Documentation Index
Fetch the complete documentation index at: https://stytch.com/docs/llms.txt
Use this file to discover all available pages before exploring further.
v20.0.9
Released 2026-05-04 Patch Changes- Fixes an issue where the email was empty when resending an email magic link for the Consumer StytchLogin component
v20.0.8
Released 2026-04-29 Patch Changes- Fixes an issue where the login redirect URL is not set properly in the B2B pre-built password reset UI
v20.0.7
Released 2026-04-23 Patch Changes- Fix version number in SDK identifier in requests
v20.0.6
Released 2026-04-22 Patch Changes- Tweak code for password to fix issue with directCreateOrganizationForNoMembership
v20.0.5
Released 2026-03-19 Patch Changes- Remove token from URL as authenticate() call is made rather than after success. This prevents rare double calling if the user reloads the page while the call was being made.
v20.0.4
Released 2026-03-05 Patch Changes- Fix DiscoveredOrganization.mfa_required.member_options types
v20.0.3
Released 2026-02-27 Patch Changes- Tweak watermark spacing
- Improve data fetching for TOTP enrollment
v20.0.2
Released 2026-02-13 Patch Changes- Fix font size issue on some anchor buttons
v20.0.1
Released 2026-02-11 This is a major release, containing a redesign of our frontend components and package structure. We recommend reading our upgrade guide when updating to this version.Breaking changes
@stytch/vanilla-jsis no longer required. All imports from vanilla-js should be made through @stytch/react or @stytch/nextjs if you use those SDKsconfig.productsmust useProductsandB2BProductsenum, not strings- Styling is now done through a new presentation configuration object
- Code is now transpiled only up to our browser support level to reduce sizes
Update highlights
- Redesigned frontend components that are more modern, accessible and configurable
- Components have now been reviewed and tested for accessibility
- shadcn UI theming compatibility out of the box
- Automatic light / dark mode switching now supported
- Significantly smaller bundle sizes through modern transpilation targets and tree shaking
- Clientside validation for configs now only occur in development build to reduce bundle size from validation message strings
- Updated dependencies
v20.0.0
Released 2026-02-11 This version was released with broken packaging. We recommend upgrading to 20.0.1 if you have this version. Patch Changes- Updated dependencies
v19.18.1
Released 2026-01-05 Patch Changes- Add
external_idto Member and User types and addorganization_external_idto Organization type
v19.18.0
Released 2025-12-18 Minor Changes- Support passing domain option to passkey auth in StytchLoginConfig
v19.17.0
Released 2025-12-05 Minor Changes-
Add
keepSessionAliveboolean flag toStytchClientOptions. When set, the client will automatically refresh the session as long as the client is active -
Add TypeScript typings for strings prop / param. The types is available as Strings and is opt in. We recommend using them like
const strings: Strings = { 'button.usePassword': 'Log in with password' }.Stringsis a partial since we recommend you only include strings that you need, but if you need every string mapped (such as in a full localization), you can useRequired<Strings>.
- B2B: Add support for
ALL_ALLOWEDorganizationemail_jit_provisioningsetting
v19.16.0
Released 2025-11-25 Minor Changes- Add support for the OAuth Attach flow
v19.15.2
Released 2025-11-14 Patch Changes- Fix endpoint options still being preferred for custom endpoint config
- Fix last used OAuth method not updated when Google One Tap fallback button is clicked
-
Add types for
Member.is_admin
v19.15.1
Released 2025-11-03 Patch Changes- Fix missing breached password error message for zxcvbn password config in pre-built UI
- Fix error message when B2B discovery EML auth encounters an error in prebuilt UI
v19.15.0
Released 2025-10-16 Minor Changes- When initializing StytchClient, the endpointOptions object is now deprecated apiDomain and testApiDomain are now configured using customBaseUrl directly on the root object fppaDomain and dfpCdnDomain are now configured as dfppaUrl and dfpCdnUrl directly on the root object
- Sourcemaps are now included
v19.14.0
Released 2025-10-14 Minor Changes- Add options to the Admin Portal Member Management and SSO Connections configuration to specify the redirect URL when inviting members and testing SSO connections
- Add the ability for users to go back from the MFA enrollment screen to change their enrollment method
v19.13.0
Released 2025-10-09 Minor Changes- Store last used OAuth and SSO method locally and move it to the top of the list the next time users visit the log in page. Add “provider.lastUsed” translation string for “Last used” text indicating the last used auth method.
