mirror of
https://github.com/better-auth/better-auth.git
synced 2026-07-27 16:53:02 -05:00
chore: sync main to next
chore: sync main to next
This commit is contained in:
Gustavo Valverde
@@ -0,0 +1,9 @@
|
||||
---
|
||||
"better-auth": patch
|
||||
---
|
||||
|
||||
fix(two-factor): revert enforcement broadening from #9122
|
||||
|
||||
Restores the pre-#9122 enforcement scope. 2FA is challenged only on `/sign-in/email`, `/sign-in/username`, and `/sign-in/phone-number`, matching the behavior that shipped through v1.6.2. Non-credential sign-in flows (magic link, email OTP, OAuth, SSO, passkey, SIWE, one-tap, phone-number OTP, device authorization, email-verification auto-sign-in) are no longer gated by a 2FA challenge by default.
|
||||
|
||||
A broader enforcement scope with per-method opt-outs and alignment to NIST SP 800-63B-4 authenticator assurance levels is planned for a future minor release.
|
||||
@@ -0,0 +1,5 @@
|
||||
---
|
||||
"better-auth": patch
|
||||
---
|
||||
|
||||
Fix forced UUID user IDs from create hooks being ignored on PostgreSQL adapters when `advanced.database.generateId` is set to `"uuid"`.
|
||||
@@ -0,0 +1,9 @@
|
||||
---
|
||||
"@better-auth/drizzle-adapter": patch
|
||||
"@better-auth/kysely-adapter": patch
|
||||
"better-auth": patch
|
||||
---
|
||||
|
||||
chore(adapters): require patched `drizzle-orm` and `kysely` peer versions
|
||||
|
||||
Narrows the `drizzle-orm` peer to `^0.45.2` and the `kysely` peer to `^0.28.14`. Both new ranges track the minor line that carries the vulnerability fix and nothing newer, so the adapters only advertise support for versions that have actually been tested against. Consumers on older ORM releases see an install-time warning and can upgrade alongside the adapter; the peer is marked optional, so installs do not hard-fail.
|
||||
@@ -17,8 +17,8 @@ import {
|
||||
LucideAArrowDown,
|
||||
Mail,
|
||||
Mailbox,
|
||||
Navigation,
|
||||
Phone,
|
||||
Route,
|
||||
ScanFace,
|
||||
ScrollTextIcon,
|
||||
Server,
|
||||
@@ -446,11 +446,6 @@ export const contents: Content[] = [
|
||||
</svg>
|
||||
),
|
||||
},
|
||||
{
|
||||
title: "Dynamic Base URL",
|
||||
href: "/docs/concepts/dynamic-base-url",
|
||||
icon: () => <Navigation className="w-4 h-4 text-current" />,
|
||||
},
|
||||
],
|
||||
Icon: () => (
|
||||
<svg
|
||||
@@ -2435,6 +2430,11 @@ C0.7,239.6,62.1,0.5,62.2,0.4c0,0,54,13.8,119.9,30.8S302.1,62,302.2,62c0.2,0,0.2,
|
||||
</svg>
|
||||
),
|
||||
},
|
||||
{
|
||||
title: "Dynamic Base URL",
|
||||
href: "/docs/guides/dynamic-base-url",
|
||||
icon: () => <Route className="w-4 h-4 text-current" />,
|
||||
},
|
||||
{
|
||||
title: "SAML SSO with Okta",
|
||||
href: "/docs/guides/saml-sso-with-okta",
|
||||
|
||||
@@ -390,7 +390,7 @@ hooks: {
|
||||
|
||||
Better Auth can now resolve the base URL dynamically from incoming requests, making it work seamlessly with Vercel preview deployments, multi-domain setups, and reverse proxies.
|
||||
|
||||
[👉 Read more about dynamic base URL](https://www.better-auth.com/docs/concepts/dynamic-base-url)
|
||||
[👉 Read more about dynamic base URL](https://www.better-auth.com/docs/guides/dynamic-base-url)
|
||||
|
||||
```tsx
|
||||
import { betterAuth } from "better-auth";
|
||||
|
||||
@@ -1,261 +0,0 @@
|
||||
---
|
||||
title: Dynamic Base URL
|
||||
description: Configure Better Auth to work with multiple domains and preview deployments.
|
||||
---
|
||||
|
||||
When deploying to platforms like Vercel, your application can run on multiple URLs simultaneously:
|
||||
|
||||
* Custom domains (e.g., `myapp.com`, `www.myapp.com`)
|
||||
* Preview deployments (e.g., `my-app-abc123.vercel.app`)
|
||||
* Branch previews (e.g., `feature-branch.myapp.com`)
|
||||
|
||||
Better Auth supports dynamic base URL resolution using an **allowlist-based approach** that determines the correct URL from each incoming request.
|
||||
|
||||
## Basic Usage
|
||||
|
||||
Configure `baseURL` as an object with an `allowedHosts` array:
|
||||
|
||||
```ts title="auth.ts"
|
||||
import { betterAuth } from "better-auth"
|
||||
|
||||
export const auth = betterAuth({
|
||||
baseURL: {
|
||||
allowedHosts: [
|
||||
"myapp.com",
|
||||
"www.myapp.com",
|
||||
"*.vercel.app",
|
||||
],
|
||||
},
|
||||
})
|
||||
```
|
||||
|
||||
When a request comes in, Better Auth extracts the host from the `x-forwarded-host` or `host` header and validates it against your allowlist. If the host matches, that URL is used as the base URL for the request.
|
||||
|
||||
## Wildcard Patterns
|
||||
|
||||
The `allowedHosts` array supports wildcard patterns:
|
||||
|
||||
| Pattern | Matches |
|
||||
| --------------------- | ----------------------------------- |
|
||||
| `myapp.com` | Exact match only |
|
||||
| `*.vercel.app` | Any subdomain of vercel.app |
|
||||
| `preview-*.myapp.com` | Subdomains starting with `preview-` |
|
||||
| `localhost:*` | localhost on any port |
|
||||
|
||||
```ts title="auth.ts"
|
||||
export const auth = betterAuth({
|
||||
baseURL: {
|
||||
allowedHosts: [
|
||||
"myapp.com", // Production
|
||||
"*.vercel.app", // All Vercel previews
|
||||
"preview-*.myapp.com", // Custom preview subdomains
|
||||
"localhost:3000", // Local development
|
||||
],
|
||||
},
|
||||
})
|
||||
```
|
||||
|
||||
## Fallback URL
|
||||
|
||||
By default, if the incoming host doesn't match any pattern in `allowedHosts`, Better Auth throws an error. You can provide a fallback URL instead:
|
||||
|
||||
```ts title="auth.ts"
|
||||
export const auth = betterAuth({
|
||||
baseURL: {
|
||||
allowedHosts: ["myapp.com", "*.vercel.app"],
|
||||
fallback: "https://myapp.com",
|
||||
},
|
||||
})
|
||||
```
|
||||
|
||||
With a fallback configured:
|
||||
|
||||
* Matching hosts use the derived URL
|
||||
* Non-matching hosts use the fallback URL (no error thrown)
|
||||
|
||||
<Callout type="warn">
|
||||
Use fallbacks carefully. Silent fallbacks can mask misconfigurations. Consider whether throwing an error (the default) is more appropriate for your use case.
|
||||
</Callout>
|
||||
|
||||
## Protocol Configuration
|
||||
|
||||
Control the protocol used when constructing URLs:
|
||||
|
||||
```ts title="auth.ts"
|
||||
export const auth = betterAuth({
|
||||
baseURL: {
|
||||
allowedHosts: ["myapp.com", "localhost:3000"],
|
||||
protocol: "https", // Always use HTTPS
|
||||
},
|
||||
})
|
||||
```
|
||||
|
||||
| Value | Behavior |
|
||||
| --------- | --------------------------------------------------------------------------------------------------- |
|
||||
| `"https"` | Always use HTTPS |
|
||||
| `"http"` | Always use HTTP |
|
||||
| `"auto"` | Derive from `x-forwarded-proto` header, then request URL; defaults to HTTPS if neither is available |
|
||||
| Not set | Same as `"auto"` |
|
||||
|
||||
<Callout type="info">
|
||||
The `protocol` setting controls how the **URL is constructed** for each request. For the cookie `Secure` flag, Better Auth uses `protocol: "https"` → secure, `protocol: "http"` → not secure, and for `"auto"` or unset → falls back to `NODE_ENV === "production"`. You can always override this with `advanced.useSecureCookies`.
|
||||
</Callout>
|
||||
|
||||
For mixed environments (local dev + production), you can use environment variables:
|
||||
|
||||
```ts title="auth.ts"
|
||||
export const auth = betterAuth({
|
||||
baseURL: {
|
||||
allowedHosts: ["myapp.com", "localhost:3000"],
|
||||
protocol: process.env.NODE_ENV === "development" ? "http" : "https",
|
||||
},
|
||||
})
|
||||
```
|
||||
|
||||
## Trusted Origins Integration
|
||||
|
||||
When you configure `allowedHosts`, Better Auth automatically adds them to `trustedOrigins`. This means:
|
||||
|
||||
```ts title="auth.ts"
|
||||
export const auth = betterAuth({
|
||||
baseURL: {
|
||||
allowedHosts: ["myapp.com", "*.vercel.app"],
|
||||
},
|
||||
})
|
||||
|
||||
// Automatically adds to trustedOrigins:
|
||||
// - "https://myapp.com"
|
||||
// - "https://*.vercel.app"
|
||||
```
|
||||
|
||||
You don't need to duplicate your allowed hosts in both configurations.
|
||||
|
||||
## Static Base URL (Backwards Compatible)
|
||||
|
||||
The traditional static string configuration still works:
|
||||
|
||||
```ts title="auth.ts"
|
||||
export const auth = betterAuth({
|
||||
baseURL: "https://myapp.com",
|
||||
})
|
||||
```
|
||||
|
||||
This is recommended when your application runs on a single, known URL.
