Release 1.4.1 (#426)

auth0 · Jun 24, 2021 · 16abf77 · 16abf77
1 parent 6996e25
commit 16abf77
Show file tree

Hide file tree

Showing 39 changed files with 135 additions and 122 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,9 @@
+## [1.4.1](https://github.com/auth0/nextjs-auth0/tree/v1.4.1) (2021-06-24)
+
+**Fixed**
+
+- Fix reflected XSS from the callback handler's error query parameter [CVE-2021-32702](https://github.com/auth0/nextjs-auth0/security/advisories/GHSA-954c-jjx6-cxv7) ([adamjmcgrath](https://github.com/adamjmcgrath))
+
 ## [1.4.0](https://github.com/auth0/nextjs-auth0/tree/v1.4.0) (2021-06-03)
 
 **Added**

diff --git a/docs/assets/js/search.js b/docs/assets/js/search.js
diff --git a/docs/classes/session.sessioncache.html b/docs/classes/session.sessioncache.html
@@ -118,7 +118,7 @@ <h3>constructor</h3>
 						<li class="tsd-description">
 							<aside class="tsd-sources">
 								<ul>
-									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/session/cache.ts#L12">src/session/cache.ts:12</a></li>
+									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/session/cache.ts#L12">src/session/cache.ts:12</a></li>
 								</ul>
 							</aside>
 							<h4 class="tsd-parameters-title">Parameters</h4>
@@ -147,7 +147,7 @@ <h3>create</h3>
 						<li class="tsd-description">
 							<aside class="tsd-sources">
 								<ul>
-									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/session/cache.ts#L26">src/session/cache.ts:26</a></li>
+									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/session/cache.ts#L26">src/session/cache.ts:26</a></li>
 								</ul>
 							</aside>
 							<h4 class="tsd-parameters-title">Parameters</h4>
@@ -176,7 +176,7 @@ <h3>delete</h3>
 						<li class="tsd-description">
 							<aside class="tsd-sources">
 								<ul>
-									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/session/cache.ts#L31">src/session/cache.ts:31</a></li>
+									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/session/cache.ts#L31">src/session/cache.ts:31</a></li>
 								</ul>
 							</aside>
 							<h4 class="tsd-parameters-title">Parameters</h4>
@@ -202,7 +202,7 @@ <h3>from<wbr>Token<wbr>Set</h3>
 						<li class="tsd-description">
 							<aside class="tsd-sources">
 								<ul>
-									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/session/cache.ts#L58">src/session/cache.ts:58</a></li>
+									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/session/cache.ts#L58">src/session/cache.ts:58</a></li>
 								</ul>
 							</aside>
 							<h4 class="tsd-parameters-title">Parameters</h4>
@@ -225,7 +225,7 @@ <h3>get</h3>
 						<li class="tsd-description">
 							<aside class="tsd-sources">
 								<ul>
-									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/session/cache.ts#L53">src/session/cache.ts:53</a></li>
+									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/session/cache.ts#L53">src/session/cache.ts:53</a></li>
 								</ul>
 							</aside>
 							<h4 class="tsd-parameters-title">Parameters</h4>
@@ -251,7 +251,7 @@ <h3>get<wbr>IdToken</h3>
 						<li class="tsd-description">
 							<aside class="tsd-sources">
 								<ul>
-									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/session/cache.ts#L42">src/session/cache.ts:42</a></li>
+									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/session/cache.ts#L42">src/session/cache.ts:42</a></li>
 								</ul>
 							</aside>
 							<h4 class="tsd-parameters-title">Parameters</h4>
@@ -277,7 +277,7 @@ <h3>init</h3>
 						<li class="tsd-description">
 							<aside class="tsd-sources">
 								<ul>
-									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/session/cache.ts#L18">src/session/cache.ts:18</a></li>
+									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/session/cache.ts#L18">src/session/cache.ts:18</a></li>
 								</ul>
 							</aside>
 							<h4 class="tsd-parameters-title">Parameters</h4>
@@ -303,7 +303,7 @@ <h3>is<wbr>Authenticated</h3>
 						<li class="tsd-description">
 							<aside class="tsd-sources">
 								<ul>
-									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/session/cache.ts#L36">src/session/cache.ts:36</a></li>
+									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/session/cache.ts#L36">src/session/cache.ts:36</a></li>
 								</ul>
 							</aside>
 							<h4 class="tsd-parameters-title">Parameters</h4>
@@ -329,7 +329,7 @@ <h3>set</h3>
 						<li class="tsd-description">
 							<aside class="tsd-sources">
 								<ul>
-									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/session/cache.ts#L48">src/session/cache.ts:48</a></li>
+									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/session/cache.ts#L48">src/session/cache.ts:48</a></li>
 								</ul>
 							</aside>
 							<h4 class="tsd-parameters-title">Parameters</h4>

