v1.7.0-beta.2

Changed

• Fixed issue with cache not retaining refresh token #333 (stevehobbsdev)

v1.6.2

• Removed future issued-at claim check stevehobbsdev - #329

v1.7.0-beta.1

Added

• Ability to use either an in-memory cache (the default) or localstorage to store tokens - stevehobbsdev - #303
• Added support for rotating refresh tokens - stevehobbsdev - #315

New cache location options

By default, auth0-spa-js will store tokens in memory. We have now added a second option, allowing you to store tokens in local storage. This has the benefit of being able to persist tokens across page refreshes.

The storage strategy can be configured using the option cacheLocation when invoking createAuth0Client:

const auth0 = await createAuth0Client({
    domain: '<your Auth0 domain>',
    client_id: '<your Auth0 client ID>',
    cacheLocation: 'localstorage'
});

The cacheLocation option can be set to one of two values: memory, or localstorage.

Note: Please be aware that configuring the SDK to store tokens in local storage could leave your tokens vulnerable in the event of an XSS attack.

v1.6.1

• Included core-js polyfill for String.includes to fix an issue with browser-tabs-lock in IE11 stevehobbsdev - #325

• Added import definition to Getting Started section in the Readme for clarity thundermiracle - #294

v1.6.0

Added
Added buildAuthorizeUrl and url parameter to handleRedirectCallback - austin43 - #280

Fixed
Released browser lock on getTokenSilently error - #276
Updates browser-tabs-lock to fix issue of long acquired lock - super-tokens - 3413e30

v1.5.0

Added
Add a new property 'fragment' to be appended to the authorize URL on redirect - #249

v1.4.2

Fixed
Update typescript definition for max_age param - #260
Fix for typings files in packaged SDK - #263

v1.4.0

Added
Add 'lock' to prevent getTokenSilently to be invoked in parallel #238
Improved OIDC compliance #248

Fixed
Fix for race condition when using sha256 on IE11 #252
Fixed the codeowners file with the correct group #253
Document leeway default value #256
Clear transaction data on error #254

v1.3.2

parseQueryString now removes hash fragment on query before parsing #246

v1.3.1

Fixed
Fix IE msCrypto.subtle usage #242