|
||||
|
||||
## Common Patterns
|
||||
|
||||
### Vercel Deployment
|
||||
|
||||
```ts title="auth.ts"
|
||||
export const auth = betterAuth({
|
||||
baseURL: {
|
||||
allowedHosts: [
|
||||
"myapp.com", // Production custom domain
|
||||
"www.myapp.com", // WWW variant
|
||||
"*.vercel.app", // All preview deployments
|
||||
],
|
||||
},
|
||||
})
|
||||
```
|
||||
|
||||
### Development + Production
|
||||
|
||||
```ts title="auth.ts"
|
||||
export const auth = betterAuth({
|
||||
baseURL: {
|
||||
allowedHosts: [
|
||||
"localhost:3000",
|
||||
"localhost:5173",
|
||||
"myapp.com",
|
||||
"*.vercel.app",
|
||||
],
|
||||
protocol: process.env.NODE_ENV === "development" ? "http" : "https",
|
||||
},
|
||||
})
|
||||
```
|
||||
|
||||
### Multiple Production Domains
|
||||
|
||||
```ts title="auth.ts"
|
||||
export const auth = betterAuth({
|
||||
baseURL: {
|
||||
allowedHosts: [
|
||||
"myapp.com",
|
||||
"myapp.co.uk",
|
||||
"myapp.eu",
|
||||
],
|
||||
},
|
||||
})
|
||||
```
|
||||
|
||||
## Cross-Subdomain Cookies
|
||||
|
||||
If you need to share cookies across subdomains, you can enable `crossSubDomainCookies` without specifying a static `domain`. Better Auth automatically derives the cookie domain from the resolved host of each request.
|
||||
|
||||
```ts title="auth.ts"
|
||||
import { betterAuth } from "better-auth"
|
||||
|
||||
export const auth = betterAuth({
|
||||
baseURL: {
|
||||
allowedHosts: [
|
||||
"auth.example1.com",
|
||||
"auth.example2.com",
|
||||
],
|
||||
protocol: "https",
|
||||
},
|
||||
advanced: {
|
||||
crossSubDomainCookies: {
|
||||
enabled: true,
|
||||
},
|
||||
},
|
||||
})
|
||||
```
|
||||
|
||||
With this configuration:
|
||||
|
||||
* A request to `auth.example1.com` sets cookies with `Domain=auth.example1.com`
|
||||
* A request to `auth.example2.com` sets cookies with `Domain=auth.example2.com`
|
||||
|
||||
If you want to use the same domain for all hosts, you can set `domain` explicitly:
|
||||
|
||||
```ts title="auth.ts"
|
||||
import { betterAuth } from "better-auth"
|
||||
|
||||
export const auth = betterAuth({
|
||||
baseURL: {
|
||||
allowedHosts: ["auth.example1.com", "auth.example2.com"],
|
||||
protocol: "https",
|
||||
},
|
||||
advanced: {
|
||||
crossSubDomainCookies: {
|
||||
enabled: true,
|
||||
domain: ".example.com", // always use this domain regardless of host
|
||||
},
|
||||
},
|
||||
})
|
||||
```
|
||||
|
||||
<Callout type="info">
|
||||
With a static `baseURL` string, `crossSubDomainCookies` derives the domain from that string at init time. With dynamic base URL, the domain is computed per-request from the resolved host. Learn more about cross-subdomain cookies in the [Cookies](/docs/concepts/cookies#cross-subdomain-cookies) documentation.
|
||||
</Callout>
|
||||
|
||||
## Security Considerations
|
||||
|
||||
<Callout type="info">
|
||||
Dynamic base URL uses an **allowlist-based approach** for security. Only hosts explicitly listed in `allowedHosts` are accepted.
|
||||
</Callout>
|
||||
|
||||
1. **Allowlist is mandatory** - You cannot accept arbitrary hosts
|
||||
2. **Headers are validated** - The `x-forwarded-host` and `host` headers are sanitized before use
|
||||
3. **Explicit patterns only** - No automatic platform detection; you must add each pattern
|
||||
4. **Clear errors** - Unknown hosts throw descriptive errors (unless fallback is set)
|
||||
|
||||
This differs from some other auth libraries that auto-trust platforms or accept any header value. Better Auth prioritizes security over convenience.
|
||||
|
||||
## Configuration Reference
|
||||
|
||||
| Property | Type | Default | Description |
|
||||
| -------------- | ----------------------------- | -------- | --------------------------------------------------------------------------------------- |
|
||||
| `allowedHosts` | `string[]` | Required | List of allowed host patterns |
|
||||
| `fallback` | `string` | - | URL to use when host doesn't match |
|
||||
| `protocol` | `"http" \| "https" \| "auto"` | `"auto"` | Protocol for URL construction. `"auto"` derives from request headers, defaults to HTTPS |
|
||||
@@ -0,0 +1,155 @@
|
||||
---
|
||||
title: Dynamic Base URL
|
||||
description: Configure Better Auth for preview deployments, multiple domains, and per-request URL resolution.
|
||||
---
|
||||
|
||||
Use dynamic base URL when your app is served from more than one hostname, such as:
|
||||
|
||||
* custom domains like `myapp.com` and `www.myapp.com`
|
||||
* preview deployments like `my-app-abc123.vercel.app`
|
||||
* branch environments like `feature-branch.myapp.com`
|
||||
|
||||
The configuration itself lives on the [`baseURL` option](/docs/reference/options#baseurl). This guide focuses on when to use it and how to structure it safely.
|
||||
|
||||
## Basic Setup
|
||||
|
||||
Configure `baseURL` as an object with an `allowedHosts` allowlist:
|
||||
|
||||
```ts title="auth.ts"
|
||||
import { betterAuth } from "better-auth"
|
||||
|
||||
export const auth = betterAuth({
|
||||
baseURL: {
|
||||
allowedHosts: [
|
||||
"myapp.com",
|
||||
"www.myapp.com",
|
||||
"*.vercel.app",
|
||||
],
|
||||
},
|
||||
})
|
||||
```
|
||||
|
||||
When a request comes in, Better Auth extracts the host from `x-forwarded-host`, `host` header, or the request URL (in that order), validates it against `allowedHosts`, and uses the matched value to build the request-specific base URL.
|
||||
|
||||
## Common Deployment Patterns
|
||||
|
||||
### Vercel Deployment
|
||||
|
||||
```ts title="auth.ts"
|
||||
export const auth = betterAuth({
|
||||
baseURL: {
|
||||
allowedHosts: [
|
||||
"myapp.com",
|
||||
"www.myapp.com",
|
||||
"*.vercel.app",
|
||||
],
|
||||
},
|
||||
})
|
||||
```
|
||||
|
||||
### Development + Production
|
||||
|
||||
```ts title="auth.ts"
|
||||
export const auth = betterAuth({
|
||||
baseURL: {
|
||||
allowedHosts: [
|
||||
"localhost:3000",
|
||||
"localhost:5173",
|
||||
"myapp.com",
|
||||
"*.vercel.app",
|
||||
],
|
||||
protocol: process.env.NODE_ENV === "development" ? "http" : "https",
|
||||
},
|
||||
})
|
||||
```
|
||||
|
||||
### Multiple Production Domains
|
||||
|
||||
```ts title="auth.ts"
|
||||
export const auth = betterAuth({
|
||||
baseURL: {
|
||||
allowedHosts: [
|
||||
"myapp.com",
|
||||
"myapp.co.uk",
|
||||
"myapp.eu",
|
||||
],
|
||||
protocol: "https",
|
||||
},
|
||||
})
|
||||
```
|
||||
|
||||
## Choosing a Fallback
|
||||
|
||||
By default, Better Auth throws if the incoming host does not match `allowedHosts`. That is usually the safer default because it exposes proxy or deployment mistakes immediately.
|
||||
|
||||
If you need a fallback, set one explicitly:
|
||||
|
||||
```ts title="auth.ts"
|
||||
export const auth = betterAuth({
|
||||
baseURL: {
|
||||
allowedHosts: ["myapp.com", "*.vercel.app"],
|
||||
fallback: "https://myapp.com",
|
||||
},
|
||||
})
|
||||
```
|
||||
|
||||
Use this only when falling back to a canonical domain is clearly preferable to failing the request.
|
||||
|
||||
## Cookies Across Subdomains
|
||||
|
||||
If you need to share cookies across subdomains, you can enable `crossSubDomainCookies` while still using dynamic base URL. Better Auth will derive the cookie domain from the resolved host unless you set `domain` explicitly.
|
||||
|
||||
```ts title="auth.ts"
|
||||
import { betterAuth } from "better-auth"
|
||||
|
||||
export const auth = betterAuth({
|
||||
baseURL: {
|
||||
allowedHosts: [
|
||||
"auth.example1.com",
|
||||
"auth.example2.com",
|
||||
],
|
||||
protocol: "https",
|
||||
},
|
||||
advanced: {
|
||||
crossSubDomainCookies: {
|
||||
enabled: true,
|
||||
},
|
||||
},
|
||||
})
|
||||
```
|
||||
|
||||
If you want to force a shared parent domain instead, set it directly:
|
||||
|
||||
```ts title="auth.ts"
|
||||
import { betterAuth } from "better-auth"
|
||||
|
||||
export const auth = betterAuth({
|
||||
baseURL: {
|
||||
allowedHosts: ["auth.example1.com", "auth.example2.com"],
|
||||
protocol: "https",
|
||||
},
|
||||
advanced: {
|
||||
crossSubDomainCookies: {
|
||||
enabled: true,
|
||||
domain: ".example.com",
|
||||
},
|
||||
},
|
||||
})
|
||||
```
|
||||
|
||||
See [Cookies](/docs/concepts/cookies#cross-subdomain-cookies) for the full cookie behavior.
|
||||
|
||||
## Security Model
|
||||
|
||||
Dynamic base URL uses an allowlist model:
|
||||
|
||||
1. Only hosts listed in `allowedHosts` are accepted
|
||||
2. `x-forwarded-host` and `host` headers are sanitized and validated before use
|
||||
3. Unknown hosts throw unless you provide `fallback`
|
||||
4. `allowedHosts` are automatically added to [`trustedOrigins`](/docs/reference/options#trustedorigins) (localhost entries get both `http` and `https`)
|
||||
|
||||
This keeps multi-domain support explicit instead of trusting arbitrary headers or platform-specific behavior.
|
||||
|
||||
## Reference
|
||||
|
||||
For the exact option shape and property-level behavior, see [`baseURL` in the options reference](/docs/reference/options#baseurl).
