8.32.0

Added

• Add support for CIMD client registration via external_client_id, allowing clients to be registered from an OAuth 2.0 Client ID Metadata Document. [#1369]
• Add on_behalf_of_token_exchange to supported token_exchange.allow_any_profile_of_type values for clients. [#1366]
• Add Flexible Password Policy support for database connections. [#1362]
• Add My Org client references support and expand organization connection sync. [#1367]
• Add dry-run mode (GA) with --dry-run, --dry-run --interactive, and --dry-run --apply flags. [#1336]

Fixed

• Fix silent process exit when deploying 3+ organizations with discovery domains. [#1354]
• Fix organization creation response handling and add ID validation. [#1365]
• Fix undefined enabled_clients handling in getEnabledClients. [#1364]
• Fix unresolved keyword placeholders being sent in API payloads before deploy. [#1360]

8.31.0

Added

• Add support for is_default on customDomains. [#1330]
• Add AUTH0_EXPORT_ORDERED config property and --export_ordered flag for stable exports. [#1335]

Fixed

• Fix clientGrants matching when multiple grants share the same client_id and audience. [#1341]

8.30.0

Added

• Add support for passkey enrollment in prompts partials. [#1328]
• Add support for dpop_signing_alg validation in OIDC and Okta connections. [#1343]

Fixed

• Fix action module fetching logic to resolve correct module IDs. [#1340]
• Fix AUTH0_EXCLUDED_* options not respected during export. [#1342]

8.29.3

Fixed

• Fix Universal Login Authentication Profile reverting to Identifier+Password after import when branding is included. [#1333]
• Fix efficiency and reliability of fetching enabled_clients for connections. [#1334]

8.29.2

Fixed

• Fix false-positive deprecation warning for cross_origin_auth when cross_origin_authentication is correctly used in config. [#1322]

8.29.1

Fixed

• Fix bad request error when no emailProvider is configured. [#1321]
• Fix enabled_clients pagination for connections. [#1320]

8.29.0

Added

• Add DPoP support for proof-of-possession mechanism in resourceServers (GA) [#1311]
• Add supplemental signals configuration for Akamai integration.(EA) [#1310]

8.28.0

Added

• Add support for managing action-modules.(EA) [#1302]
• Add support for managing modules in actions.(EA) [#1302]

8.27.0

Added

• Add support for custom_password_hash.action_id in databases (Universal Custom Password Hash EA). [#1288]
• Add support for allowed_strategies in selfServiceProfiles. [#1298]

Fixed

• Fix validation handling for authentication_methods.password.enabled and disable_self_service_change_password in databases. [#1297]
• Fix stripping deprecated enabled_clients for connections with enhanced client management. [#1294]
• Fix exclude third-party clientGrants when AUTH0_EXCLUDE_THIRD_PARTY_CLIENTS is enabled. [#1289]

8.26.0

Added

• Add support for use_for_organization_discovery in organizations discovery-domains. [#1283]
• Add support for passwordless authentication methods (email_otp and phone_otp) in databases. [#1282]
• Add support for relying_party_identifier in customDomains. [#1280]
• Add support for allow_all_scopes property in clientGrants. [#1278]
• Add OIDC logout configuration support with session metadata in clients. [#1263]

Changed

• Optimize directory provisioning configuration fetching for connections. [#1284]

Fixed

• Fix exclude read-only is_default from customDomains. [#1279]
• Fix pagination skipping last page. [#1277]