v2.21.0

Added

• Improved OIDC compliance #446 (davidpatrick)

Changed

• Add client secret to refreshToken and remove ID token validation #433 (joshcanhelp)

Security

• [Security] Bump handlebars from 4.1.2 to 4.5.3 #441 (dependabot-preview[bot])
• Update rest-facade dependency #436 (joshcanhelp)

Full Changelog

v2.20.0

Added

• expose createEmailTemplate, getEmailTemplate, updateEmailTemplates vi… #416 (rameshanandakrishnan)

Security

• Sanitize Error Request Data #424 (davidpatrick)
• [Security] Bump mixin-deep from 1.3.1 to 1.3.2 #421 (dependabot-preview[bot])

v2.19.0

Added

• Implement auth0-forwarded-for header passing in Authentication Client #401 (kjarmicki)

Changed

• Improve JobManager (get errors + parse error message when importing users) #407 (jbauth0)

Full Changelog

v2.18.1

Changed

• Encode id param on GET #374 (luisrudge)

v2.18.0

Added

• Add Management API support for Branding and Prompts endpoints. #370 (chrisscott)

v2.17.1

Fixed

• Fix telemetry header #362 (lbalmaceda)

v2.17.0

Added

• Add method to assign users to a role #348 (pushpabrol)
• Add support for roles and permissions #344 (pushpabrol)

v2.16.0

Added

• Add support for Auth0 Grants #343 (jsmpereira)

v2.15.0

Added

• Add users-exports endpoint #340 (arjenvanderende)

Fixed

• Don't validate id_token when alg is HS256 and there is no clientSecret #330 (luisrudge)

v2.14.0

Merge pull request #317 from auth0/prepare-2.14.0

v2.14.0