886 (fern-api[bot])

Added

• feat: Add agents management, organization-client associations, organization-level roles (groups/members), network ACL keys, and directory provisioning group sync selections #881 (fern-api[bot])

Fixed

• fix: EventStreamCloudEvent.data now deserializes as its actual object shape (Dict[str, Any]) instead of an opaque JSON-encoded string that callers had to json.loads() themselves. #881 (fern-api[bot])

Added

• feat: Cross App Access (ID-JAG), branding theme identifiers, Self-Service Enterprise Configuration third-party client access, session actor #877 (fern-api[bot])

Changes

Note: As this is a major release it is recommended to understand the Breaking Changes section before upgrading. The UPGRADING.md contains details on version upgrade.

⚠️ Breaking Changes

• ConnectionAttributeIdentifier removed (no compatibility alias); split into three types. The identifier field on each attribute now points to its own type:
  • EmailAttribute.identifier: EmailAttributeIdentifier — {active?, default_method?: DefaultMethodEmailIdentifierEnum} (same shape as the old type; use this as the drop-in replacement).
  • PhoneAttribute.identifier: PhoneAttributeIdentifier — {active?, default_method?: DefaultMethodPhoneNumberIdentifierEnum}.
  • UsernameAttribute.identifier: UsernameAttributeIdentifier — {active?} (no default_method).
• PhoneProviderProtectionBackoffStrategyEnum: Literal["exponential", "none"] → Literal["exponential", "default"]. Replace the value "none" with "default".
• ListRolesOffsetPaginatedResponseContent.start / .limit / .total: Optional[float] = None → required float. Deserializing a role-list response missing any of these now raises pydantic.ValidationError.
• Federated Connections Tokensets removed — the users.federated_connections_tokensets client and its list/delete methods are removed, along with the FederatedConnectionTokenSet and ConnectionFederatedConnectionsAccessTokens types.
• federated_connections_access_tokens field removed — this optional field is no longer present on ConnectionOptionsAzureAd, ConnectionOptionsCommonOidc, ConnectionOptionsGoogleApps, ConnectionPropertiesOptions, and UpdateConnectionOptions.
• OAuth scopes removed — read:federated_connections_tokens and delete:federated_connections_tokens are no longer valid values of OauthScope.
• ClientSessionTransferDelegationDeviceBindingEnum narrowed — the "asn" value is removed; the enum now only accepts "ip".

New Endpoints

• organizations.roles.members.list(id=..., role_id=...) (sync + async) → GET /api/v2/organizations/{id}/roles/{role_id}/members. New sub-clients organizations.roles and organizations.roles.members; response type ListOrganizationRoleMembersResponseContent, item type RoleMember.

Type Changes/Features

• Organizations: third_party_client_access: Optional[OrganizationThirdPartyClientAccessEnum] (Literal["block", "allow"]) on create()/update() and all organization response types.
• Organizations: new types ListOrganizationRoleMembersResponseContent and RoleMember (returned by the role-members endpoint above).
• Grants: new UserGrant.organization_id: Optional[str] (read-only), via GET /grants.
• Connections: discovery_url / oidc_metadata extended to samlp connections (previously OIDC-only), via new ConnectionsDiscoveryUrl / ConnectionsOidcMetadata on ConnectionPropertiesOptions and UpdateConnectionOptions.
• Event Streams: new event-type values connection.created, connection.deleted, connection.updated on EventStreamEventTypeEnum, EventStreamDeliveryEventTypeEnum, EventStreamSubscribeEventsEventTypeEnum, EventStreamTestEventTypeEnum; new EventStreamCloudEventConnection{Created,Deleted,Updated}* payload types; new EventStreamSubscribeEventsResponseContent.
• Token Vault: new grants: Optional[List[TokenVaultPrivilegedAccessGrant]] on the privileged-access credential/public-key types. TokenVaultPrivilegedAccessGrant: {connection: str, scopes: List[str]}.
• New error body types: NotFoundErrorBody/NotFoundErrorBodyError, TooManyRequestsErrorBody/TooManyRequestsErrorBodyError.
• CloudEvent specversion: str → EventStreamCloudEventSpecVersionEnum (Literal["1.0"] + Any fallback) across group/org/user CloudEvent types.
• NetworkAclMatch — new optional auth0_managed: Optional[List[str]] field (serialized as auth0_managed), available on both the match and not_match rule blocks. This lets network ACL rules reference Auth0-managed lists when matching or excluding traffic.

