# Change Log

## [6.1.0](https://github.com/auth0/auth0-python/tree/6.1.0) (2026-07-22)
[Full Changelog](https://github.com/auth0/auth0-python/compare/6.0.0...6.1.0)

**Added**
- feat: Cross App Access (ID-JAG), branding theme identifiers, Self-Service Enterprise Configuration third-party client access, session actor [\#877](https://github.com/auth0/auth0-python/pull/877) ([fern-api[bot]](https://github.com/apps/fern-api))


## [6.0.0](https://github.com/auth0/auth0-python/tree/6.0.0) (2026-07-15)
[Full Changelog](https://github.com/auth0/auth0-python/compare/5.8.0...6.0.0)

### ⚠️ Breaking Changes

- `ConnectionAttributeIdentifier` removed (no compatibility alias); split into three types. The `identifier` field on each attribute now points to its own type:
  - `EmailAttribute.identifier`: `EmailAttributeIdentifier` — `{active?, default_method?: DefaultMethodEmailIdentifierEnum}` (same shape as the old type; use this as the drop-in replacement).
  - `PhoneAttribute.identifier`: `PhoneAttributeIdentifier` — `{active?, default_method?: DefaultMethodPhoneNumberIdentifierEnum}`.
  - `UsernameAttribute.identifier`: `UsernameAttributeIdentifier` — `{active?}` (no `default_method`).
- `PhoneProviderProtectionBackoffStrategyEnum`: `Literal["exponential", "none"]` → `Literal["exponential", "default"]`. Replace the value `"none"` with `"default"`.
- `ListRolesOffsetPaginatedResponseContent.start` / `.limit` / `.total`: `Optional[float] = None` → required `float`. Deserializing a role-list response missing any of these now raises `pydantic.ValidationError`.
- **Federated Connections Tokensets removed** — the `users.federated_connections_tokensets` client and its `list`/`delete` methods are removed, along with the `FederatedConnectionTokenSet` and `ConnectionFederatedConnectionsAccessTokens` types.
- **`federated_connections_access_tokens` field removed** — this optional field is no longer present on `ConnectionOptionsAzureAd`, `ConnectionOptionsCommonOidc`, `ConnectionOptionsGoogleApps`, `ConnectionPropertiesOptions`, and `UpdateConnectionOptions`.
- **OAuth scopes removed** — `read:federated_connections_tokens` and `delete:federated_connections_tokens` are no longer valid values of `OauthScope`.
- **`ClientSessionTransferDelegationDeviceBindingEnum` narrowed** — the `"asn"` value is removed; the enum now only accepts `"ip"`.

### New Endpoints

- `organizations.roles.members.list(id=..., role_id=...)` (sync + async) → `GET /api/v2/organizations/{id}/roles/{role_id}/members`. New sub-clients `organizations.roles` and `organizations.roles.members`; response type `ListOrganizationRoleMembersResponseContent`, item type `RoleMember`.

### Type Changes/Features

- Organizations: `third_party_client_access: Optional[OrganizationThirdPartyClientAccessEnum]` (`Literal["block", "allow"]`) on `create()`/`update()` and all organization response types.
- Organizations: new types `ListOrganizationRoleMembersResponseContent` and `RoleMember` (returned by the role-members endpoint above).
- Grants: new `UserGrant.organization_id: Optional[str]` (read-only), via `GET /grants`.
- Connections: `discovery_url` / `oidc_metadata` extended to `samlp` connections (previously OIDC-only), via new `ConnectionsDiscoveryUrl` / `ConnectionsOidcMetadata` on `ConnectionPropertiesOptions` and `UpdateConnectionOptions`.
- Event Streams: new event-type values `connection.created`, `connection.deleted`, `connection.updated` on `EventStreamEventTypeEnum`, `EventStreamDeliveryEventTypeEnum`, `EventStreamSubscribeEventsEventTypeEnum`, `EventStreamTestEventTypeEnum`; new `EventStreamCloudEventConnection{Created,Deleted,Updated}*` payload types; new `EventStreamSubscribeEventsResponseContent`.
- Token Vault: new `grants: Optional[List[TokenVaultPrivilegedAccessGrant]]` on the privileged-access credential/public-key types. `TokenVaultPrivilegedAccessGrant`: `{connection: str, scopes: List[str]}`.
- New error body types: `NotFoundErrorBody`/`NotFoundErrorBodyError`, `TooManyRequestsErrorBody`/`TooManyRequestsErrorBodyError`.
- CloudEvent `specversion`: `str` → `EventStreamCloudEventSpecVersionEnum` (`Literal["1.0"]` + `Any` fallback) across group/org/user CloudEvent types.
- **`NetworkAclMatch`** — new optional `auth0_managed: Optional[List[str]]` field (serialized as `auth0_managed`), available on both the `match` and `not_match` rule blocks. This lets network ACL rules reference Auth0-managed lists when matching or excluding traffic.

## [5.8.0](https://github.com/auth0/auth0-python/tree/5.8.0) (2026-06-29)
[Full Changelog](https://github.com/auth0/auth0-python/compare/5.7.0...5.8.0)

### ⚠️ Breaking Changes

- **`clients.update()` social/FedCM request types changed** — `native_social_login` and `fedcm_login` on `clients.update()` (`PATCH /api/v2/clients/{id}`) changed from `NativeSocialLogin` / `FedCmLogin` to `NativeSocialLoginPatch` / `FedCmLoginPatch`. `clients.create()` still uses the non-patch types, so create and update now require different types for the same logical field. Code passing the old types to `update()` must switch to the `*Patch` variants.
- **`UserDateSchema` removed — user date fields now `datetime`** — the `UserDateSchema` type (`Union[str, Dict[str, Any]]`) is deleted and no longer exported from `auth0.management.types`. `created_at`, `updated_at`, `last_login`, `last_password_reset`, and `multifactor_last_modified` on `GetUserResponseContent`, `CreateUserResponseContent`, `UpdateUserResponseContent`, and `UserResponseSchema` are now `Optional[datetime.datetime]`. Code that read these as strings/dicts must update.