v19.12.0
Released 2025-09-24 Minor Changes- Update labels to use
<label>element and improve accessibility NewformField.phone.labelstring for phone number input label andformField.countryCode.labelfor country code labelformField.password.ariaLabelstring has been folded intoformField.password.labeland can be removed
- Update localization library lingui to 5.5.0
- Update error message
v19.11.1
Released 2025-09-11 Patch Changes- Bug fixes
v19.11.0
Released 2025-09-11 Minor Changes- Refactor trusted auth token attestation in IDPConsentScreen components
v19.10.0
Released 2025-08-29 Minor Changes- Add Encrypted SAML Assertion support
v19.9.0
Released 2025-08-27 Minor Changes- Export parseOAuthParams function for passing to OAuthAuthorize endpoints
- Add parseOAuthParams util function for parsing OAuth parameters
v19.8.0
Released 2025-08-14 Minor Changes- feat: add device history support to all authentication methods
v19.7.0
Released 2025-07-23 Minor Changes- Add in Hook and HOC for accessing user roles
v19.6.1
Released 2025-07-11 Patch Changes- Fix an issue with localization in the PasswordError component when using custom password strength rules
v19.6.0
Released 2025-07-02 Minor Changes- Allow specifying text overrides and text translastion via the
stringsconfiguration.
v19.5.5
Released 2025-06-18 Patch Changes- Use API-generated error types
v19.5.4
Released 2025-06-17 Patch Changes- Update documentation for B2B Passwords Reset By Email method
v19.5.3
Released 2025-06-09 Patch Changes- Add error handling for claimed domains in the Discovery flow when no valid organizations are found
v19.5.2
Released 2025-05-09 Patch Changes- Fix exported type declarations for useStytchB2BClient, withStytchB2BClient, and withStytchPermissions
v19.5.1
Released 2025-04-28 Patch Changes- Fix packaging issue to include B2C
/headlessand/uientrypoints
v19.5.0
Released 2025-04-24 Minor Changes-
Add
createStytch*Clienthelper functions:import { createStytchHeadlessClient } from '@stytch/react/headless';import { createStytchUIClient } from '@stytch/react/ui';import { createStytchB2BHeadlessClient } from '@stytch/react/b2b/headless';import { createStytchB2BUIClient } from '@stytch/react/b2b/ui';
@stytch/nextjsand may be used instead of constructing clients directly (e.g.,new StytchUIClient()). -
Add
isInitializedas a returned value fromuseStytchUser,useStytchSession,useStytchMember,useStytchMemberSession,useStytchOrganization, anduseStytchIsAuthorizedhooks; add*IsInitializedas an injected prop to thewithStytchUser,withStytchSession,withStytchMember,withStytchMemberSession, andwithStytchOrganizationHOCs. This provides parity with the same APIs in@stytch/nextjs. If you setassumeHydrated={false}in yourStytchProviderorStytchB2BProvider,isInitializedwill initially befalseand should be checked before accessing the other values returned by these hooks (or props injected by these HOCs). If you setassumeHydrated={true}(the default in@stytch/react),isInitializedwill always betrue, and it is always safe to access the other values, as in previous versions of@stytch/react. -
Add a new
assumeHydratedprop to theStytchProviderandStytchB2BProvidercomponents. This prop allows the provider to assume whether or not the app might be hydrated in a browser environment after initially being rendered in a server environment. Whentrue, the provider eagerly reads from the browser’s local cache to retrieve cached session and related data. Whenfalse, the provider defers this initialization until after the first render, to avoid hydration errors. This prop defaults totruein@stytch/react, which preserves the behavior from previous versions. We recommend settingassumeHydrated={false}if your app hydrates server-rendered content on the client. Otherwise, it is safe to setassumeHydrated={true}. If you’re unsure or notice hydration errors in your app, setassumeHydrated={false}.
- Remove errors when attempting to use StytchProvider or StytchB2BProvider in a server environment
v19.4.4
Released 2025-04-15 Patch Changes- Make some minor improvements to JSDoc comments
- Add missing default generic type parameters
v19.4.3
Released 2025-04-10 Patch Changes- Fix incorrect internal type references
v19.4.2
Released 2025-04-07 Patch Changes- Fix some README typos
v19.4.1
Released 2025-03-18 Patch Changes- feat: Add support for accessTokenExchange to B2B Sessions Client
v19.4.0
Released 2025-02-15 Minor Changes- feat: Connected Apps OAuth Authorization component support (BETA)
v19.3.0
Released 2025-02-13 Minor Changes- Add User Impersonation to Consumer
- Add dfpCdnDomain endpoint configuration
v19.2.0
Released 2025-01-16 Minor Changes- Add support for TypeScript-based Stytch project configurations
- Fix error message when mounting Admin Portal components without a StytchB2BProvider
v19.1.2
Released 2025-01-08 Patch Changes- Fixed
<StytchB2B />error message
v19.1.1
Released 2024-12-05 Patch Changes- Add DFPPA to OTP Email Login Or Create
v19.1.0
Released 2024-09-06 Minor Changes- Add
AdminPortalSCIMcomponent component to@stytch/react/b2b/adminPortal
v19.0.0
Released 2024-08-21 Major Changes- Updated API routes to use api.stytch.com for live and test.stytch.com for test, replacing web.stytch.com. If you use Content Security Policy (CSP) headers, ensure the URL is updated. This was done to reduce the number of network calls and simplify internal routing, resulting in faster API response times—improving request speeds by up to 40 milliseconds roundtrip.
