# @stytch/core

## 2.66.1

### Patch Changes

- 5a0ad5c: Add external_id to Member and User types and add organization_external_id to Organization type

## 2.66.0

### Minor Changes

- 2da1e4d: Add keepSessionAlive boolean flag to StytchClientOptions. When set, the client will automatically refresh the session as long as the client is active
- f181abf: Include custom org roles in local authorization checks

### Patch Changes

- 17e589c: B2B: Add support for 'ALL_ALLOWED' organization email_jit_provisioning setting

## 2.65.0

### Minor Changes

- 51779f2: Add support for the OAuth Attach flow

## 2.64.1

### Patch Changes

- 25e43f0: Add types for Member.is_admin

## 2.64.0

### Minor Changes

- 9a503d3: feat: Add support for RFC 8707 style resource parameter parsing to IDP code

## 2.63.0

### Minor Changes

- c64d639: When initializing StytchClient, the endpointOptions object is now deprecated
  apiDomain and testApiDomain are now configured using customBaseUrl directly on the root object
  fppaDomain and dfpCdnDomain are now configured as dfppaUrl and dfpCdnUrl directly on the root object
- b099ae8: Sourcemaps are now included

## 2.62.1

### Patch Changes

- 594c113: Update designs for Passkey prebuild UI component
  Passkey components will now respect theming
  Improve Passkey component error handling
  New localization strings for Passkey components - `button.edit`, `button.save` and `passkey.editing.label`. These are used in accessibility labels for non-visual users.
  New configurable theme colors: `colors.accent` and `colors.warning`
  Fix types for `stytchClient.user.get()` - it cannot return `Promise<null>`
- c1c8a67: Fix bugs in passkey error handling

## 2.62.0

### Minor Changes

- 6394dd4: Add option to specify the delivery method - EML or email OTP - for StartEmailUpdate.

## 2.61.1

### Patch Changes

- a1bc063: Fix types for B2BTOTPCreateResponse

## 2.61.0

### Minor Changes

- 2e86f80: Add Encrypted SAML Assertion support

## 2.60.0

### Minor Changes

- 14e5e22: Introduce trustedAuthTokenParams to IDP component

## 2.59.0

### Minor Changes

- d850be0: Add organization_slug to MemberSession type

## 2.58.1

### Patch Changes

- 32f88be: Publicize the B2B IDP types

## 2.58.0

### Minor Changes

- 3c4ec06: Add in IDP clients

## 2.57.0

### Minor Changes

- d27e450: feat: add device history support to all authentication methods

## 2.56.0

### Minor Changes

- 658bbe3: Add locale to UI options and pass through to client endpoints as appropriate

## 2.55.0

### Minor Changes

- 14f8002: Add in Hook and HOC for accessing user roles

## 2.54.0

### Minor Changes

- 8660910: Add error details to API error messages
- 7376394: Add StartEmailUpdate to initiate self-serve member email updates

## 2.53.0

### Minor Changes

- 89582f5: Add RBAC Client for Consumer
- a07a7ba: Adds base64 URL endcoding option to web authentication register options.

### Patch Changes

- 517dc88: Update attest session comment

## 2.52.1

### Patch Changes

- bf4a177: Update the response type for B2B password reset start requests

## 2.52.0

### Minor Changes

- e79591a: Adds a session attest endpoint for using trusted auth tokens to get a Stytch session.
- a665bfa: Allow specifying text overrides and text translastion via the `strings` configuration.

## 2.51.2

### Patch Changes

- cbda0b4: Use API-generated error types

## 2.51.1

### Patch Changes

- 499e2ac: Update documentation for B2B Passwords Reset By Email method

## 2.51.0

### Minor Changes

- f578344: Connected Apps: Consent Management and OIDC "prompt" param support

## 2.50.2

### Patch Changes

- 9e97735: Add Access Token Exchange headless method for Consumer Sessions
- 2509c47: Fix a bug with internal handling of non-StytchAPIError errors

## 2.50.1

### Patch Changes

- a87a73d: More gracefully handle instances where `sessionOptions` is missing from the `StytchB2BUIConfig`

## 2.50.0

### Minor Changes

- 2696b2e: Add `cancel_on_tap_outside` option to control whether Google One Tap prompt is automatically dismissed when user taps outside

## 2.49.3

### Patch Changes

- 0518cd6: Add `created_at` and `updated_at` fields to the `Member` object type definition

## 2.49.2

### Patch Changes

- 91c7414: Remove preflight PKCE checks for EML authenticate.

