🚨 CRITICAL: Versions `2.30.2` and `2.30.3` Deprecated. Update to `2.30.4` - Breaking Auth Issue

[harsh62]

🚨 CRITICAL: Versions 2.30.2 and 2.30.3 Deprecated - Breaking Auth Issue

IMMEDIATE ACTION REQUIRED

If you are using v2.30.2 or v2.30.3:

• ❌ DO NOT release your app to production
• ⚠️ Already released? Update to v2.30.4

---

What's Happening

Amplify Android v2.30.2 and v2.30.3 contain a critical authentication bug that causes:

• ✗ Silent session loss - All users lose authentication when upgrading from v2.30.1 or earlier
• ✗ No error signals - No SessionExpiredException or SESSION_EXPIRED hub events are fired
• ✗ Bidirectional impact - Upgrading OR downgrading between affected versions triggers the issue

User Impact

Upon app upgrade, every authenticated user will:

1. Be logged out (non-authenticated state - existing credentials cleared)
2. Receive no notification or error about the session loss
3. Need to manually re-authenticate

---

Current Status

• ✅ Fix released in v2.30.4

Linked Issues:

• Update from 2.30.1 to 2.30.3 #3159

Fix PR:

• fix(auth): Resolve logout issue caused by JWT token serialization breaking change #3162

[github-actions]

This issue was opened by a maintainer of this repository; updates will be posted here. If you are also experiencing this issue, please comment here with any relevant information so that we're aware and can prioritize accordingly.

[tylerjroach]

Fix has been merged from #3162 and released for version 2.30.4.

[github-actions]

This issue is now closed. Comments on closed issues are hard for our team to see.
If you need more assistance, please open a new issue that references this one.