Changes

⚠️ Breaking Changes

• clients.update() social/FedCM request types changed — native_social_login and fedcm_login on clients.update() (PATCH /api/v2/clients/{id}) changed from NativeSocialLogin / FedCmLogin to NativeSocialLoginPatch / FedCmLoginPatch. clients.create() still uses the non-patch types, so create and update now require different types for the same logical field. Code passing the old types to update() must switch to the *Patch variants.
• UserDateSchema removed — user date fields now datetime — the UserDateSchema type (Union[str, Dict[str, Any]]) is deleted and no longer exported from auth0.management.types. created_at, updated_at, last_login, last_password_reset, and multifactor_last_modified on GetUserResponseContent, CreateUserResponseContent, UpdateUserResponseContent, and UserResponseSchema are now Optional[datetime.datetime]. Code that read these as strings/dicts must update.

Type Changes

• Clients — FedCM / Google One Tap — new fedcm_login (read: FedCmLogin/FedCmLoginGoogle; write: FedCmLoginPatch/FedCmLoginGooglePatch) on create/update/response, gating the Google One Tap prompt in New Universal Login via fedcm_login.google.is_enabled.
• Clients — Native Social Login patch types — new NativeSocialLoginPatch wrapping apple/facebook/google patch variants (each enabled: Optional[bool]) for clients.update().
• Clients — Token Vault Privileged Access — new token_vault_privileged_access field on create/update/response, typed ClientTokenVaultPrivilegedAccessWithPublicKey (create) and ClientTokenVaultPrivilegedAccessWithCredentialId (update), each with credentials + ip_allowlist.
• Connections — Cross App Access — new cross_app_access_requesting_app field (CrossAppAccessRequestingApp{active: bool}) on connections.create()/update(), OIDC/Okta request types, and all connection response types.
• Identity user_id widened to Union[str, int] — on UserIdentitySchema, UserIdentity, and DeleteUserIdentityResponseContentItem, fixing Pydantic errors on numeric (e.g. GitHub) identity IDs.
• Email templates — new auth_email_by_code value in EmailTemplateNameEnum.
• Attack Protection — Phone Provider Protection — new attack_protection.phone_provider_protection sub-client with get() / patch(type=...) (GET/PATCH /attack-protection/phone-provider-protection); new PhoneProviderProtectionBackoffStrategyEnum (exponential/none) and response types.

Bug Fixes

• 404 handling added across multiple raw clients — keys.signing, organizations (connections, enabled connections, members, member roles), roles.permissions, self_service_profiles.sso_ticket, user_attribute_profiles, and users (connected accounts, organizations, permissions, roles) now raise a typed NotFoundError on 404 instead of an unhandled parse error.
• add "CustomDomainHeader" to __all__.
• change CustomDomainHeader return type annotation from Dict[str, Any] to RequestOptions.

⚠️ Breaking Changes

• identifiers parameter removed from branding.update(); identifiers field removed from GetBrandingResponseContent and UpdateBrandingResponseContent. The following types are no longer exported from auth0.management.types: BrandingIdentifiers, UpdateBrandingIdentifiers, BrandingPhoneDisplay, UpdateBrandingPhoneDisplay, BrandingLoginDisplayEnum, BrandingPhoneFormattingEnum, BrandingPhoneMaskingEnum, UpdateBrandingLoginDisplayEnum, UpdateBrandingPhoneFormattingEnum, UpdateBrandingPhoneMaskingEnum. These settings now live exclusively on the theme resource (PATCH /api/v2/branding/themes/{id}) #860 (fern-api[bot])
• id was a required str on PhoneTemplate, GetPhoneTemplateResponseContent, CreatePhoneTemplateResponseContent, UpdatePhoneTemplateResponseContent, and ResetPhoneTemplateResponseContent. It is now Optional[str]. Code that accesses .id without a None check will require updating #860 (fern-api[bot])

