diff --git a/CHANGELOG.md b/CHANGELOG.md
index 13bbfcdb..57fa44b8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 * Drop support for Python 3.8
 
+### Added
+
+* Expose `FunctionAuth` from the public API. (#3699)
+
 ## 0.28.1 (6th December, 2024)
 
 * Fix SSL case where `verify=False` together with client side certificates.
diff --git a/docs/advanced/ssl.md b/docs/advanced/ssl.md
index f61e82ce..3813293f 100644
--- a/docs/advanced/ssl.md
+++ b/docs/advanced/ssl.md
@@ -29,7 +29,7 @@ import certifi
 import httpx
 import ssl
 
-# This SSL context is equivelent to the default `verify=True`.
+# This SSL context is equivalent to the default `verify=True`.
 ctx = ssl.create_default_context(cafile=certifi.where())
 client = httpx.Client(verify=ctx)
 ```
diff --git a/httpx/__init__.py b/httpx/__init__.py
index e9addde0..63225040 100644
--- a/httpx/__init__.py
+++ b/httpx/__init__.py
@@ -50,6 +50,7 @@ __all__ = [
     "DecodingError",
     "delete",
     "DigestAuth",
+    "FunctionAuth",
     "get",
     "head",
     "Headers",
diff --git a/httpx/_auth.py b/httpx/_auth.py
index b03971ab..9d24faed 100644
--- a/httpx/_auth.py
+++ b/httpx/_auth.py
@@ -16,7 +16,7 @@ if typing.TYPE_CHECKING:  # pragma: no cover
     from hashlib import _Hash
 
 
-__all__ = ["Auth", "BasicAuth", "DigestAuth", "NetRCAuth"]
+__all__ = ["Auth", "BasicAuth", "DigestAuth", "FunctionAuth", "NetRCAuth"]
 
 
 class Auth: