●Change8

Migrating to Auth0 5.8.0

Version 5.8.0 introduces 2 breaking changes. This guide details how to update your code.

Released: 6/29/2026

2
Breaking Changes
2
Migration Steps
41
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

clients.update()NativeSocialLoginFedCmLoginNativeSocialLoginPatchFedCmLoginPatchUserDateSchemaauth0.management.typescreated_atupdated_atlast_loginlast_password_resetmultifactor_last_modifiedGetUserResponseContentCreateUserResponseContentUpdateUserResponseContentUserResponseSchemafedcm_loginFedCmLoginGoogleFedCmLoginGooglePatchtoken_vault_privileged_accessClientTokenVaultPrivilegedAccessWithPublicKeyClientTokenVaultPrivilegedAccessWithCredentialIdcross_app_access_requesting_appCrossAppAccessRequestingAppconnections.create()connections.update()UserIdentitySchemaUserIdentityDeleteUserIdentityResponseContentItemEmailTemplateNameEnumauth_email_by_codeattack_protection.phone_provider_protectionPhoneProviderProtectionBackoffStrategyEnumkeys.signingorganizationsroles.permissionsself_service_profiles.sso_ticketuser_attribute_profilesusersCustomDomainHeaderRequestOptions

Breaking Changes

●Issue #1

The request types for social/FedCM login on `clients.update()` have changed from `NativeSocialLogin` / `FedCmLogin` to `NativeSocialLoginPatch` / `FedCmLoginPatch`. Code passing the old types to `update()` must switch to the `*Patch` variants.

●Issue #2

The `UserDateSchema` type has been removed. User date fields (`created_at`, `updated_at`, `last_login`, `last_password_reset`, and `multifactor_last_modified`) across user response schemas are now `Optional[datetime.datetime]`. Code reading these fields as strings or dicts must update to handle datetime objects.

Migration Steps

  1. 1
    When calling `clients.update()`, replace usage of `NativeSocialLogin` / `FedCmLogin` with `NativeSocialLoginPatch` / `FedCmLoginPatch` for social/FedCM request bodies.
  2. 2
    Update code that reads user date fields (`created_at`, `updated_at`, etc.) to expect and handle `datetime.datetime` objects instead of strings or dictionaries.

Release Summary

This release introduces significant breaking changes related to user date field typing and client update request schemas, alongside numerous feature additions for FedCM, Token Vaults, and Attack Protection.

Need More Details?

View the full release notes and all changes for Auth0 5.8.0.

View Full Changelog