- Updated dependencies [
397280b,5bb8efc,397280b,917748a,064bab8]:- @clerk/clerk-js@6.42.2
- @clerk/react@6.18.5
- @clerk/shared@4.44.0
-
tslibis no longer installed as a runtime dependency. The published builds never imported it. (#10521) by @dominic-clerk -
The token file written by
storage()from@clerk/electron/storageis now readable and writable only by its owner (0600). It was previously world-readable (0644under the default umask). Existing token files are updated the next timestorage()is called. (#9971) by @wobsoriano -
Updated dependencies [
cd21ebe,690edf2,debfc72,1bce44b]:- @clerk/react@6.18.4
- @clerk/clerk-js@6.42.1
- @clerk/shared@4.43.1
- Updated dependencies [
4ce996f]:- @clerk/clerk-js@6.42.0
- @clerk/shared@4.43.0
- @clerk/react@6.18.3
- Updated dependencies [
eec2699]:- @clerk/clerk-js@6.41.1
- Updated dependencies [
0a6e367,cf9c897]:- @clerk/clerk-js@6.41.0
- @clerk/shared@4.42.0
- @clerk/react@6.18.2
- Updated dependencies [
8c3739d,0334b05]:- @clerk/shared@4.41.1
- @clerk/clerk-js@6.40.1
- @clerk/react@6.18.1
- Fix OAuth sign-in staying blocked after a user abandons the browser tab. Starting a new OAuth sign-in now replaces the pending one instead of failing with
Clerk: an OAuth flow is already pending.until the 3-minute callback timeout. If the user later finishes the abandoned browser tab, its callback is ignored and no longer completes the newer sign-in. (#10337) by @wobsoriano
- Updated dependencies [
e5cfdff]:- @clerk/shared@4.41.0
- @clerk/clerk-js@6.40.0
- @clerk/react@6.18.0
-
-
OAuth sign-in without the
rendereroption increateClerkBridge()now throws a Clerk error that asks for it. Previously it failed with Electron's "No handler registered" error. (#10000) by @wobsoriano -
Telemetry now reports
@clerk/electroninstead of@clerk/react. -
Add a
@clerk/electron/react/experimentalentry point that re-exports@clerk/react/experimental.
-
- Updated dependencies [
dcb03d3,31c1930]:- @clerk/clerk-js@6.39.0
- @clerk/shared@4.40.0
- @clerk/react@6.17.8
- Updated dependencies [
fc7d050,568c668]:- @clerk/clerk-js@6.38.1
- @clerk/react@6.17.7
- @clerk/shared@4.39.1
- Updated dependencies [
2654caa]:- @clerk/shared@4.39.0
- @clerk/clerk-js@6.38.0
- @clerk/react@6.17.6
- Updated dependencies [
f6937c8]:- @clerk/clerk-js@6.37.0
- @clerk/shared@4.38.0
- @clerk/react@6.17.5
- Updated dependencies [
c8eb8d5,6dbf9a4]:- @clerk/clerk-js@6.36.0
- @clerk/shared@4.37.1
- @clerk/react@6.17.4
-
Export the
StorageOptions,RendererSchemeOptions, andSetupPasskeysMainReturntypes so consumers can type their configuration without reaching throughCreateClerkBridgeOptions['renderer']. (#9783) by @manovotny -
Updated dependencies [
6a14691,0ee4ee2,7a3fcf5,69c1b9c,69c1b9c,d9cf0f2,d4617ce]:- @clerk/clerk-js@6.35.0
- @clerk/shared@4.37.0
- @clerk/react@6.17.3
- Updated dependencies [
645a532,84ee588,4e538ac]:- @clerk/shared@4.36.0
- @clerk/clerk-js@6.34.1
- @clerk/react@6.17.2
- Updated dependencies [
b3af79e,cc6f11a,ee136a9,d46b544,f50f48c]:- @clerk/clerk-js@6.34.0
- @clerk/shared@4.35.0
- @clerk/react@6.17.1
- Updated dependencies [
804d3db,64c8e3e,f56a14b,07b4c2b,4e36687,9e7485c]:- @clerk/shared@4.34.0
- @clerk/react@6.17.0
- @clerk/clerk-js@6.33.0
- Updated dependencies [
855c24f,cb6a376]:- @clerk/shared@4.33.0
- @clerk/clerk-js@6.32.1
- @clerk/react@6.16.1
- Updated dependencies [
b5a3abe,ddf9afc,39782e3]:- @clerk/clerk-js@6.32.0
- @clerk/react@6.16.0
- @clerk/shared@4.32.0
- Updated dependencies [
452107a,f4bc807,7ea009f,06be25f,c47e9cb,1601100]:- @clerk/clerk-js@6.31.1
- @clerk/shared@4.31.1
- @clerk/react@6.15.2
- Updated dependencies [
2b3341f]:- @clerk/react@6.15.1
- Updated dependencies [
25d8633]:- @clerk/clerk-js@6.31.0
- @clerk/react@6.15.0
- @clerk/shared@4.31.0
- Updated dependencies [
0f70a63]:- @clerk/clerk-js@6.30.3
-
Keep the current client token available for the lifetime of the Electron app when secure persistence is unavailable or fails. (#9588) by @jeremy-clerk
Fixed a race where an older in-flight token write could replace a newer token when multiple requests completed at the same time.
