# What changed in @auth0/auth0-spa-js

> 4 changes in @auth0/auth0-spa-js 2 from its official release notes, upgrade guides and advisories. Each one cited. Sources checked 2026-10-21. HTML: https://unstale.sh/npm/@auth0/auth0-spa-js/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## @auth0/auth0-spa-js 2

### Fixes and other changes

- Falls back to memory when localStorage access throws, so storage can continue when localStorage is unavailable. (2.28.4) — [release notes](https://github.com/auth0/auth0-spa-js/releases/tag/v2.28.4)
- Preserves callback abort errors. (2.28.3) — [release notes](https://github.com/auth0/auth0-spa-js/releases/tag/v2.28.3)
- Passes the organization to _verifyIdToken during loginWithCustomTokenExchange. (2.28.3) — [release notes](https://github.com/auth0/auth0-spa-js/releases/tag/v2.28.3)
- Handles new session expiry errors. (2.28.2) — [release notes](https://github.com/auth0/auth0-spa-js/releases/tag/v2.28.2)