## 2.49.1

### Patch Changes

- 4e481d6: Add new DFPNotConfigured error for ReactNative

## 2.49.0

### Minor Changes

- aef9942: Enables unlinking a previous email when updating a Member's email address.

## 2.48.1

### Patch Changes

- f6f5d76: Explicitly throw MissingPKCE errors when PKCE is required and we detect that it is missing, instead of waiting for the server to tell us

## 2.48.0

### Minor Changes

- f995e6f: Add expiration times as a parameter for multiple EML and email OTP requests.

### Patch Changes

- cba1e55: Add and throw a new error type when attempting to persist a null or empty biometricRegistrationId.

## 2.47.2

### Patch Changes

- 98ed122: Add deleteDeviceRegistration to the Biometrics client interface

## 2.47.1

### Patch Changes

- 1f12065: Remove duplicated text from JSDoc comments

## 2.47.0

### Minor Changes

- 2042f8f: Add `B2B_SSO_DISCOVER_CONNECTIONS` callback for SSO discovery

## 2.46.0

### Minor Changes

- cdfe08f: Add support for VerifyEmailTemplateID to Password Configs
- 19af3af: Adds SSO Discovery method.

### Patch Changes

- 99047cd: Update documentation for `stytch.magicLinks.email.invite`
- c311e80: Detect and warn when multiple Stytch clients set up background authentication loops

## 2.45.1

### Patch Changes

- f97784d: Update cached organization data after modifying organization via headless client methods
- f97784d: Update cached member data returned from more headless client methods
- f97784d: Add member and organization fields to B2B TOTP create responses

## 2.45.0

### Minor Changes

- 4427412: Add `organizationSlug` to the B2B UI config

## 2.44.0

### Minor Changes

- a0edf9a: Added testApiDomain to endpointOptions for the StytchClient.

## 2.43.1

### Patch Changes

- 7d804d9: feat: Add support for accessTokenExchange to B2B Sessions Client

## 2.43.0

### Minor Changes

- b22a95f: Prevent biometric registration if the user is already enrolled.

### Patch Changes

- d4b1fb0: Fix link to impersonation docs in JSDoc

## 2.42.2

### Patch Changes

- 5fdee97: Add organization_slug to B2BOrganizationsGetBySlugResponse

## 2.42.1

### Patch Changes

- 3ef8b22: Add `signing_private_key` and `updated_at` fields to SAML connection types

## 2.42.0

### Minor Changes

- 0abb940: feat: Connected Apps OAuth Authorization component support (BETA)

## 2.41.0

### Minor Changes

- 8205f60: Ensure we wait to call sessions.authenticate after loading any potentially cached sessions from device storage.
- d5ed50c: Added User Impersonation to Consumer
- 9eb8e8c: Add dfpCdnDomain endpoint configuration

## 2.40.0

### Minor Changes

- 63d41b2: Support SSO as a valid auth product in B2B Discovery UI

### Patch Changes

- 63d41b2: Add `identity_provider` field to active SSO connections

## 2.39.0

### Minor Changes

- f68caf9: Add UI callbacks for more B2B StytchClient events

### Patch Changes

- a14aa91: Fix error messages when creating a Stytch client in a server context
- 5517ba2: Passkeys Fixes

## 2.38.0

### Minor Changes

- c3463a1: Add `directCreateOrganizationForNoMembership` option to B2B login UI

## 2.37.0

### Minor Changes

- 6daadc7: Add support for TypeScript-based Stytch project configurations
- 6daadc7: Allow configuring API endpoint domain for live projects via `endpointOptions.apiDomain`

### Patch Changes

- 6daadc7: Refactor internal handling of authentication responses

## 2.36.2

### Patch Changes

- ba37550: Add discoveryRedirectUrl to B2BPasswordOptions

## 2.36.1

### Patch Changes

- 778da18: Updated parameter name for impersonation tokens pre-release
- c437e31: Fix codechallenge/codeverifier naming in core Password client; Add Password Discovery flows to RN B2B UI

## 2.36.0

### Minor Changes

- 5679351: Fix bugs in email otp and add email otp to b2b prebuilt ui.