|
||||
@@ -45,6 +45,7 @@ interface SecurityOptions {
|
||||
freeTrialAbuse?: FreeTrialAbuseConfig;
|
||||
compromisedPassword?: CompromisedPasswordConfig;
|
||||
emailValidation?: EmailValidationConfig;
|
||||
emailNormalization?: { enabled?: boolean };
|
||||
staleUsers?: StaleUsersConfig;
|
||||
challengeDifficulty?: number;
|
||||
}
|
||||
@@ -274,6 +275,26 @@ sentinel({
|
||||
* `medium` - Also check for valid MX records
|
||||
* `high` - Additional heuristic checks
|
||||
|
||||
### Email normalization
|
||||
|
||||
Sentinel can normalize email addresses before sign-up and sign-in so aliases and provider quirks do not create duplicate accounts or mismatched logins. Normalization includes lowercasing, stripping plus-address tags on common providers (for example `user+tag@gmail.com` → `user@gmail.com`), removing dots in Gmail-style addresses, and mapping `googlemail.com` to `gmail.com`.
|
||||
|
||||
Use `security.emailNormalization` when you want to control this separately from disposable-domain validation (`emailValidation`):
|
||||
|
||||
```ts
|
||||
sentinel({
|
||||
apiKey: process.env.BETTER_AUTH_API_KEY,
|
||||
security: {
|
||||
emailValidation: {
|
||||
enabled: false, // skip disposable / MX checks
|
||||
},
|
||||
emailNormalization: {
|
||||
enabled: true, // still normalize for deduplication and consistent sign-in
|
||||
},
|
||||
},
|
||||
}),
|
||||
```
|
||||
|
||||
## Proof-of-Work Challenges
|
||||
|
||||
When a security check results in a "challenge" action, Sentinel issues a Proof-of-Work (PoW) challenge that must be solved by the client.
|
||||
|
||||
@@ -293,7 +293,7 @@ Users must be authenticated to approve or deny device authorization requests:
|
||||
export default function DeviceApprovalPage() {
|
||||
const { user } = useAuth(); // Must be authenticated
|
||||
const searchParams = useSearchParams();
|
||||
const userCode = searchParams.get("userCode");
|
||||
const userCode = searchParams.get("user_code");
|
||||
const [isProcessing, setIsProcessing] = useState(false);
|
||||
|
||||
const handleApprove = async () => {
|
||||
|
||||
@@ -20,7 +20,12 @@ export const auth = betterAuth({
|
||||
|
||||
## `baseURL`
|
||||
|
||||
Base URL for Better Auth. This is typically the root URL where your application server is hosted. Note: If you include a path in the baseURL, it will take precedence over the default path.
|
||||
Base URL for Better Auth. This is typically the root URL where your application server is hosted. You can configure it as either:
|
||||
|
||||
* a static string for single-domain deployments
|
||||
* an object for dynamic per-request resolution across multiple allowed hosts
|
||||
|
||||
If you include a path in the baseURL string, it will take precedence over the default path.
|
||||
|
||||
```ts
|
||||
import { betterAuth } from "better-auth";
|
||||
@@ -35,6 +40,38 @@ If not explicitly set, the system will check for the environment variable `BETTE
|
||||
Relying on request inference is not recommended. For security and stability, always set `baseURL` explicitly in your config or via the `BETTER_AUTH_URL` environment variable.
|
||||
</Callout>
|
||||
|
||||
### Dynamic Base URL
|
||||
|
||||
Use the object form when your app can be reached through multiple domains, such as preview deployments, branch environments, or multiple production hosts. Better Auth derives the host from the incoming request, validates it against `allowedHosts`, and constructs the request-specific base URL from that match.
|
||||
|
||||
```ts
|
||||
import { betterAuth } from "better-auth";
|
||||
|
||||
export const auth = betterAuth({
|
||||
baseURL: {
|
||||
allowedHosts: [
|
||||
"myapp.com",
|
||||
"www.myapp.com",
|
||||
"*.vercel.app",
|
||||
],
|
||||
protocol: "https",
|
||||
fallback: "https://myapp.com",
|
||||
},
|
||||
})
|
||||
```
|
||||
|
||||
* `allowedHosts`: List of accepted host patterns. Supports exact matches (`myapp.com`), wildcards (`*.vercel.app`, `preview-*.myapp.com`), and port wildcards (`localhost:*`). Automatically added to [`trustedOrigins`](#trustedorigins) (localhost entries get both `http` and `https`)
|
||||
* `protocol`: Protocol for URL construction. `"http"`, `"https"`, or `"auto"` (default). `"auto"` derives from `x-forwarded-proto`, then request URL, then defaults to HTTPS. Also affects the cookie `Secure` flag: `"https"` → secure, `"http"` → not secure, `"auto"` or unset → `NODE_ENV === "production"`. Override with `advanced.useSecureCookies`
|
||||
* `fallback`: URL to use when the incoming host does not match. Without it, unknown hosts throw. Its origin is also added to `trustedOrigins`
|
||||
|
||||
<Callout type="warn">
|
||||
Use `fallback` carefully. It can hide deployment or proxy misconfiguration that would otherwise fail loudly.
|
||||
</Callout>
|
||||
|
||||
When `crossSubDomainCookies` is enabled, the cookie domain is derived from the resolved request host unless you set `domain` explicitly.
|
||||
|
||||
For deployment patterns and end-to-end examples, see the [Dynamic Base URL guide](/docs/guides/dynamic-base-url).
|
||||
|
||||
## `basePath`
|
||||
|
||||
Base path for Better Auth. This is typically the path where the Better Auth routes are mounted. It will be overridden if there is a path component within `baseURL`.
|
||||
|
||||
@@ -232,6 +232,41 @@ describe("Create Adapter Helper", async () => {
|
||||
expect(ids.size).toBe(10);
|
||||
});
|
||||
|
||||
test("Should preserve a forced UUID when the adapter supports native UUIDs", async () => {
|
||||
const existingId = "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d";
|
||||
const adapter = await createTestAdapter({
|
||||
config: {
|
||||
supportsUUIDs: true,
|
||||
},
|
||||
options: {
|
||||
advanced: {
|
||||
database: {
|
||||
generateId: "uuid",
|
||||
},
|
||||
},
|
||||
},
|
||||
adapter() {
|
||||
return {
|
||||
async create(data) {
|
||||
expect(data.data.id).toBe(existingId);
|
||||
return data.data;
|
||||
},
|
||||
};
|
||||
},
|
||||
});
|
||||
|
||||
const result = await adapter.create({
|
||||
model: "user",
|
||||
data: {
|
||||
id: existingId,
|
||||
name: "test-name",
|
||||
},
|
||||
forceAllowId: true,
|
||||
});
|
||||
|
||||
expect(result.id).toBe(existingId);
|
||||
});
|
||||
|
||||
describe("Checking for the results of an adapter call, as well as the parameters passed into the adapter call", () => {
|
||||
describe("create", () => {
|
||||
test("Should fill in the missing fields in the result", async () => {
|
||||
|
||||
@@ -16,6 +16,14 @@
|
||||
- better-auth@1.7.0-beta.0
|
||||
- @better-auth/core@1.7.0-beta.0
|
||||
|
||||
## 1.6.4
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]:
|
||||
- better-auth@1.6.4
|
||||
- @better-auth/core@1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
### Patch Changes
|
||||
|
||||
@@ -85,6 +85,31 @@
|
||||
|
||||
### Patch Changes
|
||||
|
||||
## 1.6.4
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- [#9205](https://github.com/better-auth/better-auth/pull/9205) [`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - fix(two-factor): revert enforcement broadening from [#9122](https://github.com/better-auth/better-auth/issues/9122)
|
||||
|
||||
Restores the pre-[#9122](https://github.com/better-auth/better-auth/issues/9122) enforcement scope. 2FA is challenged only on `/sign-in/email`, `/sign-in/username`, and `/sign-in/phone-number`, matching the behavior that shipped through v1.6.2. Non-credential sign-in flows (magic link, email OTP, OAuth, SSO, passkey, SIWE, one-tap, phone-number OTP, device authorization, email-verification auto-sign-in) are no longer gated by a 2FA challenge by default.
|
||||
|
||||
A broader enforcement scope with per-method opt-outs and alignment to NIST SP 800-63B-4 authenticator assurance levels is planned for a future minor release.
|
||||
|
||||
- [#9068](https://github.com/better-auth/better-auth/pull/9068) [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09) Thanks [@GautamBytes](https://github.com/GautamBytes)! - Fix forced UUID user IDs from create hooks being ignored on PostgreSQL adapters when `advanced.database.generateId` is set to `"uuid"`.
|
||||
|
||||
- [#9165](https://github.com/better-auth/better-auth/pull/9165) [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - chore(adapters): require patched `drizzle-orm` and `kysely` peer versions
|
||||
|
||||
Narrows the `drizzle-orm` peer to `^0.45.2` and the `kysely` peer to `^0.28.14`. Both new ranges track the minor line that carries the vulnerability fix and nothing newer, so the adapters only advertise support for versions that have actually been tested against. Consumers on older ORM releases see an install-time warning and can upgrade alongside the adapter; the peer is marked optional, so installs do not hard-fail.