Added

• feat: security_headers (TenantSettingsNullableSecurityHeaders, CSP + XSS protection config), country_codes (TenantSettingsCountryCodesResponse, phone identifier allow/deny list), and include_session_metadata_in_tenant_logs (bool) added to GetTenantSettingsResponseContent and UpdateTenantSettingsResponseContent #860 (fern-api[bot])
• feat: id_token_session_expiry_supported (ConnectionIdTokenSessionExpirySupported) added to ConnectionOptionsCommonOidc and UpdateConnectionOptions #860 (fern-api[bot])
• feat: new invitation_landing_client_id Optional field added to ClientMyOrganizationPostConfiguration, ClientMyOrganizationPatchConfiguration, and ClientMyOrganizationResponseConfiguration - available on POST /clients, PATCH /clients/{id}, GET /clients, and GET /clients/{id} #860 (fern-api[bot])

Fixed

• fix: GET /client-grants/{id}/organizations — added 404 handling; raises NotFoundError when the grant does not exist (was previously an unhandled parse error) #860 (fern-api[bot])
• fix: PATCH /token-exchange-profiles/{id} — added 409 handling; raises ConflictError when a profile with the same subject_token_type already exists (was previously an unhandled parse error) #860 (fern-api[bot])

Changes

Added

• feat: rate_limit_policies client with full CRUD: list, create, get, update, delete #853 (fern-api[bot])
• feat: Response Types: RateLimitPolicyConfigurationZero (allow), RateLimitPolicyConfigurationOne (block/log + limit), RateLimitPolicyConfigurationAction (redirect + limit + redirect_uri), RateLimitPolicy #853 (fern-api[bot])
• feat: OAuth scopes: create:rate_limit_policies, read:rate_limit_policies, update:rate_limit_policies, delete:rate_limit_policies #853 (fern-api[bot])
• feat: Support for groups.roles — list, create, delete #853 (fern-api[bot])
• feat: Support for roles.groups — get, create, delete #853 (fern-api[bot])
• feat: Support for users.effective_roles / users.effective_roles.sources.groups #853 (fern-api[bot])
• feat: Support for users.effective_permissions / users.effective_permissions.sources.roles #853 (fern-api[bot])
• feat: Support for organizations.groups — list #853 (fern-api[bot])
• feat: Support for organizations.groups.roles — list, create, delete #853 (fern-api[bot])
• feat: Support for organizations.members.effective_roles / organizations.members.effective_roles.sources.groups #853 (fern-api[bot])
• feat: Types for SCIM Groups: effective role/permission response types, org-member effective role types, paginated list wrappers, source enum discriminators #853 (fern-api[bot])
• feat: OAuth scopes: create/read/delete:group_roles, read:organization_groups, create/read/delete:organization_group_roles, read:organization_member_effective_roles, read:organization_member_role_source_groups, read:user_effective_roles, read:user_role_source_groups, read:user_effective_permissions, read:user_permission_source_roles #853 (fern-api[bot])

Changed

• ConnectionPropertiesOptions — dpop_signing_alg field added (write path for POST /api/v2/connections) #853 (fern-api[bot])
• UpdateConnectionOptions — dpop_signing_alg field added (write path for PATCH /api/v2/connections/{id}) #853 (fern-api[bot])

⚠️ Breaking: Python 3.9 support dropped

• Python 3.9 reached end-of-life in October 2025. This release requires Python >=3.10. Users on Python 3.9 should remain on v5.4.0 until they upgrade their Python version. #843 (developerkunal)

Added

• feat: configurable max_retries parameter to Auth0 and AsyncAuth0 clients (defaults to 2 with exponential backoff) #841 (fern-api[bot])
• feat: New error types: BadRequestSchema, ForbiddenSchema, UnauthorizedSchema, TooManyRequestsSchema #841 (fern-api[bot])
• feat: New types: FedCmLogin, FedCmLoginGoogle, CredentialDeviceTypeEnum #841 (fern-api[bot])
• Extended user_authentication_method and resource_server response types with additional fields #841 (fern-api[bot])
• Expanded clients, refresh_tokens, resource_servers, tickets, and users/authentication_methods endpoint parameters

