CHANGELOG.md

Change Log

5.3.0 (2026-04-09)

Full Changelog

Added

• feat: Add CIMD support, organization connections, group deletion, refresh token listing; remove AOL/Flickr/Yammer providers #816 (fern-api[bot])
• feat:Add Auth0-Custom-Domain header support for Multiple Custom Domains (MCD) #799 (kishore7snehil)

5.2.0 (2026-03-30)

Full Changelog

⚠️ Breaking: Python 3.8 support dropped

• Python 3.8 reached end-of-life in October 2024. This release requires Python >=3.9.2. Users on Python 3.8 should remain on v5.1.0 until they upgrade their Python version. #808 (kishore7snehil)

Added

• feat: Add default domain endpoints, connection key provisioning, tenant SCIM listing; remove MiiCard/Renren providers #801 (fern-api[bot])
• feat: Add client_info support for custom telemetry in Authentication and Management clients #802 (kishore7snehil)
• feat: Add SDK logging infrastructure with configurable log levels and header redaction #785 (fern-api[bot])

Fixed

• fix: Pagination page advancement incorrectly skipping pages #785 (fern-api[bot])

Changed

• chore: Update ruff, aiohttp, cryptography, urllib3, codecov-action; replace Snyk with SCA scan #808 (kishore7snehil)

5.1.0 (2026-02-11)

Full Changelog

Fixed

• fix: Remove placeholder defaults from optional parameters + additional updates #778 (fern-api[bot])

5.0.0 (2026-02-04)

Full Changelog

📢 This is the official v5.0.0 release with significant improvements and breaking changes.

Breaking Changes

• Complete rewrite of Management API client - Generated from Auth0's OpenAPI specifications using Fern
• Python 3.7 support dropped - Minimum required version is now Python 3.8
• Management API client restructured - Methods organized into modular sub-clients for better discoverability
• Method signatures changed - Consistent and predictable naming conventions across all endpoints
• Response types changed - Strongly-typed Pydantic models replace generic dictionaries
• Import paths changed - from auth0.management.core.api_error import ApiError instead of from auth0.exceptions import Auth0Error
• Pagination defaults changed - include_totals=True is now the default for list operations
• Client initialization simplified - ManagementClient takes domain instead of full base_url

Added

• First-class async support with AsyncAuth0 and AsyncManagementClient
• Automatic token management with client credentials in ManagementClient
• Built-in pagination support with include_totals=True by default
• Type-safe request/response objects using Pydantic models
• Better IntelliSense and code completion support
• Comprehensive API reference documentation
• Migration guide for upgrading from v4.x

Changed

• Management API client fully regenerated using Fern
• Package structure reorganized with hierarchical sub-clients
• Error handling updated to use ApiError base class
• Documentation updated with v5 examples

Note

• Authentication API remains fully backward compatible - no changes required
• See v5_MIGRATION_GUIDE.md for detailed upgrade instructions

4.13.0 (2025-09-17)

Full Changelog

Added

• fix(backchannel): expose headers on slow_down errors (HTTP 429s) #744 (pmalouin)

4.12.0 (2025-09-15)

Full Changelog

Added

• Updates for CIBA with email #720 (adamjmcgrath)

4.11.0 (2025-09-11)

Full Changelog

Added

• feat: Support For Network ACL Endpoints #706 (kishore7snehil)

Fixed

• chore: fix workflow syntax errors and update dependencies #724 (kishore7snehil)

4.10.0 (2025-06-05)

Full Changelog

Added

• chore: merge community PRs – bugfixes, features, and dependency upgrades #696 (kishore7snehil)

Fixed

• fix: handle authorization_details in back_channel_login #695 (kishore7snehil)

4.9.0 (2025-04-01)

Full Changelog

Added

• feat: Federated Connections Support #682 (kishore7snehil)
• Adding Support For CIBA with RAR #679 (kishore7snehil)

4.8.1 (2025-02-24)

Full Changelog

Fixed

• Fix: Unauthorized Access Error For PAR #671 (kishore7snehil)

4.8.0 (2025-01-29)

Full Changelog

Added

• Adding Support For RAR and JAR Requests #659 (kishore7snehil)
• Adding Support For Back Channel Login #643 (kishore7snehil)

Fixed

• Consolidated Community PRs and Dependency Upgrades #660 (kishore7snehil)
  • fix typo in docstring (@CarlosEduR )
  • Added support for "include_totals" to all_organization_member_roles (@jpayton-cx)
  • Fixed Version Table (@sanchez)
  • Remove upper bounds on all python dependency versions (@ngfeldman)
  • Adding secrets to Codecov Action Upload (@developerkunal)
• Updating Dependancies And Workflow Action Versions #653 (kishore7snehil)
• Fixing the Github Workflow Issues #644 (kishore7snehil)

4.7.2 (2024-09-10)

Full Changelog

Security

• Update cryptography requirements.txt #630 (duedares-rvj)

4.7.1 (2024-02-26)

Full Changelog

Security

• Update cryptography requirements.txt #597 (skjensen)

4.7.0 (2023-12-05)

