Releases

Features and breaking changes released in Actions are listed below.

v3

Login Flow

New features and breaking changes were released to triggers in the Login Flow. To learn about these changes, read Login Flow: Releases.

v2 (GA)

Query and body parameters

Direct access to the query and body parameters is available using the event.request.query and event.request.body objects. These are exposed regardless of whether the authorization was initiated via a GET or POST request. Many protocol-specific query or body parameters sent as part of an authorization request are now also available as first-class values on the event.transaction object. We recommend that you use event.transaction rather than event.request.query and event.request.body unless your use case is not supported. A complete mapping of these changes is below:

Pre-GA Property GA Property
event.actor.ip event.request.ip
event.actor.hostname event.request.hostname
event.actor.geoIp event.request.geoip
event.actor.language event.request.language
event.actor.method event.request.method
event.actor.userAgent event.request.user_agent
event.actor.body event.request.body
event.actor.query event.request.query
event.actor.query.audience event.resource_server.identifier
event.actor.query.scope event.transaction.requested_scopes
event.actor.query.acr_values event.transaction.acr_values
event.actor.query.ui_locales event.transaction.ui_locales
event.protocol event.transaction.protocol
context.secrets event.secrets

User Profile properties

In general, the event.user object has had its properties changed from camel case to snake case in order to match the Auth0 User Profile structure. For example, event.user.appMetadata has been changed to event.user.app_metadata.

Performing side effects

In the pre-GA version of the post-login trigger, side effects were performed by returning an object from an Action. In Actions GA, an api object is provided to encapsulate these changes and provide better in-editor type hints and inline documentation.

To learn more about these changes and see code examples, read Login Flow: Releases.

Manipulating scopes

Although we experimented with providing direct manipulation of ID and Access Token scopes during the Actions Beta, we do not support this functionality in Actions GA.