Changelog

0.0.78

Fix auth refresh silent failure for React Native. This has been a slippery issue, if you use Convex Auth in a React Native app please let us know if this fixes for you.
Expose function reference types SignInAction and SignOutAction for the benefit of other client implementations (Svelte, Solid, etc.). As with all APIs in the library these are not stable and may change until this library reaches 1.0.
Add a platform check in the recommended ConvexAuthProvider use for React Native in docs.

0.0.78

Add support for custom OAuth callback and sign-in URLs
Next.js middleware function isAuthenticated fails more loudly; previously it returned false in the case of a Convex backend that didn't expose an endpoint called auth:isAuthenticated, now it throws an error. This should help people with the migration required for 0.0.76.

0.0.77

Fix syntax of an import to work with convex-test.

0.0.76

BREAKING: A change in the logic for isAuthenticated for Next.js: it now involves a server-side check. Update your auth.ts file by adding a new isAuthenticated endpoint to the list of exported Convex functions, like
```
export const { auth, signIn, signOut, store, isAuthenticated } = convexAuth(...
```
If you're not using Next.js, you should still add this named export as it's the new suggested set of publicly exposed endpoints, but nothing should break if you don't.
Potentially breaking: For NextJS, switched to path-to-regexp 6.3.0 to avoid ReDoS vulnerability. That version, while protected from the vulnerability, has less expressive RegEx pattern support. If you are using createRouteMatcher in middleware, it might not match some patterns that were previously available in the 0.7.x series. See the docs for supported patterns: https://www.npmjs.com/package/path-to-regexp/v/6.3.0.
Upgraded to @auth/core 0.37.3. You may need upgrade @auth/core to "~0.37.3".
Updated OAuth integration docs for supported providers (available at https://labs.convex.dev/auth/config/oauth).

0.0.75

BREAKING: convexAuthNextjsToken() and isAuthenticatedNextjs() now return promises so must be awaited.
Support for Next.js 15.
Update convex peer dependency to ^1.17.0

0.0.74

Fix to header propagation in Next.js middleware
Update Password provider to separate password requirement validation from custom profile information
- Breaking If using Password with a custom profile to enforce password requirements, you must now implement validatePasswordRequirements

0.0.73

Update implementation of refresh tokens reuse Note: After upgrading to this version, downgrading will require migrating the authRefreshTokens table to drop the parentRefreshTokenId field.
Add configuration for cookie age in Next.js middleware

0.0.72

Upgrade + pin @auth/core to 0.36.0 to avoid issues with mismatched types

0.0.71

Fix bug with setting auth cookies on Next.js response

0.0.70

Improve error handling when calling Convex auth functions from Next.js

0.0.69

Add a 10s reuse window for refresh tokens

Note: After upgrading to this version, downgrading will require migrating the authRefreshTokens table to drop the firstUsedTime field.

Fix exported type for signIn from convexAuth

0.0.68

[Next.js] Propagate auth cookies in middleware follow up
Introduce convexAuth.isAuthenticated() and convexAuth.getToken() in favor of isAuthenticatedNextJs() and convexAuthNextJsToken() for middleware.

0.0.67

[Next.js] Propagate auth cookies in middleware

0.0.66

[Next.js] Match auth routes to proxy to Convex with and without trailing slash

0.0.65

Add verbose logging to Next.js middleware

0.0.64

Fix issue with re-entrant fetchAccessToken with a mutex

Previous versions are documented in git history.