If you are using Auth0 Extensibility solutions (Rules, Hooks, Custom Database Connections, and Custom Social Connections) then YOUR ACTION IS REQUIRED by April 30, 2018. This notice pertains to the public cloud version of Auth0 only.
The Webtask engine powering Auth0 extensibility points currently utilizes Node 4. On April 30, 2018, Node 4 will be going out of LTS, meaning that critical security fixes will no longer be back-ported to this version.
On April 17th, 2018 we will be making the Node 8 runtime available for extensibility to all public cloud customers. We strongly recommend that you migrate your existing Node 4 extensibility code to the Node 8 runtime before April 30, 2018.
If you do not perform the migration, your extensibility code will continue to run on Node 4 and may be exposed to security issues after the April 30 LTS deadline. Details around the migration process and what to expect can be found below. Information on how to enable the new runtime along with our recommendations on how to ensure a smooth migration can be found here.
Am I affected?
Any accounts created after April 17, 2018 will already be using the latest runtime so no action is required.
As part of the process of introducing Node 8 in our Webtask runtime, we ran a number of tests to determine which modules are not forward-compatible from Node 4 to 8. Most customers should be able to upgrade to Node 8 without any issues.
If you are using any built-in modules (i.e.: modules that you do not explicitly
require()), please be aware that some module versions had to be updated to work with Node 8. The full list of modules can be found here.
There are behavioral and syntactic changes in some modules that are not forward compatible with Node 8. More information on these changes and how to migrate between versions of Node can be found in this section of our migration guide.
All official Auth0 Extensions will be updated to run on Node 8 by April 23, 2018. Under the Installed Extensions tab on the Extensions page, you will be prompted to install the updated versions as they become available.
Questions and Feedback
The Auth0 team is here to assist you to ensure a smooth migration: