fix(deps): update dependency @clerk/clerk-js to v5 #96
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^4.54.2
->^5.0.0
Release Notes
clerk/javascript (@clerk/clerk-js)
v5.22.3
Compare Source
Patch Changes
Restore behavior of MetaMask compatible Web3 wallets. Before, even if a user didn't use the MetaMask browser extension but a compatible one, such as Rabby Wallet, it was possible to use it as they share the same API to authenticate themselves. This behavior stopped working when we added support for EIP6963 regarding handling multiple injected providers. This commit restores the previous behavior by using the existing injected provider if there is a single one (#4185) by @chanioxaris
Updated dependencies [
5dde18f6b
]:v5.22.2
Compare Source
Patch Changes
Add color to phone input select options to fix rendering within dark and shadesOfPurple themes. (#4176) by @alexcarpenter
Updated dependencies [
3743eb911
]:v5.22.1
Compare Source
Patch Changes
2d8e6e9d0
,bcc5eba39
]:v5.22.0
Compare Source
Minor Changes
Experimental support for
has()
with assurance. (#4118) by @panteliselefExample usage:
Created a shared utility called
createCheckAuthorization
exported from@clerk/shared
Patch Changes
Moves
fastDeepMerge
utils to@clerk/shared
package. (#4056) by @alexcarpenterAdds translation keys for error messages from the organizations API. (#4123) by @LauraBeatris
Updated dependencies [
23b850f5f
,ace56babd
,ba19be354
,248142a6d
,1189f71f8
,de1ba10b4
]:v5.21.2
Compare Source
Patch Changes
be3b119f8
]:v5.21.1
Compare Source
Patch Changes
Update type of
__experimental_factorVerificationAge
to be[number, number] | null
. (#4135) by @panteliselefUpdated dependencies [
8c6909d46
]:v5.21.0
Compare Source
Minor Changes
fva
that tracks the age of verified factor groups. (#4061) by @panteliselefServer side
This can be applied to any helper that returns the auth object
Nextjs example
Client side
React example
Patch Changes
Fix bug where session.getToken() was reading a stale organization ID. (#4112) by @BRKalow
Drop support for deprecated Coinbase Web3 provider (#4092) by @chanioxaris
Ensure we don't access
window.addEventListener()
andwindow.dispatchEvent
in non-browser environments. (#4095) by @wobsorianoSupport
phone_code
as first factor for the experimental UserVerification component. (#4085) by @panteliselefUpdated dependencies [
c63a5adf0
,8823c21a2
,95ac67a14
,a0cb062fa
,746b4ed5e
,feb9e14d4
]:v5.20.0
Compare Source
Minor Changes
Add support for the Coinbase Wallet web3 provider and authentication strategy. The Coinbase Wallet provider handles both Coinbase Wallet extension and Smart Wallet (#4082) by @chanioxaris
Experimental: Persist the Clerk client after signing out a user. (#3941) by @panteliselef
This allows for matching a user's device with a client. To try out this new feature, enable it in your
<ClerkProvider />
orclerk.load()
call.Patch Changes
8a3b9f079
,e95c28196
]:v5.19.0
Compare Source
Minor Changes
Add new
UserVerification
component (experimental feature). This UI component allows for a user to "re-enter" their credentials (first factor and/or second factor) which results in them being re-verified. (#4016) by @panteliselefNew methods have been added:
__experimental_openUserVerification()
__experimental_closeUserVerification()
__experimental_mountUserVerification(targetNode: HTMLDivElement)
__experimental_unmountUserVerification(targetNode: HTMLDivElement)
Move SessionVerification methods from UserResource to SessionResource: (#4073) by @panteliselef
user.__experimental_verifySession
->session.__experimental_startVerification
user.__experimental_verifySessionPrepareFirstFactor
->session.__experimental_prepareFirstFactorVerification
user.__experimental_verifySessionAttemptFirstFactor
->session.__experimental_attemptFirstFactorVerification
user.__experimental_verifySessionPrepareSecondFactor
->session.__experimental_prepareSecondFactorVerification
user.__experimental_verifySessionAttemptSecondFactor
->session.__experimental_attemptSecondFactorVerification
Patch Changes
Bug fix: Use the EIP-6963 standard to get a Web3 provider when more than one provider is injected. (#4059) by @EmmanouelaPothitou
chore(clerk-js): Display shortened web3 wallet address on user profile (#4074) by @EmmanouelaPothitou
chore(clerk-js): Add 'Unverified' or 'Primary' tag next to the Web3 wallet address on the user profile. (#4077) by @EmmanouelaPothitou
Updated dependencies [
afad9af89
,82593173a
,afad9af89
]:v5.18.0
Compare Source
Minor Changes
Patch Changes
Tidy up and improve README (#4053) by @LekoArts
Updated dependencies [
58e6754ad
,13693018f
,3aa63dc5a
,3304dcc0b
]:v5.17.0
Compare Source
Minor Changes
Patch Changes
Fix 404s after signing out in NextJS apps by keeping the session cookie while cache is being invalidated (#4001) by @nikosdouvlis
Updated dependencies [
7ca43acae
,c1389492d
]:v5.16.1
Compare Source
Patch Changes
Remove sessionId parameter from all experimental verify session methods. (#4026) by @panteliselef
Introduce Coinbase Wallet Web3 provider types (#4028) by @chanioxaris
Change the webpackChunkName of GoogleOneTap from
"oneTap"
to"onetap"
for consistency. (#4036) by @panteliselefFixes issue where
createFlexGapPropertyIosCompat
was incorrectly detecting a modern Chrome for iOS user agent. (#4034) by @alexcarpenterIntroduce support for the Hugging Face OAuth Provider. (#4021) by @Nikpolik
Updated dependencies [
0158c774a
,8be1a7abc
]:v5.16.0
Compare Source
Minor Changes
Expose
SessionVerification
as an experimental resource. (#4011) by @panteliselefUpdate
UserResource
with 5 new experimental methods:experimental_verifySession
for creating a new SessionVerification record and initiating a new flow.experimental_verifySessionPrepareFirstFactor
for preparing a supported first factor likephone_code
experimental_verifySessionAttemptFirstFactor
for attempting a supported first factor likepassword
experimental_verifySessionPrepareSecondFactor
for preparing a supported second factor likephone_code
experimental_verifySessionAttemptSecondFactor
for attempting a supported second factor liketotp
Fixes a bug where multiple tabs with different active organizations would not always respect the selected organization. Going forward, when a tab is focused the active organization will immediately be updated to the tab's last active organization. (#3786) by @BRKalow
Additionally,
Clerk.session.getToken()
now accepts anorganizationId
option. The provided organization ID will be used to set organization-related claims in the generated session token.Patch Changes
Fixes an issue in Connected Accounts menu that was related to Custom OAuth Providers: (#4014) by @nikospapcom
Resolves undefined properties error that occurred when a Custom OAuth Provider was
enabled
butauthenticatable
was set tofalse
.Fix issue where MFA two-factor UI was incorrectly rendering set default action in SMS code when TOTP strategy was defined. (#4003) by @alexcarpenter
Updated dependencies [
247b3fd75
]:v5.15.1
Compare Source
Patch Changes
Improve the Smart CAPTCHA widget console error. (#3989) by @agis
Updated dependencies [
c81785972
,05198fd17
,5818ca8bd
]:v5.15.0
Compare Source
Minor Changes
windowNavigate
through router functions. (#3922) by @panteliselefPatch Changes
Fixes an issue where the application logo would render smaller then intended (#3959) by @alexcarpenter
Updated dependencies [
77cdf7611
,3de0a1b7e
,ec6bfb5b1
,dc0e1c33d
,e5491facc
,072667043
]:v5.14.1
Compare Source
Patch Changes
Add development mode warning in the browser console when
load()
happens. Companion PR for Add dev mode warning to components. (#3930) by @LekoArtsFix unresponsive behavior when clicking placeholder logo in the
<CreateOrganization />
component (#3921) by @wobsorianoIn certain situations the Frontend API response contains
supported_first_factors
with anull
value while the current code always assumed to receive an array.SignInResource['supportedFirstFactors']
has been updated to account for that and any code accessing this value has been made more resilient againstnull
values. (#3938) by @dstaleyUpdated dependencies [
7e0ced3da
,b6f0613dc
]:v5.14.0
Compare Source
Minor Changes
Add a
nonce
to clerk-js' script loading options. Also adds anonce
prop toClerkProvider
. This can be used to thread a nonce value through to the clerk-js script load to support apps using astrict-dynamic
content security policy. For next.js applications, the nonce will be automatically pulled from the CSP header and threaded through without needing any props so long as the provider is server-rendered. (#3858) by @jescalanIntroduce
transferable
prop for<SignIn />
to disable the automatic transfer of a sign in attempt to a sign up attempt when attempting to sign in with a social provider when the account does not exist. Also adds atransferable
option toClerk.handleRedirectCallback()
with the same functionality. (#3845) by @BRKalowPatch Changes
59d5f19d3
,4e6c94e3f
]:v5.13.2
Compare Source
Patch Changes
Add option to hide the slug field in the
<CreateOrganization />
,<OrganizationSwitcher />
, and<OrganizationList />