### Type Changes

- **Clients — FedCM / Google One Tap** — new `fedcm_login` (read: `FedCmLogin`/`FedCmLoginGoogle`; write: `FedCmLoginPatch`/`FedCmLoginGooglePatch`) on create/update/response, gating the Google One Tap prompt in New Universal Login via `fedcm_login.google.is_enabled`.
- **Clients — Native Social Login patch types** — new `NativeSocialLoginPatch` wrapping `apple`/`facebook`/`google` patch variants (each `enabled: Optional[bool]`) for `clients.update()`.
- **Clients — Token Vault Privileged Access** — new `token_vault_privileged_access` field on create/update/response, typed `ClientTokenVaultPrivilegedAccessWithPublicKey` (create) and `ClientTokenVaultPrivilegedAccessWithCredentialId` (update), each with `credentials` + `ip_allowlist`.
- **Connections — Cross App Access** — new `cross_app_access_requesting_app` field (`CrossAppAccessRequestingApp{active: bool}`) on `connections.create()`/`update()`, OIDC/Okta request types, and all connection response types.
- **Identity `user_id` widened to `Union[str, int]`** — on `UserIdentitySchema`, `UserIdentity`, and `DeleteUserIdentityResponseContentItem`, fixing Pydantic errors on numeric (e.g. GitHub) identity IDs.
- **Email templates** — new `auth_email_by_code` value in `EmailTemplateNameEnum`.
- **Attack Protection — Phone Provider Protection** — new `attack_protection.phone_provider_protection` sub-client with `get()` / `patch(type=...)` (`GET`/`PATCH /attack-protection/phone-provider-protection`); new `PhoneProviderProtectionBackoffStrategyEnum` (`exponential`/`none`) and response types.

### Bug Fixes

- **404 handling added across multiple raw clients** — `keys.signing`, `organizations` (connections, enabled connections, members, member roles), `roles.permissions`, `self_service_profiles.sso_ticket`, `user_attribute_profiles`, and `users` (connected accounts, organizations, permissions, roles) now raise a typed `NotFoundError` on 404 instead of an unhandled parse error.
- add `"CustomDomainHeader"` to `__all__`.
- change `CustomDomainHeader` return type annotation from `Dict[str, Any]` to `RequestOptions`.


## [5.7.0](https://github.com/auth0/auth0-python/tree/5.7.0) (2026-06-10)
[Full Changelog](https://github.com/auth0/auth0-python/compare/5.6.0...5.7.0)

⚠️ **Breaking Changes**
- `identifiers` parameter removed from `branding.update()`; `identifiers` field removed from `GetBrandingResponseContent` and `UpdateBrandingResponseContent`. The following types are no longer exported from auth0.management.types: `BrandingIdentifiers`, `UpdateBrandingIdentifiers`, `BrandingPhoneDisplay`, `UpdateBrandingPhoneDisplay`, `BrandingLoginDisplayEnum`, `BrandingPhoneFormattingEnum`, `BrandingPhoneMaskingEnum`, `UpdateBrandingLoginDisplayEnum`, `UpdateBrandingPhoneFormattingEnum`, `UpdateBrandingPhoneMaskingEnum`. These settings now live exclusively on the theme resource (`PATCH /api/v2/branding/themes/{id}`) [\#860](https://github.com/auth0/auth0-python/pull/860) ([fern-api[bot]](https://github.com/apps/fern-api))
- `id` was a required `str` on `PhoneTemplate`, `GetPhoneTemplateResponseContent`, `CreatePhoneTemplateResponseContent`, `UpdatePhoneTemplateResponseContent`, and `ResetPhoneTemplateResponseContent`. It is now `Optional[str]`. Code that accesses `.id` without a `None` check will require updating [\#860](https://github.com/auth0/auth0-python/pull/860) ([fern-api[bot]](https://github.com/apps/fern-api))

**Added**
- feat: `security_headers` (`TenantSettingsNullableSecurityHeaders`, CSP + XSS protection config), `country_codes` (`TenantSettingsCountryCodesResponse`, phone identifier allow/deny list), and `include_session_metadata_in_tenant_logs` (`bool`) added to `GetTenantSettingsResponseContent` and `UpdateTenantSettingsResponseContent` [\#860](https://github.com/auth0/auth0-python/pull/860) ([fern-api[bot]](https://github.com/apps/fern-api))
- feat: `id_token_session_expiry_supported` (`ConnectionIdTokenSessionExpirySupported`) added to `ConnectionOptionsCommonOidc` and `UpdateConnectionOptions` [\#860](https://github.com/auth0/auth0-python/pull/860) ([fern-api[bot]](https://github.com/apps/fern-api))
- feat: new `invitation_landing_client_id` Optional field added to `ClientMyOrganizationPostConfiguration`, `ClientMyOrganizationPatchConfiguration`, and `ClientMyOrganizationResponseConfiguration` - available on `POST /clients`, `PATCH /clients/{id}`, `GET /clients`, and `GET /clients/{id}` [\#860](https://github.com/auth0/auth0-python/pull/860) ([fern-api[bot]](https://github.com/apps/fern-api))

**Fixed**
- fix: `GET /client-grants/{id}/organizations` — added `404` handling; raises `NotFoundError` when the grant does not exist (was previously an unhandled parse error) [\#860](https://github.com/auth0/auth0-python/pull/860) ([fern-api[bot]](https://github.com/apps/fern-api))
- fix: `PATCH /token-exchange-profiles/{id}` — added `409` handling; raises `ConflictError` when a profile with the same `subject_token_type` already exists (was previously an unhandled parse error) [\#860](https://github.com/auth0/auth0-python/pull/860) ([fern-api[bot]](https://github.com/apps/fern-api))


## [5.6.0](https://github.com/auth0/auth0-python/tree/5.6.0) (2026-05-28)
[Full Changelog](https://github.com/auth0/auth0-python/compare/5.5.0...5.6.0)