-
Updated dependencies [
5a74f4c,0d224f2]:- @clerk/clerk-js@6.30.2
- @clerk/shared@4.30.2
- @clerk/react@6.14.8
- Updated dependencies [
dbaa95a]:- @clerk/clerk-js@6.30.1
- @clerk/react@6.14.7
- @clerk/shared@4.30.1
-
Keep Clerk's navigation inside the renderer.
ClerkProvidernow always suppliesrouterPush/routerReplace, so Clerk routes through your application's router when you provide one, and never navigates the window to an internal/CLERK-ROUTER/VIRTUAL/...path — which no custom protocol handler can serve, and which reloaded the renderer and dropped the user out of sign-in. (#9530) by @jeremy-clerkApplications that worked around this by passing no-op router functions, or by filtering
CLERK-ROUTER/VIRTUALout themselves, can remove those workarounds. -
Updated dependencies [
28b77ac,46bf7ce,8bc1c9f,17b865b]:- @clerk/shared@4.30.0
- @clerk/clerk-js@6.30.0
- @clerk/react@6.14.6
- Updated dependencies [
ea8cb05]:- @clerk/shared@4.29.3
- @clerk/clerk-js@6.29.3
- @clerk/react@6.14.5
-
Stop passkey autofill from opening a passkey prompt as soon as the sign-in form renders. Autofill now runs as a real background request when the window can service one (an
httpsorigin matching your RP ID), and is not attempted at all when it would route to the OS passkey dialog. Signing in with the explicit "Use passkey" action is unchanged. (#9500) by @jeremy-clerk -
Updated dependencies []:
- @clerk/react@6.14.4
- @clerk/clerk-js@6.29.2
- Updated dependencies [
b815047]:- @clerk/shared@4.29.2
- @clerk/react@6.14.4
- @clerk/clerk-js@6.29.2
- Updated dependencies [
7f5c294]:- @clerk/shared@4.29.1
- @clerk/clerk-js@6.29.1
- @clerk/react@6.14.3
- Updated dependencies [
81840b3,b7fb564,44edcc9]:- @clerk/shared@4.29.0
- @clerk/clerk-js@6.29.0
- @clerk/react@6.14.2
- Updated dependencies [
131edec]:- @clerk/clerk-js@6.28.1
- @clerk/shared@4.28.1
- @clerk/react@6.14.1
- Updated dependencies [
aa86d9f,8c61153,52ec5cd,6464fe7]:- @clerk/clerk-js@6.28.0
- @clerk/shared@4.28.0
- @clerk/react@6.14.0
- Updated dependencies [
34d278b]:- @clerk/shared@4.27.1
- @clerk/clerk-js@6.27.1
- @clerk/react@6.13.1
- Updated dependencies [
1ef84c3,d639048,a66cbbf,58d8ff5]:- @clerk/shared@4.27.0
- @clerk/clerk-js@6.27.0
- @clerk/react@6.13.0
- Updated dependencies [
bbe51ff,bf1b62a,5c81479,7f0cac8]:- @clerk/react@6.12.11
- @clerk/clerk-js@6.26.0
- @clerk/shared@4.26.0
- Updated dependencies [
aaea141]:- @clerk/clerk-js@6.25.13
- @clerk/shared@4.25.10
- @clerk/react@6.12.10
-
Forward OAuth deep-link callbacks to the primary Electron process on Windows and Linux, and bring the (#9278) by @jeremy-clerk
signing-in window to the front when the callback arrives.
