From be781d5fd26aa4719f5f4fa3ebd767736d4883b1 Mon Sep 17 00:00:00 2001 From: "better-release[bot]" <273320539+better-release[bot]@users.noreply.github.com> Date: Thu, 15 Oct 2026 18:13:32 +0100 Subject: [PATCH] chore: release v1.8.0-beta.0 (#11825) --- .changeset/pre.json | 27 +++++++++- packages/api-key/CHANGELOG.md | 8 +++ packages/api-key/package.json | 2 +- packages/better-auth/CHANGELOG.md | 31 +++++++++++ packages/better-auth/package.json | 2 +- packages/ciba/CHANGELOG.md | 24 +++++++++ packages/ciba/package.json | 2 +- packages/cimd/CHANGELOG.md | 13 +++++ packages/cimd/package.json | 2 +- packages/cli/CHANGELOG.md | 9 ++++ packages/cli/package.json | 2 +- packages/core/CHANGELOG.md | 2 + packages/core/package.json | 2 +- packages/drizzle-adapter/CHANGELOG.md | 7 +++ packages/drizzle-adapter/package.json | 2 +- packages/electron/CHANGELOG.md | 8 +++ packages/electron/package.json | 2 +- packages/expo/CHANGELOG.md | 8 +++ packages/expo/package.json | 2 +- packages/i18n/CHANGELOG.md | 8 +++ packages/i18n/package.json | 2 +- packages/kysely-adapter/CHANGELOG.md | 7 +++ packages/kysely-adapter/package.json | 2 +- packages/mcp/CHANGELOG.md | 9 ++++ packages/mcp/package.json | 2 +- packages/memory-adapter/CHANGELOG.md | 7 +++ packages/memory-adapter/package.json | 2 +- packages/mongo-adapter/CHANGELOG.md | 7 +++ packages/mongo-adapter/package.json | 2 +- packages/oauth-provider/CHANGELOG.md | 77 +++++++++++++++++++++++++++ packages/oauth-provider/package.json | 2 +- packages/passkey/CHANGELOG.md | 8 +++ packages/passkey/package.json | 2 +- packages/prisma-adapter/CHANGELOG.md | 7 +++ packages/prisma-adapter/package.json | 2 +- packages/redis-storage/CHANGELOG.md | 7 +++ packages/redis-storage/package.json | 2 +- packages/scim/CHANGELOG.md | 8 +++ packages/scim/package.json | 2 +- packages/sso/CHANGELOG.md | 8 +++ packages/sso/package.json | 2 +- packages/stripe/CHANGELOG.md | 8 +++ packages/stripe/package.json | 2 +- packages/telemetry/CHANGELOG.md | 7 +++ packages/telemetry/package.json | 2 +- packages/test-utils/CHANGELOG.md | 8 +++ packages/test-utils/package.json | 2 +- 47 files changed, 334 insertions(+), 25 deletions(-) create mode 100644 packages/ciba/CHANGELOG.md diff --git a/.changeset/pre.json b/.changeset/pre.json index 8325ce5738..b63977ae9e 100644 --- a/.changeset/pre.json +++ b/.changeset/pre.json @@ -25,7 +25,30 @@ "@better-auth/sso": "1.7.10", "@better-auth/stripe": "1.7.10", "@better-auth/telemetry": "1.7.10", - "@better-auth/test-utils": "1.7.10" + "@better-auth/test-utils": "1.7.10", + "@better-auth/ciba": "1.7.9" }, - "changesets": [] + "changesets": [ + "after-commit-sign-up-side-effects", + "ciba-plugin", + "ciba-server-completion", + "cimd-extension-client-metadata", + "cimd-grant-intersection", + "device-authorization-consent-flow", + "device-authorization-decision-race", + "device-authorization-expired-polling", + "device-authorization-grant-seam", + "dpop-before-polled-claim", + "oauth-device-authentication-context", + "oauth-provider-authentication-context", + "oauth-provider-clear-logout-uris", + "oauth-provider-client-metadata-extension", + "oauth-provider-empty-scope-consent", + "oauth-provider-frontchannel-logout", + "oauth-provider-interaction-requests", + "oauth-revoke-introspect-token-lookup", + "oauth-token-exchange", + "oauth-token-request-params", + "pairwise-stored-sector" + ] } diff --git a/packages/api-key/CHANGELOG.md b/packages/api-key/CHANGELOG.md index 8cae69b47d..c922a4c12d 100644 --- a/packages/api-key/CHANGELOG.md +++ b/packages/api-key/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/api-key +## 1.8.0-beta.0 + +### Patch Changes + +- Updated dependencies [[`5fd850f`](https://github.com/better-auth/better-auth/commit/5fd850f926a9500219d14d13adc5cbd2436d105e), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1)]: + - better-auth@1.8.0-beta.0 + - @better-auth/core@1.8.0-beta.0 + ## 1.7.10 ## 1.7.9 diff --git a/packages/api-key/package.json b/packages/api-key/package.json index 42f9d60139..40a54fedb1 100644 --- a/packages/api-key/package.json +++ b/packages/api-key/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/api-key", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "API Key plugin for Better Auth.", "type": "module", "license": "MIT", diff --git a/packages/better-auth/CHANGELOG.md b/packages/better-auth/CHANGELOG.md index 7c1d9fd292..06f6e74926 100644 --- a/packages/better-auth/CHANGELOG.md +++ b/packages/better-auth/CHANGELOG.md @@ -1,5 +1,36 @@ # better-auth +## 1.8.0-beta.0 + +### Minor Changes + +- [#11751](https://github.com/better-auth/better-auth/pull/11751) [`5fd850f`](https://github.com/better-auth/better-auth/commit/5fd850f926a9500219d14d13adc5cbd2436d105e) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - On every database adapter, the verification email for an email sign-up, or for a new social or SSO account, is now sent only after the account is saved, and `onExistingUserSignUp` runs after the sign-up request's database work completes. A sign-up that rolls back, or that MongoDB runs again after a write conflict, no