diff --git a/docs/classes/session_session.default.html b/docs/classes/session_session.default.html
@@ -126,7 +126,7 @@ <h3>constructor</h3>
 						<li class="tsd-description">
 							<aside class="tsd-sources">
 								<ul>
-									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/session/session.ts#L50">src/session/session.ts:50</a></li>
+									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/session/session.ts#L50">src/session/session.ts:50</a></li>
 								</ul>
 							</aside>
 							<h4 class="tsd-parameters-title">Parameters</h4>
@@ -148,7 +148,7 @@ <h3><span class="tsd-flag ts-flagOptional">Optional</span> access<wbr>Token</h3>
 					<div class="tsd-signature tsd-kind-icon">access<wbr>Token<span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">undefined</span><span class="tsd-signature-symbol"> | </span><span class="tsd-signature-type">string</span></div>
 					<aside class="tsd-sources">
 						<ul>
-							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/session/session.ts#L33">src/session/session.ts:33</a></li>
+							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/session/session.ts#L33">src/session/session.ts:33</a></li>
 						</ul>
 					</aside>
 					<div class="tsd-comment tsd-typography">
@@ -163,7 +163,7 @@ <h3><span class="tsd-flag ts-flagOptional">Optional</span> access<wbr>Token<wbr>
 					<div class="tsd-signature tsd-kind-icon">access<wbr>Token<wbr>Expires<wbr>At<span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">undefined</span><span class="tsd-signature-symbol"> | </span><span class="tsd-signature-type">number</span></div>
 					<aside class="tsd-sources">
 						<ul>
-							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/session/session.ts#L43">src/session/session.ts:43</a></li>
+							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/session/session.ts#L43">src/session/session.ts:43</a></li>
 						</ul>
 					</aside>
 					<div class="tsd-comment tsd-typography">
@@ -178,7 +178,7 @@ <h3><span class="tsd-flag ts-flagOptional">Optional</span> access<wbr>Token<wbr>
 					<div class="tsd-signature tsd-kind-icon">access<wbr>Token<wbr>Scope<span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">undefined</span><span class="tsd-signature-symbol"> | </span><span class="tsd-signature-type">string</span></div>
 					<aside class="tsd-sources">
 						<ul>
-							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/session/session.ts#L38">src/session/session.ts:38</a></li>
+							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/session/session.ts#L38">src/session/session.ts:38</a></li>
 						</ul>
 					</aside>
 					<div class="tsd-comment tsd-typography">
@@ -193,7 +193,7 @@ <h3><span class="tsd-flag ts-flagOptional">Optional</span> id<wbr>Token</h3>
 					<div class="tsd-signature tsd-kind-icon">id<wbr>Token<span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">undefined</span><span class="tsd-signature-symbol"> | </span><span class="tsd-signature-type">string</span></div>
 					<aside class="tsd-sources">
 						<ul>
-							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/session/session.ts#L28">src/session/session.ts:28</a></li>
+							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/session/session.ts#L28">src/session/session.ts:28</a></li>
 						</ul>
 					</aside>
 					<div class="tsd-comment tsd-typography">
@@ -208,7 +208,7 @@ <h3><span class="tsd-flag ts-flagOptional">Optional</span> refresh<wbr>Token</h3
 					<div class="tsd-signature tsd-kind-icon">refresh<wbr>Token<span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">undefined</span><span class="tsd-signature-symbol"> | </span><span class="tsd-signature-type">string</span></div>
 					<aside class="tsd-sources">
 						<ul>
-							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/session/session.ts#L48">src/session/session.ts:48</a></li>
+							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/session/session.ts#L48">src/session/session.ts:48</a></li>
 						</ul>
 					</aside>
 					<div class="tsd-comment tsd-typography">
@@ -223,7 +223,7 @@ <h3>user</h3>
 					<div class="tsd-signature tsd-kind-icon">user<span class="tsd-signature-symbol">:</span> <a href="../interfaces/session_session.claims.html" class="tsd-signature-type" data-tsd-kind="Interface">Claims</a></div>
 					<aside class="tsd-sources">
 						<ul>
-							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/session/session.ts#L23">src/session/session.ts:23</a></li>
+							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/session/session.ts#L23">src/session/session.ts:23</a></li>
 						</ul>
 					</aside>
 					<div class="tsd-comment tsd-typography">