## 2.35.0

### Minor Changes

- c531314: Add authentication method for user impersonation tokens
- 5ab4a99: RN: Don't wrap native exceptions in placeholder InternalError classes, only do that on the JS side to fully expose the stacktrace; Add stack trace to JS-defined InternalError class

## 2.34.4

### Patch Changes

- 5f9a5bf: Add BiometricFactor type to list of AuthenticationFactors

## 2.34.3

### Patch Changes

- 67cbee6a: Add DFPPA to OTP Email Login Or Create

## 2.34.2

### Patch Changes

- 2457672f: Relax the requirement for products specified in the UI config to have a corresponding `*Options` configuration set if the product can use default options.

## 2.34.1

### Patch Changes

- 24f0e440: Allows discovery password reset flows to work without providing an explicit password reset url

## 2.34.0

### Minor Changes

- 02d96ca5: Tenanted Email Authenticate to Use EmailAddress as Input Param Over MemberID
- f7f4aef2: Support email OTP in B2B UI
- f7f4aef2: Add Email OTP Allowed Auth Method

## 2.33.0

### Minor Changes

- e85c63d6: Add in Cross-Org Password Flows to SDK UI

## 2.32.0

### Minor Changes

- 7323668e: Added Email OTP support for B2B

## 2.31.0

### Minor Changes

- e0e84646: Adds support for GitHub as a B2B OAuth provider.

## 2.30.0

### Minor Changes

- 64abf2d2: Add override parameters for the WebAuthn registration endpoint.

### Patch Changes

- f77f278b: Fix documentation typos
- 5b117909: Remove unused errorMessage field.

## 2.29.0

### Minor Changes

- 9dbf9e58: Add custom scopes and attribute mapping to OIDC connection

## 2.28.0

### Minor Changes

- d0b0584a: Add ability to create and update external SSO connections

### Patch Changes

- ae0e899e: Update error message when servers are unreachable

## 2.27.0

### Minor Changes

- 132a5d1e: Add a headless method to delete a user's crypto wallet

## 2.26.0

### Minor Changes

- ac74c5e7: Support HubSpot and Slack as B2B OAuth providers

## 2.25.1

### Patch Changes

- b21b3fe6: Fix SCIM rotateX endpoints to pass the connection_id

## 2.25.0

### Minor Changes

- 0937cda9: Better management of biometric registrations to ensure local and remote registrations stay in sync

### Patch Changes

- 0937cda9: Update options for enabling SMS autofill in RN and add necessary code changes

## 2.24.0

### Minor Changes

- a7785552: Add StytchEventType.AuthenticateFlowComplete

### Patch Changes

- e568bca5: Add B2B OAuth for react native. Modifying the visibilty of the base class for the headless B2B OAuth client for purposes of inheritence.

## 2.23.1

### Patch Changes

- 9742b5a7: Avoid potential prototype pollution via RBAC `resource_id`s

## 2.23.0

### Minor Changes

- 1ace8943: Add primary_required to the B2BAuthenticateResponseWithMFA definition

## 2.22.0

### Minor Changes

- 2ce25093: Implements Sign in With Ethereum (SIWE) for crypto wallets
- fc59121a: Adds ability to view and unlink retired emails to HeadlessB2BOrganizationClient and HeadlessB2BSelfClient.