|
||||
|
||||
- Updated dependencies [[`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]:
|
||||
- @better-auth/drizzle-adapter@1.6.4
|
||||
- @better-auth/kysely-adapter@1.6.4
|
||||
- @better-auth/core@1.6.4
|
||||
- @better-auth/memory-adapter@1.6.4
|
||||
- @better-auth/mongo-adapter@1.6.4
|
||||
- @better-auth/prisma-adapter@1.6.4
|
||||
- @better-auth/telemetry@1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
### Patch Changes
|
||||
|
||||
@@ -522,7 +522,7 @@
|
||||
"happy-dom": "^20.8.9",
|
||||
"listhen": "^1.9.0",
|
||||
"msw": "^2.12.10",
|
||||
"next": "^16.2.0",
|
||||
"next": "^16.2.3",
|
||||
"oauth2-mock-server": "^8.2.2",
|
||||
"react": "catalog:react19",
|
||||
"react-dom": "catalog:react19",
|
||||
@@ -541,7 +541,7 @@
|
||||
"@tanstack/solid-start": "^1.0.0",
|
||||
"better-sqlite3": "^12.0.0",
|
||||
"drizzle-kit": ">=0.31.4",
|
||||
"drizzle-orm": ">=0.41.0",
|
||||
"drizzle-orm": "^0.45.2",
|
||||
"mongodb": "^6.0.0 || ^7.0.0",
|
||||
"mysql2": "^3.0.0",
|
||||
"next": "^14.0.0 || ^15.0.0 || ^16.0.0",
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
import { describe, expect, it, vi } from "vitest";
|
||||
import { getTestInstance } from "../test-utils/test-instance";
|
||||
import type { User } from "../types";
|
||||
|
||||
describe("db", async () => {
|
||||
it("should work with custom model names", async () => {
|
||||
@@ -73,6 +74,56 @@ describe("db", async () => {
|
||||
expect(callback).toBe(true);
|
||||
});
|
||||
|
||||
it("db hooks should preserve a forced UUID on postgres when generateId is uuid", async () => {
|
||||
const existingId = "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d";
|
||||
const email = `forced-id-${crypto.randomUUID()}@test.com`;
|
||||
const { auth, db } = await getTestInstance(
|
||||
{
|
||||
advanced: {
|
||||
database: {
|
||||
generateId: "uuid",
|
||||
},
|
||||
},
|
||||
databaseHooks: {
|
||||
user: {
|
||||
create: {
|
||||
async before(user) {
|
||||
return {
|
||||
data: {
|
||||
...user,
|
||||
id: existingId,
|
||||
},
|
||||
};
|
||||
},
|
||||
},
|
||||
},
|
||||
},
|
||||
},
|
||||
{
|
||||
testWith: "postgres",
|
||||
disableTestUser: true,
|
||||
},
|
||||
);
|
||||
|
||||
const result = await auth.api.signUpEmail({
|
||||
body: {
|
||||
email,
|
||||
name: "forced-id-user",
|
||||
password: "password",
|
||||
},
|
||||
});
|
||||
|
||||
expect(result.user.id).toBe(existingId);
|
||||
|
||||
const createdUser = await db.findOne<User>({
|
||||
model: "user",
|
||||
where: [{ field: "id", value: existingId }],
|
||||
});
|
||||
|
||||
expect(createdUser?.id).toBe(existingId);
|
||||
expect(createdUser?.email).toBe(email);
|
||||
});
|
||||
|
||||
it("should work with custom field names", async () => {
|
||||
const { client } = await getTestInstance({
|
||||
user: {
|
||||
|
||||
@@ -426,8 +426,9 @@ export const twoFactor = <O extends TwoFactorOptions>(options?: O) => {
|
||||
{
|
||||
matcher(context) {
|
||||
return (
|
||||
context.context.newSession != null &&
|
||||
!context.path?.startsWith("/two-factor/")
|
||||
context.path === "/sign-in/email" ||
|
||||
context.path === "/sign-in/username" ||
|
||||
context.path === "/sign-in/phone-number"
|
||||
);
|
||||
},
|
||||
handler: createAuthMiddleware(async (ctx) => {
|
||||
@@ -440,12 +441,6 @@ export const twoFactor = <O extends TwoFactorOptions>(options?: O) => {
|
||||
return;
|
||||
}
|
||||
|
||||
// Skip if the request already had an authenticated session
|
||||
// (session refresh, updateUser, etc. are not sign-in flows)
|
||||
if (ctx.context.session) {
|
||||
return;
|
||||
}
|
||||
|
||||
const trustDeviceCookieAttrs = ctx.context.createAuthCookie(
|
||||
TRUST_DEVICE_COOKIE_NAME,
|
||||
{
|
||||
|
||||
@@ -2478,9 +2478,14 @@ describe("twoFactorMethods in sign-in response", () => {
|
||||
});
|
||||
|
||||
/**
|
||||
* @see https://github.com/better-auth/better-auth/issues/8627
|
||||
* @see https://github.com/better-auth/better-auth/pull/9205
|
||||
*
|
||||
* 2FA enforcement is intentionally scoped to credential sign-in paths
|
||||
* only. These tests lock that scope in so a future refactor does not
|
||||
* accidentally broaden enforcement to non-credential sign-in flows
|
||||
* without a dedicated release.
|
||||
*/
|
||||
describe("2FA enforcement on non-credential sign-in paths", async () => {
|
||||
describe("2FA enforcement scope", async () => {
|
||||
let magicLinkURL = "";
|
||||
const { auth, signInWithTestUser, testUser } = await getTestInstance({
|
||||
secret: DEFAULT_SECRET,
|
||||
@@ -2499,7 +2504,7 @@ describe("2FA enforcement on non-credential sign-in paths", async () => {
|
||||
],
|
||||
});
|
||||
|
||||
it("should enforce 2FA on magic-link sign-in", async () => {
|
||||
it("should not challenge 2FA on magic-link sign-in", async () => {
|
||||
const { headers } = await signInWithTestUser();
|
||||
await auth.api.enableTwoFactor({
|
||||
body: { password: testUser.password },
|
||||
@@ -2522,14 +2527,14 @@ describe("2FA enforcement on non-credential sign-in paths", async () => {
|
||||
});
|
||||
|
||||
const json = await verifyRes.json();
|
||||
expect(json.twoFactorRedirect).toBe(true);
|
||||
expect(json.twoFactorRedirect).toBeUndefined();
|
||||
});
|
||||
|
||||
it("should not enforce 2FA on authenticated non-sign-in endpoints", async () => {
|
||||
it("should not challenge 2FA on authenticated non-sign-in endpoints", async () => {
|
||||
const {
|
||||
auth: a,
|
||||
auth: instance,
|
||||
signInWithTestUser: signIn,
|
||||
testUser: tu,
|
||||
testUser: user,
|
||||
} = await getTestInstance({
|
||||
secret: DEFAULT_SECRET,
|
||||
plugins: [
|
||||
@@ -2539,20 +2544,20 @@ describe("2FA enforcement on non-credential sign-in paths", async () => {
|
||||
}),
|
||||
],
|
||||
});
|
||||
let { headers: h } = await signIn();
|
||||
const enableRes = await a.api.enableTwoFactor({
|
||||
body: { password: tu.password },
|
||||
headers: h,
|
||||
let { headers } = await signIn();
|
||||
const enableRes = await instance.api.enableTwoFactor({
|
||||
body: { password: user.password },
|
||||
headers,
|
||||
asResponse: true,
|
||||
});
|
||||
h = convertSetCookieToCookie(enableRes.headers);
|
||||
headers = convertSetCookieToCookie(enableRes.headers);
|
||||
|
||||
const session = await a.api.getSession({ headers: h });
|
||||
const session = await instance.api.getSession({ headers });
|
||||
expect(session?.user.twoFactorEnabled).toBe(true);
|
||||
|
||||
const updateRes = await a.api.updateUser({
|
||||
const updateRes = await instance.api.updateUser({
|
||||
body: { name: "updated-name" },
|
||||
headers: h,
|
||||
headers,
|
||||
asResponse: true,
|
||||
});
|
||||
|
||||
|
||||
@@ -11,6 +11,15 @@
|
||||
|
||||
## 1.7.0-beta.0
|
||||
|
||||
## 1.6.4
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]:
|
||||
- better-auth@1.6.4
|
||||
- @better-auth/core@1.6.4
|
||||
- @better-auth/telemetry@1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
### Patch Changes
|
||||
|
||||
@@ -8,6 +8,8 @@
|
||||
|
||||
- [#8836](https://github.com/better-auth/better-auth/pull/8836) [`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - Add `private_key_jwt` (RFC 7523) client authentication across the stack. Servers verify JWT client assertions signed with asymmetric keys; clients sign them for authorization code, refresh, and client credentials flows.
|
||||
|
||||
## 1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
## 1.6.2
|
||||
|
||||
@@ -108,8 +108,6 @@ export const initGetIdField = ({
|
||||
// if it's generated by us, then we should return the value as is.
|
||||
if (shouldGenerateId && !forceAllowId) return value;
|
||||
if (disableIdGeneration) return undefined;
|
||||
// if DB will handle UUID generation, then we should return undefined.
|
||||
if (supportsUUIDs) return undefined;
|
||||
// if forceAllowId is true, it means we should be using the ID provided during the adapter call.
|
||||
if (forceAllowId && typeof value === "string") {
|
||||
const uuidRegex =
|
||||
@@ -129,6 +127,8 @@ export const initGetIdField = ({
|
||||
);
|
||||
}
|
||||
}
|
||||
// if DB will handle UUID generation, then we should return undefined.
|
||||
if (supportsUUIDs) return undefined;
|
||||
// if the value is not a string, and the database doesn't support generating it's own UUIDs, then we should be generating the UUID.
|
||||
if (typeof value !== "string" && !supportsUUIDs) {
|
||||
return crypto.randomUUID();
|
||||
|
||||
@@ -14,6 +14,17 @@
|
||||
- Updated dependencies [[`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656)]:
|
||||
- @better-auth/core@1.7.0-beta.0
|
||||
|
||||
## 1.6.4
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- [#9165](https://github.com/better-auth/better-auth/pull/9165) [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - chore(adapters): require patched `drizzle-orm` and `kysely` peer versions
|
||||
|
||||
Narrows the `drizzle-orm` peer to `^0.45.2` and the `kysely` peer to `^0.28.14`. Both new ranges track the minor line that carries the vulnerability fix and nothing newer, so the adapters only advertise support for versions that have actually been tested against. Consumers on older ORM releases see an install-time warning and can upgrade alongside the adapter; the peer is marked optional, so installs do not hard-fail.
