3.20.0

Added

• feat: Added DPoP support for MFA APIs #992 (pmathew92)
• feat: enforce IPSIE session_expiry ceiling in credentials managers #983 (utkrishtsahu)
• feat : Added passwordless API for DB-Connections #989 (pmathew92)

Summary by CodeRabbit

• New Features

  • Added DPoP support for MFA-related APIs.
  • Added enforcement for a maximum session_expiry value.
  • Added a passwordless option for DB-Connections APIs.

• Chores

  • Updated the package version to 3.20.0 and refreshed the installation example to match.

3.19.0

Added

• feat: CTE delegation and impersonation support #975 (pmathew92)

Fixed

• fix : Handling DPoP enabled WebAuth flow after process death #977 (pmathew92)

Summary by CodeRabbit

• New Features

  • Added support for CTE delegation and impersonation

• Bug Fixes

  • Fixed DPoP enabled WebAuth flow handling after process death

3.18.0

Added

• feat : Add support to pass type parameter to the MyAccount list authentication method API #974 (pmathew92)

Fixed

• fix : Guard against all uncaught exception in the serial executor block #970 (pmathew92)

3.17.0

Added

• feat : Added additional properties support to passkeys signup API #969 (pmathew92)
• feat :Add partial support for PAR auth flow #967 (pmathew92)

4.0.0-beta.1

⚠️ BREAKING CHANGES

• breaking : Remove redundant constructors from SecureCredentialsManager #961 (pmathew92)

Added

• feat: Added Auth tab support #962 (pmathew92)

3.16.0

Added

• feat : Add Partial Custom Tabs support (bottom sheet & side sheet) #954 (subhankarmaiti)

4.0.0-beta.0

⚠️ BREAKING CHANGES

• Update the Min SDK version for the Auth0.Android SDK 26 #953 (utkrishtsahu)
• breaking: removed the deprecated MFA APIs #947 (pmathew92)
• breaking: Remove the Management API support #937 (pmathew92)
• breaking: Moved the useDPoP method in the WebAuthProvider class to the login builder class #914 (pmathew92)
• breaking: Removed the PasskeyProvider and the PasskeyManager class #909 (pmathew92)

Added

• feat: Add clearAll() API to credentials manager #951 (pmathew92)
• feat: Add SSOCredentialsDeserializer for proper JSON deserialization of SSOCredentials #931 (pmathew92)
• feat: Add Storage.removeAll(), default minTTL of 60s #918 (utkrishtsahu)
• feat: Add support for ephemeral session for chrome custom tabs #916 (pmathew92)

Fixed

• fix: Handle configuration changes during WebAuth flow to prevent memory leak #941 (utkrishtsahu)

Changed

• refactor: Refactor DefaultClient from constructor-based to Builder pattern for configurable HTTP client options #910 (utkrishtsahu)
• update: Gradle AGP 8 upgrade #900 (pmathew92)
• update: Update dependencies #908 (utkrishtsahu)

3.15.0

Added

• feat: Add three new DPoP errors to CredentialsManagerException #949 (pmathew92)

Changed

• refactor : Made the updateAuthenticationMethodById public #948 (pmathew92)

Fixed

• refactor : Handling more exceptions scenario in DPoP key generation #943 (pmathew92)

3.14.0

Deprecated

• refactor : Deprecate the existing MFA APIs in AuthenticationAPIClient #932 (pmathew92)
• refactor : Deprecated the UsersAPIClient #930 (pmathew92)

Fixed

• fix: Handle ProviderException in PKCS1→OAEP key migration to prevent saveCredentials() crash #924 (utkrishtsahu)
• fix : Added the missing user agent to MyAccount and MFAApiClient #926 (pmathew92)

3.13.0

Added

• Expanding Flexible Factors Grant Android Support #896 (utkrishtsahu)
• fix: Prevent DPoP replay protection error due to OkHttp retry #902 (pmathew92)