### Patch Changes

- 1d36ed03: B2B SSO now properly uses DFP

## 2.21.2

### Patch Changes

- 77b72734: Fix example snippet for B2B magic links `loginOrSignup`
- 6701e5fa: Correct `Organization` `scim_active_connection` type to be nullable object, not array

## 2.21.1

### Patch Changes

- 016aa6dd: Added SCIM groups to Admin portal Organization settings
- 2ba86715: Remove intermediate_session_token from discovery method examples

## 2.21.0

### Minor Changes

- 3183b459: Add `session.revokeForMember` B2B headless client method
- bd936f06: Adds dfppaDomain to optional SDK client configuration
- fda896c7: Add allowed_oauth_tenants and oauth_tenant_jit_provisioning
- 3183b459: Export `MemberRole` type
- 71c830d7: Add support for `locale` param

### Patch Changes

- e4684086: Add `scim_connection_group` as valid `RoleSource`

## 2.20.0

### Minor Changes

- aac9a59b: Add SCIM Headless Methods

## 2.19.0

### Minor Changes

- 06b47703: Deprecate some properties in RN UI OAuth options and provide a new type for specifying per-provider options; Correctly support provider_params in RN OAuth flows

### Patch Changes

- 95964f0b: Fix types for organization.members.deleteMFATOTP

## 2.18.0

### Minor Changes

- e1b798f4: Added B2BAllowedAuthMethods and B2BAllowedMFAMethods

## 2.17.2

### Patch Changes

- bf21c792: Added expires_at type to B2BOAuthAuthenticateResponse and OAuthAuthenticateResponse

## 2.17.1

### Patch Changes

- 31c8b4a1: Add DFPPA to EML Discovery Send

## 2.17.0

### Minor Changes

- cbab0c30: Give each OAuth provider a customScopes and providerParams in UI component config

### Patch Changes

- 59481ff9: Update Phone input and Country select to layout more consistently

## 2.16.0

### Minor Changes

- c3a880b8: Added IDP type to SSO connections

### Patch Changes

- 066e9602: Require non-null `session_token` in updateSession()

## 2.15.2

### Patch Changes

- 07b310a: Update RN Subscription manager to better match vanilla-js

## 2.15.1

### Patch Changes

- 2e33560: Loosen typings for various options to accept both string literals and TypeScript enums

## 2.15.0

### Minor Changes

- 5f4ba4a: Add `stytch.organization.getBySlug` method to B2B clients

## 2.14.1

### Patch Changes

- 821c884: Migrate RN OneTap to Credential Manager, and add legacy methods for Google and Apple redirect-based OAuth flows

## 2.14.0

### Minor Changes

- 807fcec: B2B Google One Tap is now available in the Javascript SDK and pre-built UI components!

  You can enable One Tap in the UI components by editing the `B2BOAuthOptions` in your UI config - we've updated the `providers` type to accommodate One Tap. If you add `{ type: 'google', one_tap: true }` to your `providers` list, we'll show the Google One Tap prompt in the top right of the user's browser.

  In the Javascript SDK, you can use the `stytch.oauth.googleOneTap.start()` and `stytch.oauth.googleOneTap.discovery.start()` methods to render the One Tap prompt, depending on if you are using an organization-specific or discovery flow.

## 2.13.1

### Patch Changes

- 0055ad8: Remove result check and rely on intent handling to handle user cancellations for Android Google OneTap

## 2.13.0

### Minor Changes

- a0fbe9f: Add `stytch.onStateChange` event listener to headless clients
- a0fbe9f: Add `getInfo` method to user, session, member, and organization

## 2.12.0

### Minor Changes

- b007d98: Enable FedCM for use with Google One Tap by default. For users using supported browsers (including Google Chrome and other Chromium-based browsers), Google One Tap will now use [FedCM to provide a sign in experience using native browser prompts](https://developers.google.com/identity/gsi/web/guides/fedcm-migration).