|
||||
|
||||
- Updated dependencies []:
|
||||
- @better-auth/core@1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
### Patch Changes
|
||||
|
||||
@@ -45,7 +45,7 @@
|
||||
"peerDependencies": {
|
||||
"@better-auth/core": "workspace:^",
|
||||
"@better-auth/utils": "catalog:",
|
||||
"drizzle-orm": ">=0.41.0"
|
||||
"drizzle-orm": "^0.45.2"
|
||||
},
|
||||
"peerDependenciesMeta": {
|
||||
"drizzle-orm": {
|
||||
|
||||
@@ -30,6 +30,14 @@
|
||||
- better-auth@1.7.0-beta.0
|
||||
- @better-auth/core@1.7.0-beta.0
|
||||
|
||||
## 1.6.4
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]:
|
||||
- better-auth@1.6.4
|
||||
- @better-auth/core@1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
### Patch Changes
|
||||
|
||||
@@ -89,7 +89,7 @@
|
||||
"@types/better-sqlite3": "^7.6.13",
|
||||
"better-auth": "workspace:*",
|
||||
"better-sqlite3": "^12.6.2",
|
||||
"electron": "^38.8.4",
|
||||
"electron": "^38.8.6",
|
||||
"tsdown": "catalog:"
|
||||
},
|
||||
"peerDependencies": {
|
||||
|
||||
@@ -30,6 +30,14 @@
|
||||
- better-auth@1.7.0-beta.0
|
||||
- @better-auth/core@1.7.0-beta.0
|
||||
|
||||
## 1.6.4
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]:
|
||||
- better-auth@1.6.4
|
||||
- @better-auth/core@1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
### Patch Changes
|
||||
|
||||
@@ -16,6 +16,14 @@
|
||||
- better-auth@1.7.0-beta.0
|
||||
- @better-auth/core@1.7.0-beta.0
|
||||
|
||||
## 1.6.4
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]:
|
||||
- better-auth@1.6.4
|
||||
- @better-auth/core@1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
### Patch Changes
|
||||
|
||||
@@ -14,6 +14,17 @@
|
||||
- Updated dependencies [[`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656)]:
|
||||
- @better-auth/core@1.7.0-beta.0
|
||||
|
||||
## 1.6.4
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- [#9165](https://github.com/better-auth/better-auth/pull/9165) [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - chore(adapters): require patched `drizzle-orm` and `kysely` peer versions
|
||||
|
||||
Narrows the `drizzle-orm` peer to `^0.45.2` and the `kysely` peer to `^0.28.14`. Both new ranges track the minor line that carries the vulnerability fix and nothing newer, so the adapters only advertise support for versions that have actually been tested against. Consumers on older ORM releases see an install-time warning and can upgrade alongside the adapter; the peer is marked optional, so installs do not hard-fail.
|
||||
|
||||
- Updated dependencies []:
|
||||
- @better-auth/core@1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
### Patch Changes
|
||||
|
||||
@@ -50,7 +50,7 @@
|
||||
"peerDependencies": {
|
||||
"@better-auth/core": "workspace:^",
|
||||
"@better-auth/utils": "catalog:",
|
||||
"kysely": "^0.27.0 || ^0.28.0"
|
||||
"kysely": "^0.28.14"
|
||||
},
|
||||
"peerDependenciesMeta": {
|
||||
"kysely": {
|
||||
|
||||
@@ -14,6 +14,13 @@
|
||||
- Updated dependencies [[`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656)]:
|
||||
- @better-auth/core@1.7.0-beta.0
|
||||
|
||||
## 1.6.4
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies []:
|
||||
- @better-auth/core@1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
### Patch Changes
|
||||
|
||||
@@ -14,6 +14,13 @@
|
||||
- Updated dependencies [[`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656)]:
|
||||
- @better-auth/core@1.7.0-beta.0
|
||||
|
||||
## 1.6.4
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies []:
|
||||
- @better-auth/core@1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
### Patch Changes
|
||||
|
||||
@@ -83,6 +83,14 @@
|
||||
- better-auth@1.7.0-beta.0
|
||||
- @better-auth/core@1.7.0-beta.0
|
||||
|
||||
## 1.6.4
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]:
|
||||
- better-auth@1.6.4
|
||||
- @better-auth/core@1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
### Patch Changes
|
||||
|
||||
@@ -16,6 +16,14 @@
|
||||
- better-auth@1.7.0-beta.0
|
||||
- @better-auth/core@1.7.0-beta.0
|
||||
|
||||
## 1.6.4
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]:
|
||||
- better-auth@1.6.4
|
||||
- @better-auth/core@1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
### Patch Changes
|
||||
|
||||
@@ -14,6 +14,13 @@
|
||||
- Updated dependencies [[`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656)]:
|
||||
- @better-auth/core@1.7.0-beta.0
|
||||
|
||||
## 1.6.4
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies []:
|
||||
- @better-auth/core@1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
### Patch Changes
|
||||
|
||||
@@ -14,6 +14,13 @@
|
||||
- Updated dependencies [[`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656)]:
|
||||
- @better-auth/core@1.7.0-beta.0
|
||||
|
||||
## 1.6.4
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies []:
|
||||
- @better-auth/core@1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
### Patch Changes
|
||||
|
||||
@@ -16,6 +16,14 @@
|
||||
- better-auth@1.7.0-beta.0
|
||||
- @better-auth/core@1.7.0-beta.0
|
||||
|
||||
## 1.6.4
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]:
|
||||
- better-auth@1.6.4
|
||||
- @better-auth/core@1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
### Patch Changes
|
||||
|
||||
@@ -68,6 +68,14 @@
|
||||
- Extracted shared `validateInResponseTo()` and `validateAudience()` into `packages/sso/src/saml/response-validation.ts`, eliminating ~160 lines of duplicated validation logic between the two ACS handlers.
|
||||
- Fixed `SAMLAssertionExtract` type to match samlify's actual extractor output shape.
|
||||
|
||||
## 1.6.4
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]:
|
||||
- better-auth@1.6.4
|
||||
- @better-auth/core@1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
### Patch Changes
|
||||
|
||||
@@ -20,6 +20,14 @@
|
||||
- better-auth@1.7.0-beta.0
|
||||
- @better-auth/core@1.7.0-beta.0
|
||||
|
||||
## 1.6.4
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]:
|
||||
- better-auth@1.6.4
|
||||
- @better-auth/core@1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
### Patch Changes
|
||||
|
||||
@@ -14,6 +14,13 @@
|
||||
- Updated dependencies [[`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656)]:
|
||||
- @better-auth/core@1.7.0-beta.0
|
||||
|
||||
## 1.6.4
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies []:
|
||||
- @better-auth/core@1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
### Patch Changes
|
||||
|
||||
@@ -16,6 +16,14 @@
|
||||
- better-auth@1.7.0-beta.0
|
||||
- @better-auth/core@1.7.0-beta.0
|
||||
|
||||
## 1.6.4
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]:
|
||||
- better-auth@1.6.4
|
||||
- @better-auth/core@1.6.4
|
||||
|
||||
## 1.6.3
|
||||
|
||||
### Patch Changes
|
||||
|
||||
Generated
+23
-276
@@ -311,7 +311,7 @@ importers:
|
||||
version: 11.13.0
|
||||
next:
|
||||
specifier: 16.2.3
|
||||
version: 16.2.3(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(sass@1.97.1)
|
||||
version: 16.2.3(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(sass@1.97.1)
|
||||
next-themes:
|
||||
specifier: ^0.4.6
|
||||
version: 0.4.6(react-dom@19.2.4(react@19.2.4))(react@19.2.4)
|
||||
@@ -866,8 +866,8 @@ importers:
|
||||
specifier: '>=0.31.4'
|
||||
version: 0.31.9
|
||||
drizzle-orm:
|
||||
specifier: '>=0.41.0'
|
||||