Delivering those callbacks requires Electron's single-instance lock, so
createClerkBridgenow acquires it on Windows and Linux wheneverrendereris configured, and quits secondary processes after forwarding their arguments. Applications that previously ran side-by-side instances on those platforms will become single-instance. macOS is unaffected. Two new escape hatches: the returned bridge exposesisPrimaryInstanceso the application can stop its own bootstrap in a secondary process, andmanageSingleInstanceLock: falseleaves the lock to applications that manage it themselves. -
Updated dependencies []:
- @clerk/react@6.12.9
- Updated dependencies [
5cb6a02]:- @clerk/clerk-js@6.25.12
- Updated dependencies [
2974fb0,e2dd4e2]:- @clerk/clerk-js@6.25.11
- @clerk/shared@4.25.9
- @clerk/react@6.12.9
- Updated dependencies [
e35d971]:- @clerk/clerk-js@6.25.10
- @clerk/react@6.12.8
- Updated dependencies [
01f2c12]:- @clerk/clerk-js@6.25.8
- @clerk/shared@4.25.8
- @clerk/react@6.12.8
- Updated dependencies [
097432d]:- @clerk/shared@4.25.7
- @clerk/clerk-js@6.25.7
- @clerk/react@6.12.7
- Updated dependencies [
858a689,c904fb4]:- @clerk/shared@4.25.6
- @clerk/clerk-js@6.25.6
- @clerk/react@6.12.6
- Validate that token-cache and OAuth-transport IPC requests originate from a top-level window's main frame. This prevents untrusted content in subframes or
<webview>s that share the Clerk preload from reading the persisted client JWT or driving the OAuth transport. (#9167) by @dominic-clerk
- Updated dependencies [
bcbdda6]:- @clerk/shared@4.25.5
- @clerk/react@6.12.5
- @clerk/clerk-js@6.25.5
- Updated dependencies [
e162b71]:- @clerk/shared@4.25.4
- @clerk/clerk-js@6.25.4
- @clerk/react@6.12.4
- Updated dependencies [
d8fc1d7,1d0e78c]:- @clerk/clerk-js@6.25.3
- @clerk/shared@4.25.3
- @clerk/react@6.12.3
- Updated dependencies [
8dbf343]:- @clerk/shared@4.25.2
- @clerk/react@6.12.2
- @clerk/clerk-js@6.25.2
- Updated dependencies [
62f6702]:- @clerk/shared@4.25.1
- @clerk/clerk-js@6.25.1
- @clerk/react@6.12.1
- Updated dependencies [
6f97ef5,bab1f29,f2d9e4b]:- @clerk/shared@4.25.0
- @clerk/clerk-js@6.25.0
- @clerk/react@6.12.0
-
Add a
userAgentoption tocreateClerkBridge()so Electron apps can customize the app name used for UserProfile session activity attribution while preserving platform details. (#9066) by @jeremy-clerk -
Updated dependencies [
1efc7e5,5028b54,73d73ec,2e1fec7]:- @clerk/clerk-js@6.24.0
- @clerk/shared@4.24.0
- @clerk/react@6.11.4
-
<ClerkProvider>from@clerk/electron/reactnow allows the renderer's own custom scheme as a redirect protocol by default, so apps no longer need to setallowedRedirectProtocols={['<scheme>:']}manually. (#9043) by @nicolas-angeloThis applies when the renderer is served from the custom scheme registered with
createClerkBridge({ renderer }). Localfile:renderers are not allowlisted automatically, and explicitallowedRedirectProtocolsvalues are still respected. -
Updated dependencies []:
- @clerk/react@6.11.3
- @clerk/clerk-js@6.23.0
- Updated dependencies [
4306146,533f0b1,c5697d7]:- @clerk/clerk-js@6.23.0
- @clerk/shared@4.23.0
- @clerk/react@6.11.3
- Updated dependencies [
cb76aa2]:- @clerk/clerk-js@6.22.1
- @clerk/react@6.11.2
- @clerk/shared@4.22.1
- Updated dependencies [
19ce04a,2492043]:- @clerk/clerk-js@6.22.0
- @clerk/shared@4.22.0
- @clerk/react@6.11.1
- Updated dependencies [
59f7327]:- @clerk/clerk-js@6.21.1
- @clerk/react@6.11.0