Changed

• Updated connection types with additional validation fields #841 (fern-api[bot])

Added

• chore: Add events module, async token support, and connection retry resilience #835 (fern-api[bot])

Changed

• [fern-replay] Initialize Replay for SDK customizations #833 (fern-api[bot], developerkunal)

Fixed

• fix: Add top-level py.typed marker to resolve IDE import errors #829 (kishore7snehil)

Added

• feat: Add CIMD support, organization connections, group deletion, refresh token listing; remove AOL/Flickr/Yammer providers #816 (fern-api[bot])
• feat:Add Auth0-Custom-Domain header support for Multiple Custom Domains (MCD) #799 (kishore7snehil)

⚠️ Breaking: Python 3.8 support dropped

• Python 3.8 reached end-of-life in October 2024. This release requires Python >=3.9.2. Users on Python 3.8 should remain on v5.1.0 until they upgrade their Python version. #808

Added

• feat: Add default domain endpoints, connection key provisioning, tenant SCIM listing; remove MiiCard/Renren providers #801 (fern-api[bot])
• feat: Add client_info support for custom telemetry in Authentication and Management clients #802 (kishore7snehil)
• feat: Add SDK logging infrastructure with configurable log levels and header redaction #785 (fern-api[bot])

Fixed

• fix: Pagination page advancement incorrectly skipping pages #785 (fern-api[bot])

Changed

• chore: Update ruff, aiohttp, cryptography, urllib3, codecov-action; replace Snyk with SCA scan #808 (kishore7snehil)

Fixed

• fix: Remove placeholder defaults from optional parameters + additional updates #778 (fern-api[bot])

What's New in v5.0.0

⚠️ BREAKING CHANGES - Major Rewrite

This is a complete rewrite of the Auth0 Python SDK with significant breaking changes from v4.x. Users will need to update their code when migrating from v4.x to v5.0.0.

Added Features

• New Fern-generated SDK: Complete Management API rewrite generated from Auth0's OpenAPI specifications
• Hierarchical package structure: Organized Management APIs into logical sub-clients for better discoverability
• Strongly typed interfaces: Pydantic models provide specific request/response types replacing generic dictionaries
• Automatic token management: Built-in client credentials handling with automatic token refresh
• Enhanced pagination: New SyncPager and AsyncPager classes for easy iteration over paginated results
• First-class async support: Full async/await support with AsyncManagementClient
• Better IDE support: Improved code completion, type hints, and inline documentation

Key Breaking Changes

• Import paths changed from from auth0.management import Auth0 to from auth0.management import ManagementClient
• Client initialization changed from Auth0(domain, management_token) to ManagementClient(domain, client_id, client_secret) with automatic token management
• Response types changed from dictionaries to Pydantic models (use .model_dump() to convert back to dict)
• Method organization changed from flat (client.users.list()) to hierarchical where applicable
• Pagination parameters changed - some endpoints use per_page, others use take
• Python version requirement increased from ≥3.7 to ≥3.8
• Error handling changed from Auth0Error to ApiError base class

Important Notes

• ✅ The authentication package is NOT affected by these changes. Authentication APIs remain the same between v4 and v5.
• 📚 Complete migration guide available at v5_MIGRATION_GUIDE.md
• 🎯 This is the stable GA release following v5.0.0-beta.0
• 🔧 Auth0 telemetry headers implemented with dynamic versioning (no manual updates needed)
• 📖 Full API reference available at reference.md

⚠️ BREAKING CHANGES - Major Rewrite

This is a beta release of the upcoming major version. It introduces breaking changes, particularly in the Management API client. Please refer to the v5 Migration Guide for detailed upgrade instructions.

