v2.11.1

Fixed

• fix: clear cache when different user logs in without logout #1456 (yogeshchoudhary147)

v2.11.0

Added

• feat: add organization parameter support to token exchange #1477 (yogeshchoudhary147)

v2.10.0

Added

• feat: Improve popup open error #1292 (ArthurKnoep)

v2.9.1

Added

• Export type for Custom Token Exchange support #1461 (yogeshchoudhary147)

v2.9.0

Added

• feat: add support scopes parameter for connected accounts #1458 (guabu)

Security

• security: Upgrade component-cdn-uploader to v2.4.0 to address critical vulnerability of form-data package #1454 (ankita10119)

v2.8.0

Added

• feat: ensure to only lock for the same audience and client_id #1408 (frederikprijck)
• Allow authorizationParameters.scope to accept an object #1446 (aridibag)

Fixed

• fix: ensure to strip auth0Client #1438 (frederikprijck)
• Avoid saving token when MissingRefreshTokenError is thrown #1448 (aridibag)

v2.7.0

Added

• Retry when DPoP nonce is expired #1445 (adamjmcgrath)
• Support mix of DPoP and Bearer in the fetcher #1442 (adamjmcgrath)

Fixed

• Fix MRRT with default audience in worker #1439 (aridibag)
• Fetcher: fix incorrect URL building when baseUrl is present #1435 (martinml)

v2.6.0

Added

• Add support for connected accounts #1422 (adamjmcgrath)

Fixed

• Fetcher should set DPoP nonce with nonce id #1431 (adamjmcgrath)
• fix: do not mark setAuthorizationHeader as async #1428 (frederikprijck)

v2.5.0

Added

• Add Support for Multi-Resource Refresh Tokens (MRRT) #1386 (aridibag)
• Make Fetcher to be Scope- and Audience-Aware #1414 (frederikprijck)

v2.4.1

Fixed

• fix: move runtime dependencies from devDependencies to dependencies #1411 (gyaneshgouraw-okta)