clerk/javascript @clerk/express@1.6.0

on GitHub

Minor Changes

• Machine authentication is now supported for advanced use cases via the backend SDK. You can use clerkClient.authenticateRequest to validate machine tokens (such as API keys, OAuth tokens, and machine-to-machine tokens). No new helpers are included in these packages yet. (#5689) by @wobsoriano

  Example (Astro):

  import { clerkClient } from '@clerk/astro/server';
  
  export const GET: APIRoute = ({ request }) => {
    const requestState = await clerkClient.authenticateRequest(request, {
      acceptsToken: 'api_key',
    });
  
    if (!requestState.isAuthenticated) {
      return new Response(401, { message: 'Unauthorized' });
    }
  
    return new Response(JSON.stringify(requestState.toAuth()));
  };

• The svix dependency is no longer needed when using the verifyWebhook() function. verifyWebhook() was refactored to not rely on svix anymore while keeping the same functionality and behavior. (#6059) by @royanger

  If you previously installed svix to use verifyWebhook() you can uninstall it now:

  npm uninstall svix

Patch Changes

• Updated dependencies [ea622ba, d8fa5d9, be2e89c, c656270, 5644d94, b578225, 918e2e0, 795d09a, 4f93634, 8838120]:
  • @clerk/backend@2.0.0
  • @clerk/types@4.60.0
  • @clerk/shared@3.9.6