8.31.0

Added

• Add support for is_default on customDomains. [#1330]
• Add AUTH0_EXPORT_ORDERED config property and --export_ordered flag for stable exports. [#1335]

Fixed

• Fix clientGrants matching when multiple grants share the same client_id and audience. [#1341]

8.30.0

Added

• Add support for passkey enrollment in prompts partials. [#1328]
• Add support for dpop_signing_alg validation in OIDC and Okta connections. [#1343]

Fixed

• Fix action module fetching logic to resolve correct module IDs. [#1340]
• Fix AUTH0_EXCLUDED_* options not respected during export. [#1342]

8.29.3

Fixed

• Fix Universal Login Authentication Profile reverting to Identifier+Password after import when branding is included. [#1333]
• Fix efficiency and reliability of fetching enabled_clients for connections. [#1334]

8.29.2

Fixed

• Fix false-positive deprecation warning for cross_origin_auth when cross_origin_authentication is correctly used in config. [#1322]

8.29.1

Fixed

• Fix bad request error when no emailProvider is configured. [#1321]
• Fix enabled_clients pagination for connections. [#1320]

8.29.0

Added

• Add DPoP support for proof-of-possession mechanism in resourceServers (GA) [#1311]
• Add supplemental signals configuration for Akamai integration.(EA) [#1310]

8.28.0

Added

• Add support for managing action-modules.(EA) [#1302]
• Add support for managing modules in actions.(EA) [#1302]

8.27.0

Added

• Add support for custom_password_hash.action_id in databases (Universal Custom Password Hash EA). [#1288]
• Add support for allowed_strategies in selfServiceProfiles. [#1298]

Fixed

• Fix validation handling for authentication_methods.password.enabled and disable_self_service_change_password in databases. [#1297]
• Fix stripping deprecated enabled_clients for connections with enhanced client management. [#1294]
• Fix exclude third-party clientGrants when AUTH0_EXCLUDE_THIRD_PARTY_CLIENTS is enabled. [#1289]

8.26.0

Added

• Add support for use_for_organization_discovery in organizations discovery-domains. [#1283]
• Add support for passwordless authentication methods (email_otp and phone_otp) in databases. [#1282]
• Add support for relying_party_identifier in customDomains. [#1280]
• Add support for allow_all_scopes property in clientGrants. [#1278]
• Add OIDC logout configuration support with session metadata in clients. [#1263]

Changed

• Optimize directory provisioning configuration fetching for connections. [#1284]

Fixed

• Fix exclude read-only is_default from customDomains. [#1279]
• Fix pagination skipping last page. [#1277]

8.25.0

Added

• AUTH0_INCLUDED_CONNECTIONS config property to include only selected connection. [#1242]

Fixed

• Fix tokenExchangeProfiles profiles handling. [#1253]
• Fix idle_ephemeral_session_lifetime and ephemeral_session_lifetime handling while importing [#1261]