v18.3.3
Released 2024-08-12 Patch Changes- Load Admin Portal components from vanilla-js directly
v18.3.2
Released 2024-08-09 Patch Changes- Fix admin portal component props
v18.3.1
Released 2024-08-06 Patch Changes- Guard references to localStorage and sessionStorage
v18.3.0
Released 2024-08-02 Minor Changes- Add
AdminPortalMemberManagementcomponent to@stytch/react/b2b/adminPortal
v18.2.0
Released 2024-07-19 Minor Changes- Add
AdminPortalOrgSettingscomponent to@stytch/react/b2b/adminPortal
v18.1.0
Released 2024-06-28 Minor Changes- Add
AdminPortalSSOcomponent to@stytch/react/b2b/adminPortal
v18.0.0
Released 2024-06-06 Patch Changes- Updated dependencies
v17.0.0
Released 2024-04-18 Major Changes- Update minimum peer dependency on
@stytch/vanilla-jsto^4.9.0
v16.0.0
Released 2024-03-12 Patch Changes- Updated dependencies
v15.0.0
Released 2024-01-04 Minor Changes- Add
useStytchOrganizationhook for B2B
v14.0.1
Released 2024-01-03 Patch Changes- Fix an issue where
fromCachewould not update tofalseafter cached data was refreshed
v14.0.0
Released 2024-01-02 Patch Changes- Updated dependencies
v13.0.0
Released 2023-12-18 Minor Changes- Mark stytch.member as deprecated in favor of stytch.self Adds RBAC functionality
v12.0.0
Released 2023-11-14 Patch Changes- Updated dependencies
v11.0.0
Released 2023-11-07 Minor Changes- B2C Passkeys Headless Support & UI components
v10.0.0
Released 2023-10-04 Patch Changes- Updated dependencies
v9.0.0
Released 2023-09-20 Patch Changes- Add Device Fingerprinting to the React Native SDK
v8.0.0
Released 2023-09-19 Patch Changes- Updated dependencies
v7.0.2
Released 2023-08-29 Patch Changes- updateStateAndTokens call in resetBySession and resetExistingPassword
v7.0.1
Released 2023-08-28 Patch Changes- Add docs for new verified fields on Member objects, and fix some docs links
v7.0.0
Released 2023-08-08 Major Changes- Breaking Changes: The intermediate session token (IST) will no longer be accepted as an argument for the discovery list organizations, intermediate sessions exchange, and create organization via discovery endpoints. The IST will be passed in automatically. ISTs are stored as browser cookies or persisted on device when they are generated after calls to discovery authenticate endpoints, such as email magic link discovery authenticate, or primary authenticate endpoints in the case where MFA is required, such as email magic link authenticate or SSO authenticate. New Features: Our B2B product now supports multi-factor authentication (MFA) with one-time passcodes (OTPs) via SMS. MFA policies can be set on the Organization level or on the Member level. See the Stytch docs for more information.
v6.0.0
Released 2023-07-14 Patch Changes- Updated dependencies
v5.0.0
Released 2023-06-27 Patch Changes- Updated dependencies
v4.0.0
Released 2023-05-26 Minor Changes- B2B Passwords UI components
v3.0.0
Released 2023-04-28 Minor Changes- Releasing UI components for our B2B SDKs.
v2.0.0
Released 2023-04-17 Patch Changes- Make organization name and slug optional for discovery organization create
v1.0.2
Released 2023-04-12 Patch Changes- Add locale argument to B2B email magic link methods
v1.0.1
Released 2023-04-06 Patch Changes- Include the B2B directory in package.json for the B2B SDK entrypoint
v1.0.0
Released 2023-03-29 Minor Changes- Add B2B Discovery headless client and session exchange method
v0.10.3
Released 2023-03-21 Patch Changes- Fix session/user persisting after logging out
v0.10.2
Released 2023-03-21 Patch Changes- SDK-877 Fix session/user persisting after logging out
v0.10.1
Released 2023-03-07 Patch Changes- Add React Native OAuth callback, PKCE fix
v0.10.0
Released 2023-03-01 Minor Changes- Launching B2B SDKs
v0.9.0
Released 2023-01-28 Patch Changes- Updated dependencies
v0.6.0
Released 2023-01-20 Minor Changes- Add support for template ID parameters to Magic link Login or create and Send methods, Email OTP Login or create and Send methods, and Reset Password Start
v0.5.0
Released 2022-10-31 Patch Changes- Add type definitions for User Metadata fields
v0.4.6
Released 2022-10-07 Patch Changes- Add support for custom email domains in magic link confirmation screen
v0.4.5
Released 2022-10-05 Patch Changes- Reset Password component doc fixes
v0.4.4
Released 2022-09-30 Patch Changes- Send methods in the SDK