🔄 Dynamic Client Registration support
Connect Civic auth to any AI server or MCP server with our new Dynamic Client Registration support. Perfect for modern, flexible authentication flows.🔐 OAuth client-credentials flow
Now supporting the OAuth client-credentials flow for secure server-to-server authentication scenarios.⚡ Major session refresh improvements
The Civic Auth SDK brings significant API improvements with faster session refreshes. Sessions now refresh quickly on page load and automatically in the background when users navigate back to protected pages.🎨 Enhanced UserButton UI
Improved the UserButton component with better visual design and user experience.
🔄 Token exchange (RFC 8693)
Exchange one access token for another with different permissions or audience. Perfect for delegating access between services while maintaining security.🔒 Enhanced cross-origin security
Added COEP and CORP headers for better security and compatibility with modern web standards.
🔑 Passkey login is here!
We now support passkey as a login method! After enabling passkey, you can prompt users to create a passkey to login to your site, making login faster and more secure. Say goodbye to passwords and hello to the future of authentication.
🔗 Mix and match React with any backend
New React SDK feature lets you use React on the frontend with any backend technology. Whether you’re running Node.js, Python, Go, or something else entirely, our React components now work seamlessly with your existing auth setup.Perfect for teams that want React’s user experience with the flexibility to choose their backend stack.
⚡ Smarter auth middleware
Refactored authentication middleware with better utilities and improved token refresh prioritization. Sessions now handle cleanup and replenishment more reliably.🛠️ URL parameter cleanup
Fixed issues with code parameter handling and improved session cleanup processes. Login flows are now more robust across different scenarios.🔧 Enhanced session reliability
Better session management ensures users stay authenticated properly and reduces unexpected logouts during normal usage.
🔐 Client secrets for the enterprise crowd
We kept hearing from enterprise customers that they needed client secrets for their confidential applications. So we built it. You can now choose PKCE + client secret for maximum security, or go with client secrets only if you’re working with legacy systems that need it.Check out our authentication flows guide to see how it works.📱 Mobile login that actually works
Remember those tiny login buttons that were impossible to tap on mobile? Yeah, we fixed that. Login buttons now look good and load fast on phones. No more squinting at your screen trying to hit the right spot.🛠️ Vanilla JavaScript plays nice with everything
Our vanilla JavaScript integration now works smoothly with Express, Fastify, Hono, or whatever backend you’re running. Same simple code, any framework.🐛 Bug fixes and improvements
We’ve been busy polishing the experience:
- Various login flow improvements
- Enhanced mobile display quality
- Better handling of edge cases across different auth methods
📱 React Native support is here
Your React Native apps can now use Civic Auth. Works on both iOS and Android with solid performance.🍦 Pure JavaScript, no frameworks required
Want to integrate Civic Auth without any frameworks? Now you can. Plain JavaScript integration that just works.
🌍 Speaking Spanish and German
Login screens now support Spanish and German with complete translations. Your international users will feel right at home.📸 Google profile pictures show up
Fixed the bug where Google profile pictures wouldn’t load. No more broken image icons.
📊 Billing dashboard shows real numbers
The billing dashboard was showing incorrect data. Charts now display accurate usage information.🎯 Fewer annoying banners
App banners now only appear for production applications, not during development. Less noise while you’re building.
⚡ One redirect, not three
Next.js apps were doing multiple redirects after login. Fixed it so there’s just one clean redirect like there should be.
📈 Billing dashboard improvements
Usage charts now show the right data with clearer visuals. No more guessing what your actual usage is.
💡 Find your plan info easily
Subscription details and usage limits are now easy to find. No more hunting through multiple screens.🔗 Better custom domain support
Improved how the SDK handles custom URLs and domains. More reliable and flexible.
🚀 Production setup works again
Fixed the errors that were happening when setting up production applications. Should be smooth sailing now.
🚨 Know before you hit the limit
Added dashboard and email alerts when you’re approaching your plan limits. No more surprise overages.