longer sends an extra email or an email for an account that doesn't exist. + + Check your setup for two changes: + - If `sendVerificationEmail` or `onExistingUserSignUp` throws during a sign-up, the sign-up now succeeds and the error is logged. Before, a callback that threw synchronously failed the sign-up and rolled it back. To reject a sign-up, use a `databaseHooks.user.create.before` hook. + - If a `databaseHooks` `user` or `account` `after` hook throws during a sign-up, the request still fails, but the verification email is no longer sent. The user can request a new one. + + With `secondaryStorage` and `session.storeSessionInDatabase: true`, social, SSO, one-tap and oauth-proxy sign-ins now cache their session after the commit, as email sign-up already did. A failed cache write is logged instead of failing the sign-in. This doesn't apply when `session.preserveSessionInDatabase` is `true`, where a failed cache write still fails the sign-in. + +- [#11772](https://github.com/better-auth/better-auth/pull/11772) [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - When the same device code is approved and denied at the same time, for example from two open approval pages, only the first decision now takes effect, and the other request fails with `invalid_request` and "Device code already processed". Previously, both requests reported success and the later one replaced the first, so a denied device could still receive tokens. + + The `/device/approve` error type no longer lists `device_code_already_processed`. The server never returned that code; an already decided code has always returned `invalid_request`. TypeScript code that compares against `device_code_already_processed` must check `invalid_request` instead. + +- [#11610](https://github.com/better-auth/better-auth/pull/11610) [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - If you wrote a custom `DeviceAuthorizationGrant`, rename `assertSessionRedemption` to `assertStandaloneUse`. It now also runs for `/device`, `/device/approve`, and `/device/deny`, and receives `use: "redeem"` or `use: "approve"`. `getVerificationContext`, `verificationOpenAPIProperties`, and the interface's second type parameter were removed, because `/device` no longer returns grant details. A grant that approves codes on its own pages can use the newly exported `findDeviceCodeByUserCode`, `assertDeviceCodePending`, `decideDeviceCode`, and `buildVerificationUris`. Apps that use `deviceAuthorization()` or `oauthDeviceAuthorization()` without a custom grant are unaffected. + +### Patch Changes + +- [#11772](https://github.com/better-auth/better-auth/pull/11772) [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - Device clients that poll `/device/token` or `/oauth2/token` too soon after their device code expires now receive `expired_token` right away. Previously they received `slow_down` and learned that the code had expired only on a later poll. + +- Updated dependencies []: + - @better-auth/core@1.8.0-beta.0 + - @better-auth/drizzle-adapter@1.8.0-beta.0 + - @better-auth/kysely-adapter@1.8.0-beta.0 + - @better-auth/memory-adapter@1.8.0-beta.0 + - @better-auth/mongo-adapter@1.8.0-beta.0 + - @better-auth/prisma-adapter@1.8.0-beta.0 + - @better-auth/telemetry@1.8.0-beta.0 + ## 1.7.10 ### Patch Changes diff --git a/packages/better-auth/package.json b/packages/better-auth/package.json index 24abfcd0a9..5f0edf86c1 100644 --- a/packages/better-auth/package.json +++ b/packages/better-auth/package.json @@ -1,6 +1,6 @@ { "name": "better-auth", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "The most comprehensive authentication framework for TypeScript.", "type": "module", "license": "MIT", diff --git a/packages/ciba/CHANGELOG.md b/packages/ciba/CHANGELOG.md new file mode 100644 index 0000000000..cfefbbf073 --- /dev/null +++ b/packages/ciba/CHANGELOG.md @@ -0,0 +1,24 @@ +# @better-auth/ciba + +## 1.8.0-beta.0 + +### Minor Changes + +- [#11785](https://github.com/better-auth/better-auth/pull/11785) [`25f7617`](https://github.com/better-auth/better-auth/commit/25f7617db6628059370da0280f1ce68fd2d92f1c) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - Add `@better-auth/ciba`, OpenID Connect Client-Initiated Backchannel Authentication (CIBA) for `oauthProvider()`. A client that knows who it is acting for, such as an AI agent or a support tool, asks for a user by `login_hint` at `/oauth2/bc-authorize`. Your `sendNotification` callback sends that user a link, the user approves or denies on your existing sign-in and consent pages, and the client collects tokens at `/oauth2/token`, either by polling or after the server calls it back (`deliveryModes: ["poll", "ping"]`). + + Consent is always shown, only the user the client named can decide, and your consent page receives the client's `binding_message` to display. Clients register `backchannel_token_delivery_mode`, and for ping `backchannel_client_notification_endpoint`, through dynamic registration, a client metadata document, or admin client creation, and registration rejects unsupported values. Public clients