diff --git a/packages/better-auth/src/init.ts b/packages/better-auth/src/init.ts index 90b4b45cca..5cbe84e88e 100644 --- a/packages/better-auth/src/init.ts +++ b/packages/better-auth/src/init.ts @@ -277,5 +277,10 @@ function getTrustedOrigins(options: BetterAuthOptions) { if (envTrustedOrigins) { trustedOrigins.push(...envTrustedOrigins.split(",")); } + if (trustedOrigins.filter((x) => !x).length) { + throw new BetterAuthError( + "A provided trusted origin is invalid, make sure your trusted origins list is properly defined.", + ); + } return trustedOrigins; }