2.9.1

2.9.1 (2023-04-18)
Full Changelog

Fixed

Update dependencies #641 (poovamraj)

⚠️ Breaking Change
This version of Auth0.Android enables developers to use the library when building projects that target the API level 31.

Developers using this version of Auth0.Android will need to update the the compileSdkVersion in their build.gradle to version 31. It's still possible to use targetSdkVersion lower than 31, but it's recommended to migrate as soon as possible.

When migrating to targetSdkVersion 31 and targeting Android 12 or higher, activities, services, or broadcast receivers that use intent filters, must now explicitly declare the android:exported attribute for these app components.

2.9.0

2.9.0 (2023-03-16)

Full Changelog

Added

• Added forceRefresh option to getCredentials #637 (poovamraj)
• Add Invalid refresh token flag #635 (poovamraj)
• [SDK-3348] Implement trusted web activity support #631 (poovamraj)
• Allow authorizeUrl and logoutUrl customisation #622 (poovamraj)
• Add AuthenticationException.isTooManyAttempts error #615 (tomhusson-toast)

Fixed

• Gson crashes when minified with R8 strict mode #634 (wiyarmir)

2.8.1

2.8.1 (2023-01-11)

Full Changelog

This patch release does not contain any functional changes, but is being released using an updated signing key for verification as part of our commitment to best security practices.
Please review the README note for additional details.

2.8.0

2.8.0 (2022-07-05)

Full Changelog

Added

• [SDK-3329] Improved ID token exception API #577 (poovamraj)
• [SDK-3144] Add user property to Credentials #569 (adamjmcgrath)
• [SDK-3353] Validate claims for ID Token received in Authentication API Client #575 (poovamraj)
• [SDK-3346] Implemented coroutine support #563 (poovamraj)

Changed

• [SDK-3358] Improve Android README #579 (adamjmcgrath)
• [SDK-3352] Expire credentials based on access token alone #572 (adamjmcgrath)

Deprecated

• Remove user_metadata use case from addSignUpParameters #567 (adamjmcgrath)

Fixed

• [SDK-3452] Network Exception Issue Fix #580 (poovamraj)
• [SDK-3350] Empty credentials before continuing should throw CredentialsManagerException #576 (poovamraj)
• [SDK-3354] Deserialize UserProfile.createdAt as ISO8601 #571 (adamjmcgrath)
• [SDK-3082] Avoid config change to handle authentication #566 (poovamraj)
• createdAt should be deserialized as ISO8601 UTC (not local time) #564 (adamjmcgrath)

Security

• Security: Update OkHttp to 4.10.0 #574 (evansims)
• Security: Bump Kotlin Stdlib to 1.6.20 to address CVE-2022-24329 #552 (evansims)
• Bump OkHttp version #551 (lbalmaceda)

2.7.0

Full Changelog

Changed

• Implement Thread Safe Credential Manager #542 (poovamraj)

2.6.0

Full Changelog

Changed

• Improve authenticated flow of the Credentials Manager #519 (lbalmaceda)

2.5.1

Full Changelog

Security

• Bump GSON dependency to 2.8.9 #526 (evansims)

2.5.0

Full Changelog

Added

• Credentials Managers: renew tokens with extra parameters #514 (lustikuss)

Changed

• Update Configuration URL (CDN URL) [SDK-2710] #520 (lbalmaceda)

Fixed

• Fix memory leak in CustomTabsService #517 (lbalmaceda)
• Prevent NPE when parsing email_verified boolean #516 (lbalmaceda)
• Proper migration for the new key sets was applied #512 (lbalmaceda)
• Always close request body InputStream when exception occurs #492 (Marcono1234)

2.4.0

Full Changelog

Added

• Add federated option to the Web Auth Logout [SDK-2165] #501 (lbalmaceda)
• Add support for Recovery Code multi-factor authentication #500 (lbalmaceda)
• Add support for OOB multi-factor authentication [SDK-2657] #498 (lbalmaceda)

Fixed

• Fix MFA Challenge authentication and prevent sending the scope again #504 (lbalmaceda)
• Fix bug parsing content type headers #503 (lbalmaceda)
• Catch IOExceptions from response body InputStream #486 (jeffdgr8)

2.3.0

Full Changelog

Changed

• Explicitly specify charset, don't rely on default charset #491 (Marcono1234)
• Disable share button in Chrome custom tabs #489 (latsson)
• Rewrite ThreadSwitcher class so that it is not tied to Looper #482 (alvindizon)

Fixed

• Improve access_denied error handling by using the description #494 (lbalmaceda)