chore(deps): bump auth0-server-python from 1.0.0b14 to 1.0.0b18

[dependabot]

Bumps auth0-server-python from 1.0.0b14 to 1.0.0b18.

Release notes

Sourced from auth0-server-python's releases.

1.0.0b18

Added

• feat: add anonymous sessions support via ServerClient.anonymous, pre-login anon@<uuid> identity with short-lived access token, metadata (up to 1 KB), automatic transfer token injection on login, and configurable clear on login #156 (rmad17)
• feat: add Experiment Center override params (experiment_id, variation_id, segment_id) to AuthorizationParameters for interactive login, for parity with other Auth0 SDKs #177 (nandan-bhat)

Fixed

• fix: stop forwarding username in passkey_login_challenge to prevent Auth0 rejections. The parameter is retained for backward compatibility and now emits a DeprecationWarning #175 (tanya732)

1.0.0b17

Added

• feat: add support for enterprise connect #167 (rmad17)

Changed

• docs: Extracts organizations example to a dedicated markdown file #166 (kailash-b)

1.0.0b16

Added

• feat: add mTLS (RFC 8705) client authentication - new use_mtls and ssl_context params let ServerClient present a TLS client certificate at the token endpoint instead of sending a client secret #159 (cschetan77)

1.0.0b15

⚠️ Breaking Changes

• feat!: add Private Key JWT (private_key_jwt) client authentication - clients with neither a client_secret nor a client_assertion_signing_key now raise ConfigurationError instead of proceeding as a public client. PAR requests now set response_type=code #154 (kishore7snehil)

Added

• feat: passwordless support - adds ServerClient.passwordless for Email OTP, SMS OTP, and Email Magic Link embedded flows #153 (rmad17)
• feat: Private JWT CA support for passwordless - extends passwordless start and verify to use _apply_client_authentication so private_key_jwt is supported #158 (rmad17)

Fixed

• fix: reject blank organization before actor resolution in session transfer token request #150 (kishore7snehil)

Changed

• docs: add Step-up authentication example #161 (kailash-b)
• docs: fix documentation drift in README and examples #144 (rmad17)

Changelog

Sourced from auth0-server-python's changelog.

1.0.0b18 (2026-10-01)

Full Changelog

Added

• feat: add anonymous sessions support via ServerClient.anonymous, pre-login anon@<uuid> identity with short-lived access token, metadata (up to 1 KB), automatic transfer token injection on login, and configurable clear on login #156 (rmad17)
• feat: add Experiment Center override params (experiment_id, variation_id, segment_id) to AuthorizationParameters for interactive login, for parity with other Auth0 SDKs #177 (nandan-bhat)

Fixed

• fix: stop forwarding username in passkey_login_challenge to prevent Auth0 rejections. The parameter is retained for backward compatibility and now emits a DeprecationWarning #175 (tanya732)

1.0.0b17 (2026-09-16)

Full Changelog

Added

• feat: add support for enterprise connect #167 (rmad17)

Changed

• docs: Extracts organizations example to a dedicated markdown file #166 (kailash-b)

1.0.0b16 (2026-09-10)

Full Changelog

Added

• feat: add mTLS (RFC 8705) client authentication - new use_mtls and ssl_context params let ServerClient present a TLS client certificate at the token endpoint instead of sending a client secret #159 (cschetan77)

1.0.0b15 (2026-09-07)

Full Changelog

⚠️ Breaking Changes

• feat!: add Private Key JWT (private_key_jwt) client authentication - clients with neither a client_secret nor a client_assertion_signing_key now raise ConfigurationError instead of proceeding as a public client. PAR requests now set response_type=code #154 (kishore7snehil)

Added

• feat: passwordless support - adds ServerClient.passwordless for Email OTP, SMS OTP, and Email Magic Link embedded flows #153 (rmad17)
• feat: Private JWT CA support for passwordless - extends passwordless start and verify to use _apply_client_authentication so private_key_jwt is supported #158 (rmad17)

Fixed

• fix: reject blank organization before actor resolution in session transfer token request #150 (kishore7snehil)

Changed

• docs: add Step-up authentication example #161 (kailash-b)
• docs: fix documentation drift in README and examples #144 (rmad17)

Commits

• 29b1c98 Merge pull request #178 from auth0/release/1.0.0b18
• 35a930b chore: prepare release 1.0.0b18
• e26b632 Merge pull request #156 from auth0/feat/anonymous-sessions
• f127590 fix: clear anonymous session on session-token expiry during remint
• 974a524 docs: document clear_anonymous_session_on_login in AnonymousSessions guide
• 981b642 refactor: group anonymous transfer-token helpers before public method
• 503a29a docs: document anonymous get_session and fix configuration-error note
• 761b94e feat: raise session_expired error on session token expiry instead of silent r...
• 6a6278d fix: reject NaN/Infinity metadata, add missing asyncio markers, fix docstring...
• 8df0b49 fix: remove Enterprise Connect guard from anonymous session injection
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)