**Added**
- feat: rate_limit_policies client with full CRUD: list, create, get, update, delete [\#853](https://github.com/auth0/auth0-python/pull/853) ([fern-api[bot]](https://github.com/apps/fern-api))
- feat: Response Types: RateLimitPolicyConfigurationZero (allow), RateLimitPolicyConfigurationOne (block/log + limit), RateLimitPolicyConfigurationAction (redirect + limit + redirect_uri), RateLimitPolicy [\#853](https://github.com/auth0/auth0-python/pull/853) ([fern-api[bot]](https://github.com/apps/fern-api))
- feat: OAuth scopes: create:rate_limit_policies, read:rate_limit_policies, update:rate_limit_policies, delete:rate_limit_policies [\#853](https://github.com/auth0/auth0-python/pull/853) ([fern-api[bot]](https://github.com/apps/fern-api))
- feat: Support for groups.roles — list, create, delete [\#853](https://github.com/auth0/auth0-python/pull/853) ([fern-api[bot]](https://github.com/apps/fern-api))
- feat: Support for roles.groups — get, create, delete [\#853](https://github.com/auth0/auth0-python/pull/853) ([fern-api[bot]](https://github.com/apps/fern-api))
- feat: Support for users.effective_roles / users.effective_roles.sources.groups  [\#853](https://github.com/auth0/auth0-python/pull/853) ([fern-api[bot]](https://github.com/apps/fern-api))
- feat: Support for users.effective_permissions / users.effective_permissions.sources.roles  [\#853](https://github.com/auth0/auth0-python/pull/853) ([fern-api[bot]](https://github.com/apps/fern-api))
- feat: Support for organizations.groups — list [\#853](https://github.com/auth0/auth0-python/pull/853) ([fern-api[bot]](https://github.com/apps/fern-api))
- feat: Support for organizations.groups.roles — list, create, delete [\#853](https://github.com/auth0/auth0-python/pull/853) ([fern-api[bot]](https://github.com/apps/fern-api))
- feat: Support for organizations.members.effective_roles / organizations.members.effective_roles.sources.groups [\#853](https://github.com/auth0/auth0-python/pull/853) ([fern-api[bot]](https://github.com/apps/fern-api))
- feat: Types for SCIM Groups: effective role/permission response types, org-member effective role types, paginated list wrappers, source enum discriminators [\#853](https://github.com/auth0/auth0-python/pull/853) ([fern-api[bot]](https://github.com/apps/fern-api))
- feat: OAuth scopes: create/read/delete:group_roles, read:organization_groups, create/read/delete:organization_group_roles, read:organization_member_effective_roles, read:organization_member_role_source_groups, read:user_effective_roles, read:user_role_source_groups, read:user_effective_permissions, read:user_permission_source_roles [\#853](https://github.com/auth0/auth0-python/pull/853) ([fern-api[bot]](https://github.com/apps/fern-api))

**Changed**
* ConnectionPropertiesOptions — dpop_signing_alg field added (write path for POST /api/v2/connections) [\#853](https://github.com/auth0/auth0-python/pull/853) ([fern-api[bot]](https://github.com/apps/fern-api))
* UpdateConnectionOptions — dpop_signing_alg field added (write path for PATCH /api/v2/connections/{id}) [\#853](https://github.com/auth0/auth0-python/pull/853) ([fern-api[bot]](https://github.com/apps/fern-api))

## [5.5.0](https://github.com/auth0/auth0-python/tree/5.5.0) (2026-05-20)
[Full Changelog](https://github.com/auth0/auth0-python/compare/5.4.0...5.5.0)

**⚠️ Breaking: Python 3.9 support dropped**
- Python 3.9 reached end-of-life in October 2025. This release requires **Python >=3.10**. Users on Python 3.9 should remain on v5.4.0 until they upgrade their Python version. [\#843](https://github.com/auth0/auth0-python/pull/843) ([developerkunal](https://github.com/developerkunal))

**Added**
- feat: configurable max_retries parameter to Auth0 and AsyncAuth0 clients (defaults to 2 with exponential backoff) [\#841](https://github.com/auth0/auth0-python/pull/841) ([fern-api[bot]](https://github.com/apps/fern-api))
- feat: New error types: BadRequestSchema, ForbiddenSchema, UnauthorizedSchema, TooManyRequestsSchema [\#841](https://github.com/auth0/auth0-python/pull/841) ([fern-api[bot]](https://github.com/apps/fern-api))
- feat: New types: FedCmLogin, FedCmLoginGoogle, CredentialDeviceTypeEnum [\#841](https://github.com/auth0/auth0-python/pull/841) ([fern-api[bot]](https://github.com/apps/fern-api))
- Extended user_authentication_method and resource_server response types with additional fields [\#841](https://github.com/auth0/auth0-python/pull/841) ([fern-api[bot]](https://github.com/apps/fern-api))
- Expanded clients, refresh_tokens, resource_servers, tickets, and users/authentication_methods endpoint parameters

**Changed**
- Updated connection types with additional validation fields [\#841](https://github.com/auth0/auth0-python/pull/841) ([fern-api[bot]](https://github.com/apps/fern-api))

## [5.4.0](https://github.com/auth0/auth0-python/tree/5.4.0) (2026-05-04)
[Full Changelog](https://github.com/auth0/auth0-python/compare/5.3.0...5.4.0)

**Added**
- chore: Add events module, async token support, and connection retry resilience [\#835](https://github.com/auth0/auth0-python/pull/835) ([fern-api[bot]](https://github.com/apps/fern-api))

**Changed**
- [fern-replay] Initialize Replay for SDK customizations [\#833](https://github.com/auth0/auth0-python/pull/833) ([fern-api[bot]](https://github.com/apps/fern-api), [developerkunal](https://github.com/developerkunal))

**Fixed**
- fix: Add top-level `py.typed` marker to resolve IDE import errors [\#829](https://github.com/auth0/auth0-python/pull/829) ([kishore7snehil](https://github.com/kishore7snehil))

## [5.3.0](https://github.com/auth0/auth0-python/tree/5.3.0) (2026-04-09)
[Full Changelog](https://github.com/auth0/auth0-python/compare/5.2.0...5.3.0)

**Added**
- feat: Add CIMD support, organization connections, group deletion, refresh token listing; remove AOL/Flickr/Yammer providers [\#816](https://github.com/auth0/auth0-python/pull/816) ([fern-api[bot]](https://github.com/apps/fern-api))
- feat:Add `Auth0-Custom-Domain` header support for Multiple Custom Domains (MCD) [\#799](https://github.com/auth0/auth0-python/pull/799) ([kishore7snehil](https://github.com/kishore7snehil))

## [5.2.0](https://github.com/auth0/auth0-python/tree/5.2.0) (2026-03-30)
[Full Changelog](https://github.com/auth0/auth0-python/compare/5.1.0...5.2.0)

**⚠️ Breaking: Python 3.8 support dropped**
- Python 3.8 reached end-of-life in October 2024. This release requires **Python >=3.9.2**. Users on Python 3.8 should remain on v5.1.0 until they upgrade their Python version. [\#808](https://github.com/auth0/auth0-python/pull/808) ([kishore7snehil](https://github.com/kishore7snehil))

**Added**
- feat: Add default domain endpoints, connection key provisioning, tenant SCIM listing; remove MiiCard/Renren providers [\#801](https://github.com/auth0/auth0-python/pull/801) ([fern-api[bot]](https://github.com/apps/fern-api))
- feat: Add client_info support for custom telemetry in Authentication and Management clients [\#802](https://github.com/auth0/auth0-python/pull/802) ([kishore7snehil](https://github.com/kishore7snehil))
- feat: Add SDK logging infrastructure with configurable log levels and header redaction [\#785](https://github.com/auth0/auth0-python/pull/785) ([fern-api[bot]](https://github.com/apps/fern-api))

**Fixed**
- fix: Pagination page advancement incorrectly skipping pages [\#785](https://github.com/auth0/auth0-python/pull/785) ([fern-api[bot]](https://github.com/apps/fern-api))

**Changed**
- chore: Update ruff, aiohttp, cryptography, urllib3, codecov-action; replace Snyk with SCA scan [\#808](https://github.com/auth0/auth0-python/pull/808) ([kishore7snehil](https://github.com/kishore7snehil))

## [5.1.0](https://github.com/auth0/auth0-python/tree/5.1.0) (2026-02-11)
[Full Changelog](https://github.com/auth0/auth0-python/compare/5.0.0...5.1.0)

**Fixed**
- fix: Remove placeholder defaults from optional parameters + additional updates     [\#778](https://github.com/auth0/auth0-python/pull/778) ([fern-api[bot]](https://github.com/apps/fern-api))

## [5.0.0](https://github.com/auth0/auth0-python/tree/5.0.0) (2026-02-04)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.13.0...5.0.0)

📢 This is the official v5.0.0 release with significant improvements and breaking changes.

**Breaking Changes**

- **Complete rewrite of Management API client** - Generated from Auth0's OpenAPI specifications using [Fern](https://buildwithfern.com)
- **Python 3.7 support dropped** - Minimum required version is now Python 3.8
- **Management API client restructured** - Methods organized into modular sub-clients for better discoverability
- **Method signatures changed** - Consistent and predictable naming conventions across all endpoints
- **Response types changed** - Strongly-typed Pydantic models replace generic dictionaries
- **Import paths changed** - `from auth0.management.core.api_error import ApiError` instead of `from auth0.exceptions import Auth0Error`
- **Pagination defaults changed** - `include_totals=True` is now the default for list operations
- **Client initialization simplified** - `ManagementClient` takes `domain` instead of full `base_url`

**Added**

- First-class async support with `AsyncAuth0` and `AsyncManagementClient`
- Automatic token management with client credentials in `ManagementClient`
- Built-in pagination support with `include_totals=True` by default
- Type-safe request/response objects using Pydantic models
- Better IntelliSense and code completion support
- Comprehensive API reference documentation
- Migration guide for upgrading from v4.x

**Changed**

- Management API client fully regenerated using Fern
- Package structure reorganized with hierarchical sub-clients
- Error handling updated to use `ApiError` base class
- Documentation updated with v5 examples

**Note**

- Authentication API remains **fully backward compatible** - no changes required
- See [v5_MIGRATION_GUIDE.md](https://github.com/auth0/auth0-python/blob/master/v5_MIGRATION_GUIDE.md) for detailed upgrade instructions


## [4.13.0](https://github.com/auth0/auth0-python/tree/4.13.0) (2025-09-17)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.12.0...4.13.0)

**Added**
- fix(backchannel): expose headers on `slow_down` errors (HTTP 429s) [\#744](https://github.com/auth0/auth0-python/pull/744) ([pmalouin](https://github.com/pmalouin))

## [4.12.0](https://github.com/auth0/auth0-python/tree/4.12.0) (2025-09-15)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.11.0...4.12.0)

**Added**
- Updates for CIBA with email [\#720](https://github.com/auth0/auth0-python/pull/720) ([adamjmcgrath](https://github.com/adamjmcgrath))

## [4.11.0](https://github.com/auth0/auth0-python/tree/4.11.0) (2025-09-11)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.10.0...4.11.0)

**Added**
- feat: Support For Network ACL Endpoints [\#706](https://github.com/auth0/auth0-python/pull/706) ([kishore7snehil](https://github.com/kishore7snehil))

**Fixed**
- chore: fix workflow syntax errors and update dependencies [\#724](https://github.com/auth0/auth0-python/pull/724) ([kishore7snehil](https://github.com/kishore7snehil))

## [4.10.0](https://github.com/auth0/auth0-python/tree/4.10.0) (2025-06-05)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.9.0...4.10.0)

**Added**
- chore: merge community PRs – bugfixes, features, and dependency upgrades [\#696](https://github.com/auth0/auth0-python/pull/696) ([kishore7snehil](https://github.com/kishore7snehil))

**Fixed**
- fix: handle `authorization_details` in back_channel_login [\#695](https://github.com/auth0/auth0-python/pull/695) ([kishore7snehil](https://github.com/kishore7snehil))

## [4.9.0](https://github.com/auth0/auth0-python/tree/4.9.0) (2025-04-01)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.8.1...4.9.0)

**Added**
- feat: Federated Connections Support [\#682](https://github.com/auth0/auth0-python/pull/682) ([kishore7snehil](https://github.com/kishore7snehil))
- Adding Support For CIBA with RAR [\#679](https://github.com/auth0/auth0-python/pull/679) ([kishore7snehil](https://github.com/kishore7snehil))

## [4.8.1](https://github.com/auth0/auth0-python/tree/4.8.1) (2025-02-24)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.8.0...4.8.1)

**Fixed**
- Fix: Unauthorized Access Error For PAR [\#671](https://github.com/auth0/auth0-python/pull/671) ([kishore7snehil](https://github.com/kishore7snehil))

## [4.8.0](https://github.com/auth0/auth0-python/tree/4.8.0) (2025-01-29)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.7.2...4.8.0)

**Added**
- Adding Support For RAR and JAR Requests [\#659](https://github.com/auth0/auth0-python/pull/659) ([kishore7snehil](https://github.com/kishore7snehil))
- Adding Support For Back Channel Login [\#643](https://github.com/auth0/auth0-python/pull/643) ([kishore7snehil](https://github.com/kishore7snehil))

**Fixed**
- Consolidated Community PRs and Dependency Upgrades [\#660](https://github.com/auth0/auth0-python/pull/660) ([kishore7snehil](https://github.com/kishore7snehil))
  - [fix typo in docstring](https://github.com/auth0/auth0-python/pull/637) ([@CarlosEduR ](https://github.com/CarlosEduR))
  - [Added support for "include_totals" to all_organization_member_roles](https://github.com/auth0/auth0-python/pull/635) ([@jpayton-cx](https://github.com/jpayton-cx))
  - [Fixed Version Table](https://github.com/auth0/auth0-python/pull/633) ([@sanchez](https://github.com/sanchez))
  - [Remove upper bounds on all python dependency versions](https://github.com/auth0/auth0-python/pull/628) ([@ngfeldman](https://github.com/ngfeldman))
  - [Adding secrets to Codecov Action Upload](https://github.com/auth0/auth0-python/pull/624) ([@developerkunal](https://github.com/developerkunal))
- Updating Dependancies And Workflow Action Versions [\#653](https://github.com/auth0/auth0-python/pull/653) ([kishore7snehil](https://github.com/kishore7snehil))
- Fixing the Github Workflow Issues [\#644](https://github.com/auth0/auth0-python/pull/644) ([kishore7snehil](https://github.com/kishore7snehil))

## [4.7.2](https://github.com/auth0/auth0-python/tree/4.7.2) (2024-09-10)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.7.1...4.7.2)

**Security**
- Update cryptography requirements.txt  [\#630](https://github.com/auth0/auth0-python/pull/630) ([duedares-rvj](https://github.com/duedares-rvj))

## [4.7.1](https://github.com/auth0/auth0-python/tree/4.7.1) (2024-02-26)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.7.0...4.7.1)

**Security**
- Update cryptography requirements.txt [\#597](https://github.com/auth0/auth0-python/pull/597) ([skjensen](https://github.com/skjensen))

## [4.7.0](https://github.com/auth0/auth0-python/tree/4.7.0) (2023-12-05)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.6.1...4.7.0)

**⚠️ BREAKING CHANGES**
- Add python 3.12 support, drop 3.7 [\#562](https://github.com/auth0/auth0-python/pull/562) ([adamjmcgrath](https://github.com/adamjmcgrath))

**Added**
- [SDK-4138] Add support for Pushed Authorization Requests (PAR) [\#560](https://github.com/auth0/auth0-python/pull/560) ([adamjmcgrath](https://github.com/adamjmcgrath))

## [4.6.1](https://github.com/auth0/auth0-python/tree/4.6.1) (2023-11-29)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.6.0...4.6.1)

**Fixed**
- Fix rest_async and async tests [\#556](https://github.com/auth0/auth0-python/pull/556) ([adamjmcgrath](https://github.com/adamjmcgrath))
- fix type hint for link_user_account [\#552](https://github.com/auth0/auth0-python/pull/552) ([tzzh](https://github.com/tzzh))

## [4.6.0](https://github.com/auth0/auth0-python/tree/4.6.0) (2023-11-09)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.5.0...4.6.0)

**Added**
- [SDK-4544] Add orgs in client credentials support [\#549](https://github.com/auth0/auth0-python/pull/549) ([adamjmcgrath](https://github.com/adamjmcgrath))
- Authentication API, the Database classs, Add the organization param to the change_password method [\#539](https://github.com/auth0/auth0-python/pull/539) ([shchotse](https://github.com/shchotse))
- Retry all methods on 429 [\#518](https://github.com/auth0/auth0-python/pull/518) ([adamjmcgrath](https://github.com/adamjmcgrath))

## [4.5.0](https://github.com/auth0/auth0-python/tree/4.5.0) (2023-10-20)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.4.2...4.5.0)

**Added**
- [SDK-4656] Add fields to all_organization_members [\#537](https://github.com/auth0/auth0-python/pull/537) ([adamjmcgrath](https://github.com/adamjmcgrath))

## [4.4.2](https://github.com/auth0/auth0-python/tree/4.4.2) (2023-08-31)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.4.1...4.4.2)

**Fixed**
- Fix python dependency version [\#522](https://github.com/auth0/auth0-python/pull/522) ([adamjmcgrath](https://github.com/adamjmcgrath))
- Revert publishing types [\#521](https://github.com/auth0/auth0-python/pull/521) ([adamjmcgrath](https://github.com/adamjmcgrath))

## [4.4.1](https://github.com/auth0/auth0-python/tree/4.4.1) (2023-08-21)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.4.0...4.4.1)

**Fixed**
- Fix for async types [\#515](https://github.com/auth0/auth0-python/pull/515) ([adamjmcgrath](https://github.com/adamjmcgrath))

## [4.4.0](https://github.com/auth0/auth0-python/tree/4.4.0) (2023-07-25)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.3.0...4.4.0)

**Added**
- [SDK-4394] Add organization name validation [\#507](https://github.com/auth0/auth0-python/pull/507) ([adamjmcgrath](https://github.com/adamjmcgrath))
- Add type hints to `management` [\#497](https://github.com/auth0/auth0-python/pull/497) ([Viicos](https://github.com/Viicos))

**Fixed**
- Fix asyncify for users client where token is not required [\#506](https://github.com/auth0/auth0-python/pull/506) ([cgearing](https://github.com/cgearing))

## [4.3.0](https://github.com/auth0/auth0-python/tree/4.3.0) (2023-06-26)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.2.0...4.3.0)

