⚠️ BREAKING CHANGES

• breaking: Removed deprecated MFA APIs #1159 (NandanPrabhu)

Added

• Custom Token Exchange delegation and impersonation support #1190 (NandanPrabhu)

Fixed

• add DPoP parameter for updateAuthenticationMethod API and update docs for GA #1191 (subhankarmaiti)

Added

• feat: add public memberwise initializers to passkey challenge types #1188 (subhankarmaiti)

Added

• feat: add type filter support to MyAccount getAuthenticationMethods #1184(sanchitmehtagit)
• feat: Add update authentication method to My Account API client #1186(sanchitmehtagit)
• feat: Add DPoP support to My Account API client #1185(sanchitmehtagit)

Added

• feat: Added additional properties support to passkeys signup API #1179 (NandanPrabhu)
• feat:Add partial support for PAR auth flow #1175 (pmathew92)
• Make PARWebAuth type internal exposing only protocol #1180(sanchitmehtagit)

Added

• feat: handle interactive dismissal for WKWebView sheet presentation #1168 (sanchitmehtagit)
• feat: Add Error handling for DPoP thumbprint mismatch error to master #1166 (NandanPrabhu)

Fixed

• refactor: Align nonce computation with other mobile SDKs #1118 (NandanPrabhu)

💡 Check the Migration Guide to understand the changes required to migrate your application to v3.

⚠️ BREAKING CHANGES

• Throwing storage methods: CredentialsManager and CredentialsStorage methods now throw instead of returning Bool or nil, so failures are never silently swallowed. #1127 (NandanPrabhu)
• breaking: remove Management API client #1104 (sanchitmehtagit)
• feat: Add Error handling for DPoP thumbprint mismatch error #1145 (NandanPrabhu)
• feat: Swift 6 strict concurrency compliance for web Auth: #1138 (sanchitmehtagit) & #1123 (sanchitmehtagit)
• feat: Swift 6 MainActor callbacks across all public APIs and Request<T: Sendable> constraint #1142 (sanchitmehtagit)
• feat: Update default values for minTTL, scope, and connection parameters to improve developer experience #1080 (sanchitmehtagit)
• Rename clearSession() to logout() and UserInfo to UserProfile #1105(utkrishtsahu)
• rename expiresIn to expiresAt and Telemetry to Auth0ClientInfo #1114 (utkrishtsahu)

Added

• feat: integrate credentials manager with webauth #1146 (subhankarmaiti)
• feat: add clearAll() API to CredentialsManager and deleteAllEntries() method CredentialsStorage #1116 (utkrishtsahu)
• ID token validation for the API that return id token as part of Credentials and SSOCredentials #1091 (NandanPrabhu)

Changed

• feat: Removes three sources of mutable global state that block Swift 6 strict concurrency #1141 (sanchitmehtagit)
• feat: Swift 6 Sendable closures and CredentialsManager parameter Sendability #1140 (sanchitmehtagit)
• feat: add Sendable annotations to closure parameters for Swift 6 compliance #1128 (sanchitmehtagit)
• feat: add Sendable conformances to value types and protocols that are inherently thread-safe #1102 (sanchitmehtagit)
• chore: enable Swift 6 language mode in Package.swift #1155 (sanchitmehtagit)

Dependency Update

• chore: JWTDecode updated to 4.0 for swift 6 compliance #1101 (sanchitmehtagit)

Added

• feat: make Auth0APIError.isRetryable public for better Error Handling DX.This property can be used for errorhandling across MFA, Authentication and MyAccount APIs #1110 (sanchitmehtagit)
• docs: Update Native to Web feature docs for GA release #1099 (sanchitmehtagit)

Deprecated

• chore: deprecate Management API client ahead of next major removal #1107 (sanchitmehtagit)

Added

• Add support of custom parameters to Custom token Exchange API #1068 (Paulina Stancu)

New Contributors

• @popaulina made her first contribution in Auth0 Swift SDK 🚀🚀

Contributors

• @popaulina