such as agents can take part with `allowPublicClients`; they send `client_id` in the form body and should bind their tokens with DPoP. `resolveUser` receives the requesting client, so with open registration you can accept only identifiers that client was already given. + + The plugin adds a `cibaRequest` table. Run `npx auth@latest migrate` with the built-in Kysely adapter, or run `npx auth@latest generate` and apply the schema with your ORM. + +- [#11812](https://github.com/better-auth/better-auth/pull/11812) [`0be0e23`](https://github.com/better-auth/better-auth/commit/0be0e23762756083c5ed858d6e85c895be3e810e) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - Let your own app collect a CIBA decision, such as a one-tap approval from a push notification, and record it with `auth.api.completeCibaRequest`. `sendNotification` now receives the `requestId` to pass back, together with the `userId` your app authenticated and the decision. The call refuses a decision for any user other than the one the client named, and approved scopes must stay within the request and include `openid`. You can also pass the `authTime`, `acr`, and `amr` your app established, and they are issued in the ID token. A ping client is called back as it is after a decision from the link. + +### Patch Changes + +- [#11826](https://github.com/better-auth/better-auth/pull/11826) [`296133c`](https://github.com/better-auth/better-auth/commit/296133cc414ac24283ed8e33501e2e4e501ab5e0) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - Device authorization and CIBA clients that poll the token endpoint with a missing or invalid DPoP proof now receive `invalid_dpop_proof` and can poll again with a valid proof. Previously the rejected poll used up the approved device code or CIBA request, so the user had to approve again. Clients that send valid proofs, or no proof when none is required, are unaffected. + + Extension grants that consume a one-time credential can call `provider.resolveConfirmation()` before the claim and pass its result to `issueTokens` as `confirmation` to get the same behavior. + +- Updated dependencies [[`5fd850f`](https://github.com/better-auth/better-auth/commit/5fd850f926a9500219d14d13adc5cbd2436d105e), [`94907fd`](https://github.com/better-auth/better-auth/commit/94907fd5ffc10ad8263b77b49dd7539f5fa72651), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1), [`296133c`](https://github.com/better-auth/better-auth/commit/296133cc414ac24283ed8e33501e2e4e501ab5e0), [`cd404a0`](https://github.com/better-auth/better-auth/commit/cd404a0b46abb929ccaea0129ecdff23fb074a8f), [`ed71a21`](https://github.com/better-auth/better-auth/commit/ed71a211e803f9f336ebfa83c4ef96610e621fd1), [`c750fc5`](https://github.com/better-auth/better-auth/commit/c750fc5ad2cccf42d3bc6de9820c510a8cdb2cd4), [`2417879`](https://github.com/better-auth/better-auth/commit/2417879cf6b2cb5c97ab679b83df0038760e045d), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1), [`c750fc5`](https://github.com/better-auth/better-auth/commit/c750fc5ad2cccf42d3bc6de9820c510a8cdb2cd4), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1), [`9f53222`](https://github.com/better-auth/better-auth/commit/9f532221bee7cd99a5c4e6593313dead87bf8f0d), [`c7c8331`](https://github.com/better-auth/better-auth/commit/c7c83314009540df912fb608b746fad3c02214ee), [`0d4609f`](https://github.com/better-auth/better-auth/commit/0d4609f4a904d919353acae7ef04d2e68ff1be15), [`6e5a88e`](https://github.com/better-auth/better-auth/commit/6e5a88e57b0b5253bc49797cede415ff27a82931)]: + - better-auth@1.8.0-beta.0 + - @better-auth/oauth-provider@1.8.0-beta.0 + - @better-auth/core@1.8.0-beta.0 diff --git a/packages/ciba/package.json b/packages/ciba/package.json index b12095318a..dfa607f706 100644 --- a/packages/ciba/package.json +++ b/packages/ciba/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/ciba", - "version": "1.7.9", + "version": "1.8.0-beta.0", "description": "Client-Initiated Backchannel Authentication (CIBA) plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/cimd/CHANGELOG.md b/packages/cimd/CHANGELOG.md index 2afe9bc663..dee4190656 100644 --- a/packages/cimd/CHANGELOG.md +++ b/packages/cimd/CHANGELOG.md @@ -1,5 +1,18 @@ # @better-auth/cimd +## 1.8.0-beta.0 + +### Minor Changes + +- [#11767](https://github.com/better-auth/better-auth/pull/11767) [`2417879`](https://github.com/better-auth/better-auth/commit/2417879cf6b2cb5c97ab679b83df0038760e045d) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - Metadata documents can now carry registration fields that an OAuth provider extension declares, such as CIBA's `backchannel_token_delivery_mode`. They are stored in the client's `metadata` and validated by the extension. A refresh replaces them, so a field removed from the document is removed from the client. Other unknown members are still ignored. Setups without such an extension are unaffected. + +### Patch Changes + +- Updated dependencies [[`5fd850f`](https://github.com/better-auth/better-auth/commit/5fd850f926a9500219d14d13adc5cbd2436d105e), [`94907fd`](https://github.com/better-auth/better-auth/commit/94907fd5ffc10ad8263b77b49dd7539f5fa72651), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1), [`296133c`](https://github.com/better-auth/better-auth/commit/296133cc414ac24283ed8e33501e2e4e501ab5e0), [`cd404a0`](https://github.com/better-auth/better-auth/commit/cd404a0b46abb929ccaea0129ecdff23fb074a8f), [`ed71a21`](https://github.com/better-auth/better-auth/commit/ed71a211e803f9f336ebfa83c4ef96610e621fd1), [`c750fc5`](https://github.com/better-auth/better-auth/commit/c750fc5ad2cccf42d3bc6de9820c510a8cdb2cd4), [`2417879`](https://github.com/better-auth/better-auth/commit/2417879cf6b2cb5c97ab679b83df0038760e045d), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1), [`c750fc5`](https://github.com/better-auth/better-auth/commit/c750fc5ad2cccf42d3bc6de9820c510a8cdb2cd4), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1), [`9f53222`](https://github.com/better-auth/better-auth/commit/9f532221bee7cd99a5c4e6593313dead87bf8f0d), [`c7c8331`](https://github.com/better-auth/better-auth/commit/c7c83314009540df912fb608b746fad3c02214ee), [`0d4609f`](https://github.com/better-auth/better-auth/commit/0d4609f4a904d919353acae7ef04d2e68ff1be15), [`6e5a88e`](https://github.com/better-auth/better-auth/commit/6e5a88e57b0b5253bc49797cede415ff27a82931)]: + - better-auth@1.8.0-beta.0 + - @better-auth/oauth-provider@1.8.0-beta.0 + - @better-auth/core@1.8.0-beta.0 + ## 1.7.10 ## 1.7.9 diff --git a/packages/cimd/package.json b/packages/cimd/package.json index 3ba3f3ac5d..f25a6f5505 100644 --- a/packages/cimd/package.json +++ b/packages/cimd/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/cimd", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "Client ID Metadata Document plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md index 3d59e27ec0..05f5de9277 100644 --- a/packages/cli/CHANGELOG.md +++ b/packages/cli/CHANGELOG.md @@ -1,5 +1,14 @@ # auth +## 1.8.0-beta.0 + +### Patch Changes + +- Updated dependencies [[`5fd850f`](https://github.com/better-auth/better-auth/commit/5fd850f926a9500219d14d13adc5cbd2436d105e), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1)]: + - better-auth@1.8.0-beta.0 + - @better-auth/core@1.8.0-beta.0 + - @better-auth/telemetry@1.8.0-beta.0 + ## 1.7.10 ### Patch Changes diff --git a/packages/cli/package.json b/packages/cli/package.json index d769f753ec..a44d4020f3 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -1,6 +1,6 @@ { "name": "auth", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "The CLI for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md index 63979de5ac..ec634d6e9e 100644 --- a/packages/core/CHANGELOG.md +++ b/packages/core/CHANGELOG.md @@ -1,5 +1,7 @@ # @better-auth/core +## 1.8.0-beta.0 + ## 1.7.10 ### Patch Changes diff --git a/packages/core/package.json b/packages/core/package.json index 901ce2a6b3..55409c05b2 100644 --- a/packages/core/package.json +++ b/packages/core/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/core", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "The most comprehensive authentication framework for TypeScript.", "type": "module", "license": "MIT", diff --git a/packages/drizzle-adapter/CHANGELOG.md b/packages/drizzle-adapter/CHANGELOG.md index 9c0fc6f06c..4ce2bd5c67 100644 --- a/packages/drizzle-adapter/CHANGELOG.md +++ b/packages/drizzle-adapter/CHANGELOG.md @@ -1,5 +1,12 @@ # @better-auth/drizzle-adapter +## 1.8.0-beta.0 + +### Patch Changes + +- Updated dependencies []: + - @better-auth/core@1.8.0-beta.0 + ## 1.7.10 ## 1.7.9 diff --git a/packages/drizzle-adapter/package.json b/packages/drizzle-adapter/package.json index a86154bbc7..12720a1f70 100644 --- a/packages/drizzle-adapter/package.json +++ b/packages/drizzle-adapter/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/drizzle-adapter", - "version": "1.7.10", + "version": "1.8.0-beta.0", "bugs": { "url": "https://github.com/better-auth/better-auth/issues" }, diff --git a/packages/electron/CHANGELOG.md b/packages/electron/CHANGELOG.md index 52a2367854..bb1567c85c 100644 --- a/packages/electron/CHANGELOG.md +++ b/packages/electron/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/electron +## 1.8.0-beta.0 + +### Patch Changes + +- Updated dependencies [[`5fd850f`](https://github.com/better-auth/better-auth/commit/5fd850f926a9500219d14d13adc5cbd2436d105e), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1)]: + - better-auth@1.8.0-beta.0 + - @better-auth/core@1.8.0-beta.0 + ## 1.7.10 ## 1.7.9 diff --git a/packages/electron/package.json b/packages/electron/package.json index d3a0b432ed..d5c7902056 100644 --- a/packages/electron/package.json +++ b/packages/electron/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/electron", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "Better Auth integration for Electron applications.", "type": "module", "license": "MIT", diff --git a/packages/expo/CHANGELOG.md b/packages/expo/CHANGELOG.md index e0f5a291ee..95944de51c 100644 --- a/packages/expo/CHANGELOG.md +++ b/packages/expo/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/expo +## 1.8.0-beta.0 + +### Patch Changes + +- Updated dependencies [[`5fd850f`](https://github.com/better-auth/better-auth/commit/5fd850f926a9500219d14d13adc5cbd2436d105e), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1)]: + - better-auth@1.8.0-beta.0 + - @better-auth/core@1.8.0-beta.0 + ## 1.7.10 ## 1.7.9 diff --git a/packages/expo/package.json b/packages/expo/package.json index 3be16ed18e..fda89f448a 100644 --- a/packages/expo/package.json +++ b/packages/expo/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/expo", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "Better Auth integration for Expo and React Native applications.", "type": "module", "license": "MIT", diff --git a/packages/i18n/CHANGELOG.md b/packages/i18n/CHANGELOG.md index 6ed4f0d410..4e28c982eb 100644 --- a/packages/i18n/CHANGELOG.md +++ b/packages/i18n/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/i18n +## 1.8.0-beta.0 + +### Patch Changes + +- Updated dependencies [[`5fd850f`](https://github.com/better-auth/better-auth/commit/5fd850f926a9500219d14d13adc5cbd2436d105e), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1)]: + - better-auth@1.8.0-beta.0 + - @better-auth/core@1.8.0-beta.0 + ## 1.7.10 ## 1.7.9 diff --git a/packages/i18n/package.json b/packages/i18n/package.json index c5e71d23ca..a3826a35df 100644 --- a/packages/i18n/package.json +++ b/packages/i18n/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/i18n", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "i18n plugin for Better Auth - translate error messages", "type": "module", "license": "MIT", diff --git a/packages/kysely-adapter/CHANGELOG.md b/packages/kysely-adapter/CHANGELOG.md index 593ba759c9..38efd9dbc5 100644 --- a/packages/kysely-adapter/CHANGELOG.md +++ b/packages/kysely-adapter/CHANGELOG.md @@ -1,5 +1,12 @@ # @better-auth/kysely-adapter +## 1.8.0-beta.0 + +### Patch Changes + +- Updated dependencies []: + - @better-auth/core@1.8.0-beta.0 + ## 1.7.10 ## 1.7.9 diff --git a/packages/kysely-adapter/package.json b/packages/kysely-adapter/package.json index 86465d85f4..8639b8fa13 100644 --- a/packages/kysely-adapter/package.json +++ b/packages/kysely-adapter/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/kysely-adapter", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "Kysely adapter for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/mcp/CHANGELOG.md b/packages/mcp/CHANGELOG.md index e2c065d92d..f0154c2dc1 100644 --- a/packages/mcp/CHANGELOG.md +++ b/packages/mcp/CHANGELOG.md @@ -1,5 +1,14 @@ # @better-auth/mcp +## 1.8.0-beta.0 + +### Patch Changes + +- Updated dependencies [[`5fd850f`](https://github.com/better-auth/better-auth/commit/5fd850f926a9500219d14d13adc5cbd2436d105e), [`94907fd`](https://github.com/better-auth/better-auth/commit/94907fd5ffc10ad8263b77b49dd7539f5fa72651), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1), [`296133c`](https://github.com/better-auth/better-auth/commit/296133cc414ac24283ed8e33501e2e4e501ab5e0), [`cd404a0`](https://github.com/better-auth/better-auth/commit/cd404a0b46abb929ccaea0129ecdff23fb074a8f), [`ed71a21`](https://github.com/better-auth/better-auth/commit/ed71a211e803f9f336ebfa83c4ef96610e621fd1), [`c750fc5`](https://github.com/better-auth/better-auth/commit/c750fc5ad2cccf42d3bc6de9820c510a8cdb2cd4), [`2417879`](https://github.com/better-auth/better-auth/commit/2417879cf6b2cb5c97ab679b83df0038760e045d), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1), [`c750fc5`](https://github.com/better-auth/better-auth/commit/c750fc5ad2cccf42d3bc6de9820c510a8cdb2cd4), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1), [`9f53222`](https://github.com/better-auth/better-auth/commit/9f532221bee7cd99a5c4e6593313dead87bf8f0d), [`c7c8331`](https://github.com/better-auth/better-auth/commit/c7c83314009540df912fb608b746fad3c02214ee), [`0d4609f`](https://github.com/better-auth/better-auth/commit/0d4609f4a904d919353acae7ef04d2e68ff1be15), [`6e5a88e`](https://github.com/better-auth/better-auth/commit/6e5a88e57b0b5253bc49797cede415ff27a82931)]: + - better-auth@1.8.0-beta.0 + - @better-auth/oauth-provider@1.8.0-beta.0 + - @better-auth/core@1.8.0-beta.0 + ## 1.7.10 ### Patch Changes diff --git a/packages/mcp/package.json b/packages/mcp/package.json index 52327e5534..311eaa6d6b 100644 --- a/packages/mcp/package.json +++ b/packages/mcp/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/mcp", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "Model Context Protocol (MCP) plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/memory-adapter/CHANGELOG.md b/packages/memory-adapter/CHANGELOG.md index d9f101938a..b9b2d2828b 100644 --- a/packages/memory-adapter/CHANGELOG.md +++ b/packages/memory-adapter/CHANGELOG.md @@ -1,5 +1,12 @@ # @better-auth/memory-adapter +## 1.8.0-beta.0 + +### Patch Changes + +- Updated dependencies []: + - @better-auth/core@1.8.0-beta.0 + ## 1.7.10 ## 1.7.9 diff --git a/packages/memory-adapter/package.json b/packages/memory-adapter/package.json index 378ee80eb4..ecc3129387 100644 --- a/packages/memory-adapter/package.json +++ b/packages/memory-adapter/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/memory-adapter", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "Memory adapter for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/mongo-adapter/CHANGELOG.md b/packages/mongo-adapter/CHANGELOG.md index ef701fa5df..393c4acbfd 100644 --- a/packages/mongo-adapter/CHANGELOG.md +++ b/packages/mongo-adapter/CHANGELOG.md @@ -1,5 +1,12 @@ # @better-auth/mongo-adapter +## 1.8.0-beta.0 + +### Patch Changes + +- Updated dependencies []: + - @better-auth/core@1.8.0-beta.0 + ## 1.7.10 ### Patch Changes diff --git a/packages/mongo-adapter/package.json b/packages/mongo-adapter/package.json index 9931e200e6..29c6a866a9 100644 --- a/packages/mongo-adapter/package.json +++ b/packages/mongo-adapter/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/mongo-adapter", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "Mongo adapter for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/oauth-provider/CHANGELOG.md b/packages/oauth-provider/CHANGELOG.md index 4f7be8b4b7..0643c203ce 100644 --- a/packages/oauth-provider/CHANGELOG.md +++ b/packages/oauth-provider/CHANGELOG.md @@ -1,5 +1,82 @@ # @better-auth/oauth-provider +## 1.8.0-beta.0 + +### Minor Changes + +- [#11610](https://github.com/better-auth/better-auth/pull/11610) [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - If you use `oauthDeviceAuthorization()`, users now approve OAuth device codes on the provider's sign-in, account selection, post-login, and consent pages, the same as an authorization request. Your device verification page sends the browser to `/oauth2/authorize?user_code=`. The consent page always opens for a device and receives `user_code` to display, and afterwards the user returns to your verification page with `status=approved` or `status=denied`, or with `error` and `error_description` when the code is unknown, expired, or already used. Device tokens and their refreshes now carry the `referenceId` from `postLogin.consentReferenceId` and the user's authentication time, and each approval records a consent. + + Previously, approval pages called `/device/approve` or `/device/deny` directly, which skipped post-login selection and consent. Those endpoints and `/device` now refuse OAuth device codes with `invalid_request` and name the URL to use, so update your approval page before upgrading. Standalone `deviceAuthorization()` setups are unaffected. + + `oauthDeviceAuthorization()` adds optional `referenceId` and `authTime` columns to the `deviceCode` table. Apply them before deploying: run `npx auth@latest migrate` with the built-in Kysely adapter, or run `npx auth@latest generate` and apply the schema with your ORM. + +- [#11826](https://github.com/better-auth/better-auth/pull/11826) [`296133c`](https://github.com/better-auth/better-auth/commit/296133cc414ac24283ed8e33501e2e4e501ab5e0) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - Device authorization and CIBA clients that poll the token endpoint with a missing or invalid DPoP proof now receive `invalid_dpop_proof` and can poll again with a valid proof. Previously the rejected poll used up the approved device code or CIBA request, so the user had to approve again. Clients that send valid proofs, or no proof when none is required, are unaffected. + + Extension grants that consume a one-time credential can call `provider.resolveConfirmation()` before the claim and pass its result to `issueTokens` as `confirmation` to get the same behavior. + +- [#11788](https://github.com/better-auth/better-auth/pull/11788) [`cd404a0`](https://github.com/better-auth/better-auth/commit/cd404a0b46abb929ccaea0129ecdff23fb074a8f) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - With `oauthDeviceAuthorization()` and an `authenticationContext` resolver, ID tokens from the device code grant now carry the `acr` and `amr` that `resolve` returns when the user approves the device code, and refreshed ID tokens keep them. Previously device-issued ID tokens always reported `acr: "0"` and no `amr`. Setups without `oauthDeviceAuthorization()` are unaffected. + + This adds optional `acr` and `amr` columns to the `deviceCode` table when `oauthDeviceAuthorization()` is enabled. Apply them before deploying: run `npx auth@latest migrate` with the built-in Kysely adapter, or run `npx auth@latest generate` and apply the schema with your ORM. + +- [#11787](https://github.com/better-auth/better-auth/pull/11787) [`ed71a21`](https://github.com/better-auth/better-auth/commit/ed71a211e803f9f336ebfa83c4ef96610e621fd1) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - `oauthProvider()` accepts a new `authenticationContext` option that sets the `acr` and `amr` claims in ID tokens. List the classes you issue in `acrValuesSupported`, which discovery advertises as `acr_values_supported`, and return the current session's `acr` and `amr` from `resolve`. Previously every ID token carried `acr: "0"` and no `amr`, and that is still the default. + + With a resolver, a request whose essential `claims.id_token.acr` the session does not satisfy fails with `access_denied`. A voluntary request through `acr_values` continues and the ID token reports the session's current `acr`. A resolver that returns an `acr` outside `acrValuesSupported`, or an `amr` that is not a string array, fails the authorization with `server_error`. ID tokens from refreshed tokens keep the `acr` and `amr` of the original authorization. + + This release adds optional `acr` and `amr` columns to the `oauthRefreshToken` table, which every `oauthProvider()` setup needs. Apply them before deploying: run `npx auth@latest migrate` with the built-in Kysely adapter, or run `npx auth@latest generate` and apply the schema with your ORM. + +- [#11767](https://github.com/better-auth/better-auth/pull/11767) [`2417879`](https://github.com/better-auth/better-auth/commit/2417879cf6b2cb5c97ab679b83df0038760e045d) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - Plugins that extend `oauthProvider()` with `extendOAuthProvider()` can now define their own client registration fields with `clientMetadata`. A client with invalid values for those fields is rejected with `invalid_client_metadata` when it registers through `/oauth2/register` or a client metadata document, or when an admin creates or updates it, instead of when it first uses them. + + Dynamic registration and client metadata documents now accept the fields an extension declares as top-level fields and store them in the client's `metadata`. They still ignore all other unrecognized fields. Registration in setups without such an extension is unchanged. + + Updating a client with an empty `metadata` object now clears its stored metadata. Previously the update left the old metadata in place. + +- [#9923](https://github.com/better-auth/better-auth/pull/9923) [`c750fc5`](https://github.com/better-auth/better-auth/commit/c750fc5ad2cccf42d3bc6de9820c510a8cdb2cd4) Thanks [@shiminshen](https://github.com/shiminshen)! - OAuth providers can now notify relying parties through the browser with OpenID Connect Front-Channel Logout 1.0. Register a `frontchannel_logout_uri` on a client, using the scheme, host, and port of one of its `redirect_uris`. When a user logs out through `/oauth2/end-session` in the browser, the provider loads that URI in a hidden iframe with `iss` and `sid`, then continues to the verified `post_logout_redirect_uri`. Clients with this URI also receive `sid` in their ID tokens. + + Front-channel logout is reliable only when the provider and its relying parties share a registrable domain, because browsers block or partition third-party cookies. Use back-channel logout for relying parties on other sites. Providers with no front-channel clients see no change. + + Run `npx auth@latest migrate`, or `npx auth@latest generate` if you manage the schema yourself, to add the `frontchannelLogoutUri` and `frontchannelLogoutSessionRequired` columns to `oauthClient`. + +- [#11610](https://github.com/better-auth/better-auth/pull/11610) [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - Plugins that extend OAuth Provider through `extendOAuthProvider()` can register `interactionRequests`: requests other than an authorization request, keyed by a query parameter, that users approve on the provider's sign-in, account selection, post-login, and consent pages. The provider resumes them through `/oauth2/authorize`, can require consent on every approval, and sends errors to a page the request names. `oauthDeviceAuthorization()` uses one keyed by `user_code`. + +- [#11796](https://github.com/better-auth/better-auth/pull/11796) [`9f53222`](https://github.com/better-auth/better-auth/commit/9f532221bee7cd99a5c4e6593313dead87bf8f0d) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - `/oauth2/revoke` and `/oauth2/introspect` now follow RFC 7009 and RFC 7662 when they look up the presented token. Check your clients and tests for these changes: + - `/oauth2/revoke` returns `200` for an unknown or already revoked token. Before, it returned `400 invalid_request`, including for a second revoke of the same refresh token and for a revoke that raced a refresh. + - A token sent with the wrong `token_type_hint` is found. Before, `/oauth2/revoke` returned `400` and left the token active, and `/oauth2/introspect` reported `{ "active": false }` for a valid token. + - Revoking a token issued to a different client returns `400 invalid_request` when the caller is a confidential client. Before, it returned `200` without revoking anything, or `400 unsupported_token_type` for a JWT access token. A public client gets `200`, and the token stays valid. + - A JWT-shaped token that fails verification (for example `alg: none`, a forged signature, or an unknown `kid`) is treated as an invalid token: `200` from revoke, `{ "active": false }` from introspect, and `401 invalid_token` from userinfo. Before, all three returned `500`. + - At `/oauth2/token`, a refresh token without the configured `prefix.refreshToken` now gets `400 invalid_grant`, like any other unknown refresh token. Before, it got `400 invalid_token`. + - An async `formatRefreshToken.encrypt`, such as the JWE example in the docs, now works. Before, the issued refresh