chore(deps): update dependency @auth0/auth0-spa-js to v2

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@auth0/auth0-spa-js	1.22.6 -> 2.0.4

---

Release Notes

auth0/auth0-spa-js

v2.0.4

Compare Source

Full Changelog

Fixed

• Correctly expose missing_refresh_token error from worker #​1080 (frederikprijck)

v2.0.3

Compare Source

Full Changelog

Fixed

• Ensure cookieDomain is used when using legacy Cookiestorage #​1071 (frederikprijck)
• Ensure to only clear current client cache when logging out #​1068 (frederikprijck)

v2.0.2

Compare Source

Full Changelog

Security

• Bump jsonwebtoken to v9 #​1062 (dependabot)

This patch release is identical to 2.0.1 but has been released to ensure tooling no longer detects a vulnerable version of jsonwebtoken being used.

Even though 2.0.1 was not vulnerable for the related CVE because of the fact that jsonwebtoken is a devDependency, we are cutting a release to ensure build tools no longer report our SDK as vulnerable to the mentioned CVE.

v2.0.1

Compare Source

Full Changelog

Changed

• Add openUrl and deprecate onRedirect #​1058 (frederikprijck)

Fixed

• Export MissingRefreshTokenError #​1043 (frederikprijck)

v2.0.0

Compare Source

Full Changelog

Auth0-SPA-JS v2 includes many significant changes compared to v1:

• Refactor module output and avoid default export #​942 (frederikprijck)
• Do not throw from checkSession #​943 (frederikprijck)
• Rework ignoreCache to cacheMode and introduce cache-only #​950 (ewanharris)
• Do not fallback to refreshing tokens via iframe method by default #​946 (ewanharris)
• Use form-encoded data by default #​945 (frederikprijck)
• Remove getIdTokenClaimsOptions type #​960 (ewanharris)
• Rename client_id to clientId #​956 (ewanharris)
• Remove polyfills from bundles #​951 (frederikprijck)
• Update output target to ES2017 #​953 (frederikprijck)
• Introduce authorizationParams to hold properties sent to Auth0 #​959 (ewanharris)
• Do not build Common JS module with externals #​971 (frederikprijck)
• De-dupe Id token; getUser and getIdTokenClaims no longer take any arguments #​967 (frederikprijck)
• Remove advancedOptions.defaultScope and replace with scope #​972 (ewanharris)
• Cache and return id token from memory #​975 (ewanharris)
• Remove buildAuthorizeUrl #​980 (frederikprijck)
• Make buildLogoutUrl internal #​982 (ewanharris)
• Fix spelling mistakes in id token validation messages #​940 (frederikprijck)

As with any major version bump, v2 of Auth0-SPA-JS contains a set of breaking changes. Please review the migration guide thoroughly to understand the changes required to migrate your application to v2.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.

[replay-io]

16 replays were recorded for 29db78f.

0 Failed

16 Passed

requireAuth graphql checks

    ```
    locator.waitFor: Target closed
    =========================== logs ===========================
    waiting for locator('.rw-form-error-title').locator('text=You don\'t have permission to do that') to be visible
    ============================================================
    ```
  </ol>
</details>
<li><a href=https://app.replay.io/recording/24ee5e74-5b49-46d4-ae1c-caff60bd23dc>useAuth hook, auth redirects checks</a></li>
<li><a href=https://app.replay.io/recording/02959d35-8996-4cb8-83d8-dee38e9a9986>Check that <meta> tags are rendering the correct dynamic data</a></li>
<li><a href=https://app.replay.io/recording/0a790fcd-accc-47fc-aa6e-84696081056c>Check that a specific blog post is prerendered</a></li>
<li><a href=https://app.replay.io/recording/0dd80ebc-93c6-46fa-b69f-2ebf2f08151b>Check that about is prerendered</a></li>
<li><a href=https://app.replay.io/recording/c147cac6-1392-444d-8ae6-0f18fd57e3bb>Check that homepage is prerendered</a></li>
<li><a href=https://app.replay.io/recording/1571a929-3a47-4d81-a574-0a887da5c78d>Check that you can navigate from home page to specific blog post</a></li>
<li><a href=https://app.replay.io/recording/cf0d14e7-564f-472e-bdfc-1fe70c9ca07e>Waterfall prerendering (nested cells)</a></li>
<li><a href=https://app.replay.io/recording/1dcb7f86-a23e-45c2-8704-677570a72657>RBAC: Admin user should be able to delete contacts</a></li>
<li><a href=https://app.replay.io/recording/e4cc4335-0fed-41e7-a25e-bd3874329bd2>RBAC: Should not be able to delete contact as non-admin user</a></li>
<li><a href=https://app.replay.io/recording/46dd5601-6422-45a7-82d7-cf925ffbf0d5>Smoke test with dev server</a></li>
<li><a href=https://app.replay.io/recording/3228db62-1044-4594-ae7e-c930f1ddc11b>Smoke test with rw serve</a></li>
<li><a href=https://app.replay.io/recording/b9638708-56fa-4ddc-97d9-023923f1528a>Loads Cell mocks when Cell is nested in another story</a></li>
<li><a href=https://app.replay.io/recording/a84cc99c-dd26-4ef4-b179-0a82feb056dd>Loads Cell Stories</a></li>
<li><a href=https://app.replay.io/recording/cae2399f-78c6-4ce0-b243-b7fdff5f1b37>Loads MDX Stories</a></li>
<li><a href=https://app.replay.io/recording/674db639-4d9a-4cd3-818e-51e8d8370a8a>Mocks current user, and updates UI while dev server is running</a></li>

View test run on Replay ↗︎

[jtoar]

Migration guide: https://github.com/auth0/auth0-spa-js/blob/e68498dd6658d40b307ab23e2ca432750f2c0729/MIGRATION_GUIDE.md#client_id-has-been-renamed-to-clientid