version: 0.45.1(@cloudflare/workers-types@4.20260226.1)(@electric-sql/pglite@0.3.15)(@libsql/client@0.17.0(encoding@0.1.13))(@opentelemetry/api@1.9.0)(@prisma/client@7.4.1(prisma@7.4.1(@types/react@19.2.14)(better-sqlite3@12.6.2)(magicast@0.3.5)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3))(typescript@5.9.3))(@types/better-sqlite3@7.6.13)(@types/pg@8.16.0)(@upstash/redis@1.36.4)(better-sqlite3@12.6.2)(bun-types@1.3.9)(gel@2.2.0)(kysely@0.28.14)(mysql2@3.18.2(@types/node@25.6.0))(pg@8.19.0)(postgres@3.4.8)(prisma@7.4.1(@types/react@19.2.14)(better-sqlite3@12.6.2)(magicast@0.3.5)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3))
|
||||
specifier: ^0.45.2
|
||||
version: 0.45.2(@cloudflare/workers-types@4.20260226.1)(@electric-sql/pglite@0.3.15)(@libsql/client@0.17.0(encoding@0.1.13))(@opentelemetry/api@1.9.0)(@prisma/client@7.4.1(prisma@7.4.1(@types/react@19.2.14)(better-sqlite3@12.6.2)(magicast@0.3.5)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3))(typescript@5.9.3))(@types/better-sqlite3@7.6.13)(@types/pg@8.16.0)(@upstash/redis@1.36.4)(better-sqlite3@12.6.2)(bun-types@1.3.9)(gel@2.2.0)(kysely@0.28.14)(mysql2@3.18.2(@types/node@25.6.0))(pg@8.19.0)(postgres@3.4.8)(prisma@7.4.1(@types/react@19.2.14)(better-sqlite3@12.6.2)(magicast@0.3.5)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3))
|
||||
jose:
|
||||
specifier: ^6.1.3
|
||||
version: 6.1.3
|
||||
@@ -939,8 +939,8 @@ importers:
|
||||
specifier: ^2.12.10
|
||||
version: 2.12.10(@types/node@25.6.0)(typescript@5.9.3)
|
||||
next:
|
||||
specifier: ^16.2.0
|
||||
version: 16.2.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(sass@1.97.1)
|
||||
specifier: ^16.2.3
|
||||
version: 16.2.3(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(sass@1.97.1)
|
||||
oauth2-mock-server:
|
||||
specifier: ^8.2.2
|
||||
version: 8.2.2
|
||||
@@ -1183,8 +1183,8 @@ importers:
|
||||
specifier: ^12.6.2
|
||||
version: 12.6.2
|
||||
electron:
|
||||
specifier: ^38.8.4
|
||||
version: 38.8.4
|
||||
specifier: ^38.8.6
|
||||
version: 38.8.6
|
||||
tsdown:
|
||||
specifier: 'catalog:'
|
||||
version: 0.21.1(@arethetypeswrong/core@0.18.2)(oxc-resolver@11.19.0)(publint@0.3.17)(synckit@0.11.11)(typescript@5.9.3)
|
||||
@@ -4501,43 +4501,21 @@ packages:
|
||||
resolution: {integrity: sha512-dyJeuggzQM8+Dsi0T8Z9UjfLJ6vCmNC36W6WE2aqzfTdTw4wPkh2xlEu4LoD75+TGuYK7jIhEoU2QcCXOzfyAQ==}
|
||||
engines: {node: ^18.14.0 || >=20}
|
||||
|
||||
'@next/env@16.2.0':
|
||||
resolution: {integrity: sha512-OZIbODWWAi0epQRCRjNe1VO45LOFBzgiyqmTLzIqWq6u1wrxKnAyz1HH6tgY/Mc81YzIjRPoYsPAEr4QV4l9TA==}
|
||||
|
||||
'@next/env@16.2.3':
|
||||
resolution: {integrity: sha512-ZWXyj4uNu4GCWQw9cjRxWlbD+33mcDszIo9iQxFnBX3Wmgq9ulaSJcl6VhuWx5pCWqqD+9W6Wfz7N0lM5lYPMA==}
|
||||
|
||||
'@next/swc-darwin-arm64@16.2.0':
|
||||
resolution: {integrity: sha512-/JZsqKzKt01IFoiLLAzlNqys7qk2F3JkcUhj50zuRhKDQkZNOz9E5N6wAQWprXdsvjRP4lTFj+/+36NSv5AwhQ==}
|
||||
engines: {node: '>= 10'}
|
||||
cpu: [arm64]
|
||||
os: [darwin]
|
||||
|
||||
'@next/swc-darwin-arm64@16.2.3':
|
||||
resolution: {integrity: sha512-u37KDKTKQ+OQLvY+z7SNXixwo4Q2/IAJFDzU1fYe66IbCE51aDSAzkNDkWmLN0yjTUh4BKBd+hb69jYn6qqqSg==}
|
||||
engines: {node: '>= 10'}
|
||||
cpu: [arm64]
|
||||
os: [darwin]
|
||||
|
||||
'@next/swc-darwin-x64@16.2.0':
|
||||
resolution: {integrity: sha512-/hV8erWq4SNlVgglUiW5UmQ5Hwy5EW/AbbXlJCn6zkfKxTy/E/U3V8U1Ocm2YCTUoFgQdoMxRyRMOW5jYy4ygg==}
|
||||
engines: {node: '>= 10'}
|
||||
cpu: [x64]
|
||||
os: [darwin]
|
||||
|
||||
'@next/swc-darwin-x64@16.2.3':
|
||||
resolution: {integrity: sha512-gHjL/qy6Q6CG3176FWbAKyKh9IfntKZTB3RY/YOJdDFpHGsUDXVH38U4mMNpHVGXmeYW4wj22dMp1lTfmu/bTQ==}
|
||||
engines: {node: '>= 10'}
|
||||
cpu: [x64]
|
||||
os: [darwin]
|
||||
|
||||
'@next/swc-linux-arm64-gnu@16.2.0':
|
||||
resolution: {integrity: sha512-GkjL/Q7MWOwqWR9zoxu1TIHzkOI2l2BHCf7FzeQG87zPgs+6WDh+oC9Sw9ARuuL/FUk6JNCgKRkA6rEQYadUaw==}
|
||||
engines: {node: '>= 10'}
|
||||
cpu: [arm64]
|
||||
os: [linux]
|
||||
libc: [glibc]
|
||||
|
||||
'@next/swc-linux-arm64-gnu@16.2.3':
|
||||
resolution: {integrity: sha512-U6vtblPtU/P14Y/b/n9ZY0GOxbbIhTFuaFR7F4/uMBidCi2nSdaOFhA0Go81L61Zd6527+yvuX44T4ksnf8T+Q==}
|
||||
engines: {node: '>= 10'}
|
||||
@@ -4545,13 +4523,6 @@ packages:
|
||||
os: [linux]
|
||||
libc: [glibc]
|
||||
|
||||
'@next/swc-linux-arm64-musl@16.2.0':
|
||||
resolution: {integrity: sha512-1ffhC6KY5qWLg5miMlKJp3dZbXelEfjuXt1qcp5WzSCQy36CV3y+JT7OC1WSFKizGQCDOcQbfkH/IjZP3cdRNA==}
|
||||
engines: {node: '>= 10'}
|
||||
cpu: [arm64]
|
||||
os: [linux]
|
||||
libc: [musl]
|
||||
|
||||
'@next/swc-linux-arm64-musl@16.2.3':
|
||||
resolution: {integrity: sha512-/YV0LgjHUmfhQpn9bVoGc4x4nan64pkhWR5wyEV8yCOfwwrH630KpvRg86olQHTwHIn1z59uh6JwKvHq1h4QEw==}
|
||||
engines: {node: '>= 10'}
|
||||
@@ -4559,13 +4530,6 @@ packages:
|
||||
os: [linux]
|
||||
libc: [musl]
|
||||
|
||||
'@next/swc-linux-x64-gnu@16.2.0':
|
||||
resolution: {integrity: sha512-FmbDcZQ8yJRq93EJSL6xaE0KK/Rslraf8fj1uViGxg7K4CKBCRYSubILJPEhjSgZurpcPQq12QNOJQ0DRJl6Hg==}
|
||||
engines: {node: '>= 10'}
|
||||
cpu: [x64]
|
||||
os: [linux]
|
||||
libc: [glibc]
|
||||
|
||||
'@next/swc-linux-x64-gnu@16.2.3':
|
||||
resolution: {integrity: sha512-/HiWEcp+WMZ7VajuiMEFGZ6cg0+aYZPqCJD3YJEfpVWQsKYSjXQG06vJP6F1rdA03COD9Fef4aODs3YxKx+RDQ==}
|
||||
engines: {node: '>= 10'}
|
||||
@@ -4573,13 +4537,6 @@ packages:
|
||||
os: [linux]
|
||||
libc: [glibc]
|
||||
|
||||
'@next/swc-linux-x64-musl@16.2.0':
|
||||
resolution: {integrity: sha512-HzjIHVkmGAwRbh/vzvoBWWEbb8BBZPxBvVbDQDvzHSf3D8RP/4vjw7MNLDXFF9Q1WEzeQyEj2zdxBtVAHu5Oyw==}
|
||||
engines: {node: '>= 10'}
|
||||
cpu: [x64]
|
||||
os: [linux]
|
||||
libc: [musl]
|
||||
|
||||
'@next/swc-linux-x64-musl@16.2.3':
|
||||
resolution: {integrity: sha512-Kt44hGJfZSefebhk/7nIdivoDr3Ugp5+oNz9VvF3GUtfxutucUIHfIO0ZYO8QlOPDQloUVQn4NVC/9JvHRk9hw==}
|
||||
engines: {node: '>= 10'}
|
||||
@@ -4587,24 +4544,12 @@ packages:
|
||||
os: [linux]
|
||||
libc: [musl]
|
||||
|
||||
'@next/swc-win32-arm64-msvc@16.2.0':
|
||||
resolution: {integrity: sha512-UMiFNQf5H7+1ZsZPxEsA064WEuFbRNq/kEXyepbCnSErp4f5iut75dBA8UeerFIG3vDaQNOfCpevnERPp2V+nA==}
|
||||
engines: {node: '>= 10'}
|
||||
cpu: [arm64]
|
||||
os: [win32]
|
||||
|
||||
'@next/swc-win32-arm64-msvc@16.2.3':
|
||||
resolution: {integrity: sha512-O2NZ9ie3Tq6xj5Z5CSwBT3+aWAMW2PIZ4egUi9MaWLkwaehgtB7YZjPm+UpcNpKOme0IQuqDcor7BsW6QBiQBw==}
|
||||
engines: {node: '>= 10'}
|
||||
cpu: [arm64]
|
||||
os: [win32]
|
||||
|
||||
'@next/swc-win32-x64-msvc@16.2.0':
|
||||
resolution: {integrity: sha512-DRrNJKW+/eimrZgdhVN1uvkN1OI4j6Lpefwr44jKQ0YQzztlmOBUUzHuV5GxOMPK3nmodAYElUVCY8ZXo/IWeA==}
|
||||
engines: {node: '>= 10'}
|
||||
cpu: [x64]
|
||||
os: [win32]
|
||||
|
||||
'@next/swc-win32-x64-msvc@16.2.3':
|
||||
resolution: {integrity: sha512-Ibm29/GgB/ab5n7XKqlStkm54qqZE8v2FnijUPBgrd67FWrac45o/RsNlaOWjme/B5UqeWt/8KM4aWBwA1D2Kw==}
|
||||
engines: {node: '>= 10'}
|
||||
@@ -7918,11 +7863,6 @@ packages:
|
||||
base64-js@1.5.1:
|
||||
resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}
|
||||
|
||||
baseline-browser-mapping@2.10.0:
|
||||
resolution: {integrity: sha512-lIyg0szRfYbiy67j9KN8IyeD7q7hcmqnJ1ddWmNt19ItGpNN64mnllmxUNFIOdOm6by97jlL6wfpTTJrmnjWAA==}
|
||||
engines: {node: '>=6.0.0'}
|
||||
hasBin: true
|
||||
|
||||
baseline-browser-mapping@2.10.17:
|
||||
resolution: {integrity: sha512-HdrkN8eVG2CXxeifv/VdJ4A4RSra1DTW8dc/hdxzhGHN8QePs6gKaWM9pHPcpCoxYZJuOZ8drHmbdpLHjCYjLA==}
|
||||
engines: {node: '>=6.0.0'}
|
||||