**Added**
- Add forwardedFor option to password grant login [\#501](https://github.com/auth0/auth0-python/pull/501) ([adamjmcgrath](https://github.com/adamjmcgrath))
- Add connections.all name parameter [\#500](https://github.com/auth0/auth0-python/pull/500) ([adamjmcgrath](https://github.com/adamjmcgrath))
- Add type hints to base and `authentication` [\#472](https://github.com/auth0/auth0-python/pull/472) ([Viicos](https://github.com/Viicos))

**Fixed**
- Fix async auth client [\#499](https://github.com/auth0/auth0-python/pull/499) ([adamjmcgrath](https://github.com/adamjmcgrath))
- Fix update_template_universal_login [\#495](https://github.com/auth0/auth0-python/pull/495) ([adamjmcgrath](https://github.com/adamjmcgrath))

## [4.2.0](https://github.com/auth0/auth0-python/tree/4.2.0) (2023-05-02)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.1.1...4.2.0)

**Added**
- Add cache_ttl param to AsymmetricSignatureVerifier [\#490](https://github.com/auth0/auth0-python/pull/490) ([matei-radu](https://github.com/matei-radu))

## [4.1.1](https://github.com/auth0/auth0-python/tree/4.1.1) (2023-04-13)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.1.0...4.1.1)

**Fixed**
- Make pw realm params optional [\#484](https://github.com/auth0/auth0-python/pull/484) ([adamjmcgrath](https://github.com/adamjmcgrath))
- Fix intellisense on Auth0 class [\#486](https://github.com/auth0/auth0-python/pull/486) ([adamjmcgrath](https://github.com/adamjmcgrath))

## [4.1.0](https://github.com/auth0/auth0-python/tree/4.1.0) (2023-03-14)
[Full Changelog](https://github.com/auth0/auth0-python/compare/4.0.0...4.1.0)

**Added**
- Add branding theme endpoints [\#477](https://github.com/auth0/auth0-python/pull/477) ([adamjmcgrath](https://github.com/adamjmcgrath))
- [SDK-4011]  Add API2 Factor Management Endpoints [\#476](https://github.com/auth0/auth0-python/pull/476) ([adamjmcgrath](https://github.com/adamjmcgrath))
- Use declarative setup with `pyproject.toml` [\#474](https://github.com/auth0/auth0-python/pull/474) ([Viicos](https://github.com/Viicos))

## [4.0.0](https://github.com/auth0/auth0-python/tree/4.0.0) (2023-01-19)
[Full Changelog](https://github.com/auth0/auth0-python/compare/3.24.1...4.0.0)

**Added**
- Add support for private_key_jwt [\#456](https://github.com/auth0/auth0-python/pull/456) ([adamjmcgrath](https://github.com/adamjmcgrath))
- Add support for managing client credentials [\#459](https://github.com/auth0/auth0-python/pull/459) ([adamjmcgrath](https://github.com/adamjmcgrath))

**Security**
- Update pyjwt [\#460](https://github.com/auth0/auth0-python/pull/460) ([adamjmcgrath](https://github.com/adamjmcgrath))

**Changed**
- Publish Python Support Schedule [\#454](https://github.com/auth0/auth0-python/pull/454) ([evansims](https://github.com/evansims))

**⚠️ BREAKING CHANGES**
- Remove deprecated methods [\#461](https://github.com/auth0/auth0-python/pull/461) ([adamjmcgrath](https://github.com/adamjmcgrath))
- Remove v3 folder [\#462](https://github.com/auth0/auth0-python/pull/462) ([adamjmcgrath](https://github.com/adamjmcgrath))

See the [V4_MIGRATION_GUIDE](https://github.com/auth0/auth0-python/blob/master/V4_MIGRATION_GUIDE.md) for more info.

## [3.24.1](https://github.com/auth0/auth0-python/tree/3.24.1) (2023-01-19)
[Full Changelog](https://github.com/auth0/auth0-python/compare/3.24.0...3.24.1)

**Fixed**
- Remove unnecessary type param from update_template_universal_login [\#463](https://github.com/auth0/auth0-python/pull/463) ([adamjmcgrath](https://github.com/adamjmcgrath))

## [3.24.0](https://github.com/auth0/auth0-python/tree/3.24.0) (2022-10-17)
[Full Changelog](https://github.com/auth0/auth0-python/compare/3.23.1...3.24.0)

**Added**
- [SDK-3714] Async token verifier [\#445](https://github.com/auth0/auth0-python/pull/445) ([adamjmcgrath](https://github.com/adamjmcgrath))
- Add AsyncAuth0 to share a session among many services [\#443](https://github.com/auth0/auth0-python/pull/443) ([adamjmcgrath](https://github.com/adamjmcgrath))

**Fixed**
- Bugfix 414 missing import [\#442](https://github.com/auth0/auth0-python/pull/442) ([adamjmcgrath](https://github.com/adamjmcgrath))

## [3.23.1](https://github.com/auth0/auth0-python/tree/3.23.1) (2022-06-10)
[Full Changelog](https://github.com/auth0/auth0-python/compare/3.23.0...3.23.1)

**Fixed**
- Pass rest_options through Auth0 constructor [\#354](https://github.com/auth0/auth0-python/pull/354) ([adamjmcgrath](https://github.com/adamjmcgrath))


3.23.0
------------------

**Added**
- Asyncio Support [\#312](https://github.com/auth0/auth0-python/pull/312) ([adamjmcgrath](https://github.com/adamjmcgrath))
- Add `/api/v2/branding` endpoints support [\#313](https://github.com/auth0/auth0-python/pull/313) ([evansims](https://github.com/evansims))

3.22.0
------------------

**Added**
- [SDK-3174] Add `DELETE` method for `/api/v2/users/{id}/authenticators` endpoint [\#301](https://github.com/auth0/auth0-python/pull/301) ([akmjenkins](https://github.com/akmjenkins))
- [SDK-3175] Return token claims in TokenVerifier.verify() [\#273](https://github.com/auth0/auth0-python/pull/273) ([bisguzar](https://github.com/bisguzar))

