[subhankarmaiti]

This is the stable release of the v6 major. It requires the React Native New Architecture (React Native 0.82 or later) and adds support for React Native 0.88. It also adopts the native SDK majors, Auth0.Android v4 and Auth0.swift v3. Read the Migration Guide before upgrading from v5.

Breaking changes

• feat: require React Native New Architecture, drop legacy bridge #1613 (subhankarmaiti)
• feat: adopt native SDK majors (Android v4, Swift v3) for v6 #1619 (subhankarmaiti)
• feat: make DPoP opt-in by defaulting useDPoP to false #1622 (subhankarmaiti)
• feat: remove the client-side Management API surface #1623 (subhankarmaiti)
• refactor: remove the legacy MFA methods from the auth client #1627 (subhankarmaiti)
• refactor: audit the public API surface and freeze the error taxonomy #1634 (NandanPrabhu)
• refactor: drop the I prefix from TypeScript interfaces #1636 (subhankarmaiti)

What this means for your app:

• React Native 0.82+ with the New Architecture is required. Expo apps need SDK 55+.
• Android needs minSdkVersion 26, JDK 17 and compileSdk 36. iOS needs a deployment target of 15.1 and builds with Auth0.swift 3 (Swift 6).
• DPoP is off by default. Set useDPoP: true to keep using it.
• getCredentials() and getApiCredentials() now default minTtl to 60 seconds.
• The client-side Management API (users()) and the legacy MFA methods on the auth client are removed.
• TypeScript interfaces no longer use the I prefix, SSOCredentials.expiresIn is now expiresAt, and some web auth and credentials manager error codes were renamed or added.
• ID token claim validation is opt-in on direct token requests.

Added

• chore: upgrade to React Native 0.88 #1709 (subhankarmaiti)
• feat(android): make Auth Tab and TWA opt-in via JS bridge #1662 (NandanPrabhu)
• feat(ios): honor networkingOptions.enableLogging via Auth0.swift logging #1661 (subhankarmaiti)
• feat: add credentialsManager.clearAll() and default minTtl to 60 #1660 (subhankarmaiti)
• feat(ios): ship a privacy manifest with the A0Auth0 pod #1641 (subhankarmaiti)
• feat: allow configuring Auth0.Android's native networking client #1637 (NandanPrabhu)
• feat: support ephemeral sessions on Android #1626 (NandanPrabhu)

Fixed

• fix(android): bump Auth0.Android to 4.2.1 to keep users logged in after upgrade #1708 (subhankarmaiti)
• fix(android): use underlying cause as the error message #1688 (subhankarmaiti)
• fix(plugin): skip ios linking override on expo sdk 58 #1687 (subhankarmaiti)
• fix: adopt withAuthTab() to fix spurious USER_CANCELLED on Android #1647 (NandanPrabhu)

Documentation

• docs: group ApiCredentials under Classes and fix duplicate @remarks warning #1712 (subhankarmaiti)
• docs: correct migration guide — Auth Tab is opt-in via useAuthTab; split section 6 #1665 (NandanPrabhu)
• docs(example): restructure example app into per-feature hooks and class demos #1655 (subhankarmaiti)
• docs: document native v4/v3 adoption — linking, claim validation, build floors #1648 (NandanPrabhu)

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords: 1

• Release

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: auth0/react-native-auth0
• Branch: release/v6.0.0
• File: .coderabbit.yaml
• Commit: 53818d1
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Team
• Run ID: 7cd5e43a-7772-424c-93c5-c935721d5c24

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}