7.19.0

Fixed

• Security fix: Resolve CVE-2025-58769

7.18.0

Contributing Changes

Added:

• feat: add macroable guards (#459) by erikn69
• docs: Added facade methods documentation for better developer guidance (#466) by lucascbittencourt

Fixed:

• docs: Update CHANGELOG.md (#465) by nickescobedo

7.17.0

Fixed

• Security fix: Resolve CVE-2025-47275

7.16.0

Added

• Laravel 12 Support #470 (lee-to)

Fixed

• refactor: fix failing tests #471 (noevidenz)

7.15.0

Changed

• perf: Update getCredential to only refresh credential once per request #453 (ComputerTinker)

7.14.0

Changed

• refactor: add additional Telescope state check #447 (samuelhgf)
• chore(deps): replace temporary psalm-laravel-plugin fork with official #448 (alies-dev)

7.13.0

Added

• Add support for Laravel 11 #445 (evansims)

Changed

• Verify that Telescope is enabled via configuration helper #444 (samuelhgf)

7.12.0

Added

• Implement support for Back-Channel Logout #435 (evansims)
• Restore configurable route paths #436 (evansims)

Fixed

• Resolve CacheBridgeAbstract::save() not storing values when cache misses #434 (seruymt)

7.11.0

Added

• Significant performance improvements by eliminating redundant user queries.
• Compatibility support for Laravel Telescope. See docs/Telescope.md for more information.
• A refactored Events API has been introduced. See docs/Events.md for more information.
• AUTH0_SESSION_STORAGE and AUTH0_TRANSIENT_STORAGE now support a cookie value to enable the native Auth0-PHP SDK cookie session handler. See docs/Cookies.md for more information.

Fixed

• Addressed an issue where, under certain circumstances, the first user authentication attempt after a session invalidation could fail.

Changed

• Session regeneration/invalidation has been refactored.
• Discarded sessions are now deleted when they are invalidated by the SDK, rather than wait for Laravel to garbage collect.
• Session storage has been refactored. Session data is now stored as a JSON array in a single auth0_session entry in the Laravel session store, rather than in multiple keys.

Documentation

• A demonstration Eloquent user model and repository implementation has been added to docs/Eloquent.md.
• A new docs/Sessions.md document has been added for guidance on the various session driver options available.

7.10.1

Fixed

• Addressed an issue where, under certain circumstances, permissions state could be lost after authenticating.