**Fixed**
- [SDK-3173] Default to 'None' for `deployed` on GET /api/v2/actions/actions endpoint [\#309](https://github.com/auth0/auth0-python/pull/309) ([evansims](https://github.com/evansims))

3.21.0
------------------

**Added**
- Add pagination to device credentials [\#300](https://github.com/auth0/auth0-python/pull/300) ([fionnulak](https://github.com/fionnulak))

3.20.0
------------------

**Added**
- Add attack protection endpoints [\#303](https://github.com/auth0/auth0-python/pull/303) ([adamjmcgrath](https://github.com/adamjmcgrath))

3.19.0
------------------

**Added**
- Add actions to Auth0 class [\#293](https://github.com/auth0/auth0-python/pull/293) ([jrzerr](https://github.com/jrzerr))
- Added support for prompts API [\#291](https://github.com/auth0/auth0-python/pull/291) ([lorinkoz](https://github.com/lorinkoz))

**Changed**
- Remove references to ID token in generic token classes [\#295](https://github.com/auth0/auth0-python/pull/295) ([lbalmaceda](https://github.com/lbalmaceda))

**Fixed**
- Use assertNotEqual instead of assertNotEquals for Python 3.11 compatibility. [\#294](https://github.com/auth0/auth0-python/pull/294) ([tirkarthi](https://github.com/tirkarthi))

3.18.0
------------------

**Added**
- [SDK-2720] Add support for actions APIs [\#289](https://github.com/auth0/auth0-python/pull/289) ([jimmyjames](https://github.com/jimmyjames))

3.17.0
------------------

**Added**
- Make the CI fail when the docs syntax is invalid [\#287](https://github.com/auth0/auth0-python/pull/287) ([lbalmaceda](https://github.com/lbalmaceda))
- [SDK-2687] Implement automatic rate-limit handling [\#285](https://github.com/auth0/auth0-python/pull/285) ([evansims](https://github.com/evansims))
- Use Sphinx to generate API docs [\#281](https://github.com/auth0/auth0-python/pull/281) ([lbalmaceda](https://github.com/lbalmaceda))
- Add Passwordless Login function [\#279](https://github.com/auth0/auth0-python/pull/279) ([lbalmaceda](https://github.com/lbalmaceda))
- [SDK 2665] Update endpoint methods to support 'from' and 'take' checkpoint pagination parameters, where appropriate [\#278](https://github.com/auth0/auth0-python/pull/278) ([evansims](https://github.com/evansims))

**Deprecated**
- Deprecate /oauth/ro for passwordless [\#280](https://github.com/auth0/auth0-python/pull/280) ([lbalmaceda](https://github.com/lbalmaceda))

3.16.2
------------------

**Fixed**
- Re-Route Job Results endpoint [\#275](https://github.com/auth0/auth0-python/pull/275) ([lbalmaceda](https://github.com/lbalmaceda))

3.16.1
------------------

**Fixed**
- Remove requirements.txt file [\#270](https://github.com/auth0/auth0-python/pull/270) ([lbalmaceda](https://github.com/lbalmaceda))
- Repair Organisation get by name URL. [\#269](https://github.com/auth0/auth0-python/pull/269) ([queenvictoria](https://github.com/queenvictoria))

3.16.0
------------------

**Added**
- Add access token validation guidance for organizations [\#262](https://github.com/auth0/auth0-python/pull/262) ([lbalmaceda](https://github.com/lbalmaceda))
- Add support for Organization MGMT API endpoints [SDK-2439] [\#261](https://github.com/auth0/auth0-python/pull/261) ([lbalmaceda](https://github.com/lbalmaceda))
- Add scope to refresh_token [\#256](https://github.com/auth0/auth0-python/pull/256) ([criles25](https://github.com/criles25))
- Allow configuration of outgoing request protocol [\#254](https://github.com/auth0/auth0-python/pull/254) ([garry-jeromson](https://github.com/garry-jeromson))

3.15.0
------------------

**Added**
- Add support for organizations feature [\#258](https://github.com/auth0/auth0-python/pull/258) ([jimmyjames](https://github.com/jimmyjames))

3.14.0
------------------

**Added**
- Adds a new user method invalidate_remembered_browsers [\#248](https://github.com/auth0/auth0-python/pull/248) ([kpurdon](https://github.com/kpurdon))

3.13.0
------------------

**Added**
- Add support for Log Streams API [\#236](https://github.com/auth0/auth0-python/pull/236) ([lbalmaceda](https://github.com/lbalmaceda))

**Fixed**
- Fix imports on the management/__init__.py file [\#235](https://github.com/auth0/auth0-python/pull/235) ([matthewarmand](https://github.com/matthewarmand))

3.12.0
------------------

**Added**
- Add missing user profile properties to the signup endpoint [\#231](https://github.com/auth0/auth0-python/pull/231) ([lbalmaceda](https://github.com/lbalmaceda))
- Add Hooks management API [\#227](https://github.com/auth0/auth0-python/pull/227) ([guillp](https://github.com/guillp))
- Add missing external_id property to the import users job [\#222](https://github.com/auth0/auth0-python/pull/222) ([lbalmaceda](https://github.com/lbalmaceda))

**Changed**
- Remove iat claim value check [\#223](https://github.com/auth0/auth0-python/pull/223) ([lbalmaceda](https://github.com/lbalmaceda))

**Fixed**
- Skip sending optional parameters on POST request when unspecified [\#230](https://github.com/auth0/auth0-python/pull/230) ([lbalmaceda](https://github.com/lbalmaceda))

3.11.0
------------------

**Added**
- Add send_completion_email to users import job [\#220](https://github.com/auth0/auth0-python/pull/220) ([lbalmaceda](https://github.com/lbalmaceda))
- Expose the time at which the Rate Limit will reset [\#219](https://github.com/auth0/auth0-python/pull/219) ([lbalmaceda](https://github.com/lbalmaceda))

**Removed**
- Add deprecation note for DELETE /users (all users) [\#217](https://github.com/auth0/auth0-python/pull/217) ([lbalmaceda](https://github.com/lbalmaceda))

3.10.0
------------------

**Security**
- Improved OIDC compliance [\#213](https://github.com/auth0/auth0-python/pull/213) ([lbalmaceda](https://github.com/lbalmaceda))

