Releasesby GlyphFix for Empty login_hint Parameter on External Identity Providers Requests
__What's Changing:__ We are fixing an issue where Auth0 was including an empty `login_hint` query parameter when redirecting users to external identity providers. Going forward, `login_hint` will only be included in the authorization request when a value is actually present.
Also shipped May 6, 2026Okta in May 2026 →
Introducing @supabase/server
Supabase introduced @supabase/server to provide stateless authentication, RLS-scoped clients, and server-side CORS support. The package is designed to reduce boilerplate code for server-side implementations.
Secure more apps with External Access Tokens and Private Publishing
Replit has made Private Publishing available to Core and Starter plan users and introduced External Access Tokens for all private apps. These features allow secure access to private deployments without exposing them to the public internet.
Data migrations in Prisma 8
Prisma 8 allows developers to write data migrations in TypeScript, enabling column backfilling and data transformation alongside schema changes.
Introducing Create-Prisma: Start a Prisma App With One Command
The new create-prisma CLI tool allows developers to initialize a Prisma application with a single command. It includes a starter schema, seed data, database scripts, and optional Prisma Postgres setup.
Prefect 3.7: infrastructure decorators and plugins are GA
Two of our most-requested experimental surfaces graduate to general availability, flows can render their own dependency graphs, and prepared workspaces now run with uv.
More from Auth0Every Auth0 release →
Resend Email Provider is now Generally Available
 We're excited to announce that __Resend__ is now __Generally Available__ as an out-of-the-box email delivery provider in Auth0!
Auth for MCP is now Generally Available
We are excited to announce Auth for MCP is now Generally Available. Auth for MCP gives you a straightforward way to add authentication and authorization to any MCP server, so you control exactly who gets access, and what they get access to. Implement authentication, CIMD registration, and OBO token exchange for AI agents.
Support for Private Key JWT assertions and additional signing algorithms on Okta and OIDC enterprise connections
Private Key JWT assertions and expanded signing algorithm support are now generally available across Enterprise Okta and OIDC Connections. Private Key JWT assertions deliver enterprise-grade security by leveraging asymmetric cryptography to authenticate against your upstream Okta and OIDC identity providers.
"CMD+K" available now on Auth0 Dashboard
 We're excited to announce the new __CMD+K Command Palette functionality__ is now available to all users in the __Auth0 dashboard__.
Online Refresh Tokens is now in Beta
We are excited to announce that our new feature "Online refresh tokens" is now available to all customers in Beta. This powerful new feature is designed to simplify token management and modernize your application architecture, especially for Single Page Applications (SPAs) allowing you to bind refresh tokens to the sessions they originated from, which...
Secure your Account API with ACR EA
Auth0's ACR EA release empowers you to secure Account API token issuance by enforcing step-up authentication for sensitive scopes. Whether your users are managing their authentication factors via Universal Login or Embedded flows, you can now gate access through Actions-driven policies or enable a secure-by-default toggle.
Auth0 Event Streams for Outbound User Lifecycle Management – Now in General Availability
Event Streams is now available for all customers in General Availablity. Customer can: Subscribe to Auth0 User, Organizations, and Groups (Early Access Limited Release) Events Deliver Events to AWS EventBridge, Auth0 Actions, and Webhooks (including to [Okta Workflows](https://help.okta.com/wf/en-us/content/topics/workflows/execute/flow-api-endpoint.htm...
Auth0 FGA Permissions Index Is Now in Developer Preview
__What is a Permissions Index?__ In relationship-based access control like FGA, checking for permissions requires traversing a complex graph of relationships to find a valid path between a user and an object.