@@ -8138,9 +8078,6 @@ packages:
|
||||
camelize@1.0.1:
|
||||
resolution: {integrity: sha512-dU+Tx2fsypxTgtLoE36npi3UqcjSSMNYfkqgmoEhtZrraP5VWq0K7FkWVTYa8eMPtnU/G2txVsfdCJTn9uzpuQ==}
|
||||
|
||||
caniuse-lite@1.0.30001774:
|
||||
resolution: {integrity: sha512-DDdwPGz99nmIEv216hKSgLD+D4ikHQHjBC/seF98N9CPqRX4M5mSxT9eTV6oyisnJcuzxtZy4n17yKKQYmYQOA==}
|
||||
|
||||
caniuse-lite@1.0.30001787:
|
||||
resolution: {integrity: sha512-mNcrMN9KeI68u7muanUpEejSLghOKlVhRqS/Za2IeyGllJ9I9otGpR9g3nsw7n4W378TE/LyIteA0+/FOZm4Kg==}
|
||||
|
||||
@@ -9031,98 +8968,6 @@ packages:
|
||||
resolution: {integrity: sha512-GViD3IgsXn7trFyBUUHyTFBpH/FsHTxYJ66qdbVggxef4UBPHRYxQaRzYLTuekYnk9i5FIEL9pbBIwMqX/Uwrg==}
|
||||
hasBin: true
|
||||
|
||||
drizzle-orm@0.45.1:
|
||||
resolution: {integrity: sha512-Te0FOdKIistGNPMq2jscdqngBRfBpC8uMFVwqjf6gtTVJHIQ/dosgV/CLBU2N4ZJBsXL5savCba9b0YJskKdcA==}
|
||||
peerDependencies:
|
||||
'@aws-sdk/client-rds-data': '>=3'
|
||||
'@cloudflare/workers-types': '>=4'
|
||||
'@electric-sql/pglite': '>=0.2.0'
|
||||
'@libsql/client': '>=0.10.0'
|
||||
'@libsql/client-wasm': '>=0.10.0'
|
||||
'@neondatabase/serverless': '>=0.10.0'
|
||||
'@op-engineering/op-sqlite': '>=2'
|
||||
'@opentelemetry/api': ^1.4.1
|
||||
'@planetscale/database': '>=1.13'
|
||||
'@prisma/client': '*'
|
||||
'@tidbcloud/serverless': '*'
|
||||
'@types/better-sqlite3': '*'
|
||||
'@types/pg': '*'
|
||||
'@types/sql.js': '*'
|
||||
'@upstash/redis': '>=1.34.7'
|
||||
'@vercel/postgres': '>=0.8.0'
|
||||
'@xata.io/client': '*'
|
||||
better-sqlite3: '>=7'
|
||||
bun-types: '*'
|
||||
expo-sqlite: '>=14.0.0'
|
||||
gel: '>=2'
|
||||
knex: '*'
|
||||
kysely: '*'
|
||||
mysql2: '>=2'
|
||||
pg: '>=8'
|
||||
postgres: '>=3'
|
||||
prisma: '*'
|
||||
sql.js: '>=1'
|
||||
sqlite3: '>=5'
|
||||
peerDependenciesMeta:
|
||||
'@aws-sdk/client-rds-data':
|
||||
optional: true
|
||||
'@cloudflare/workers-types':
|
||||
optional: true
|
||||
'@electric-sql/pglite':
|
||||
optional: true
|
||||
'@libsql/client':
|
||||
optional: true
|
||||
'@libsql/client-wasm':
|
||||
optional: true
|
||||
'@neondatabase/serverless':
|
||||
optional: true
|
||||
'@op-engineering/op-sqlite':
|
||||
optional: true
|
||||
'@opentelemetry/api':
|
||||
optional: true
|
||||
'@planetscale/database':
|
||||
optional: true
|
||||
'@prisma/client':
|
||||
optional: true
|
||||
'@tidbcloud/serverless':
|
||||
optional: true
|
||||
'@types/better-sqlite3':
|
||||
optional: true
|
||||
'@types/pg':
|
||||
optional: true
|
||||
'@types/sql.js':
|
||||
optional: true
|
||||
'@upstash/redis':
|
||||
optional: true
|
||||
'@vercel/postgres':
|
||||
optional: true
|
||||
'@xata.io/client':
|
||||
optional: true
|
||||
better-sqlite3:
|
||||
optional: true
|
||||
bun-types:
|
||||
optional: true
|
||||
expo-sqlite:
|
||||
optional: true
|
||||
gel:
|
||||
optional: true
|
||||
knex:
|
||||
optional: true
|
||||
kysely:
|
||||
optional: true
|
||||
mysql2:
|
||||
optional: true
|
||||
pg:
|
||||
optional: true
|
||||
postgres:
|
||||
optional: true
|
||||
prisma:
|
||||
optional: true
|
||||
sql.js:
|
||||
optional: true
|
||||
sqlite3:
|
||||
optional: true
|
||||
|
||||
drizzle-orm@0.45.2:
|
||||
resolution: {integrity: sha512-kY0BSaTNYWnoDMVoyY8uxmyHjpJW1geOmBMdSSicKo9CIIWkSxMIj2rkeSR51b8KAPB7m+qysjuHme5nKP+E5Q==}
|
||||
peerDependencies:
|
||||
@@ -9254,8 +9099,8 @@ packages:
|
||||
electron-to-chromium@1.5.334:
|
||||
resolution: {integrity: sha512-mgjZAz7Jyx1SRCwEpy9wefDS7GvNPazLthHg8eQMJ76wBdGQQDW33TCrUTvQ4wzpmOrv2zrFoD3oNufMdyMpog==}
|
||||
|
||||
electron@38.8.4:
|
||||
resolution: {integrity: sha512-vYZ2SH2OhzkCmkbRaijtZLIEJRMnLUL2KQmcAM/7kamf4++3AKSNCBjE1epmQnYFY1M4oKjOUcS3G02ayxR5Bw==}
|
||||
electron@38.8.6:
|
||||
resolution: {integrity: sha512-lyBhcVi9QYAZL6FO6r5twAWAjWnYomo3iVDvrb5SJZlq928BGemHOKG0tPIq41NOLaCu9f3XdEEjMkjQPjprRg==}
|
||||
engines: {node: '>= 12.20.55'}
|
||||
hasBin: true
|
||||
|
||||
@@ -12072,27 +11917,6 @@ packages:
|
||||
react: ^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc
|
||||
react-dom: ^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc
|
||||
|
||||
next@16.2.0:
|
||||
resolution: {integrity: sha512-NLBVrJy1pbV1Yn00L5sU4vFyAHt5XuSjzrNyFnxo6Com0M0KrL6hHM5B99dbqXb2bE9pm4Ow3Zl1xp6HVY9edQ==}
|
||||
engines: {node: '>=20.9.0'}
|
||||
hasBin: true
|
||||
peerDependencies:
|
||||
'@opentelemetry/api': ^1.1.0
|
||||
'@playwright/test': ^1.51.1
|
||||
babel-plugin-react-compiler: '*'
|
||||
react: ^18.2.0 || 19.0.0-rc-de68d2f4-20241204 || ^19.0.0
|
||||
react-dom: ^18.2.0 || 19.0.0-rc-de68d2f4-20241204 || ^19.0.0
|
||||
sass: ^1.3.0
|
||||
peerDependenciesMeta:
|
||||
'@opentelemetry/api':
|
||||
optional: true
|
||||
'@playwright/test':
|
||||
optional: true
|
||||
babel-plugin-react-compiler:
|
||||
optional: true
|
||||
sass:
|
||||
optional: true
|
||||
|
||||
next@16.2.3:
|
||||
resolution: {integrity: sha512-9V3zV4oZFza3PVev5/poB9g0dEafVcgNyQ8eTRop8GvxZjV2G15FC5ARuG1eFD42QgeYkzJBJzHghNP8Ad9xtA==}
|
||||
engines: {node: '>=20.9.0'}
|
||||
@@ -18484,55 +18308,29 @@ snapshots:
|
||||
'@netlify/runtime-utils@2.2.1':
|
||||
optional: true
|
||||
|
||||
'@next/env@16.2.0': {}
|
||||
|
||||
'@next/env@16.2.3': {}
|
||||
|
||||
'@next/swc-darwin-arm64@16.2.0':
|
||||
optional: true
|
||||
|
||||
'@next/swc-darwin-arm64@16.2.3':
|
||||
optional: true
|
||||
|
||||
'@next/swc-darwin-x64@16.2.0':
|
||||
optional: true
|
||||
|
||||
'@next/swc-darwin-x64@16.2.3':
|
||||
optional: true
|
||||
|
||||
'@next/swc-linux-arm64-gnu@16.2.0':
|
||||
optional: true
|
||||
|
||||
'@next/swc-linux-arm64-gnu@16.2.3':
|
||||
optional: true
|
||||
|
||||
'@next/swc-linux-arm64-musl@16.2.0':
|
||||
optional: true
|
||||
|
||||
'@next/swc-linux-arm64-musl@16.2.3':
|
||||
optional: true
|
||||
|
||||
'@next/swc-linux-x64-gnu@16.2.0':
|
||||
optional: true
|
||||
|
||||
'@next/swc-linux-x64-gnu@16.2.3':
|
||||
optional: true
|
||||
|
||||
'@next/swc-linux-x64-musl@16.2.0':
|
||||
optional: true
|
||||
|
||||
'@next/swc-linux-x64-musl@16.2.3':
|
||||
optional: true
|
||||
|
||||
'@next/swc-win32-arm64-msvc@16.2.0':
|
||||
optional: true
|
||||
|
||||
'@next/swc-win32-arm64-msvc@16.2.3':
|
||||
optional: true
|
||||
|
||||
'@next/swc-win32-x64-msvc@16.2.0':
|
||||
optional: true
|
||||
|
||||
'@next/swc-win32-x64-msvc@16.2.3':
|
||||
optional: true
|
||||
|
||||
@@ -21486,7 +21284,7 @@ snapshots:
|
||||
dependencies:
|
||||
'@types/http-cache-semantics': 4.2.0
|
||||
'@types/keyv': 3.1.4
|
||||
'@types/node': 25.5.0
|
||||
'@types/node': 25.6.0
|
||||
'@types/responselike': 1.0.3
|
||||
|
||||
'@types/chai@5.2.3':
|
||||
@@ -21652,7 +21450,7 @@ snapshots:
|
||||
|
||||
'@types/graceful-fs@4.1.9':
|
||||
dependencies:
|
||||
'@types/node': 25.5.0
|
||||
'@types/node': 25.6.0
|
||||
|
||||
'@types/hast@3.0.4':
|
||||
dependencies:
|
||||
@@ -21680,7 +21478,7 @@ snapshots:
|
||||
|
||||
'@types/keyv@3.1.4':
|
||||
dependencies:
|
||||
'@types/node': 25.5.0
|
||||
'@types/node': 25.6.0
|
||||
|
||||
'@types/mdast@4.0.4':
|
||||
dependencies:
|
||||
@@ -21751,7 +21549,7 @@ snapshots:
|
||||
|
||||
'@types/responselike@1.0.3':
|
||||
dependencies:
|
||||
'@types/node': 25.5.0
|
||||
'@types/node': 25.6.0
|
||||
|
||||
'@types/semver@7.7.1': {}
|
||||
|
||||
@@ -21800,7 +21598,7 @@ snapshots:
|
||||
|
||||
'@types/yauzl@2.10.3':
|
||||
dependencies:
|
||||
'@types/node': 25.5.0
|
||||
'@types/node': 25.6.0
|
||||
optional: true
|
||||
|
||||