**Added**
- Add connect/read timeout option [\#215](https://github.com/auth0/auth0-python/pull/215) ([lbalmaceda](https://github.com/lbalmaceda))

3.9.2
------------------

**Fixed**
- Accept client_secret as passwordless/start param [\#211](https://github.com/auth0/auth0-python/pull/211) ([lbalmaceda](https://github.com/lbalmaceda))

3.9.1
------------------

**Changed**
- Update minimum "requests" version to 2.14.0 [\#204](https://github.com/auth0/auth0-python/pull/204) ([lbalmaceda](https://github.com/lbalmaceda))

3.9.0
------------------

**Added**
- Add Roles and Permissions endpoints [\#202](https://github.com/auth0/auth0-python/pull/202) ([lbalmaceda](https://github.com/lbalmaceda))

3.8.1
------------------

July 18, 2019: This release included an unintentionally breaking change affecting those users that were manually parsing the response from GET requests. e.g. /userinfo or /authorize. The `AuthenticationBase#get` method was incorrectly parsing the request result into a String.

From this release on, making a GET request returns a Dictionary instead.

**Breaking Change**
- Fix request creation when headers are the default [\#198](https://github.com/auth0/auth0-python/pull/198) ([lbalmaceda](https://github.com/lbalmaceda)).


3.8.0
------------------

**Fixed**
- rules_config.unset fix [\#195](https://github.com/auth0/auth0-python/pull/195) ([jhunken](https://github.com/jhunken))

**Security**
- Update requests dependency to latest version [\#196](https://github.com/auth0/auth0-python/pull/196) ([lbalmaceda](https://github.com/lbalmaceda))

3.7.2
------------------

**Fixed**
- Fix HTTP method used for rotating Client secret [\#191](https://github.com/auth0/auth0-python/pull/191) ([lbalmaceda](https://github.com/lbalmaceda))

3.7.1
------------------

**Fixed**
- Update telemetry format [\#187](https://github.com/auth0/auth0-python/pull/187) ([lbalmaceda](https://github.com/lbalmaceda))


3.7.0
------------------

**Changed**
- Remove default value for search_engine [\#185](https://github.com/auth0/auth0-python/pull/185) ([lbalmaceda](https://github.com/lbalmaceda))


3.6.1
------------------

**Fixed**
- Fixed Management API Grants class instantiation [\#179](https://github.com/auth0/auth0-python/pull/179) ([beck3905](https://github.com/beck3905))


3.6.0
------------------

**Added**
- Add grants, custom domains, rules_configs to API [\#177](https://github.com/auth0/auth0-python/pull/177) ([sagnew-dg](https://github.com/sagnew-dg))


3.5.0
------------------

**Added**
- Add Revoke Refresh Token endpoint [\#170](https://github.com/auth0/auth0-python/pull/170) ([lbalmaceda](https://github.com/lbalmaceda))
- Add /dbconnections/signup with username and metadata [\#169](https://github.com/auth0/auth0-python/pull/169) ([lbalmaceda](https://github.com/lbalmaceda))


3.4.0
------------------

**Added**
- Add `client_id` param to ClientGrants.all [\#159](https://github.com/auth0/auth0-python/pull/159) ([danishprakash](https://github.com/danishprakash))
- Add telemetry headers to AuthenticationBase [\#152](https://github.com/auth0/auth0-python/pull/152) ([crgk](https://github.com/crgk))
- Add pre-commit pypgrade hook and update supported versions [\#124](https://github.com/auth0/auth0-python/pull/124) ([hugovk](https://github.com/hugovk))
- Implemented delete_user_by_email and test for connections [\#122](https://github.com/auth0/auth0-python/pull/122) ([runz0rd](https://github.com/runz0rd))
- Adds user export job creation. [\#112](https://github.com/auth0/auth0-python/pull/112) ([dmark](https://github.com/dmark))

**Changed**
- String Formatting Updated [\#141](https://github.com/auth0/auth0-python/pull/141) ([vkmrishad](https://github.com/vkmrishad))
- Uses Python built-in modules to retrieve Python and auth0-python version number [\#125](https://github.com/auth0/auth0-python/pull/125) ([edawine](https://github.com/edawine))

**Fixed**
- Stop lower-casing email on user search [\#167](https://github.com/auth0/auth0-python/pull/167) ([helmus](https://github.com/helmus))
- Always include Content-Type header in management requests [\#158](https://github.com/auth0/auth0-python/pull/158) ([crgk](https://github.com/crgk))


3.3.0
------------------

**Added**
- Add pagination to Clients and Connections
- Add pagination to Client Grants, Resource Servers and Rules
- Add Email-Templates Management API endpoints

**Fixed**
- Replace default mutable arguments with None
- Fix JSON error message handling for Management API


3.2.2
------------------

**Fixed**
- Upload the correct package contents to Pypi.


3.2.0
------------------

**Added**
- Raise Auth0Error for bad status code [\#98](https://github.com/auth0/auth0-python/pull/98) ([beck3905](https://github.com/beck3905))

**Fixed**
- Correctly throw an exception when handing a text response [\#92](https://github.com/auth0/auth0-python/pull/92) ([benbc](https://github.com/benbc))
- Instantiate UserBlocks for consistency [\#90](https://github.com/auth0/auth0-python/pull/90) ([mattdodge](https://github.com/mattdodge))

3.1.4
------------------

Authentication API
- Improve handling of inconsistent API error responses.

3.1.3
------------------

Management API
- Added `upsert` parameter to `import_users` job.

3.1.2
------------------

Authentication API
- Added `refresh_token` method to get_token

3.1.0
------------------

Authentication API
- Added Logout Functionality

3.0.0
------------------

Authentication API
- Added Support for API Authorization. `oauth/token` endpoint
  - Client Credentials Grant
  - Authorization Code Grant
  - Authorization Code PKCE Grant
  - Resource Owner Password Realm Grant
- Added Support for API Authorization. `authorize` endpoint
  - Authorization Code Grant

Management API v2
- Added Support for Guardian
- Added Support to retrieve Logs
- Added Support to manage Resource Servers
- Added Support to manage Client Grants
- Added Support to manage User blocks