  Due to changes in Google's One Tap SDK, this affects One Tap using both floating and embedded positioning. Notably, users of Chrome and other Chromium-based browsers will no longer see a embedded One Tap UI by default. Google will begin to remove support for this UI later this year. We recommend adopting the new default behavior, but we have added new position options if you require different behavior:

  - `floating` remains the default option and uses Google's One Tap SDK's default behavior. It uses FedCM (native browser UI) where available, or renders a floating UI in the top right corner otherwise.
  - `floatingOrEmbedded` uses FedCM where available, or renders an embedded UI in the existing SDK login form otherwise. This is the new default behavior of the `embedded` position, which has been deprecated and renamed for clarity.
  - `embeddedOnly` renders the embedded UI in the existing SDK login form if FedCM is not available, or not at all otherwise. This option is not recommended for new applications. For applications that used `embedded` positioning and do not want to show floating or native browser UI, this option may be useful.
  - `forceLegacyEmbedded` retains the legacy behavior by disabling FedCM support even where it is available. This option is not recommended and will stop being honored by Google in the future, at which time you will need to select a different option.

  The `embedded` position will still be recognized and treated as `floatingOrEmbedded`, but we recommend updating your configuration to use the new name or a different option.

## 2.11.0

### Minor Changes

- cae4f3d: Add `session.updateSession` to B2B

## 2.10.2

### Patch Changes

- bf6f8f6: Fix how we load telemetry script for dfp

## 2.10.1

### Patch Changes

- 2881b68: Make RN SubscriptionService treat destroySession the way it used to

## 2.10.0

### Minor Changes

- b7f2e1d: Primary authenticate endpoints will automatically pass in intermediate session tokens if they are present

## 2.9.1

### Patch Changes

- e83a832: Added DFP functionality to users search in passwords screen

## 2.9.0

### Minor Changes

- f604dcb: Release RN B2C UI

### Patch Changes

- c4c8c23: Adding email_address to UpdateMember

## 2.8.0

### Minor Changes

- 692c6c7: Add support for SMS OTP and TOTP MFA flows in B2B login UI components. This includes prompting members to complete MFA when they are required to use it to authenticate, and enrolling members who are required to enroll in MFA but have not yet done so. The new `mfaProductOrder` and `mfaProductInclude` options can be used to customize the experience further.

## 2.7.2

### Patch Changes

- eb8e140: Fix incorrect imports

## 2.7.1

### Patch Changes

- 060ee3b: Remove MFA-related properties from `B2BPasswordResetBySessionResponse`
- 060ee3b: Improve fidelity of `B2BAuthenticateResponseWithMFA` type

## 2.7.0

### Minor Changes

- dcc20e2: Add `disableCreateOrganization` option to B2B UI config

## 2.6.0

### Minor Changes

- 521fc22: Add Delete TOTP Methods

## 2.5.1

### Patch Changes

- 56fd625: fix bug where session_duration_minutes param is not passed
- 119952e: Fix an issue where ISTs were being deleted before they could be used

## 2.5.0

### Minor Changes

- 50bb749: Adds headless methods for interacting with b2b recovery codes

### Patch Changes

- e4c0a70: Send IST in OTP SMS Send & TOTP Create

## 2.4.2

### Patch Changes

- 61417c3: Avoid race condition involving background `sessions.authenticate` call

## 2.4.1

### Patch Changes

- e21c507: Add missing `StytchEvent` types for `B2BOAuthAuthenticate` and `B2BOAuthDiscoveryAuthenticate`

## 2.4.0

### Minor Changes

- 5877da8: Add inputs to StyleConfig

## 2.3.0

### Minor Changes

- c50b9ad: Add Default MFA Method to Member and Allowed MFA Methods to Organization

## 2.2.0

### Minor Changes

- 223e30e: Add `organization.getSync` and `organization.onChange` methods to B2B client

## 2.1.0

### Minor Changes

- 2379b29: Add B2B TOTPs (Create/Authenticate)

## 2.0.0

### Major Changes

- b34293a: Improvements to error types in the JS and React Native SDKs

### Minor Changes

- 6890694: Mark stytch.member as deprecated in favor of stytch.self
  Adds RBAC functionality

### Patch Changes

- 76ad832: Use correct event type for B2B OAuth authentication
- b34293a: Change the way we bundle our public types, to fix a problem that prevented `instanceof` checks from working with Stytch errors

## 1.4.2

### Patch Changes

- 2f46248: Add an updated config object for logging members in directly when they have a single membership