components (#3882) by @wobsorianoUpdated dependencies [
9b2aeacb3
]:v5.13.1
Compare Source
Patch Changes
<UserButton />
. (#3903) by @alexcarpenterv5.13.0
Compare Source
Minor Changes
Add
createOrganizationsLimit
param in@clerk/backend
methodUser.updateUser()
(#3823) by @NicolasLopes7Example:
Patch Changes
7e94fcf0f
]:v5.12.0
Compare Source
Minor Changes
Introducing a development mode warning when in development mode in order to mitigate going to production with development keys. (#3870) by @octoper
In case need to deactivate this UI change temporarily to simulate how components will look in production, you can do so by adding the
unsafe_disableDevelopmentModeWarnings
layout appearance prop to<ClerkProvider>
Example:
Removed
__experimental_startPath
fromOrganizationProfileProps
in@clerk/clerk-js
and@clerk/types
. (#3888) by @nikospapcomPatch Changes
568186cad
,407195270
]:v5.11.0
Compare Source
Minor Changes
Introduce support for custom menu items in
<UserButton/>
. (#3784) by @nikospapcom<UserButton.MenuItems>
as a child component to wrap custom menu items.<UserButton.Link/>
for creating external or internal links.<UserButton.Action/>
for opening a specific custom page of "UserProfile" or to trigger your own custom logic viaonClick
.manageAccount
andsignOut
New usage example:
Patch Changes
Introduce ability to set an active organization by slug (#3825) by @wobsoriano
Updated dependencies [
d3d38e206
,a3e9c2fb8
,fb302bb64
,aa06f3ba7
,80e647731
]:v5.10.2
Compare Source
Patch Changes
Add support for opening the
UserProfileModal
andOrganizationProfileModal
to specific navigation items through theUserButton
andOrganizationSwitcher
. (#3732) by @EmmanouelaPothitouAdjust how we pass captcha tokens to the Clerk API when signing in with Google, Microsoft, and Apple (#3806) by @BRKalow
Add
signUp.start.actionLink__use_email
andsignUp.start.actionLink__use_phone
localization keys. (#3826) by @alexcarpenterUpdated dependencies [
b48689705
,4e61f8d27
]:v5.10.1
Compare Source
Patch Changes
24465035c
]:v5.10.0
Compare Source
Minor Changes
Support reading / writing / removing suffixed/un-suffixed cookies from
@clerk/clerk-js
and@clerk/backend
. by @dimklThe
__session
,__clerk_db_jwt
and__client_uat
cookies will now include a suffix derived from the instance's publishakeKey. The cookie name suffixes are used to prevent cookie collisions, effectively enabling support for multiple Clerk applications running on the same domain.Improve UX in ConnectedAccounts by converting the error into a useful, user-friendly message with a visible way to take action. (#3723) by @panteliselef
Patch Changes
Update the image alt attribute to fix accessibility issues reported by Lighthouse. (#3775) by @vignesh-gupta
Set
session
andclient_uat
before invalidating cache duringsetActive()
flow (#3774) by @nikosdouvlisUpdate types to account for null second factors (#3780) by @dstaley
Updated dependencies [
b87f7b9e1
,b2788f67b
,6e8a5037c
,b2788f67b
,5fa7208cf
,86c75e50c
]:v5.9.0
Compare Source
Minor Changes
Added support for Custom OAuth providers by @nikosdouvlis
CustomOAuthStrategy
:CustomOAuthStrategy
type with the valueoauth_custom_${string}
OAuthStrategy
to includeCustomOAuthStrategy
:export type OAuthStrategy =
oauth_${OAuthProvider}| CustomOAuthStrategy;
CustomOauthProvider
type with valuecustom_${string}
and extendedOAuthProvider
type to includeCustomOauthProvider
logo_url
is null for custom OAuth providersProviderInitialIcon
internal component in order to display custom oauth provider initials if providerlogo_url
is nullPatch Changes
Bug Fix: Navigation during signing out requires a router which was missing from the ImpersonationFab by @nikosdouvlis
Updated dependencies [
df7d856d5
]:v5.8.1
Compare Source
Patch Changes
Bug fix: Clear session cookie after a user deletes their account (#3628) by @octoper
Set the localhost cookies with the Secure attribute (#3604) by @anagstef
v5.8.0
Compare Source
Minor Changes
Deprecate
afterSignOutUrl
andafterMultiSessionSingleSignOutUrl
from UserButton. (#3544) by @panteliselefDevelopers can now configure these directly in
ClerkProvider
and have them work properly without in UserButton, UserProfile and in impersonation mode.Patch Changes
Bug fix: Requests failing due to incorrect parsing of value
false
when content type isx-www-form-urlencoded
(#3630) by @EmmanouelaPothitouWhen organization changes, display/fetch the corresponding organization roles. (#3624) by @panteliselef
Updated dependencies [
d6b5006c4
]:v5.7.2
Compare Source
Patch Changes