✍️ What's New

• ✨ OpenAPI-Generated: Complete rewrite generated from Auth0's OpenAPI specifications using Fern
• 📦 Better Organization: Hierarchical package structure with logical sub-clients for improved discoverability
• 🔒 Type Safety: Strongly typed request/response objects using Pydantic replace generic dictionaries
• ✨ Enhanced Developer Experience: Better IntelliSense, code completion, and documentation
• 🚀 Future-Proof: Easier maintenance and updates as Auth0's API evolves
• ⚡ Async Support: First-class async client with AsyncAuth0 and AsyncManagementClient
• 📄 Automatic Pagination: Built-in pagination support with include_totals=True by default

🔀 Compare Changes: Full Changelog

Added

• fix(backchannel): expose headers on slow_down errors (HTTP 429s) #744 (pmalouin)

Added

• Updates for CIBA with email #720 (adamjmcgrath)

Added

• feat: Support For Network ACL Endpoints #706 (kishore7snehil)

Fixed

• chore: fix workflow syntax errors and update dependencies #724 (kishore7snehil)

Added

• chore: merge community PRs – bugfixes, features, and dependency upgrades #696 (kishore7snehil)

  • Features

    • Self Service Profiles Support (nzetzl)

  • Fixes

    • Adding Global Seed (allrob23)

Fixed

• fix: handle authorization_details in back_channel_login #695 (kishore7snehil)

Added

• feat: Federated Connections Support #682 (kishore7snehil)
• Adding Support For CIBA with RAR #679 (kishore7snehil)

Fixed

• Fix: Unauthorized Access Error For PAR #671 (kishore7snehil)

Added

• Adding Support For RAR and JAR Requests #659 (kishore7snehil)
• Adding Support For Back Channel Login #643 (kishore7snehil)

Fixed

• Consolidated Community PRs and Dependency Upgrades #660 (kishore7snehil)

  • fix typo in docstring (@CarlosEduR )
  • Added support for "include_totals" to all_organization_member_roles (@jpayton-cx)
  • Fixed Version Table (@sanchez)
  • Remove upper bounds on all python dependency versions (@ngfeldman)
  • Adding secrets to Codecov Action Upload (@developerkunal)

• Updating Dependancies And Workflow Action Versions #653 (kishore7snehil)

• Fixing the Github Workflow Issues #644 (kishore7snehil)

Security

• Update cryptography requirements.txt #630 (duedares-rvj)

Security

• Update cryptography requirements.txt #597 (skjensen)

⚠️ BREAKING CHANGES

• Add python 3.12 support, drop 3.7 (Python 3.7 is EOL, see https://github.com/auth0/auth0-python#support-policy) #562 (adamjmcgrath)

Added

• SDK-4138 Add support for Pushed Authorization Requests (PAR) #560 (adamjmcgrath)

Fixed

• Fix rest_async and async tests #556 (adamjmcgrath)
• fix type hint for link_user_account #552 (tzzh)

Added

• [SDK-4544] Add orgs in client credentials support #549 (adamjmcgrath)
• Authentication API, the Database classs, Add the organization param to the change_password method #539 (shchotse)
• Retry all methods on 429 #518 (adamjmcgrath)

Added

• [SDK-4656] Add fields to all_organization_members #537 (adamjmcgrath)

Fixed

• Fix python dependency version #522 (adamjmcgrath)
• Revert publishing types #521 (adamjmcgrath)

4.4.1 (2023-08-21)

Full Changelog

Fixed

• Fix for async types #515 (adamjmcgrath)

Added

• SDK-4394 Add organization name validation #507 (adamjmcgrath)
• Add type hints to management #497 (Viicos)

Fixed

• Fix asyncify for users client where token is not required #506 (cgearing)

Added

• Add forwardedFor option to password grant login #501 (adamjmcgrath)
• Add connections.all name parameter #500 (adamjmcgrath)
• Add type hints to base and authentication #472 (Viicos)

Fixed

• Fix async auth client #499 (adamjmcgrath)
• Fix update_template_universal_login #495 (adamjmcgrath)

Added

• Add cache_ttl param to AsymmetricSignatureVerifier #490 (matei-radu)

Fixed

• Make pw realm params optional #484 (adamjmcgrath)
• Fix intellisense on Auth0 class #486 (adamjmcgrath)

Added

• Add branding theme endpoints #477 (adamjmcgrath)
• SDK-4011 Add API2 Factor Management Endpoints #476 (adamjmcgrath)

Added

• Add support for private_key_jwt #456 (adamjmcgrath)
• Add support for managing client credentials #459 (adamjmcgrath)

Security

• Update pyjwt #460 (adamjmcgrath)

Changed

• Publish Python Support Schedule #454 (evansims)

⚠️ BREAKING CHANGES

• Remove deprecated methods #461 (adamjmcgrath)
• Remove v3 folder #462 (adamjmcgrath)

See the V4_MIGRATION_GUIDE for more info.

