auth0-lock 14.2.4 → 14.2.5

package/.version

@@ -1 +1 @@
-v14.2.4
+v14.2.5

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Change Log
 
+## [v14.2.5](https://github.com/auth0/lock/tree/v14.2.5) (2026-03-19)
+[Full Changelog](https://github.com/auth0/lock/compare/v14.2.4...v14.2.5)
+
+**Fixed**
+- Fix: TypeError when CordovaAuth0Plugin is not a constructor (auth0-js 9.30.1+)  [\#2742](https://github.com/auth0/lock/pull/2742) ([ankita10119](https://github.com/ankita10119))
+- Fix: TypeError in matchConnection for enterprise connections with no domains [\#2736](https://github.com/auth0/lock/pull/2736) ([ankita10119](https://github.com/ankita10119))
+
 ## [v14.2.4](https://github.com/auth0/lock/tree/v14.2.4) (2026-01-21)
 [Full Changelog](https://github.com/auth0/lock/compare/v14.2.3...v14.2.4)
 

package/README.md

@@ -31,7 +31,7 @@ From CDN
 
 ```html
 <!-- Latest patch release (recommended for production) -->
-<script src="https://cdn.auth0.com/js/lock/14.2.4/lock.min.js"></script>
+<script src="https://cdn.auth0.com/js/lock/14.2.5/lock.min.js"></script>
 ```
 
 ### Configure Auth0

package/lib/__tests__/connection/enterprise/matchConnection.js

@@ -0,0 +1,34 @@
+"use strict";
+
+var _immutable = _interopRequireDefault(require("immutable"));
+var _enterprise = require("../../../connection/enterprise");
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+jest.mock('core/index', function () {
+  return {
+    connections: jest.fn()
+  };
+});
+describe('matchConnection', function () {
+  afterEach(function () {
+    return jest.resetAllMocks();
+  });
+  it('does not throw when enterprise connection has no domains configured', function () {
+    var _require = require('core/index'),
+      connections = _require.connections;
+
+    // Simulate tenant endpoint returning a connection with no domains field
+    connections.mockReturnValue(_immutable.default.fromJS([{
+      name: 'samlp-connection',
+      strategy: 'samlp',
+      type: 'enterprise'
+    }]));
+    var m = _immutable.default.fromJS({
+      id: '__lock__'
+    });
+    var result;
+    expect(function () {
+      result = (0, _enterprise.matchConnection)(m, 'test@example.com');
+    }).not.toThrow();
+    expect(result).toBeFalsy();
+  });
+});

package/lib/connection/enterprise.js

@@ -105,7 +105,7 @@ function matchConnection(m, email) {
   var target = (0, _email.emailDomain)(email);
   if (!target) return false;
   return l.connections.apply(l, [m, 'enterprise'].concat(_toConsumableArray(strategies))).find(function (x) {
-    return x.get('domains').contains(target);
+    return x.get('domains', (0, _immutable.List)()).contains(target);
   });
 }
 function isEnterpriseDomain(m, email) {

package/lib/core/web_api/helper.js

@@ -169,5 +169,5 @@ function trimAuthParams() {
   return p;
 }
 function getVersion() {
-  return "14.2.4";
+  return "14.2.5";
 }

package/lib/core/web_api/p2_api.js

@@ -45,7 +45,7 @@ var Auth0APIClient = /*#__PURE__*/function () {
       responseMode: opts.responseMode,
       responseType: opts.responseType,
       leeway: opts.leeway || 60,
-      plugins: opts.plugins || [new _cordovaAuth0PluginMin.default()],
+      plugins: opts.plugins || (typeof _cordovaAuth0PluginMin.default === 'function' ? [new _cordovaAuth0PluginMin.default()] : []),
       overrides: (0, _helper.webAuthOverrides)(opts.overrides),
       _sendTelemetry: opts._sendTelemetry === false ? false : true,
       _telemetryInfo: telemetry,

package/lib/i18n.js

@@ -90,7 +90,7 @@ function assertLanguage(m, language, base) {
 function syncLang(m, language, _cb) {
   (0, _cdn_utils.load)({
     method: 'registerLanguageDictionary',
-    url: "".concat(l.languageBaseUrl(m), "/js/lock/").concat("14.2.4", "/").concat(language, ".js"),
+    url: "".concat(l.languageBaseUrl(m), "/js/lock/").concat("14.2.5", "/").concat(language, ".js"),
     check: function check(str) {
       return str && str === language;
     },

package/lib/lock.js

@@ -36,7 +36,7 @@ var Auth0Lock = exports.default = /*#__PURE__*/function (_Core) {
   _inherits(Auth0Lock, _Core);
   return _createClass(Auth0Lock);
 }(_core.default); // telemetry
-Auth0Lock.version = "14.2.4";
+Auth0Lock.version = "14.2.5";
 
 // TODO: should we have different telemetry for classic/passwordless?
 // TODO: should we set telemetry info before each request?

package/lib/passwordless.js

@@ -36,4 +36,4 @@ var Auth0LockPasswordless = exports.default = /*#__PURE__*/function (_Core) {
   _inherits(Auth0LockPasswordless, _Core);
   return _createClass(Auth0LockPasswordless);
 }(_core.default);
-Auth0LockPasswordless.version = "14.2.4";
+Auth0LockPasswordless.version = "14.2.5";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auth0-lock",
-  "version": "14.2.4",
+  "version": "14.2.5",
   "description": "Auth0 Lock",
   "author": "Auth0 <support@auth0.com> (http://auth0.com)",
   "license": "MIT",