3.0.0-beta.0

Early Availability

⚠️ BREAKING CHANGES

Auth0 Class

• Constructor: The constructor of the Auth0 class is now private. Use Auth0.getInstance(clientId, domain) to get an instance. This method checks if an instance with the given configuration exists; if yes, it returns it, otherwise, it creates a new one.

BaseCredentialsManager Interface

• New Methods: Added multiple overloads of getCredentials() and awaitCredentials() to the BaseCredentialsManager interface. All implementations of this interface must now override these new methods.

Request Interface

• await Function: The await function of the Request interface is now abstract. All implementations must implement this method.

Credentials Class

• Data Class: The Credentials class is now a data class and can no longer be extended. The currentTimeInMillis property has been removed.

SecureCredentialsManager

• requireAuthentication Method: The requireAuthentication method, used to enable authentication before obtaining credentials, has been removed. Refer to the Enabling Authentication section for the new approach.

2.11.0

Added

• Implement headers support in getCredentials and awaitCredentials #699 (poovamraj)

Fixed

• Guard against NullPointerException when getting Credentials from Json #701 (bennycao)

Security

• Bump codecov/codecov-action from 3.1.4 to 4.0.1 #714 (dependabot[bot])
• Bump github/codeql-action from 2 to 3 #705 (dependabot[bot])
• chore(dependencies): Update OkHttp to 4.12.0 #696 (evansims)

2.10.2

2.10.2 (2023-10-04)

Full Changelog

Fixed

• Destroy TWA Launcher at unbind #690 (poovamraj)
• Use ThreadPool to launch browser for authentication #689 (poovamraj)

Security

• Update Okio to resolve CVE-2023-3635 #687 (jimmyjames)
• build(dependencies): Update OkHttp to 4.11.0 [SDK-4501] #684 (evansims)

2.10.1

2.10.1 (2023-08-01)

Full Changelog

Fixed

• Handle SecurityException thrown while launching the browser #677 (poovamraj)

2.10.0

2.10.0 (2023-07-18)

Full Changelog

Added

• Return refreshed Credentials in CredentialsManagerException to avoid logout #666 (poovamraj)
• [SDK-4413] Support Organization Name #669 (poovamraj)
• Add more error pairs to isMultifactorCodeInvalid [SDK-4194] #664 (poovamraj)

Fixed

• Avoid null pointer exception because of error description #667 (poovamraj)
• Revert changes from #654. Fix renew Credentials logic #670 (poovamraj)

Security

• chore(security): Update and pin Graddle workflow actions #671 (evansims)

2.9.3

2.9.3 (2023-05-19)

Full Changelog

Fixed

• Consider SocketException as network error #659 (poovamraj)
• [ESD-28245] Fix not propagating error values from server #658 (poovamraj)

2.9.2

2.9.2 (2023-05-05)

Full Changelog

Fixed

• Add required scopes to token and renewAuth requests #654 (poovamraj)
• Added rule to support Proguard in full mode #652 (poovamraj)

2.9.1

2.9.1 (2023-04-18)
Full Changelog

Fixed

Update dependencies #641 (poovamraj)

⚠️ Breaking Change
This version of Auth0.Android enables developers to use the library when building projects that target the API level 31.

Developers using this version of Auth0.Android will need to update the the compileSdkVersion in their build.gradle to version 31. It's still possible to use targetSdkVersion lower than 31, but it's recommended to migrate as soon as possible.

When migrating to targetSdkVersion 31 and targeting Android 12 or higher, activities, services, or broadcast receivers that use intent filters, must now explicitly declare the android:exported attribute for these app components.

2.9.0

2.9.0 (2023-03-16)

Full Changelog

Added

• Added forceRefresh option to getCredentials #637 (poovamraj)
• Add Invalid refresh token flag #635 (poovamraj)
• [SDK-3348] Implement trusted web activity support #631 (poovamraj)
• Allow authorizeUrl and logoutUrl customisation #622 (poovamraj)
• Add AuthenticationException.isTooManyAttempts error #615 (tomhusson-toast)

Fixed

• Gson crashes when minified with R8 strict mode #634 (wiyarmir)

2.8.1

2.8.1 (2023-01-11)

Full Changelog

This patch release does not contain any functional changes, but is being released using an updated signing key for verification as part of our commitment to best security practices.
Please review the README note for additional details.