All pull requests

Pull requests

• fix: do not forward redirects to a completed session on iOS

  #1152·federicobartoli opened Oct 9, 2026·

  ·
  1

  7

• feat!: modernize examples and require React Native 0.86+

  #1150·zibs opened Sep 30, 2026Contributor·

  ·
  13

  

• [MEDIUM] security: block redirects carrying custom headers

  #1142·OskarEichler opened Sep 4, 2026Contributor·

  ·
  2

• [HIGH] security(ios): isolate OAuth URL sessions per request

  #1141·OskarEichler opened Sep 4, 2026Contributor·

  ·
  1

• [MEDIUM] security(android): prevent prefetch from blocking indefinitely

  #1140·OskarEichler opened Sep 4, 2026Contributor·

  ·
  2

• [HIGH] security(android): isolate interactive request state

  #1139·OskarEichler opened Sep 4, 2026Contributor·

  ·
  2

• [HIGH] security(android): clear custom headers between calls

  #1138·OskarEichler opened Sep 4, 2026Contributor·

  ·
  2

• fix(tooling): deduplicate internal-slot for iterator helpers

  #1136·OskarEichler opened Aug 28, 2026Contributor·

  ·
  2

• fix(types): expose supported options and the revocation response

  #1135·OskarEichler opened Aug 28, 2026Contributor·

  ·
  2

• fix(example): prevent overlapping auth actions and late UI updates

  #1134·OskarEichler opened Aug 28, 2026Contributor·

  ·
  1

• fix(expo): make native callback configuration reliable and repeatable

  #1133·OskarEichler opened Aug 28, 2026Contributor·

  ·
  1

• fix(android): preserve structured additional response parameters

  #1132·OskarEichler opened Aug 28, 2026Contributor·

  ·
  2

• fix: serialize registration timestamps and client URI correctly

  #1131·OskarEichler opened Aug 28, 2026Contributor·

  ·
  2

• fix: reject malformed headers and non-finite timeouts

  #1130·OskarEichler opened Aug 28, 2026Contributor·

  ·
  2

• fix: encode revocation requests and preserve discovery failures

  #1129·OskarEichler opened Aug 28, 2026Contributor·

  ·
  2

• fix(android): dispose AuthorizationService to stop Custom Tabs bind leak

  #1127·pranshuchittora opened Aug 10, 2026·

  ·
  1

  3

• fix(iOS): omit state when additionalParameters.state is null

  #1125·shashank-bhatotia opened Jul 28, 2026·

  ·
  2

• feat(ios): natively intercept https redirect URIs via ASWebAuthenticationSession callback (iOS 17.4+)

  #1122·danchily2 opened Jun 5, 2026·

  ·
  1

  8

• feat(android): opt-in Partial Custom Tab via androidCustomTabPartialHeightFraction

  #1119·omeratt opened May 22, 2026·

  ·
  1

  5

• Add claims parameter to authorize

  enhancementhelp wanted
  #1045·frereit opened Dec 13, 2024·

  ·
  8

• Edge browser support

  needs-more-info
  #1011·macos107 opened Jul 31, 2024·

  ·
  5

• feat(macos): support react-native-macos

  #1002·shirakaba opened Jul 22, 2024Contributor·

  ·
  1

  34

• fix: iOS crash when scenes are enabled

  needs-more-infoneeds-repro
  #995·kononenkoAnton opened Jun 25, 2024·

  ·
  7

• Fix/android app crash on authorize

  bugnon-standard flowon hold
  #743·nachoperez714 opened Jun 23, 2022·

  ·
  1

  19