- BREAKING:
convexAuthNextjsToken()
andisAuthenticatedNextjs()
now return promises so must beawait
ed. - Support for Next.js 15.
- Update convex peer dependency to ^1.17.0
- Fix to header propagation in Next.js middleware
- Update Password provider to separate password requirement validation from
custom profile information
- Breaking If using Password with a custom profile to enforce password
requirements, you must now implement
validatePasswordRequirements
- Breaking If using Password with a custom profile to enforce password
requirements, you must now implement
- Update implementation of refresh tokens reuse Note: After upgrading to
this version, downgrading will require migrating the
authRefreshTokens
table to drop theparentRefreshTokenId
field. - Add configuration for cookie age in Next.js middleware
- Upgrade + pin
@auth/core
to 0.36.0 to avoid issues with mismatched types
- Fix bug with setting auth cookies on Next.js response
- Improve error handling when calling Convex auth functions from Next.js
- Add a 10s reuse window for refresh tokens
Note: After upgrading to this version, downgrading will require migrating
the authRefreshTokens
table to drop the firstUsedTime
field.
- Fix exported type for
signIn
fromconvexAuth
- [Next.js] Propagate auth cookies in middleware follow up
- Introduce
convexAuth.isAuthenticated()
andconvexAuth.getToken()
in favor ofisAuthenticatedNextJs()
andconvexAuthNextJsToken()
for middleware.
- [Next.js] Propagate auth cookies in middleware
- [Next.js] Match auth routes to proxy to Convex with and without trailing slash
- Add verbose logging to Next.js middleware
- Fix issue with re-entrant
fetchAccessToken
with a mutex
Previous versions are documented in git history.