2.5.0

Full Changelog

Added

• Credentials Managers: renew tokens with extra parameters #514 (lustikuss)

Changed

• Update Configuration URL (CDN URL) [SDK-2710] #520 (lbalmaceda)

Fixed

• Fix memory leak in CustomTabsService #517 (lbalmaceda)
• Prevent NPE when parsing email_verified boolean #516 (lbalmaceda)
• Proper migration for the new key sets was applied #512 (lbalmaceda)
• Always close request body InputStream when exception occurs #492 (Marcono1234)

2.4.0

Full Changelog

Added

• Add federated option to the Web Auth Logout [SDK-2165] #501 (lbalmaceda)
• Add support for Recovery Code multi-factor authentication #500 (lbalmaceda)
• Add support for OOB multi-factor authentication [SDK-2657] #498 (lbalmaceda)

Fixed

• Fix MFA Challenge authentication and prevent sending the scope again #504 (lbalmaceda)
• Fix bug parsing content type headers #503 (lbalmaceda)
• Catch IOExceptions from response body InputStream #486 (jeffdgr8)

2.3.0

Full Changelog

Changed

• Explicitly specify charset, don't rely on default charset #491 (Marcono1234)
• Disable share button in Chrome custom tabs #489 (latsson)
• Rewrite ThreadSwitcher class so that it is not tied to Looper #482 (alvindizon)

Fixed

• Improve access_denied error handling by using the description #494 (lbalmaceda)

2.2.0

Full Changelog

Added

• Accept UserMetadata for creating users [SDK-2429] #475 (lbalmaceda)

Fixed

• Let dokka plugin pull dependencies from JCenter #471 (lbalmaceda)

2.1.0

Full Changelog

Added

• Add support for Organizations [SDK-2396] #467 (lbalmaceda)

Changed

• Migrate to newer OSS Plugin with support for Sonatype #469 (lbalmaceda)

Fixed

• Add Java's R8 Proguard rules for Gson #465 (lbalmaceda)

2.0.0

This is a major release and contains breaking changes!

Please see the migration guide document. The full changelog from version 1 to version 2 is here.

New requirements

v2 requires Android API version 21 or later and Java 8+. Update your build.gradle file with the following:

android {
    compileOptions {
        sourceCompatibility JavaVersion.VERSION_1_8
        targetCompatibility JavaVersion.VERSION_1_8
    }
    kotlinOptions {
        jvmTarget = '1.8'
    }
}

Main features

• Supports exclusively the OpenID Connect authentication pipeline from Auth0.
• Uses AndroidX dependencies, and drops the use of the Jetifier plugin.
• Reworked networking stack. Offers a customizable Networking Client.

See the changelog entries for additional details.

2.0.0-beta.0

2.0.0-beta.0 (2021-01-19)

Full Changelog

Changed

• Refactor JWT decoding logic #443 (lbalmaceda)
• Explicitly reject "none" signing algorithm #442 (lbalmaceda)
• Receive NetworkingClient through the Auth0 instance #440 (lbalmaceda)
• Update the Credentials class #435 (lbalmaceda)
• Move to a JSON client singleton #433 (lbalmaceda)
• Migrate default NetworkingClient implementation to use OkHttp #428 (lbalmaceda)
• Enforce the "openid" scope for the WebAuthProvider #422 (lbalmaceda)
• Update WebAuthProvider#start required Context #421 (lbalmaceda)
• Stop using kotlin.Unit in public APIs #414 (lbalmaceda)
• Migrate Public API to Kotlin #410 (lbalmaceda)

Deprecated

• Deprecate isAuthenticationCanceled in favor of isCanceled #425 (lbalmaceda)
• Merge BaseCallback into Callback #416 (jimmyjames)

Removed

• Remove setUserAgent methods from API clients #444 (lbalmaceda)
• Remove timeouts and logging setters from Auth0 class #441 (lbalmaceda)
• Run and fix inspections, remove unused classes #439 (lbalmaceda)
• Remove obsolete config properties #432 (jimmyjames)
• Remove DatabaseConnectionRequest class #417 (lbalmaceda)

Fixed

• Fix request to patch user metadata #429 (lbalmaceda)

Breaking changes

• Stop using VoidCallback on WebAuth Logout #424 (lbalmaceda)
• Change WebAuthProvider (Login) callback type #415 (lbalmaceda)

1.30.0

Full Changelog

Added

• Add custom headers to social token request [SDK-2080] #351 (TLFilip)

Deprecated

• Deprecate API client constructors that take Context #393 (lbalmaceda)
• Deprecate AuthorizableRequest #392 (lbalmaceda)
• Deprecate Legacy Authentication APIs #391 (jimmyjames)

1.29.2

Full Changelog

Fixed

• Refactor: Move passwordless "invalid credentials" errors #373 (lbalmaceda)

1.29.1

Full Changelog

Fixed

• Handle API response for mobile OTP code incorrect. #371 (nicbell)