Skip to content

v3.0.0

Choose a tag to compare

@workos-sdk-automation workos-sdk-automation released this 25 Mar 20:11
dd7ef55

3.0.0 (2026-03-25)

⚠ BREAKING CHANGES

  • add OAuth state verification on callback to prevent CSRF attacks (#388)

Features

  • add OAuth state verification on callback to prevent CSRF attacks (#388) (ebef6e7)
  • middleware: add authkitProxy and handleAuthkitProxy aliases for proxy.ts (#384) (4c3f27b)

Bug Fixes

  • actions: catch TokenRefreshError in refreshAccessTokenAction to prevent 500s (#383) (5c46c39)
  • auth: return signInUrl from server actions to avoid CORS errors (#386) (7d52400)
  • harden PKCE/CSRF for v3.0.0 release (#398) (8054829)