Clerk

Recently shipped a new sign-in-or-up flow for strict enumeration, custom OAuth scopes, and a mobile hosted auth option.

Sign-in-or-up now works with strict user enumeration protection. New behavior verifies a visitor's identity first, then signs them in or creates an account. No code changes are needed, and this removes a previous incompatibility.

Custom OAuth scopes let MCP clients match your API. Define scopes like scopes from the Dashboard, assign them to OAuth applications, and choose which to advertise in metadata.

Mobile apps gained hosted auth. Expo, iOS, and Android can now use Account Portal, Clerk's hosted sign-in and sign-up pages, providing a browser-based alternative to native flows.

Composable profile components arrived as an experimental API. The new building blocks let you construct custom UserProfile and OrganizationProfile pages from Clerk's components.

Framework deprecations landed. @clerk/nuxt@3.0.0 drops Nuxt 3 and removes createRouteMatcher; @clerk/astro@4.0.0 adds Astro 7 and drops Astro 4. @clerk/clerk-expo is deprecated in favor of @clerk/expo. Missing Clerk keys now throw an error, and a verification no longer falsely reports timeouts.