Clerk Changelog

Updated pricing

With the upcoming release of Organizations, we'll also be updating our pricing. If you're not using organizations, and would like to be on our legacy pricing plan, you should upgrade by the end of next week. Existing applications will be grandfathered into their current pricing plan.

Review our new pricing plans here:

https://clerk.com/pricing

Thanks to the contributors: Braden Sidoti, Colin Sidoti

useOrganization()

We've finalized our organizations feature set, with the addition of the easy-to-use React hooks useOrganization() & useOrganizationList(). Updated docs live!

https://clerk.com/docs/organizations/overview⁠

The official release will come sometime next week.

Thanks to the contributors: Peter Perlepes

AWS AppSync support

You can now seamlessly authorize requests on AWS AppSync using the "openid-connect-authorization flow".

https://docs.aws.amazon.com/appsync/latest/devguide/security-authz.html#openid-connect-authorization⁠

Thanks to the contributors: Sokratis Vidros

Weekly office hours

This upcoming week we will be holding our second office hours. Come join us on Thursday to chat about the future of authentication!

The exact time will likely be posted soon. The best way to learn the time is to follow our Twitter⁠.

Thanks to the contributors: Ian McPhail, Braden Sidoti

Embeddable Magic Links

While these were always possible, we've released detailed documentation on how to make them happen. Embedding magic links into welcome emails, customer promotions, and many other use cases can increase user engagement dramatically.

https://clerk.com/docs/how-to/embeddable-magic-links

E2E Testing with Clerk

We've made it easier to create end to end tests with Clerk, specifically for Email and SMS OTPs. Use reserved email addresses and phone numbers to bypass sending emails/SMSs, using a static verification value

https://clerk.com/docs/how-to/e2e-testing

The New Wave Remix Stack

On the heels of the Remix Conf, we've created the New Wave Remix Stack! Remix Stacks are a great way to jump start your application process. The New Wave Stack includes Clerk, Fauna, and Netlify.

Updated pricing coming soon

This upcoming week we'll be updating our pricing and introducing a new "Hobby" and "Business" plan. Existing customers will be grandfathered into the current plans.

Big announcements coming soon. Stay tuned!

Public Roadmap

This week we launched a public roadmap⁠. It contains a rough estimate of when we expect to start and release new projects. Although it's not guaranteed, it's a good glimpse into how we expect the weeks, months, and quarters ahead to unfold.

Resilience upgrades

Out with the old, in with the new! We were nearing capacity for some of our infrastructure and needed to upgrade.

The upgrades successfully deployed with zero downtime!

Bot detection upgrades

Over the weekend, we detected an unusual spike in bot activity associated with SMS verifications. We worked with Twilio to determine that this attack was "toll fraud"⁠ - where attackers are able to steal money by receiving SMS messages.

We've upgraded our systems to detect and put a stop to the suspicious behavior. Though this attack did not manifest in downtime or security issues, the impacted customers were notified and will not be charged for SMS overruns.

Clerk – the Customer Identity Platform

We talk to customers every day at Clerk – it's our favorite part of the job. Recently, there has been a clear change in the feature requests we receive: instead of asking for more auth features, developers are asking for more integrations.

The first integrations we launched were with database tools like Supabase, Hasura, Fauna, and Firebase. This made sense, since like auth, choosing database tooling is one of the first decisions developers make.

Usage of our database integrations picked up right away. Today, over 20% of new Clerk instances turn on a database integration in their first two weeks of development.

The success of these integrations has also amplified requests for more. Now, the requests are for tools that are needed later in a company's lifecycle:

• Analytics tools like Google Analytics, Segment, and Rudderstack
• Billing tools like Stripe and Paddle
• Marketing tools like Intercom and Hubspot

The writing is on the wall. In service of our customer requests, it's clear a robust suite of integrations will dominate our roadmap for the foreseeable future. Clerk is not just authentication anymore, we're a Customer Identity Platform: a complete Customer Identity solution that integrates and syncs with your favorite tools.

250,000 managed users

This week we celebrated crossing 250,000 users managed on Clerk! Onward and upward.

New homepage

We've launched a new homepage to reflect our roadmap of integrations. For the first time, we're also featuring some of our customers.

Improved documentation

Our journey to in-house documentation continues. We've moved another big batch of pages to clerk.dev/docs, where we have more control to build documentation that better serves developers.

This project will continue over the next several weeks, with updated designs and organizations coming soon.

Organization management API updates

The work on our organization management API continues! We now have over 30 companies participating in the beta and we tremendously appreciate the ongoing feedback.

Things are really starting to round out.

Backend endpoints

• POST /v1/organizations
• DELETE /v1/organizations/:id
• PATCH /v1/organizations/:id
• PATCH /v1/organizations/:id/metadata
• PUT /v1/organizations/:id/logo
• POST /v1/organizations/:id/memberships

Frontend endpoints

• POST /v1/organizations
• PATCH /v1/organizations/:id
• DELETE /v1/organizations/:id
• PUT /v1/organizations/:id/logo
• POST /v1/organizations/:organization_id/invitations
• POST /v1/organizations/:organization_id/invitations/:invitation_id/revoke
• GET /v1/organizations/:organization_id/invitations/pending
• POST /v1/organizations/:organization_id/memberships
• GET /v1/organizations/:organization_id/memberships
• PATCH /v1/organizations/:organization_id/memberships/:user_id
• DELETE /v1/organizations/:organization_id/memberships/:user_id

The next focus is adding "current organization" support and progress is well underway.

Thanks to the contributors: Alex Ntousias, Giannis Katsanos

Update domain in production

Developers can now change the domain used in production.

Thanks to the contributors: Sokratis Vidros

Community Spotlight: Chop Suey Remix stack

Congratulations to Jake Correa⁠, who launched a new "Remix Stack" with:

• Clerk for authentication
• EdgeDB for database
• Tailwind for styles
• Fly.io for hosting

Check it out!⁠ This might be the most "edge" we've ever seen on the cutting edge.

SOC 2 / HIPAA Certifications

We're proud to announce that we are officially SOC 2 Type 2, and HIPAA certified! Security and privacy are our utmost directives here at Clerk. While we talk a big game about developer experience (and live up to it!), everyone at Clerk knows that security and privacy take precedence over any other initiative. These new certifications highlight our commitment to securing your data and keeping it private.

The entire team worked on this initiative -- it involved a lot of training, a complete audit of all our processes, and a complete audit of every system that Clerk uses. We are extraordinarily confident in the security and privacy of all data in our systems.

If you would like a copy of our SOC2 report, please email us at support@clerk.dev.

Organizations updates

We've made considerable progress towards a release of Clerk's Organizations feature.

New Backend API Endpoints

• Organization Object
  • List, Create, Read, Update, Delete
  • Merge/Update Metadata
  • Create/Update Logo
• Organization Memberships
  • List, Create, Read, Update, Delete

Thanks to the contributors: Giannis Katsanos, Alex Ntousias

Email deliverability

We've created a new guide that outlines every step Clerk takes to endure that your verification emails are delivered to your inbox in a timely manner. There's a lot that goes into an email, especially ones as crucial as verification emails. Any delay, or dropped email, is catastrophic, and we treat them as critical errors here at Clerk. To learn more check our email deliverability guide.

Thanks to the contributors: Agis Anastasopoulos

Test mode

When running automated tests, you don't actually need to send out SMSs and Emails, but, you do want to test all of your code flows as exact as possible. We've create a new "Test Mode", that will let you use "fictional" phone numbers and emails which will always result in the same verification codes.

Thanks to the contributors: Braden Sidoti