diff --git a/docs/classes/utils_errors.accesstokenerror.html b/docs/classes/utils_errors.accesstokenerror.html
@@ -117,7 +117,7 @@ <h3>constructor</h3>
 						<li class="tsd-description">
 							<aside class="tsd-sources">
 								<ul>
-									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/utils/errors.ts#L7">src/utils/errors.ts:7</a></li>
+									<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/utils/errors.ts#L9">src/utils/errors.ts:9</a></li>
 								</ul>
 							</aside>
 							<h4 class="tsd-parameters-title">Parameters</h4>
@@ -142,7 +142,7 @@ <h3>code</h3>
 					<div class="tsd-signature tsd-kind-icon">code<span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div>
 					<aside class="tsd-sources">
 						<ul>
-							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/utils/errors.ts#L7">src/utils/errors.ts:7</a></li>
+							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/utils/errors.ts#L9">src/utils/errors.ts:9</a></li>
 						</ul>
 					</aside>
 				</section>
@@ -233,6 +233,9 @@ <h3>code</h3>
 					</li>
 				</ul>
 				<ul class="after-current">
+					<li class=" tsd-kind-class tsd-parent-kind-module">
+						<a href="utils_errors.handlererror.html" class="tsd-kind-icon">Handler<wbr>Error</a>
+					</li>
 				</ul>
 			</nav>
 		</div>

diff --git a/docs/interfaces/config.authorizationparameters.html b/docs/interfaces/config.authorizationparameters.html
@@ -110,7 +110,7 @@ <h3>response_<wbr>mode</h3>
 					<div class="tsd-signature tsd-kind-icon">response_<wbr>mode<span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;query&quot;</span><span class="tsd-signature-symbol"> | </span><span class="tsd-signature-type">&quot;form_post&quot;</span></div>
 					<aside class="tsd-sources">
 						<ul>
-							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/config.ts#L274">src/config.ts:274</a></li>
+							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/config.ts#L274">src/config.ts:274</a></li>
 						</ul>
 					</aside>
 				</section>
@@ -120,7 +120,7 @@ <h3>response_<wbr>type</h3>
 					<div class="tsd-signature tsd-kind-icon">response_<wbr>type<span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;id_token&quot;</span><span class="tsd-signature-symbol"> | </span><span class="tsd-signature-type">&quot;code id_token&quot;</span><span class="tsd-signature-symbol"> | </span><span class="tsd-signature-type">&quot;code&quot;</span></div>
 					<aside class="tsd-sources">
 						<ul>
-							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/config.ts#L275">src/config.ts:275</a></li>
+							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/config.ts#L275">src/config.ts:275</a></li>
 						</ul>
 					</aside>
 				</section>
@@ -130,7 +130,7 @@ <h3>scope</h3>
 					<div class="tsd-signature tsd-kind-icon">scope<span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div>
 					<aside class="tsd-sources">
 						<ul>
-							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/a56d3c3/src/config.ts#L273">src/config.ts:273</a></li>
+							<li>Defined in <a href="https://github.com/auth0/nextjs-auth0/blob/6996e25/src/config.ts#L273">src/config.ts:273</a></li>
 						</ul>
 					</aside>
 				</section>