Skip navigation

Skip to main content

API reference
Intents
Intents: Asset
Intents: Content
Intents: design
API reference

Changelog for @canva/app-middleware@beta

The latest changes for the Canva Apps SDK @canva/app-middleware@beta package.

v0.0.0-beta.5 - 2026-01-22

Added

  • Added design token authentication support with initDesignTokenVerifier() core function and design.verifyToken() Express middleware for verifying design-scoped requests.

Changed

  • Renamed UserAuthError to TokenVerificationError.

v0.0.0-beta.4 - 2026-01-15

Changed

  • Dependencies audit bringing modules up to date:
jsonwebtoken                               9.0.2   ->   9.0.3

Removed

  • Removed unused AppIdMismatchError class, which was never thrown.

v0.0.0-beta.3 - 2026-01-13

Changed

  • Replaced @public with @beta tags in TSDocs, while the SDK's still in beta.

v0.0.0-beta.2 - 2025-12-23

Added

  • Added new UserTokenVerifier type for the express/user namespace.

Changed

  • Various examples and documentation improvements in TSDocs.

Fixed

  • Fixed an issue where err instanceOf UserAuthError checks were failing across cjs/esm module boundaries.
  • Ensured error messages are logged in debug mode.
  • Token verification now only checks for claims that exist in the token.

v0.0.0-beta.1 - 2025-12-22

Added

  • Initial release of @canva/app-middleware.