update all the examples files

Author: tanya732

examples/ConnectedAccounts.md

@@ -27,6 +27,8 @@ server_client = ServerClient(
 )
 ```
 
+`ServerClient` creates no default stores — provide a `state_store` and a `transaction_store`. See [ConfigureStore.md](ConfigureStore.md).
+
 ## Login to the application
 
 Use the login methods to authenticate to the application and get a refresh token in order to use MRRT to call the My Account API. If you are also intending to authorize access to any custom API, you may optionally specify an audience and any relevant scopes but you must at a minimum include the `offline_access` scope to ensure you obtain a refresh token.

examples/CustomTokenExchange.md

@@ -37,6 +37,8 @@ if response.id_token:
     print(f"ID Token: {response.id_token}")
 ```
 
+`ServerClient` creates no default stores — provide a `state_store` and a `transaction_store`. See [ConfigureStore.md](ConfigureStore.md).
+
 ## 2. Login with Token Exchange
 
 Exchange a custom token AND establish a user session.

examples/InteractiveLogin.md

@@ -23,6 +23,9 @@ server_client = ServerClient(
     }
 )
 ```
+
+`ServerClient` creates no default stores — provide a `state_store` and a `transaction_store`. See [ConfigureStore.md](ConfigureStore.md).
+
 Now call `start_interactive_login()` to obtain the authorization URL and redirect the user:
 ```python
 authorization_url = await server_client.start_interactive_login()

examples/MFA.md

@@ -124,6 +124,8 @@ except MfaRequiredError as error:
     mfa_token = context.mfa_token  # Raw token for MFA API calls
 ```
 
+`ServerClient` creates no default stores — provide a `state_store` and a `transaction_store`. See [ConfigureStore.md](ConfigureStore.md).
+
 > [!NOTE]
 > `get_access_token()` is not the only origin of `MfaRequiredError`. A passkey login (`signin_with_passkey`) raises the same error when a second factor is required — but there is **no session yet** at that point, which changes how you complete and persist the flow. See [Passkeys.md → Completing MFA on a passkey login](Passkeys.md#completing-mfa-on-a-passkey-login-and-where-the-session-comes-from).
 

examples/MultipleCustomDomains.md

@@ -29,6 +29,8 @@ client = ServerClient(
 )
 ```
 
+`ServerClient` creates no default stores — provide a `state_store` and a `transaction_store`. See [ConfigureStore.md](ConfigureStore.md).
+
 ### Method 2: Dynamic Domain Resolver (MCD)
 
 For MCD support, provide a domain resolver function that receives a `DomainResolverContext`:

examples/MutualTLS.md

@@ -43,6 +43,8 @@ auth0 = ServerClient(
 )
 ```
 
+`ServerClient` creates no default stores — provide a `state_store` and a `transaction_store`. See [ConfigureStore.md](ConfigureStore.md).
+
 The SDK passes `ssl_context` as `verify=ssl_context` to every `httpx.AsyncClient` it constructs, including the authlib client used for the authorization-code exchange. You never call `load_cert_chain` inside the SDK - the caller owns the TLS material.
 
 ## Mutual exclusion

examples/OrganizationLogin.md

@@ -34,6 +34,8 @@ authorization_url = await auth0.start_interactive_login(
 )
 ```
 
+`ServerClient` creates no default stores — provide a `state_store` and a `transaction_store`. See [ConfigureStore.md](ConfigureStore.md).
+
 `organization` accepts either an org ID (with the `org_` prefix) or a human-readable org name. The SDK validates the corresponding `org_id` or `org_name` claim in the returned ID token.
 
 ## Multi-Org Login

examples/Passkeys.md

@@ -31,14 +31,26 @@ A passkey ceremony is always **two steps**, because the WebAuthn signature happe
 ```python
 from auth0_server_python.auth_server.server_client import ServerClient
 
+# Passkey sign-in persists a server-side session, and the challenge step stores
+# short-lived transaction data — so ServerClient needs a state store and a
+# transaction store (it does not create defaults). If your framework wrapper
+# (e.g. auth0-fastapi) already provides these, reuse them; otherwise create your
+# own implementations of the StateStore / TransactionStore ABCs.
+state_store = YourStateStore(...)              # or the store your framework provides
+transaction_store = YourTransactionStore(...)  # or the store your framework provides
+
 server_client = ServerClient(
     domain="YOUR_CUSTOM_DOMAIN",
     client_id="YOUR_CLIENT_ID",
     client_secret="YOUR_CLIENT_SECRET",
     secret="YOUR_SECRET",
+    state_store=state_store,
+    transaction_store=transaction_store,
 )
 ```
 
+For store implementations (cookie, Redis, database) and how to pass `store_options`, see [examples/ConfigureStore.md](ConfigureStore.md).
+
 The **Passkey** grant (`urn:okta:params:oauth:grant-type:webauthn`) must be enabled for your application under **Applications → Your App → Grant Types**.
 
 > [!NOTE]

examples/Passwordless.md

@@ -62,6 +62,8 @@ server_client = ServerClient(
 )
 ```
 
+`ServerClient` creates no default stores — provide a `state_store` and a `transaction_store`. See [ConfigureStore.md](ConfigureStore.md).
+
 For apps using request/response-backed stores or multiple custom domains, pass `store_options={"request": request, "response": response}` to each method that reads or writes transaction/session state.
 
 ## 1. Email OTP

examples/StepUpAuthentication.md

@@ -113,6 +113,8 @@ async def handle_callback(callback_url, request, response):
     return (result.get("app_state") or {}).get("returnTo", "/")
 ```
 
+`ServerClient` creates no default stores — provide a `state_store` and a `transaction_store`. See [ConfigureStore.md](ConfigureStore.md).
+
 > [!NOTE]
 > The redirect itself is framework-specific - these handlers return the URL to redirect to, and your app issues the actual HTTP redirect (e.g. a `302`/`303`). `max_age: 0` matters: without it, a user who authenticated moments ago may be returned straight to your callback without a fresh MFA prompt.