Full Changelog

⚠️ BREAKING CHANGES

• Add python 3.12 support, drop 3.7 #562 (adamjmcgrath)

Added

• [SDK-4138] Add support for Pushed Authorization Requests (PAR) #560 (adamjmcgrath)

4.6.1 (2023-11-29)

Full Changelog

Fixed

• Fix rest_async and async tests #556 (adamjmcgrath)
• fix type hint for link_user_account #552 (tzzh)

4.6.0 (2023-11-09)

Full Changelog

Added

• [SDK-4544] Add orgs in client credentials support #549 (adamjmcgrath)
• Authentication API, the Database classs, Add the organization param to the change_password method #539 (shchotse)
• Retry all methods on 429 #518 (adamjmcgrath)

4.5.0 (2023-10-20)

Full Changelog

Added

• [SDK-4656] Add fields to all_organization_members #537 (adamjmcgrath)

4.4.2 (2023-08-31)

Full Changelog

Fixed

• Fix python dependency version #522 (adamjmcgrath)
• Revert publishing types #521 (adamjmcgrath)

4.4.1 (2023-08-21)

Full Changelog

Fixed

• Fix for async types #515 (adamjmcgrath)

4.4.0 (2023-07-25)

Full Changelog

Added

• [SDK-4394] Add organization name validation #507 (adamjmcgrath)
• Add type hints to management #497 (Viicos)

Fixed

• Fix asyncify for users client where token is not required #506 (cgearing)

4.3.0 (2023-06-26)

Full Changelog

Added

• Add forwardedFor option to password grant login #501 (adamjmcgrath)
• Add connections.all name parameter #500 (adamjmcgrath)
• Add type hints to base and authentication #472 (Viicos)

Fixed

• Fix async auth client #499 (adamjmcgrath)
• Fix update_template_universal_login #495 (adamjmcgrath)

4.2.0 (2023-05-02)

Full Changelog

Added

• Add cache_ttl param to AsymmetricSignatureVerifier #490 (matei-radu)

4.1.1 (2023-04-13)

Full Changelog

Fixed

• Make pw realm params optional #484 (adamjmcgrath)
• Fix intellisense on Auth0 class #486 (adamjmcgrath)

4.1.0 (2023-03-14)

Full Changelog

Added

• Add branding theme endpoints #477 (adamjmcgrath)
• [SDK-4011] Add API2 Factor Management Endpoints #476 (adamjmcgrath)
• Use declarative setup with pyproject.toml #474 (Viicos)

4.0.0 (2023-01-19)

Full Changelog

Added

• Add support for private_key_jwt #456 (adamjmcgrath)
• Add support for managing client credentials #459 (adamjmcgrath)

Security

• Update pyjwt #460 (adamjmcgrath)

Changed

• Publish Python Support Schedule #454 (evansims)

⚠️ BREAKING CHANGES

• Remove deprecated methods #461 (adamjmcgrath)
• Remove v3 folder #462 (adamjmcgrath)

See the V4_MIGRATION_GUIDE for more info.

3.24.1 (2023-01-19)

Full Changelog

Fixed

• Remove unnecessary type param from update_template_universal_login #463 (adamjmcgrath)

3.24.0 (2022-10-17)

Full Changelog

Added

• [SDK-3714] Async token verifier #445 (adamjmcgrath)
• Add AsyncAuth0 to share a session among many services #443 (adamjmcgrath)

Fixed

• Bugfix 414 missing import #442 (adamjmcgrath)

3.23.1 (2022-06-10)

Full Changelog

Fixed

• Pass rest_options through Auth0 constructor #354 (adamjmcgrath)

3.23.0

Added

• Asyncio Support #312 (adamjmcgrath)
• Add /api/v2/branding endpoints support #313 (evansims)

3.22.0

Added

• [SDK-3174] Add DELETE method for /api/v2/users/{id}/authenticators endpoint #301 (akmjenkins)
• [SDK-3175] Return token claims in TokenVerifier.verify() #273 (bisguzar)

Fixed

• [SDK-3173] Default to 'None' for deployed on GET /api/v2/actions/actions endpoint #309 (evansims)

3.21.0

Added

• Add pagination to device credentials #300 (fionnulak)

3.20.0

Added

• Add attack protection endpoints #303 (adamjmcgrath)

3.19.0

Added

• Add actions to Auth0 class #293 (jrzerr)
• Added support for prompts API #291 (lorinkoz)

Changed

• Remove references to ID token in generic token classes #295 (lbalmaceda)

Fixed

• Use assertNotEqual instead of assertNotEquals for Python 3.11 compatibility. #294 (tirkarthi)

3.18.0

Added

• [SDK-2720] Add support for actions APIs #289 (jimmyjames)

3.17.0

Added

• Make the CI fail when the docs syntax is invalid #287 (lbalmaceda)
• [SDK-2687] Implement automatic rate-limit handling #285 (evansims)
• Use Sphinx to generate API docs #281 (lbalmaceda)
• Add Passwordless Login function #279 (lbalmaceda)
• [SDK 2665] Update endpoint methods to support 'from' and 'take' checkpoint pagination parameters, where appropriate #278 (evansims)