## 1.4.1

### Patch Changes

- 7666f2b: Remove phone number dependency to improve bundle size in vanilla-js
- 6ece044: Add an optional config property in the B2B SDK to skip the discovery flow if a member is part of a single organization

## 1.4.0

### Minor Changes

- ec1962c: Enable passthrough OAuth paramters from UI configuration

## 1.3.0

### Minor Changes

- 8cff174: B2C Passkeys Headless Support & UI components

## 1.2.3

### Patch Changes

- ecef75b: Make WebAuthnRegisterResponse return session and user
- 2b9ed9c: Allow OAuth start provider pass through query parameters
- 32ed73a: Resolved a critical severity vulnerability with the @babel/traverse dependency

## 1.2.2

### Patch Changes

- 70475b5: remove unnecessary organization_id param from passwords.resetBySession in B2B client
- 311388d: Export DFP type for use in RN; Embed Recaptcha dependencies to avoid forcing a dynamic framework on developers

## 1.2.1

### Patch Changes

- 04cec1b: Revert DFP on RN

## 1.2.0

### Minor Changes

- 7c1940e: Add DFP Protectd Auth JS final release

### Patch Changes

- 47eb388: Add Device Fingerprinting to the React Native SDK
- 47eb388: Add support for Observation and decisioning mode for DFP

## 1.1.1

### Patch Changes

- ab22732: Adds session_duration_minutes to PasswordsResteBySession

## 1.1.0

### Minor Changes

- 67d42f0: Add Device Fingerprinting Bot Detection to SDKs
- a07cf3a: Fix bug where resetting a password by existing session would log out the active user

### Patch Changes

- 42bf09d: Added separate methods for native OAuth (googleOneTap and signInWithApple) in the React Native SDK.

## 1.0.1

### Patch Changes

- 81c47aa: Add new option to confiugre domain cookie should be set to

## 1.0.0

### Major Changes

- 2b8f0e6: Fix PKCE logic for password resets log in without password flow

## 0.15.2

### Patch Changes

- 1b1ea1b: updateStateAndTokens call in resetBySession and resetExistingPassword

## 0.15.1

### Patch Changes

- 0a18c34: Add docs for new verified fields on Member objects, and fix some docs links

## 0.15.0

### Minor Changes

- a4083c7: Breaking Changes: The intermediate session token (IST) will no longer be accepted as an argument for the discovery list organizations, intermediate sessions exchange, and create organization via discovery endpoints. The IST will be passed in automatically. ISTs are stored as browser cookies or persisted on device when they are generated after calls to discovery authenticate endpoints, such as email magic link discovery authenticate, or primary authenticate endpoints in the case where MFA is required, such as email magic link authenticate or SSO authenticate.

  New Features: Our B2B product now supports multi-factor authentication (MFA) with one-time passcodes (OTPs) via SMS. MFA policies can be set on the Organization level or on the Member level. See the Stytch docs for more information.

## 0.14.4

### Patch Changes

- f3d8a3b: Updated UI to include error message for breached passwords. Added missing `breach_detection_on_create` key in the strength check response

## 0.14.3

### Patch Changes

- 83c017e: Updated types for the password strength method. Updated UI for the password strength check while using LUDS

## 0.14.2

### Patch Changes

- 00eb1ce: Yahoo OAuth Fix (build)

## 0.14.1

### Patch Changes

- e97e8ba: Yahoo OAuth

## 0.14.0

### Minor Changes

- e7302d7: The intermediate session token will now be stored as a cookie after calls to the B2B magic link discovery authenticate endpoint and the OAuth discovery authenticate endpoint.

## 0.13.5

### Patch Changes

- d847d9d: Added new OAuth Providers

## 0.13.4

### Patch Changes

- 2443028: Add OAuthStartResponse type to Headless OAuth start calls

## 0.13.3

### Patch Changes

- f9c36c9: An additional configuration property to let developers render the Stytch SDK UI through the Shadow DOM. This is a major version change on the `@stytch/vanilla-js` package as the previous versions would render the UI through the Shadow DOM by default. It will now default to false. When the Shadow DOM is disabled, this also fixes an issue with the SDK UI to allow for emails and passwords to be auto-filled, along with support for browser password managers.

