This is the stable release of the v6 major. It requires the React Native New Architecture (React Native 0.82 or later) and adds support for React Native 0.88. It also adopts the native SDK majors, Auth0.Android v4 and Auth0.swift v3. Read the Migration Guide before upgrading from v5.
Breaking changes
- feat: require React Native New Architecture, drop legacy bridge #1613 (subhankarmaiti)
- feat: adopt native SDK majors (Android v4, Swift v3) for v6 #1619 (subhankarmaiti)
- feat: make DPoP opt-in by defaulting useDPoP to false #1622 (subhankarmaiti)
- feat: remove the client-side Management API surface #1623 (subhankarmaiti)
- refactor: remove the legacy MFA methods from the auth client #1627 (subhankarmaiti)
- refactor: audit the public API surface and freeze the error taxonomy #1634 (NandanPrabhu)
- refactor: drop the I prefix from TypeScript interfaces #1636 (subhankarmaiti)
What this means for your app:
- React Native 0.82+ with the New Architecture is required. Expo apps need SDK 55+.
- Android needs
minSdkVersion26, JDK 17 and compileSdk 36. iOS needs a deployment target of 15.1 and builds with Auth0.swift 3 (Swift 6). - DPoP is off by default. Set
useDPoP: trueto keep using it. getCredentials()andgetApiCredentials()now defaultminTtlto 60 seconds.- The client-side Management API (
users()) and the legacy MFA methods on the auth client are removed. - TypeScript interfaces no longer use the
Iprefix,SSOCredentials.expiresInis nowexpiresAt, and some web auth and credentials manager error codes were renamed or added. - ID token claim validation is opt-in on direct token requests.
Added
- chore: upgrade to React Native 0.88 #1709 (subhankarmaiti)
- feat(android): make Auth Tab and TWA opt-in via JS bridge #1662 (NandanPrabhu)
- feat(ios): honor networkingOptions.enableLogging via Auth0.swift logging #1661 (subhankarmaiti)
- feat: add credentialsManager.clearAll() and default minTtl to 60 #1660 (subhankarmaiti)
- feat(ios): ship a privacy manifest with the A0Auth0 pod #1641 (subhankarmaiti)
- feat: allow configuring Auth0.Android's native networking client #1637 (NandanPrabhu)
- feat: support ephemeral sessions on Android #1626 (NandanPrabhu)
Fixed
- fix(android): bump Auth0.Android to 4.2.1 to keep users logged in after upgrade #1708 (subhankarmaiti)
- fix(android): use underlying cause as the error message #1688 (subhankarmaiti)
- fix(plugin): skip ios linking override on expo sdk 58 #1687 (subhankarmaiti)
- fix: adopt withAuthTab() to fix spurious USER_CANCELLED on Android #1647 (NandanPrabhu)
Documentation
- docs: group ApiCredentials under Classes and fix duplicate
@remarkswarning #1712 (subhankarmaiti) - docs: correct migration guide — Auth Tab is opt-in via useAuthTab; split section 6 #1665 (NandanPrabhu)
- docs(example): restructure example app into per-feature hooks and class demos #1655 (subhankarmaiti)
- docs: document native v4/v3 adoption — linking, claim validation, build floors #1648 (NandanPrabhu)