Deprecated

• Deprecate /oauth/ro for passwordless #280 (lbalmaceda)

3.16.2

Fixed

• Re-Route Job Results endpoint #275 (lbalmaceda)

3.16.1

Fixed

• Remove requirements.txt file #270 (lbalmaceda)
• Repair Organisation get by name URL. #269 (queenvictoria)

3.16.0

Added

• Add access token validation guidance for organizations #262 (lbalmaceda)
• Add support for Organization MGMT API endpoints [SDK-2439] #261 (lbalmaceda)
• Add scope to refresh_token #256 (criles25)
• Allow configuration of outgoing request protocol #254 (garry-jeromson)

3.15.0

Added

• Add support for organizations feature #258 (jimmyjames)

3.14.0

Added

• Adds a new user method invalidate_remembered_browsers #248 (kpurdon)

3.13.0

Added

• Add support for Log Streams API #236 (lbalmaceda)

Fixed

• Fix imports on the management/init.py file #235 (matthewarmand)

3.12.0

Added

• Add missing user profile properties to the signup endpoint #231 (lbalmaceda)
• Add Hooks management API #227 (guillp)
• Add missing external_id property to the import users job #222 (lbalmaceda)

Changed

• Remove iat claim value check #223 (lbalmaceda)

Fixed

• Skip sending optional parameters on POST request when unspecified #230 (lbalmaceda)

3.11.0

Added

• Add send_completion_email to users import job #220 (lbalmaceda)
• Expose the time at which the Rate Limit will reset #219 (lbalmaceda)

Removed

• Add deprecation note for DELETE /users (all users) #217 (lbalmaceda)

3.10.0

Security

• Improved OIDC compliance #213 (lbalmaceda)

Added

• Add connect/read timeout option #215 (lbalmaceda)

3.9.2

Fixed

• Accept client_secret as passwordless/start param #211 (lbalmaceda)

3.9.1

Changed

• Update minimum "requests" version to 2.14.0 #204 (lbalmaceda)

3.9.0

Added

• Add Roles and Permissions endpoints #202 (lbalmaceda)

3.8.1

July 18, 2019: This release included an unintentionally breaking change affecting those users that were manually parsing the response from GET requests. e.g. /userinfo or /authorize. The AuthenticationBase#get method was incorrectly parsing the request result into a String.

From this release on, making a GET request returns a Dictionary instead.

Breaking Change

• Fix request creation when headers are the default #198 (lbalmaceda).

3.8.0

Fixed

• rules_config.unset fix #195 (jhunken)

Security

• Update requests dependency to latest version #196 (lbalmaceda)

3.7.2

Fixed

• Fix HTTP method used for rotating Client secret #191 (lbalmaceda)

3.7.1

Fixed

• Update telemetry format #187 (lbalmaceda)

3.7.0

Changed

• Remove default value for search_engine #185 (lbalmaceda)

3.6.1

Fixed

• Fixed Management API Grants class instantiation #179 (beck3905)

3.6.0

Added

• Add grants, custom domains, rules_configs to API #177 (sagnew-dg)

3.5.0

Added

• Add Revoke Refresh Token endpoint #170 (lbalmaceda)
• Add /dbconnections/signup with username and metadata #169 (lbalmaceda)

3.4.0

Added

• Add client_id param to ClientGrants.all #159 (danishprakash)
• Add telemetry headers to AuthenticationBase #152 (crgk)
• Add pre-commit pypgrade hook and update supported versions #124 (hugovk)
• Implemented delete_user_by_email and test for connections #122 (runz0rd)
• Adds user export job creation. #112 (dmark)

Changed

• String Formatting Updated #141 (vkmrishad)
• Uses Python built-in modules to retrieve Python and auth0-python version number #125 (edawine)

Fixed

• Stop lower-casing email on user search #167 (helmus)
• Always include Content-Type header in management requests #158 (crgk)

3.3.0

Added

• Add pagination to Clients and Connections
• Add pagination to Client Grants, Resource Servers and Rules
• Add Email-Templates Management API endpoints

Fixed

• Replace default mutable arguments with None
• Fix JSON error message handling for Management API

3.2.2

Fixed

• Upload the correct package contents to Pypi.

3.2.0

Added

• Raise Auth0Error for bad status code #98 (beck3905)

Fixed

• Correctly throw an exception when handing a text response #92 (benbc)
• Instantiate UserBlocks for consistency #90 (mattdodge)

3.1.4

Authentication API

• Improve handling of inconsistent API error responses.

3.1.3

Management API

• Added upsert parameter to import_users job.

3.1.2

Authentication API

• Added refresh_token method to get_token

3.1.0

Authentication API

• Added Logout Functionality

3.0.0

Authentication API

• Added Support for API Authorization. oauth/token endpoint
  • Client Credentials Grant
  • Authorization Code Grant
  • Authorization Code PKCE Grant
  • Resource Owner Password Realm Grant
• Added Support for API Authorization. authorize endpoint
  • Authorization Code Grant

Management API v2

• Added Support for Guardian
• Added Support to retrieve Logs
• Added Support to manage Resource Servers
• Added Support to manage Client Grants
• Added Support to manage User blocks