v1.7.14

This release introduces client assertion generation, seamless session migration, enhanced outbound connect configuration, and improved handling of multiple cookies.

🚀 New Features & Enhancements

• Client Assertion Generation API – Added the generateClientAssertionJwt API to generate client assertions for secure OAuth authentication flows (e.g., SMART on FHIR) (#573)
• Session Migration – Added support for migrating sessions seamlessly via the externalToken parameter (#576)
• Outbound Connect Tenant Options – Added tenant-specific configuration options for outbound connect (descope-js#1190)

🛠 Fixes & Maintenance

• Multi-Cookie Handling – Fixed regex parsing to correctly handle multiple cookies. The SDK now accurately parses the refresh cookie when a session token is set (#579)

---

🔗 Full Changelog: Compare release/v1.7.13...release/v1.7.14

v1.7.13

This release introduces support for OIDC resource specification in authentication flows, user batch deletion, and improved user search capabilities.

🚀 New Features & Enhancements

• Batch User Deletion – Added support for deleting multiple users in a single request (#568)
• Enhanced User Search by Roles – Enabled searching for users that hold all specified roles within a tenant (#569)
• OIDC Resource Parameter – Added oidcResource parameter support across SDK start options to handle resource specification in inbound app flows (descope-js#1184)

---

🔗 Full Changelog: Compare release/v1.7.12...release/v1.7.13

release/v1.7.12

This release adds support for using management key for Auth requests.

🚀 New Features & Enhancements

• Auth Management Key – Added capability to use management key for Auth requests (#560)

---

🔗 Full Changelog: Compare release/v1.7.11...release/v1.7.12

v1.7.11

This release introduces support for tracking the creation time of users.

🚀 New Features & Enhancements

• User Creation Time Metadata – Added support for retrieving the timestamp when users were created (#555)

---

🔗 Full Changelog: Compare release/v1.7.9...release/v1.7.10

v1.7.9

This release introduces support for executing management flows, outbound app token fetching, enhanced user and tenant management capabilities, and more.

🚀 New Features & Enhancements

• Management Flow Execution – Added support for executing management flows (#554)
• Outbound App Token Fetching – Added methods for retrieving tokens for outbound apps (#540)
• Batch User Creation – Enabled creation of multiple users in a single request (#553)
• Tenant Role Search Enhancements – Added tenantRoleIds and tenantRoleNames filters to user search requests (#552)
• Custom Attribute Improvements – Added support for arrays of strings in custom attribute types (#444)

🛠 Fixes & Maintenance

• Improved Resilience for Edge Cases – Implemented a retry mechanism for handling HTTP 521 and 524 responses (descope-js#1151)

---

🔗 Full Changelog: Compare release/v1.7.8...release/v1.7.9

v1.7.8

This release introduces inbound and outbound app support, improvements to embedded signup, and better role and token handling.

🚀 New Features & Enhancements

• Inbound App Support – Added support for managing inbound apps (#424)
• Outbound App Support – Added support for managing outbound apps (#536, #537)
• Embedded Link Signup – Enable signup via embedded links (#518)
• Default Role Assignment – Added support for assigning default roles to users (#520)
• Login Hint for SSO and OAuth – Added support for passing a loginHint parameter to SSO and OAuth flows (#1124)

🛠 Fixes & Maintenance

• Return Refresh JWT – Fixed missing refresh JWT in response (#530)
• Removed deprecated templateId field (#538)
• Fix JWT Refresh with Cookies – Resolved errors occurring during JWT refresh when tokens are stored in cookies (#535)
• Fix createdTime typo in User object (#1096)

---

🔗 Full Changelog: Compare release/v1.7.6...v1.7.8

v1.7.7

1.7.7 (2025-06-11)

Start a new release process.

1.7.6

This release brings enhancements to tenant management, FGA resource APIs, impersonation handling, and refresh token customization.

🚀 New Features & Enhancements

• Custom Refresh Token Duration – Allow setting a custom refresh token duration during authentication (#511)
• Tenant API Enhancements – Introduced enforceSSO and disabled fields in the tenant management API (#478)
• Save/Load FGA Resource Details – Added management APIs to persist FGA resource configurations (#512)
• Stop Impersonation API – Introduced an endpoint to explicitly stop an active impersonation session (#513)

---

🔗 Full Changelog: Compare release/v1.7.5...release/v1.7.6

1.7.5

This release brings enhancements to role search, authorization search flexibility, and user invitation options.

🚀 New Features & Enhancements

• Expand Role Search Options – Add the ability to include project roles in role search (#503)
• Authz Search Target Set Control – Allow ignoring or including target sets in authorization search methods (resourceRelations / targetsRelations) (#502)
• Invite Users with Specific Status – Support inviting users with a predefined user status (#505)
• Custom Template for Email Update Magic Link – Support providing provider and template IDs when sending a Magic Link to update a user's email
• Add SCIM Attribute to User – Add SCIM attribute to identify if the user was created by SCIM (#460)
• Default SSO Roles Support – Configure and manage default roles for SSO users (#494)
• Improve Authz Relations Delete APIs – Enhancements to authorization relation deletion (#484)
• Allow Updating WebAuthn Without a Token – Enables WebAuthn updates without requiring a token (descope-js#1059)

1.7.2

Enhancements

• Multi-SSO CRUD Support: Expanded functionality to manage multiple SSO configurations through Create, Read, Update, and Delete operations.
• Enhanced SSO User Mapping: The SSO user mapping type has been refined to provide better flexibility and accuracy.
• Edit Access Key Attributes: Support modifying attributes of access keys.
• Support for Retrieving Current Tenant: Added the ability to fetch the currently active tenant, using the getCurrentTenant function.
• Cookie Rename Support: Introduced support for renaming refresh cookie to align with updated configurations.
• Default Log Level Adjustment: The default log level in the example management CLI is now set to DEBUG for improved debugging and visibility.

For more details, check the pull requests:

• Node SDK PRs
• Descope JS PRs

🚀 Happy coding!