'@typespec/ts-http-runtime@0.3.3':
|
||||
@@ -21847,7 +21645,7 @@ snapshots:
|
||||
optionalDependencies:
|
||||
'@remix-run/react': 2.17.2(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3)
|
||||
'@sveltejs/kit': 2.57.1(@opentelemetry/api@1.9.0)(@sveltejs/vite-plugin-svelte@6.2.1(svelte@5.53.5)(vite@7.3.2(@types/node@25.5.0)(jiti@2.6.1)(less@4.5.1)(lightningcss@1.32.0)(sass@1.97.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3)))(svelte@5.53.5)(typescript@5.9.3)(vite@7.3.2(@types/node@25.5.0)(jiti@2.6.1)(less@4.5.1)(lightningcss@1.32.0)(sass@1.97.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3))
|
||||
next: 16.2.3(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(sass@1.97.1)
|
||||
next: 16.2.3(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(sass@1.97.1)
|
||||
react: 19.2.4
|
||||
svelte: 5.53.5
|
||||
vue: 3.5.29(typescript@5.9.3)
|
||||
@@ -22561,8 +22359,6 @@ snapshots:
|
||||
|
||||
base64-js@1.5.1: {}
|
||||
|
||||
baseline-browser-mapping@2.10.0: {}
|
||||
|
||||
baseline-browser-mapping@2.10.17: {}
|
||||
|
||||
basic-auth@2.0.1:
|
||||
@@ -22853,8 +22649,6 @@ snapshots:
|
||||
|
||||
camelize@1.0.1: {}
|
||||
|
||||
caniuse-lite@1.0.30001774: {}
|
||||
|
||||
caniuse-lite@1.0.30001787: {}
|
||||
|
||||
ccount@2.0.1: {}
|
||||
@@ -22962,7 +22756,7 @@ snapshots:
|
||||
|
||||
chrome-launcher@0.15.2:
|
||||
dependencies:
|
||||
'@types/node': 25.5.0
|
||||
'@types/node': 25.6.0
|
||||
escape-string-regexp: 4.0.0
|
||||
is-wsl: 2.2.0
|
||||
lighthouse-logger: 1.4.2
|
||||
@@ -22971,7 +22765,7 @@ snapshots:
|
||||
|
||||
chromium-edge-launcher@0.2.0:
|
||||
dependencies:
|
||||
'@types/node': 25.5.0
|
||||
'@types/node': 25.6.0
|
||||
escape-string-regexp: 4.0.0
|
||||
is-wsl: 2.2.0
|
||||
lighthouse-logger: 1.4.2
|
||||
@@ -23814,25 +23608,6 @@ snapshots:
|
||||
transitivePeerDependencies:
|
||||
- supports-color
|
||||
|
||||
drizzle-orm@0.45.1(@cloudflare/workers-types@4.20260226.1)(@electric-sql/pglite@0.3.15)(@libsql/client@0.17.0(encoding@0.1.13))(@opentelemetry/api@1.9.0)(@prisma/client@7.4.1(prisma@7.4.1(@types/react@19.2.14)(better-sqlite3@12.6.2)(magicast@0.3.5)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3))(typescript@5.9.3))(@types/better-sqlite3@7.6.13)(@types/pg@8.16.0)(@upstash/redis@1.36.4)(better-sqlite3@12.6.2)(bun-types@1.3.9)(gel@2.2.0)(kysely@0.28.14)(mysql2@3.18.2(@types/node@25.6.0))(pg@8.19.0)(postgres@3.4.8)(prisma@7.4.1(@types/react@19.2.14)(better-sqlite3@12.6.2)(magicast@0.3.5)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3)):
|
||||
optionalDependencies:
|
||||
'@cloudflare/workers-types': 4.20260226.1
|
||||
'@electric-sql/pglite': 0.3.15
|
||||
'@libsql/client': 0.17.0(encoding@0.1.13)
|
||||
'@opentelemetry/api': 1.9.0
|
||||
'@prisma/client': 7.4.1(prisma@7.4.1(@types/react@19.2.14)(better-sqlite3@12.6.2)(magicast@0.3.5)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3))(typescript@5.9.3)
|
||||
'@types/better-sqlite3': 7.6.13
|
||||
'@types/pg': 8.16.0
|
||||
'@upstash/redis': 1.36.4
|
||||
better-sqlite3: 12.6.2
|
||||
bun-types: 1.3.9
|
||||
gel: 2.2.0
|
||||
kysely: 0.28.14
|
||||
mysql2: 3.18.2(@types/node@25.6.0)
|
||||
pg: 8.19.0
|
||||
postgres: 3.4.8
|
||||
prisma: 7.4.1(@types/react@19.2.14)(better-sqlite3@12.6.2)(magicast@0.3.5)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3)
|
||||
|
||||
drizzle-orm@0.45.2(@cloudflare/workers-types@4.20260226.1)(@electric-sql/pglite@0.3.15)(@libsql/client@0.17.0(encoding@0.1.13))(@opentelemetry/api@1.9.0)(@prisma/client@7.4.1(prisma@7.4.1(@types/react@19.2.14)(better-sqlite3@12.6.2)(magicast@0.3.5)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3))(typescript@5.9.3))(@types/better-sqlite3@7.6.13)(@types/pg@8.16.0)(@upstash/redis@1.36.4)(better-sqlite3@12.6.2)(bun-types@1.3.9)(gel@2.2.0)(kysely@0.28.14)(mysql2@3.18.2(@types/node@25.6.0))(pg@8.19.0)(postgres@3.4.8)(prisma@7.4.1(@types/react@19.2.14)(better-sqlite3@12.6.2)(magicast@0.3.5)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(typescript@5.9.3)):
|
||||
optionalDependencies:
|
||||
'@cloudflare/workers-types': 4.20260226.1
|
||||
@@ -23908,7 +23683,7 @@ snapshots:
|
||||
|
||||
electron-to-chromium@1.5.334: {}
|
||||
|
||||
electron@38.8.4:
|
||||
electron@38.8.6:
|
||||
dependencies:
|
||||
'@electron/get': 2.0.3
|
||||
'@types/node': 22.19.13
|
||||
@@ -24846,7 +24621,7 @@ snapshots:
|
||||
'@types/react': 19.2.14
|
||||
algoliasearch: 5.46.2
|
||||
lucide-react: 1.7.0(react@19.2.4)
|
||||
next: 16.2.3(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(sass@1.97.1)
|
||||
next: 16.2.3(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(sass@1.97.1)
|
||||
react: 19.2.4
|
||||
react-dom: 19.2.4(react@19.2.4)
|
||||
zod: 4.3.6
|
||||
@@ -24878,7 +24653,7 @@ snapshots:
|
||||
'@types/mdx': 2.0.13
|
||||
'@types/react': 19.2.14
|
||||
mdast-util-directive: 3.1.0
|
||||
next: 16.2.3(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(sass@1.97.1)
|
||||
next: 16.2.3(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(sass@1.97.1)
|
||||
react: 19.2.4
|
||||
vite: 7.3.2(@types/node@25.5.0)(jiti@2.6.1)(less@4.5.1)(lightningcss@1.32.0)(sass@1.97.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.3)
|
||||
transitivePeerDependencies:
|
||||
@@ -24936,7 +24711,7 @@ snapshots:
|
||||
optionalDependencies:
|
||||
'@types/mdx': 2.0.13
|
||||
'@types/react': 19.2.14
|
||||
next: 16.2.3(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(sass@1.97.1)
|
||||
next: 16.2.3(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(sass@1.97.1)
|
||||
shiki: 4.0.1
|
||||
transitivePeerDependencies:
|
||||
- '@emotion/is-prop-valid'
|
||||
@@ -24947,7 +24722,7 @@ snapshots:
|
||||
|
||||
geist@1.7.0(next@16.2.3(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(sass@1.97.1)):
|
||||
dependencies:
|
||||
next: 16.2.3(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(sass@1.97.1)
|
||||
next: 16.2.3(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(sass@1.97.1)
|
||||
|
||||
gel@2.2.0:
|
||||
dependencies:
|
||||
@@ -27708,35 +27483,7 @@ snapshots:
|
||||
react: 19.2.4
|
||||
react-dom: 19.2.4(react@19.2.4)
|
||||
|
||||
next@16.2.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(sass@1.97.1):
|
||||
dependencies:
|
||||
'@next/env': 16.2.0
|
||||
'@swc/helpers': 0.5.15
|
||||
baseline-browser-mapping: 2.10.0
|
||||
caniuse-lite: 1.0.30001774
|
||||
postcss: 8.4.31
|
||||
react: 19.2.4
|
||||
react-dom: 19.2.4(react@19.2.4)
|
||||
styled-jsx: 5.1.6(@babel/core@7.29.0)(react@19.2.4)
|
||||
optionalDependencies:
|
||||
'@next/swc-darwin-arm64': 16.2.0
|
||||
'@next/swc-darwin-x64': 16.2.0
|
||||
'@next/swc-linux-arm64-gnu': 16.2.0
|
||||
'@next/swc-linux-arm64-musl': 16.2.0
|
||||
'@next/swc-linux-x64-gnu': 16.2.0
|
||||
'@next/swc-linux-x64-musl': 16.2.0
|
||||
'@next/swc-win32-arm64-msvc': 16.2.0
|
||||
'@next/swc-win32-x64-msvc': 16.2.0
|
||||
'@opentelemetry/api': 1.9.0
|
||||
'@playwright/test': 1.58.2
|
||||
babel-plugin-react-compiler: 1.0.0
|
||||
sass: 1.97.1
|
||||
sharp: 0.34.5
|
||||
transitivePeerDependencies:
|
||||
- '@babel/core'
|
||||
- babel-plugin-macros
|
||||
|
||||
next@16.2.3(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(sass@1.97.1):
|
||||
next@16.2.3(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(sass@1.97.1):
|
||||
dependencies:
|
||||
'@next/env': 16.2.3
|
||||
'@swc/helpers': 0.5.15
|
||||
|
||||
Reference in New Issue
Block a user