Added

• feat: CTE delegation and impersonation support #975 (pmathew92)

Fixed

• fix : Handling DPoP enabled WebAuth flow after process death #977 (pmathew92)

Summary by CodeRabbit

• New Features

  • Added support for CTE delegation and impersonation

• Bug Fixes

  • Fixed DPoP enabled WebAuth flow handling after process death

Added

• feat : Add support to pass type parameter to the MyAccount list authentication method API #974 (pmathew92)

Fixed

• fix : Guard against all uncaught exception in the serial executor block #970 (pmathew92)

Added

• feat : Added additional properties support to passkeys signup API #969 (pmathew92)
• feat :Add partial support for PAR auth flow #967 (pmathew92)

⚠️ BREAKING CHANGES

• breaking : Remove redundant constructors from SecureCredentialsManager #961 (pmathew92)

Added

• feat: Added Auth tab support #962 (pmathew92)

Added

• feat : Add Partial Custom Tabs support (bottom sheet & side sheet) #954 (subhankarmaiti)

⚠️ BREAKING CHANGES

• Update the Min SDK version for the Auth0.Android SDK 26 #953 (utkrishtsahu)
• breaking: removed the deprecated MFA APIs #947 (pmathew92)
• breaking: Remove the Management API support #937 (pmathew92)
• breaking: Moved the useDPoP method in the WebAuthProvider class to the login builder class #914 (pmathew92)
• breaking: Removed the PasskeyProvider and the PasskeyManager class #909 (pmathew92)

Added

• feat: Add clearAll() API to credentials manager #951 (pmathew92)
• feat: Add SSOCredentialsDeserializer for proper JSON deserialization of SSOCredentials #931 (pmathew92)
• feat: Add Storage.removeAll(), default minTTL of 60s #918 (utkrishtsahu)
• feat: Add support for ephemeral session for chrome custom tabs #916 (pmathew92)

Fixed

• fix: Handle configuration changes during WebAuth flow to prevent memory leak #941 (utkrishtsahu)

Changed

• refactor: Refactor DefaultClient from constructor-based to Builder pattern for configurable HTTP client options #910 (utkrishtsahu)
• update: Gradle AGP 8 upgrade #900 (pmathew92)
• update: Update dependencies #908 (utkrishtsahu)

Added

• feat: Add three new DPoP errors to CredentialsManagerException #949 (pmathew92)

Changed

• refactor : Made the updateAuthenticationMethodById public #948 (pmathew92)

Fixed

• refactor : Handling more exceptions scenario in DPoP key generation #943 (pmathew92)

Deprecated

• refactor : Deprecate the existing MFA APIs in AuthenticationAPIClient #932 (pmathew92)
• refactor : Deprecated the UsersAPIClient #930 (pmathew92)

Fixed

• fix: Handle ProviderException in PKCS1→OAEP key migration to prevent saveCredentials() crash #924 (utkrishtsahu)
• fix : Added the missing user agent to MyAccount and MFAApiClient #926 (pmathew92)

Added

• Expanding Flexible Factors Grant Android Support #896 (utkrishtsahu)
• fix: Prevent DPoP replay protection error due to OkHttp retry #902 (pmathew92)

Added

• RSA encryption padding change from PKCS1Padding to OAEPWithSHA1And... #834 (utkrishtsahu)
• refactor: Replace synchronized block with AtomicReference for DPoP nonce management #895 (pmathew92)