|
1 | 1 | # Change Log |
2 | 2 |
|
| 3 | +## 6.25.0 |
| 4 | + |
| 5 | +### Minor Changes |
| 6 | + |
| 7 | +- Add support for Clerk Protect mid-flow SDK challenges (`protect_check`) on both sign-up and sign-in. ([#8329](https://github.com/clerk/javascript/pull/8329)) by [@zourzouvillys](https://github.com/zourzouvillys) |
| 8 | + |
| 9 | + When the Protect antifraud service issues a challenge, responses now carry a `protectCheck` field |
| 10 | + with `{ status, token, sdkUrl, expiresAt?, uiHints? }`. Clients resolve the gate by loading the |
| 11 | + SDK at `sdkUrl`, executing the challenge, and submitting the resulting proof token via |
| 12 | + `signUp.submitProtectCheck({ proofToken })` or `signIn.submitProtectCheck({ proofToken })`. The |
| 13 | + response may carry a chained challenge, which the SDK resolves iteratively. |
| 14 | + |
| 15 | + Sign-in adds a new `'needs_protect_check'` value to the `SignInStatus` union. **Upgrading this |
| 16 | + package is type-only and does not change runtime behavior**: the server returns the new status |
| 17 | + (and the `protectCheck` field) only for instances where Protect mid-flow challenges have been |
| 18 | + explicitly enabled — the feature is off by default and is not enabled for existing instances by |
| 19 | + upgrading. The server additionally only emits the new status value to SDK versions that |
| 20 | + understand it, so older clients never receive an unknown status. |
| 21 | + |
| 22 | + If an exhaustive `switch` on `signIn.status` flags the new value after upgrading, handle it by |
| 23 | + running the challenge described by `protectCheck` and submitting the proof via |
| 24 | + `submitProtectCheck()`. Clients should treat the `protectCheck` field as the authoritative gate |
| 25 | + signal and fall back to the status value for defense in depth. |
| 26 | + |
| 27 | + The pre-built `<SignIn />` and `<SignUp />` components handle the gate automatically by routing |
| 28 | + to a new `protect-check` route that runs the challenge SDK and resumes the flow on completion. |
| 29 | + |
| 30 | +### Patch Changes |
| 31 | + |
| 32 | +- Updated dependencies [[`f2d9e4b`](https://github.com/clerk/javascript/commit/f2d9e4b9eeac4cb9a2b1c9d4278ff11cf49555b1)]: |
| 33 | + - @clerk/shared@4.25.0 |
| 34 | + |
3 | 35 | ## 6.24.0 |
4 | 36 |
|
5 | 37 | ### Minor Changes |
|
0 commit comments