From e38de037f062f2b0f20ccf1cf7df509a33c0fab8 Mon Sep 17 00:00:00 2001
From: Gyanesh Gouraw
Date: Wed, 5 Aug 2026 14:09:41 +0530
Subject: [PATCH] Release v2.23.0
---
.version | 2 +-
CHANGELOG.md | 9 ++++
docs/classes/OAuthError.html | 8 +--
docs/functions/Auth0Provider.html | 6 ++-
docs/functions/useAuth0.html | 2 +-
docs/functions/withAuth0.html | 2 +-
.../functions/withAuthenticationRequired.html | 2 +-
docs/interfaces/Auth0ContextInterface.html | 50 +++++++++----------
docs/interfaces/LogoutOptions.html | 2 +-
docs/interfaces/RedirectLoginOptions.html | 2 +-
docs/interfaces/WithAuth0Props.html | 4 +-
.../WithAuthenticationRequiredOptions.html | 12 ++---
docs/types/AppState.html | 8 +--
docs/types/Auth0ProviderOptions.html | 2 +-
.../types/Auth0ProviderWithClientOptions.html | 2 +-
.../types/Auth0ProviderWithConfigOptions.html | 2 +-
docs/types/ConnectedAccount.html | 2 +-
docs/variables/Auth0Context.html | 2 +-
package-lock.json | 4 +-
package.json | 2 +-
20 files changed, 69 insertions(+), 56 deletions(-)
diff --git a/.version b/.version
index ee92fa74..9ce316c3 100644
--- a/.version
+++ b/.version
@@ -1 +1 @@
-v2.22.1
\ No newline at end of file
+v2.23.0
\ No newline at end of file
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 18e6a133..78c7bc66 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,14 @@
# Change Log
+## [v2.23.0](https://github.com/auth0/auth0-react/tree/v2.23.0) (2026-08-05)
+[Full Changelog](https://github.com/auth0/auth0-react/compare/v2.22.1...v2.23.0)
+
+**Added**
+- feat: add 'use client' directive to bundles for RSC support [\#1179](https://github.com/auth0/auth0-react/pull/1179) ([gyaneshgouraw-okta](https://github.com/gyaneshgouraw-okta))
+
+**Fixed**
+- fix: prevent open redirect via protocol-relative returnTo [\#1185](https://github.com/auth0/auth0-react/pull/1185) ([yogeshchoudhary147](https://github.com/yogeshchoudhary147))
+
## [v2.22.1](https://github.com/auth0/auth0-react/tree/v2.22.1) (2026-07-29)
[Full Changelog](https://github.com/auth0/auth0-react/compare/v2.22.0...v2.22.1)
diff --git a/docs/classes/OAuthError.html b/docs/classes/OAuthError.html
index da186b4f..2721ae52 100644
--- a/docs/classes/OAuthError.html
+++ b/docs/classes/OAuthError.html
@@ -22,7 +22,7 @@ Hierarchy
+Defined in src/errors.tsx:7
@@ -63,7 +63,7 @@ Parameters
+Defined in src/errors.tsx:8
Properties
+Defined in src/errors.tsx:8
Optionalerror_description
error_description?: string
+Defined in src/errors.tsx:8
message
message: string
+Defined in src/use-auth0.tsx:29
+Defined in src/with-auth0.tsx:29
+Defined in src/with-authentication-required.tsx:103
+Defined in src/auth0-context.tsx:359
customTokenExchange
@@ -138,13 +138,13 @@ Parameters
A promise that resolves to the token endpoint response.
+Defined in src/auth0-context.tsx:174
error
error: Error | undefined
+Defined in src/auth-state.tsx:7
exchangeToken
@@ -179,7 +179,7 @@
+Defined in src/auth0-context.tsx:207
generateDpopProof
generateDpopProof: (
params: {
accessToken: string;
method: string;
nonce?: string;
url: string;
},
) => Promise<string>
@@ -204,7 +204,7 @@ Parameters
params: { accessToken: string; method: string; nonce?: string; url: string }
Returns Promise<string>
+Defined in src/auth0-context.tsx:349
getAccessTokenSilently
@@ -229,7 +229,7 @@ getAccessauth0 cookie.
+Defined in src/auth0-context.tsx:63
+Defined in src/auth0-context.tsx:85
getConfiguration
@@ -271,7 +271,7 @@
+Defined in src/auth0-context.tsx:370
getDpopNonce
getDpopNonce: (id?: string) => Promise<string | undefined>
@@ -311,7 +311,7 @@
+Defined in src/auth0-context.tsx:329
getIdTokenClaims
getIdTokenClaims: () => Promise<IdToken | undefined>
@@ -321,7 +321,7 @@ getIdTokenReturns all claims from the id_token if available.
+Defined in src/auth0-context.tsx:97
handleRedirectCallback
@@ -345,19 +345,19 @@ Parameters
+Defined in src/auth0-context.tsx:314
isAuthenticated
isAuthenticated: boolean
+Defined in src/auth-state.tsx:8
isLoading
isLoading: boolean
+Defined in src/auth-state.tsx:9
loginWithCustomTokenExchange
@@ -400,7 +400,7 @@
+Defined in src/auth0-context.tsx:147
+Defined in src/auth0-context.tsx:238
loginWithRedirect
@@ -428,7 +428,7 @@ loginWithRe
parameters will be auto-generated.
+Defined in src/auth0-context.tsx:220
logout
@@ -441,7 +441,7 @@
+Defined in src/auth0-context.tsx:275
+Defined in src/auth0-context.tsx:424
myAccount
@@ -492,7 +492,7 @@
+Defined in src/auth0-context.tsx:476
passkey
@@ -508,7 +508,7 @@
+Defined in src/auth0-context.tsx:440
revokeRefreshToken
@@ -545,7 +545,7 @@ Parameters
Returns Promise<void>
+Defined in src/auth0-context.tsx:304
setDpopNonce
setDpopNonce: (nonce: string, id?: string) => Promise<void>
@@ -584,13 +584,13 @@
+Defined in src/auth0-context.tsx:341
+Defined in src/auth-state.tsx:10
+Defined in src/with-auth0.tsx:8
+Defined in src/with-authentication-required.tsx:92
OptionalloginOptions
@@ -51,7 +51,7 @@
+Defined in src/with-authentication-required.tsx:86
OptionalonBeforeAuthentication
onBeforeAuthentication?: () => Promise<void>
@@ -61,7 +61,7 @@ Op
Allows executing logic before the user is redirected to the login page.
+Defined in src/with-authentication-required.tsx:71
OptionalonRedirecting
onRedirecting?: () => Element
@@ -71,7 +71,7 @@ OptionalRender a message to show that the user is being redirected to the login.
+Defined in src/with-authentication-required.tsx:61
OptionalreturnTo
returnTo?: string | (() => string)
@@ -85,7 +85,7 @@ Optional<
Add a path for the onRedirectCallback handler to return the user to after login.
+Defined in src/with-authentication-required.tsx:51
The account that has been connected during the connect flow.