feat(clerk-js): Untrusted password screen for sign-in#7331

Merged

octoper merged 29 commits intomainfrom

vaggelis/user-4007-dont-allow-untrusted-passwords-to-be-able-to-sign-in

Dec 2, 2025

Commits on Dec 2, 2025

feat(clerk-js): Initial work for reset password task
octoper
committed
fix(clerk-js): Rename variable for clarity in SignInFactorOne component
octoper
committed
revert(clerk-js): Remove the logic for sign-in error on untrusted password
octoper
committed
refactor(clerk-js): Remove 'untrustedPasswordMethods' from FlowMetadata type
octoper
committed
refactor(localization): Remove 'passwordUntrusted' key from en-US localization files
octoper
committed
fix(clerk-js): Update buildTasksUrl method to accept optional redirectUrl parameter
octoper
committed
fix(clerk-js): Update buildTasksUrl method to accept optional TasksRedirectOptions parameter
octoper
committed
feat(clerk-js,backend): Implement reset password session task and related test cases
octoper
committed
fix(clerk-js): Revert navigation changes from TaskChooseOrganization
octoper
committed
feat(clerk-js): Introduce 'passwordUntrusted' flow
octoper
committed
feat(clerk-js): Initial work for reset password task
octoper
committed
revert(clerk-js): Remove the logic for sign-in error on untrusted password
octoper
committed
refactor(localization): Remove 'passwordUntrusted' key from en-US localization files
octoper
committed
Fix navigation to n+1 task within modal

LauraBeatris
authored and
octoper
committed
fix(clerk-js): Update token handling in Session class to ensure correct token is emitted on updates
octoper
committed
fix(clerk-js): Enhance token resolve to ensure accurate token retrieval and caching
octoper
committed
fix(clerk-js): Update token caching to use Promise.resolve for last active token
octoper
committed
revert changes
octoper
committed
chore: Remove stale changes
octoper
committed
chore: Remove stale changes
octoper
committed
fix(localization,shared): Add localization types
octoper
committed
fix(clerk-js,shared): Export and use isPasswordUntrustedError
octoper
committed
fix(localization): Add en-US localization
octoper
committed
chore(repo): Add changeset
octoper
committed
tests(clerk-js): Add unit test for untrusted password screen
octoper
committed
chore: Remove console.log from tests
octoper
committed
feat(localizations): Generate all localizations
octoper
committed
feat: Update password error handling and localization for untrusted passwords
octoper
committed
fix(clerk-js): Fix error message
octoper
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(clerk-js): Untrusted password screen for sign-in#7331

feat(clerk-js): Untrusted password screen for sign-in#7331
octoper merged 29 commits intomainfrom
vaggelis/user-4007-dont-allow-untrusted-passwords-to-be-able-to-sign-in

Commits on Dec 2, 2025

feat(clerk-js): Initial work for reset password task

fix(clerk-js): Rename variable for clarity in SignInFactorOne component

revert(clerk-js): Remove the logic for sign-in error on untrusted password

refactor(clerk-js): Remove 'untrustedPasswordMethods' from FlowMetadata type

refactor(localization): Remove 'passwordUntrusted' key from en-US localization files

fix(clerk-js): Update buildTasksUrl method to accept optional redirectUrl parameter

fix(clerk-js): Update buildTasksUrl method to accept optional TasksRedirectOptions parameter

feat(clerk-js,backend): Implement reset password session task and related test cases

fix(clerk-js): Revert navigation changes from TaskChooseOrganization

feat(clerk-js): Introduce 'passwordUntrusted' flow

feat(clerk-js): Initial work for reset password task

revert(clerk-js): Remove the logic for sign-in error on untrusted password

refactor(localization): Remove 'passwordUntrusted' key from en-US localization files

Fix navigation to n+1 task within modal

fix(clerk-js): Update token handling in Session class to ensure correct token is emitted on updates

fix(clerk-js): Enhance token resolve to ensure accurate token retrieval and caching

fix(clerk-js): Update token caching to use Promise.resolve for last active token

revert changes

chore: Remove stale changes

chore: Remove stale changes

fix(localization,shared): Add localization types

fix(clerk-js,shared): Export and use isPasswordUntrustedError

fix(localization): Add en-US localization

chore(repo): Add changeset

tests(clerk-js): Add unit test for untrusted password screen

chore: Remove console.log from tests

feat(localizations): Generate all localizations

feat: Update password error handling and localization for untrusted passwords

fix(clerk-js): Fix error message