> For AI agents: the complete documentation index is at [llms.txt](https://reflex.dev/docs/llms.txt). Markdown versions are available by appending `.md` or sending `Accept: text/markdown`.

# Changelog

## [0.9.2] - 2026-07-06

### Added

- Add Highcharts chart component (#182)
- Add `reflex_app` pytest plugin for downstream testability (#179)

### Changed

- Auth: skip protected-var redelivery on same-user navigation (#187)
- Add logging to silent auth failure/logout paths (#188)

### Fixed

- Auth: redeliver protected vars on public pages (#186)

## [0.9.1] - 2026-07-01

- Add `reflex_enterprise.AuthPlugin` providing integrated secure-by-default auth primitives for protecting pages, fields, vars, and event handlers. See the [full docs](https://reflex.dev/docs/enterprise/auth/overview) for usage.

## [0.9.0] - 2026-06-09

### Changed

- Restrict `reflex export` and `reflex run --env prod` to paid tiers (#177)

## [0.8.3] - 2026-06-01

### Fixed

- Handle map layer `event_handlers` prop properly (#175)
- OIDC: use `self.__class__` instead of `type(self)` for handler lookups (#176)
- Redo `redirect_to_login` when userinfo is unavailable (#174)

## [0.8.2] - 2026-05-19

### Added

- `InteractiveLeafletLayer` and enhanced event handling for map components (#170)
- `postMessage`-based token sync for iframed OIDC popup flows (#172)

### Changed

- Harden GitHub Actions workflows (#171)

### Fixed

- OIDC: try refresh token before resetting auth on validation failure (#173)

## [0.8.1] - 2026-05-11

### Fixed

- Always set `cls._has_registered_endpoints = True` (#169)

## [0.8.0] - 2026-05-08

### Changed

- `HTTPCookie`: remove `BaseState` patches and fix subclass var dependencies (#164)
- Remove runtime version checks throughout the package (#168)

## [0.7.3] - 2026-05-01

### Added

- Add valid issuers and related cleanup (#163)

### Fixed

- Avoid race condition between updating the `localStorage` value and redirect (#167)
- Fix backend path handling for HTTP cookies (#166)

## [0.7.2] - 2026-04-27

### Fixed

- `messageListener.js`: reference `public_path` in the wrapped component (#162)

## [0.7.1.post2] - 2026-04-27

### Changed

- Remove the GitHub Packages upload step and attach the wheel to the GitHub Release instead

## [0.7.1] - 2026-04-24

### Added

- Add event handlers as HTTP endpoints and expose them via the OpenAPI spec (#156)
- Add license URL (#161)

## [0.7.0.post1] - 2026-04-21

### Fixed

- Fix importable path for Mantine (#160)

## [0.7.0] - 2026-04-20

### Changed

- Reflex 0.9 compatibility: use `importable_path` for assets in 0.9.0+ (#159)
- Additional Reflex 0.9 compatibility fixes (#157, #158)

## [0.6.5] - 2026-03-27

### Changed

- Replace AWS CodeArtifact with GitHub Packages for the enterprise wheel (#154)
- Remove `rx.Base` for 0.9 compatibility (#155)

## [0.6.4] - 2026-03-18

### Added

- Expose display name (#152)

### Changed

- Improve token type validation (#153)

## [0.6.3] - 2026-03-16

### Changed

- Raise with an error message (#151)

## [0.6.2] - 2026-03-10

### Fixed

- Redirect after logout consistently (#150)

## [0.6.1] - 2026-03-09

### Added

- Add APIs for Reflex Enterprise to override UI (#149)

## [0.6.0] - 2026-03-03

### Changed

- OIDC: reduce and centralize out-of-band events (#148)

## [0.5.5] - 2026-02-21

### Changed

- OIDC: handle local storage updates internally (#147)

### Fixed

- Ignore refresh access token errors (#142)

## [0.5.4] - 2026-02-19

### Fixed

- OIDC: reset auth for invalid tokens in `userinfo` (#146)

## [0.5.3] - 2026-02-19

### Added

- OIDC: allow a pluggable `_http_client` implementation (#145)

## [0.5.2.post1] - 2026-02-18

### Fixed

- Also save `redirect_to_url` in `sessionStorage` (#144)

## [0.5.2] - 2026-02-18

### Changed

- Store PKCE identifiers in `sessionStorage` (#143)

## [0.5.1] - 2026-02-17

### Fixed

- Redirect to login with an invalid token (#141)

## [0.5.0] - 2026-02-13

### Added

- Implement refresh token in `OIDCAuthState` (#139)

### Changed

- Overhaul OIDC implementation for flexibility (#135)
- Upgrade dependency pins (#140)

## [0.4.3] - 2026-01-22

### Changed

- Exclude OIDC routes from `/sitemap.xml` (#134)

### Fixed

- Fix issuer claim request to support multiple values (#137)

## [0.4.2] - 2026-01-07

### Added

- Add `HTTPCookie` partitioned attribute (#129)

### Changed

- Use Starlette `cookie_parser` instead of `SimpleCookie` (#133)
- Allow cross-origin cookie sync when `same_site="none"` (#128)
- Do not validate cookie domain (#130)
- Pre-commit fixes (#131)

## [0.4.1] - 2025-12-19

### Added

- Allow passing arbitrary headers to `HTTPCookie.sync` (#127)

## [0.4.0] - 2025-12-17

### Added

- Implement HTTP Cookie support (#119)
- Add `presets` and other props for Mantine date components (#120)
- Return the row count in `Datasource` and `SSRMDatasource` (#123)
- Row grouping options include the `RowGroupingModule` (#122)
- Apply default sort order by `primary_key` (#121)

### Changed

- Bump ag-grid to 34.3.1 (#125)
- Add upload step to build job (#126)

### Fixed

- `args_names` must be a tuple (#124)

---------------------------------------------------------------

All notable changes to this project are documented in this file.

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).