Added

• [DXEX-455] Allow custom headers to be set in Management/Auth Clients. #460 (seejee)

Changed

• Updates node-jwks-rsa #461 (davidpatrick)

Fixed

• Update lru-memoizer dependency to avoid DeprecationWarning Buffer() #459 (jalie)
• getUsersInRole Docs #457 (davidpatrick)

Security

• [Security] Bump codecov from 3.5.0 to 3.6.5 #462 (dependabot-preview[bot])

Full Changelog

Added

• Support for Hooks API #440 (astanciu)

Full Changelog

Added

• Improved OIDC compliance #446 (davidpatrick)

Changed

• Add client secret to refreshToken and remove ID token validation #433 (joshcanhelp)

Security

• [Security] Bump handlebars from 4.1.2 to 4.5.3 #441 (dependabot-preview[bot])
• Update rest-facade dependency #436 (joshcanhelp)

Full Changelog

Added

• expose createEmailTemplate, getEmailTemplate, updateEmailTemplates vi… #416 (rameshanandakrishnan)

Security

• Sanitize Error Request Data #424 (davidpatrick)
• [Security] Bump mixin-deep from 1.3.1 to 1.3.2 #421 (dependabot-preview[bot])

Added

• Implement auth0-forwarded-for header passing in Authentication Client #401 (kjarmicki)

Changed

• Improve JobManager (get errors + parse error message when importing users) #407 (jbauth0)

Full Changelog

Changed

• Encode id param on GET #374 (luisrudge)

Added

• Add Management API support for Branding and Prompts endpoints. #370 (chrisscott)

Fixed

• Fix telemetry header #362 (lbalmaceda)

Added

• Add method to assign users to a role #348 (pushpabrol)
• Add support for roles and permissions #344 (pushpabrol)

Added

• Add support for Auth0 Grants #343 (jsmpereira)