Releasesby GlyphAudience Validation for Private Key JWT Client Authentication
When validating [JWT assertions used for client application authentication](https://auth0.com/docs/get-started/authentication-and-authorization-flow/authenticate-with-private-key-jwt), **Auth0 will impose stricter requirements and accept only a tenant's issuer identifier as a single JSON string value in the "aud" (audience) claim**.
Also shipped Oct 10, 2025Okta in October 2025 →
What's new in Sigma
Admin Support for specific OAuth scopes for Snowflake connections You can now define specific scopes by role for OAuth authentication to your Snowflake data warehouse, enabling you to use separate connections for fixed roles, instead of just your default role. See Connect to Snowflake with OAuth .
The little things, week ending October 10, 2025
A collection of updates to Replicate for the week ending October 10, 2025.
Weekly usage emails, pgvector on Postgres 18, Pulumi and SST support release - Oct 10, 2025
Weekly Neon usage reports. Paid plan users will soon begin receiving weekly usage reports on Mondays. These reports provide month to date usage and costs across...
Gateway - New domain categories added
We have added three new domain categories under the Technology parent category, to better reflect online content and improve DNS filtering. New categories added Parent ID Parent Name Category ID Category Name 26 Technology 194 Keep Awake Software 26 Technology 192 Remote Access 26 Technology 193 Shareware/Freeware Refer to Gateway domain categories to learn...
Workers - Worker startup time limit increased to 1 second
You can now upload a Worker that takes up 1 second to parse and execute its global scope. Previously, startup time was limited to 400 ms. This allows you to run Workers that import more complex packages and execute more code prior to requests being handled. For more information, see the documentation on Workers startup limits .
Railway Goes to the Land of Tacos and Lucha Libre
# Railway x Mexico City  [Art by **gerazay**](https://www.instagram.com/gerazay/) ¡Buenos Dias!
More from Auth0Every Auth0 release →
Easily Update Your Firewall with the New IP Allow List
We are excited to announce an improvement that makes it faster and easier for you to keep your firewall configurations up-to-date. Our __IP allow list for Auth0's Public Cloud regions__ is now available in a standardized, machine-readable format.
Akamai Supplemental Signals is Now in Early Access
We’re excited to announce the Early Access release of **Akamai Supplemental Signals**. This feature allows **Auth0 Enterprise customers who have Akamai configured as a reverse proxy** in front of Auth0 to forward signals from [**Akamai Bot Manager**](https://www.akamai.com/products/bot-manager) and [**Akamai Account...
Auth0 Nuxt SDK Beta
The first public beta of the Auth0 Nuxt SDK is now available for developers building web apps on the __Nuxt__ framework! ### Key Highlights __Idiomatic Nuxt 3 Experience:__ Simple, composable functions (useAuth0) that feel native to Nuxt developers, dramatically reducing time-to-first-login.
FGA Logging API Now Generally Available
__FGA Logging API Now Generally Available__ The Auth0 FGA Logging API is now Generally Available (GA). This dedicated endpoint provides a comprehensive audit trail for every interaction with the FGA system. You can now programmatically retrieve detailed logs for auditing, debugging, and monitoring.
Additional Signing Algorithms for OIDC and Okta Enterprise Connections in Limited Early Access!
We’re thrilled to introduce the __Limited Early Access__ release of __Additional Signing Algorithm for Okta and OIDC enterprise connections__! This release expands flexibility for both __Private Key JWT client authentication__ and __ID token verification__ by adding support for stronger signing algorithms beyond RS256, including: RS512 PS256 ES256 For...
Native Passkey Management Now Available On MyAccount
We’re very excited to announce the availability of __Native Passkey Management__, extending the management of authentication methods using APIs. Customers can now delete passkeys using APIs and list all enrolled authentication methods for a user. Customers can build end-to-end management of the passkeys directly into their native applications.
React Native SDK v5.0 (GA)
We are excited to announce the release of the __Auth0 React Native SDK v5__, a foundational rewrite designed to provide a best-in-class developer experience for one of the world's most popular mobile frameworks.
Ephemeral Sessions with Actions (Public EA)
As part of the Continuous Session Protection, you can now configure ephemeral (non-persistent) sessions using Actions. This allows enterprise customers to dynamically control whether a session is stored in a persistent cookie or only in memory.