From 42c678b7a4b2d608c04f7a099f2f5af2fa52fbf1 Mon Sep 17 00:00:00 2001 From: tanya732 Date: Wed, 19 Aug 2026 18:22:47 +0530 Subject: [PATCH 1/2] Release 5.0.0 --- .version | 2 +- CHANGELOG.md | 28 ++++++++++++++++++++++++++++ README.md | 6 +++--- 3 files changed, 32 insertions(+), 4 deletions(-) diff --git a/.version b/.version index 6aba2b24..0062ac97 100644 --- a/.version +++ b/.version @@ -1 +1 @@ -4.2.0 +5.0.0 diff --git a/CHANGELOG.md b/CHANGELOG.md index 11526bcb..7e3053e2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,33 @@ # Change Log +## [5.0.0](https://github.com/auth0/auth0-java/tree/5.0.0) (2026-08-19) +[Full Changelog](https://github.com/auth0/auth0-java/compare/4.2.0...5.0.0) + +A complete migration guide is available at [v5_MIGRATION_GUIDE](v5_MIGRATION_GUIDE.md). + +**Breaking** +- feat: add support for Keys Network ACLs, 3P client access, XAA connection profiles and nullable response fields + [\#918](https://github.com/auth0/auth0-java/pull/918) ([fern-api[bot]](https://github.com/apps/fern-api)) + - **Nullable response fields** — 32 getters across 8 response types change from `Optional` to `OptionalNullable`, so the SDK preserves the nullability declared in the API definition. Affects the timestamp + getters on `GetSessionResponseContent` / `SessionResponseContent` / `UpdateSessionResponseContent` and `GetRefreshTokenResponseContent` / `RefreshTokenResponseContent` / `UpdateRefreshTokenResponseContent`, plus + `SessionAuthenticationSignal#getTimestamp` and `FlowActionFlowMapValueParams#getFallback`. Use `.toOptional()` to migrate. Note that `get()` now throws `IllegalStateException` rather than + `NoSuchElementException`, and `orElse()` may return `null` — both compile unchanged. Builder setters are unaffected. + +**Added** +- feat: add support for Keys Network ACLs, 3P client access, XAA connection profiles and nullable response fields + [\#918](https://github.com/auth0/auth0-java/pull/918) ([fern-api[bot]](https://github.com/apps/fern-api)) + - **Keys Network ACLs** — new `keys().networkAcls()` sub-client with `list`, `create`, and `get` against `/api/v2/keys/network-acls`, plus the `read:network_acl_keys` and `create:network_acl_keys` scopes. Note that + `com.auth0.client.mgmt.keys.NetworkAclsClient` shares its simple name with the existing top-level `com.auth0.client.mgmt.NetworkAclsClient`; fully qualify one of them if you import both. + - **Third-party (3P) client access** — `third_party_client_access` on the client `my_organization_configuration` object across `POST`/`GET`/`GET {id}`/`PATCH {id}` on `/clients` (Early Access). + - **Cross-App Access (XAA)** — `cross_app_access_resource_app` on the connection-profile request/response types and `ConnectionProfile` (Early Access). + - Misc: `useOauthSpecScope` on the OIDC/Okta connection options types; `matchAll` on `NetworkAclRule`. + - New typed error branches: `409 Conflict` and `400 Bad Request` on Flows; `400 Bad Request` and `404 Not Found` on Forms. +- feat: allow custom telemetry for SDKs built on auth0-java [\#916](https://github.com/auth0/auth0-java/pull/916) ([tanya732](https://github.com/tanya732)) + +**Changed** +- feat: add Migration Guide V5 [\#919](https://github.com/auth0/auth0-java/pull/919) ([tanya732](https://github.com/tanya732)) + - Adds `v5_MIGRATION_GUIDE.md` and removes `v3_MIGRATION_GUIDE.md`, now that v2 is well past end of support. Migration guides are retained for the two most recent majors. + ## [4.2.0](https://github.com/auth0/auth0-java/tree/4.2.0) (2026-08-05) [Full Changelog](https://github.com/auth0/auth0-java/compare/4.1.0...4.2.0) diff --git a/README.md b/README.md index db760075..f97689fd 100644 --- a/README.md +++ b/README.md @@ -40,14 +40,14 @@ Add the dependency via Maven: com.auth0 auth0 - 4.2.0 + 5.0.0 ``` or Gradle: ```gradle -implementation 'com.auth0:auth0:4.2.0' +implementation 'com.auth0:auth0:5.0.0' ``` ### Configure the SDK @@ -64,7 +64,7 @@ AuthAPI auth = AuthAPI.newBuilder("{YOUR_DOMAIN}", "{YOUR_CLIENT_ID}", "{YOUR_CL #### Management API Client -The Management API client is based on the [Management API Docs](https://auth0.com/docs/api/management/v2). In v3, the Management API is Fern-generated and uses `ManagementApi` as the entry point. +The Management API client is based on the [Management API Docs](https://auth0.com/docs/api/management/v2). The Management API is Fern-generated and uses `ManagementApi` as the entry point. Create a `ManagementApi` instance with a static token: From 4051fce6ba64ff48af22562e6bb384e19f0b1bca Mon Sep 17 00:00:00 2001 From: tanya732 Date: Wed, 19 Aug 2026 18:34:14 +0530 Subject: [PATCH 2/2] update changelog --- CHANGELOG.md | 13 ++++--------- 1 file changed, 4 insertions(+), 9 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 7e3053e2..e447cd31 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,18 +8,13 @@ A complete migration guide is available at [v5_MIGRATION_GUIDE](v5_MIGRATION_GUI **Breaking** - feat: add support for Keys Network ACLs, 3P client access, XAA connection profiles and nullable response fields [\#918](https://github.com/auth0/auth0-java/pull/918) ([fern-api[bot]](https://github.com/apps/fern-api)) - - **Nullable response fields** — 32 getters across 8 response types change from `Optional` to `OptionalNullable`, so the SDK preserves the nullability declared in the API definition. Affects the timestamp - getters on `GetSessionResponseContent` / `SessionResponseContent` / `UpdateSessionResponseContent` and `GetRefreshTokenResponseContent` / `RefreshTokenResponseContent` / `UpdateRefreshTokenResponseContent`, plus - `SessionAuthenticationSignal#getTimestamp` and `FlowActionFlowMapValueParams#getFallback`. Use `.toOptional()` to migrate. Note that `get()` now throws `IllegalStateException` rather than - `NoSuchElementException`, and `orElse()` may return `null` — both compile unchanged. Builder setters are unaffected. - + - **Nullable response fields** — 32 getters across 8 response types change from `Optional` to `OptionalNullable`, so the SDK preserves the nullability declared in the API definition. **Added** - feat: add support for Keys Network ACLs, 3P client access, XAA connection profiles and nullable response fields [\#918](https://github.com/auth0/auth0-java/pull/918) ([fern-api[bot]](https://github.com/apps/fern-api)) - - **Keys Network ACLs** — new `keys().networkAcls()` sub-client with `list`, `create`, and `get` against `/api/v2/keys/network-acls`, plus the `read:network_acl_keys` and `create:network_acl_keys` scopes. Note that - `com.auth0.client.mgmt.keys.NetworkAclsClient` shares its simple name with the existing top-level `com.auth0.client.mgmt.NetworkAclsClient`; fully qualify one of them if you import both. - - **Third-party (3P) client access** — `third_party_client_access` on the client `my_organization_configuration` object across `POST`/`GET`/`GET {id}`/`PATCH {id}` on `/clients` (Early Access). - - **Cross-App Access (XAA)** — `cross_app_access_resource_app` on the connection-profile request/response types and `ConnectionProfile` (Early Access). + - **Keys Network ACLs** — new `keys().networkAcls()` sub-client with `list`, `create`, and `get` against `/api/v2/keys/network-acls`, plus the `read:network_acl_keys` and `create:network_acl_keys` scopes. + - **Third-party (3P) client access** — `third_party_client_access` on the client `my_organization_configuration` object across `POST`/`GET`/`GET {id}`/`PATCH {id}` on `/clients` + - **Cross-App Access (XAA)** — `cross_app_access_resource_app` on the connection-profile request/response types and `ConnectionProfile` - Misc: `useOauthSpecScope` on the OIDC/Okta connection options types; `matchAll` on `NetworkAclRule`. - New typed error branches: `409 Conflict` and `400 Bad Request` on Flows; `400 Bad Request` and `404 Not Found` on Forms. - feat: allow custom telemetry for SDKs built on auth0-java [\#916](https://github.com/auth0/auth0-java/pull/916) ([tanya732](https://github.com/tanya732))