Fixed

• Remove unnecessary type param from update_template_universal_login #463 (adamjmcgrath)

Added

• SDK-3714 Async token verifier #445 (adamjmcgrath)
• Add AsyncAuth0 to share a session among many services #443 (adamjmcgrath)

Fixed

• Bugfix 414 missing import #442 (adamjmcgrath)

Fixed

• Pass rest_options through Auth0 constructor #354 (adamjmcgrath)

Added

• Asyncio Support #312 (adamjmcgrath)
• Add /api/v2/branding endpoints support #313 (evansims)

Added

• [SDK-3174] Add DELETE method for /api/v2/users/{id}/authenticators endpoint #301 (akmjenkins)
• [SDK-3175] Return token claims in TokenVerifier.verify() #273 (bisguzar)

Fixed

• [SDK-3173] Default to 'None' for deployed on GET /api/v2/actions/actions endpoint #309 (evansims)

Added

• Add pagination to device credentials #300 (fionnulak)

Added

• Add attack protection endpoints #303 (adamjmcgrath)

Added

• Add actions to Auth0 class #293 (jrzerr)
• Added support for prompts API #291 (lorinkoz)

Changed

• Remove references to ID token in generic token classes #295 (lbalmaceda)

Fixed

• Use assertNotEqual instead of assertNotEquals for Python 3.11 compatibility. #294 (tirkarthi)

Added

• [SDK-2720] Add support for actions APIs #289 (jimmyjames)

Added

• Make the CI fail when the docs syntax is invalid #287 (lbalmaceda)
• [SDK-2687] Implement automatic rate-limit handling #285 (evansims)
• Use Sphinx to generate API docs #281 (lbalmaceda)
• Add Passwordless Login function #279 (lbalmaceda)
• [SDK 2665] Update endpoint methods to support 'from' and 'take' checkpoint pagination parameters, where appropriate #278 (evansims)

Deprecated

• Deprecate /oauth/ro for passwordless #280 (lbalmaceda)

Fixed Re-Route Job Results endpoint #275 (lbalmaceda)

Fixed

• Remove requirements.txt file #270 (lbalmaceda)
• Repair Organisation get by name URL. #269 (queenvictoria)

Added

• Add access token validation guidance for organizations #262 (lbalmaceda)
• Add support for Organization MGMT API endpoints [SDK-2439] #261 (lbalmaceda)
• Add scope to refresh_token #256 (criles25)
• Allow configuration of outgoing request protocol #254 (garry-jeromson)

Added

• Add support for organizations feature #258 (jimmyjames)

Added

• Add support for Log Streams API #236 (lbalmaceda)

Fixed

• Fix imports on the management/init.py file #235 (matthewarmand)

3.12.0

Added

• Add missing user profile properties to the signup endpoint #231 (lbalmaceda)
• Add Hooks management API #227 (guillp)
• Add missing external_id property to the import users job #222 (lbalmaceda)

Changed

• Remove iat claim value check #223 (lbalmaceda)

Fixed

• Skip sending optional parameters on POST request when unspecified #230 (lbalmaceda)

Added

• Add send_completion_email to users import job #220 (lbalmaceda)
• Expose the time at which the Rate Limit will reset #219 (lbalmaceda)

Removed

• Add deprecation note for DELETE /users (all users) #217 (lbalmaceda)

This release includes a utility class to verify ID Tokens received from Auth0 when the scope requested included openid. Please, refer to the README file to learn how to use it.

Every ID Token should be verified before consumed.

Security

• Improved OIDC compliance #213 (lbalmaceda)

Added

• Add connect/read timeout option #215 (lbalmaceda)

Fixed

• Accept client_secret as passwordless/start param #211 (lbalmaceda)

Changed

• Update minimum "requests" version to 2.14.0 #204 (lbalmaceda)