4.1.0

Features

• #869
  • Implements AuthStateManager to evaluate and emit latest authState. Exposes new methods from AuthStateManager:
    • authStateManager.getAuthState
    • authStateManager.updateAuthState
    • authStateManager.subscribe
    • authStateManager.unsubscribe
  • Adds new methods in sdk browser scope:
    • sdk.signInWithCredentials
    • sdk.signInWithRedirect
    • sdk.isAuthenticated
    • sdk.getUser
    • sdk.getIdToken
    • sdk.getAccessToken
    • sdk.storeTokensFromRedirect
    • sdk.setOriginalUri
    • sdk.getOriginalUri
    • sdk.removeOriginalUri
    • sdk.isLoginRedirect
    • sdk.handleLoginRedirect
  • Deprecates method in sdk browser scope:
    • sdk.signIn
  • Adds new methods in sdk.tokenManager:
    • tokenManager.getTokens
    • tokenManager.setTokens
  • Accepts new options
    • transformAuthState
    • restoreOriginalUri
    • autoRemove
    • devMode
• #469 Adds "rate limiting" logic to token autoRenew process to prevent too many requests be sent out which may cause application rate limit issue.
• #503 Supports relative uri for options.redirectUri
• #478 Adds cross tabs communication to sync AuthState.
• #525 Adds new methods hasResponseType, isPKCE, isAuthorizationCodeFlow. The option responseType is now accepted in the constructor.

Bug Fixes

• #468 Fixes issue where HTTP headers with an undefined value were being sent with the value "undefined". These headers are now removed before the request is sent.
• #514 Fixes OAuth redirect params issue in legacy browsers.