## 0.13.2

### Patch Changes

- 55dcfdb: Add B2B OAuth
- 84fd502: B2B OAuth UI

## 0.13.1

### Patch Changes

- 0a626d1: bug fix for the B2B SDK UI: only showing the allowed auth methods when an organization has restricted auth methods

## 0.13.0

### Minor Changes

- 91c0ee1: Change session refresh logic to never destroy the session when network disconnectivity occurs

## 0.12.1

### Patch Changes

- 1f54b59: Fix in the `passwords.resetByExistingPassword` method to include the `session_duration_minutes` param.
- 459b8e5: fix biometrics error message

## 0.12.0

### Minor Changes

- c8e2d0b: B2B Passwords UI components

## 0.11.1

### Patch Changes

- e1fd555: Expose Biometric Registration ID in BiometricsClients
- b1ac8be: Add deleteBiometricRegistration to HeadlessUserClient; Add missing methods to IHeadlessUserClient
- 1309266: Add biometric_registrations to User object

## 0.11.0

### Minor Changes

- 15dbe7d: Releasing UI components for our B2B SDKs.

## 0.10.1

### Patch Changes

- 8d68904: Allow for empty strings in token/JWT

## 0.10.0

### Minor Changes

- dde1f2a: Add B2B Passwords headless client

### Patch Changes

- 6a27584: Make organization name and slug optional for discovery organization create

## 0.9.0

### Minor Changes

- c1a312c: Add ability to tell if user is new/returning for native OAuth

## 0.8.2

### Patch Changes

- 79ca7ba: Add locale argument to B2B email magic link methods

## 0.8.1

### Patch Changes

- 8e01eef: Fixes for bugs in the session logic when users are logged into multiple tabs
- b55bc55: Add Session.updateSession to hydrate sessions from the backend

## 0.8.0

### Minor Changes

- c0e42bc: Add B2B Discovery headless client and session exchange method

## 0.7.7

### Patch Changes

- Patch bump @stytch/core

## 0.7.6

### Patch Changes

- 8ad1ec9: Added an optional param object to the session.revoke methods

## 0.7.5

### Patch Changes

- 1652706: Fix session/user persisting after logging out

## 0.7.4

### Patch Changes

- 36c8114: New error type for unrecoverable error
- ca5a31d: SDK-877 Fix session/user persisting after logging out

## 0.7.3

### Patch Changes

- c6db664: Fix behavior in sessions.authenticate to not clear state if a recoverable error is caught
- 21e88af: Fixed PKCE mismatch and session revoke bugs in React Native
- 3f1f1ea: Add sessionDurationMinutes parameter for biometrics.register()

## 0.7.2

### Patch Changes

- bf518f8: Fixed a bug with session updating

## 0.7.1

### Patch Changes

- f1810c4: Add React Native OAuth callback, PKCE fix

## 0.7.0

### Minor Changes

- Launching B2B SDKs

## 0.6.1

### Patch Changes

- Added resetByExistingPassword and resetBySession in the Passwords client

## 0.6.0

### Minor Changes

- Add React Native OAuth

## 0.5.1

### Patch Changes

- Release Stytch Client Options

## 0.5.0

### Minor Changes

- Add support for template ID parameters to Magic link Login or create and Send methods, Email OTP Login or create and Send methods, and Reset Password Start

## 0.4.9

### Patch Changes

- Add React Native biometrics

## 0.4.7

### Patch Changes

- Fixes an issue where the isLoaded property was prematurely returning 'true'

## 0.4.6

### Patch Changes

- Fixes an issue where the isLoaded property was prematurely returning 'true'

## 0.4.5

### Patch Changes

- b68343c: Add nice error message for invalid trusted_metadata object

## 0.4.4

### Patch Changes

- 422c698: Add type definitions for User Metadata fields
- new styling config

## 0.4.3

### Patch Changes

- Add support for custom email domains in magic link confirmation screen

## 0.4.2

### Patch Changes

- Send methods in the SDK
