# v5.1.0 - Adds `FIRAuthErrorCodeMalformedJWT`, which is raised on JWT token parsing failures during auth operations (#1436). # v5.0.2 - Fix an issue where JWT date timestamps weren't parsed correctly. (#1319) - Fix an issue where anonymous accounts weren't correctly promoted to non-anonymous when linked with passwordless email auth accounts. (#1383) - Fix an exception from using an invalidated NSURLSession. (#1261) - Fix a data race issue caught by the sanitizer. (#1446) # v5.0.1 - Restore 4.x level of support for extensions (#1357). # v5.0.0 - Adds APIs for phone Auth testing to bypass the verification flow (#1192). - Changes the callback block signature for sign in and create user methods to provide an AuthDataResult that includes the user and user info (#1123, #1186). - Removes GoogleToolboxForMac dependency (#1175). - Removes miscellaneous deprecated APIs (#1188, #1200). # v4.6.1 - Fixes crash which occurred when certain Firebase IDTokens were being parsed (#1076). # v4.6.0 - Adds `getIDTokenResultWithCompletion:` and `getIDTokenResultForcingRefresh:completion:` APIs which call back with an AuthTokenResult object. The Auth token result object contains the ID token JWT string and other properties associated with the token including the decoded available payload claims (#1004). - Adds the `updateCurrentUser:completion:` API which sets the currentUser on the calling Auth instance to the provided user object (#1018). - Adds client-side validation to prevent setting `handleCodeInApp` to false when performing email-link authentication. If `handleCodeInApp` is set to false an invalid argument exception is thrown (#931). - Adds support for passing the deep link (which is embedded in the sign-in link sent via email) to the `signInWithEmail:link:completion:` and `isSignInWithEmailLink:` methods during an email/link sign-in flow (#1023). # v4.5.0 - Adds new API which provides a way to determine the sign-in methods associated with an email address. - Adds new API which allows authentication using only an email link (Passwordless Authentication with email link). # v4.4.4 - Addresses CLANG_WARN_OBJC_IMPLICIT_RETAIN_SELF warnings that surface in newer versions of Xcode and CocoaPods. - Improves FIRUser documentation with clear message explaining when Firebase Auth attempts to validate users and what happens when an invalidated user is detected (#694) . # v4.4.3 - Adds an explicit dependency on CoreGraphics from Firebase Auth. # v4.4.2 - Fixes bug where the FIRAuthResult object returned following a Phone Number authentication always contained a nil FIRAdditionalUserInfo object. Now the FIRAdditionalUserInfo object is never nil and its newUser field is populated correctly. # v4.4.0 - Adds new APIs which return an AuthDataResult object after successfully creating an Email/Password user, signing in anonymously, signing in with Email/Password and signing in with Custom Token. The AuthDataResult object contains the new user and additional information pertaining to the new user. # v4.3.2 - Improves error handling for the phone number sign-in reCAPTCHA flow. - Improves error handling for phone number linking flow. - Fixes issue where after linking an anonymous user to a phone number the user remained anonymous. # v4.3.1 - Internal clean up. # v4.3.0 - Provides account creation and last sign-in dates as metadata to the user object. - Returns more descriptive errors for some error cases of the phone number sign-in reCAPTCHA flow. - Fixes an issue that invalid users were not automatically signed out earlier. - Fixes an issue that ID token listeners were not fired in some cases. # v4.2.1 - Fixes a threading issue in phone number auth that completion block was not executed on the main thread in some error cases. # v4.2.0 - Adds new phone number verification API which makes use of an intelligent reCAPTCHA to verify the application. # v4.1.1 - Improves some method documentation in headers. # v4.1.0 - Allows the app to handle continue URL natively, e.g., from password reset email. - Allows the app to set language code, e.g., for sending password reset email. - Fixes an issue that user's phone number did not persist on client. - Fixes an issue that recover email action code type was reported as unknown. - Improves app start-up time by moving initialization off from the main thread. - Better reports missing email error when creating a new password user. - Changes console message logging levels to be more consistent with other Firebase products on the iOS platform. # 2017-05-17 -- v4.0.0 - Adds Phone Number Authentication. - Adds support for generic OAuth2 identity providers. - Adds methods that return additional user data from identity providers if available when authenticating users. - Improves session management by automatically refreshing tokens if possible and signing out users if the session is detected invalidated, for example, after the user changed password or deleted account from another device. - Fixes an issue that reauthentication creates new user account if the user credential is valid but does not match the currently signed in user. - Fixes an issue that the "password" provider is not immediately listed on the client side after adding a password to an account. - Changes factory methods to return non-null FIRAuth instances or raises an exception, instead of returning nullable instances. - Changes auth state change listener to only be triggered when the user changes. - Adds a new listener which is triggered whenever the ID token is changed. - Switches ERROR_EMAIL_ALREADY_IN_USE to ERROR_ACCOUNT_EXISTS_WITH_DIFFERENT_CREDENTIAL when the email used in the signInWithCredential: call is already in use by another account. - Deprecates FIREmailPasswordAuthProvider in favor of FIREmailAuthProvider. - Deprecates getTokenWithCompletion in favor of getIDTokenWithCompletion on FIRUser. - Changes Swift API names to better align with Swift convention. # 2017-02-06 -- v3.1.1 - Allows handling of additional errors when sending OOB action emails. The server can respond with the following new error messages: INVALID_MESSAGE_PAYLOAD,INVALID_SENDER and INVALID_RECIPIENT_EMAIL. - Removes incorrect reference to FIRAuthErrorCodeCredentialTooOld in FIRUser.h. - Provides additional error information from server if available. # 2016-12-13 -- v3.1.0 - Adds FIRAuth methods that enable the app to follow up with user actions delivered by email, such as verifying email address or reset password. - No longer applies the keychain workaround introduced in v3.0.5 on iOS 10.2 simulator or above since the issue has been fixed. - Fixes nullability compilation warnings when used in Swift. - Better reports missing password error. # 2016-10-24 -- v3.0.6 - Switches to depend on open sourced GoogleToolboxForMac and GTMSessionFetcher. - Improves logging of keychain error when initializing. # 2016-09-14 -- v3.0.5 - Works around a keychain issue in iOS 10 simulator. - Reports the correct error for invalid email when signing in with email and password. # 2016-07-18 -- v3.0.4 - Fixes a race condition bug that could crash the app with an exception from NSURLSession on iOS 9. # 2016-06-20 -- v3.0.3 - Adds documentation for all possible errors returned by each method. - Improves error handling and messages for a variety of error conditions. - Whether or not an user is considered anonymous is now consistent with other platforms. - A saved signed in user is now siloed between different Firebase projects within the same app. # 2016-05-18 -- v3.0.2 - Initial public release.