A bit disappointing to hear, seeing as Auth0 is probably the biggest name in its niche.

Hopefully they patch it up, because I'd rather use them than rolling my own username/password, or sending my users through Facebook/Google/other sites that track you.