Correctly use updated protocol verification in all code paths (#3605) by @LekoArts
Updated dependencies [
72888323b
]:v5.7.1
Compare Source
Patch Changes
Bug fix: Skip password strategy for users who authenticate with SAML. (#3578) by @panteliselef
Add
organizationAvatarUploaderContainer
descriptor which is used e.g. for the logo upload box inside "Create Organization" flow (#3596) by @LekoArtsRemove the qs library and use the native URLSearchParams API instead. (#3430) by @EmmanouelaPothitou
Allow chrome-extension: protocol in validation (#3584) by @LekoArts
In a previous release the protocol validation for window navigation was added (ref). Since then only
http:
andhttps:
were allowed. (#3564) by @LekoArtsWith this release
wails:
is also supported again. If you think that the mentioned commit introduced a regression for you and your protocol should be supported, please open an issue.Add the
title
attribute to<OrganizationPreview>
component so that truncated organization names can be previewed e.g. through hovering (#3522) by @davemoUpdated dependencies [
1273b04ec
]:v5.7.0
Compare Source
Minor Changes
isWebAuthnSupported
,isWebAuthnAutofillSupported
,isWebAuthnPlatformAuthenticatorSupported
to@clerk/shared/webauthn
. (#3472) by @panteliselefPatch Changes
4ec3f63e2
]:v5.6.0
Compare Source
Minor Changes
cl-formattedDate__tableCell
css class. (#3465) by @panteliselefPatch Changes
In some instances your application logo (shown at the top of the sign-in/sign-up form of the prebuilt components) might have been distorted in browsers like Firefox. By applying
object-fit: contain
to the image's CSS the logo now fills its bounding box without being distorted. (#3501) by @LekoArtsSupport remounting ClerkProvider multiple times by making sure that the
updateProps
call during the loading phase does not override any defaults set byClerk.load()
for values that are missing (#3455) by @nikosdouvlisSms phone code verification lists available phone numbers on cancel. (#3479) by @panteliselef
Only render active sessions in the active devices section. Fixes the bug where a device with no information would render upon revoking. (#3497) by @desiprisg
Fixed a bug where Clerk components rendered in modals were wrapped with
aria-hidden
. (#3508) by @BRKalowBug fix: statically loading a resource would result in an increase in bundle size for
clerk.browser.js
. (#3519) by @panteliselefUpdated dependencies [
86a27f693
,478c49b41
,02bed2e00
,cd424c590
,73e5d61e2
,68f247444
,b8e46328d
]:v5.5.3
Compare Source
Patch Changes
Bug fix: Use the correct returnBack url when GoogleOneTap remains open across navigations. (#3410) by @panteliselef
Previously it will only use the url that existed in the browser url bar at the time the component was initially rendered.
Add
aria-label
andaria-expanded
in menu trigger to improve accessibility (#3446) by @panteliselefAdd experimental support for hCaptcha captcha provider (#3422) by @anagstef
Updated dependencies [
4beb00672
]:v5.5.2
Compare Source
Patch Changes
v5.5.1
Compare Source
Patch Changes
Add a custom logger to allow logging a message or warning to the console once per session, in order to avoid consecutive identical logs due to component rerenders. (#3383) by @desiprisg
Updated dependencies [
ff31f7255
,8e5969d82
,0e48fc210
]:v5.5.0
Compare Source
Minor Changes
React component
<GoogleOneTap/>
Customize the UX of the prompt
Use the component from with Vanilla JS
Clerk.openGoogleOneTap(props: GoogleOneTapProps)
Clerk.closeGoogleOneTap()
Low level APIs for custom flows
await Clerk.authenticateWithGoogleOneTap({ token: 'xxxx'})
await Clerk.handleGoogleOneTapCallback()
We recommend using this two methods together in order and let Clerk to perform the correct redirections.
In case you want to handle the redirection and session management yourself you can do so like this
Patch Changes
A bug was fixed to not override the existing sign-up state on the OAuth callback. (#3401) by @LauraBeatris
When continuing a sign-up flow with social connections,
@clerk/clerk-js
was creating a newSignUpResource
object, instead of patching the existing one.This was affecting Web3 sign-up flows, since the wallet ID was being overridden on the browser redirect.
Updated dependencies [
d6a9b3f5d
,456b06849
]:v5.4.0
Compare Source
Minor Changes
__experimental_openGoogleOneTap
. ([#3379](https://github.com/clerk/javascript/pull/3379Configuration
📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - "after 9am and before 5pm Monday" (UTC).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.