token was the string `[object Promise]`. + - In an extension grant handler, `provider.validateAccessToken` returns `{ active: false }` for an unknown token instead of throwing. `provider.requireActiveAccessToken` still throws. + + A valid JWT access token still returns `400 unsupported_token_type` from revoke, and failed client authentication still returns `401`. + +- [#11763](https://github.com/better-auth/better-auth/pull/11763) [`c7c8331`](https://github.com/better-auth/better-auth/commit/c7c83314009540df912fb608b746fad3c02214ee) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - If you set a `reference_id` claim on access tokens yourself, through `customAccessTokenClaims`, an extension, or a resource's `customClaims`, it is now dropped with a warning, because the provider sets this claim itself. Rename your claim to keep sending it. When `postLogin.consentReferenceId` returns a consent reference, such as an organization, JWT access tokens now include it as `reference_id`, and introspection returns it. Setups that use neither see no change to their tokens. + + Services that receive a user's access token, such as an MCP server or a backend for frontend, can now exchange it for an access token to another registered API with OAuth 2.0 Token Exchange (RFC 8693), instead of forwarding the user's token. Add `oauthTokenExchange()` next to `oauthProvider()` and register the service as a confidential client with the `TOKEN_EXCHANGE_GRANT_TYPE` grant. The exchanged token represents the same user and keeps the consent reference, such as the organization, the user approved. It is limited to the subject token's scopes and never outlives the subject token. Delegation (`actor_token`) and refresh tokens for exchanged tokens are not supported yet. + + Extension authors can pass `maxExpiresAt` to `issueTokens` to cap when the access token expires. + +- [#11746](https://github.com/better-auth/better-auth/pull/11746) [`0d4609f`](https://github.com/better-auth/better-auth/commit/0d4609f4a904d919353acae7ef04d2e68ff1be15) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - The `/oauth2/token`, `/oauth2/introspect`, and `/oauth2/revoke` endpoints now reject form parameters sent more than once with `400 invalid_request`, and the description names the parameter. For example, `code=a&code=b` at the token endpoint, for any grant type, returns "code must not be repeated", and `token=a&token=b` at introspection returns "token must not be repeated". Before, these endpoints used the last value, so the token endpoint could issue tokens and introspection or revocation acted on a token other than the first one sent. At the token endpoint, `resource` and `audience` may still repeat, and extension grants now receive every `audience` value instead of only the last one. A parameter sent without a value counts as omitted wherever it appears, so `scope=read&scope=` is the same as `scope=read`. Clients that send each parameter once and never send an empty value are unaffected. + + A malformed `resource` at the token endpoint, such as one with a fragment or a relative URI, now returns `invalid_target` instead of `invalid_request`. If your client matches on the error code for these requests, update it. An empty `resource` is now treated as omitted, as RFC 6749 ยง3.2 requires; before, `resource=` returned `invalid_request`. + + Token, introspection, registration, and end-session requests rejected by schema validation, such as a missing `grant_type`, now carry `Cache-Control: no-store`, like every other response from those endpoints. + +- [#11650](https://github.com/better-auth/better-auth/pull/11650) [`6e5a88e`](https://github.com/better-auth/better-auth/commit/6e5a88e57b0b5253bc49797cede415ff27a82931) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - Pairwise clients with authority-free private-use redirect URIs, such as `com.example.app:/callback`, or loopback redirect URIs, such as `http://localhost:8787/callback`, now each receive a `sub` of their own. Previously, unrelated clients of either kind could receive the same pairwise `sub`. HTTPS clients on the same host still share a `sub`. + + This adds a `sectorIdentifier` column to the `oauthClient` table. Run `npx auth@latest migrate`, or `npx auth@latest generate` for your ORM, before upgrading. Existing clients keep their current `sub`; the new rule applies to clients created after the upgrade. + +### Patch Changes + +- [#10731](https://github.com/better-auth/better-auth/pull/10731) [`94907fd`](https://github.com/better-auth/better-auth/commit/94907fd5ffc10ad8263b77b49dd7539f5fa72651) Thanks [@erikpr1994](https://github.com/erikpr1994)! - Client ID Metadata Document clients that declare a grant the server does not offer (such as Claude's enterprise `jwt-bearer` grant) can now register. Only documents sharing no grant with the server are refused. + +- [#9923](https://github.com/better-auth/better-auth/pull/9923) [`c750fc5`](https://github.com/better-auth/better-auth/commit/c750fc5ad2cccf42d3bc6de9820c510a8cdb2cd4) Thanks [@shiminshen](https://github.com/shiminshen)! - OAuth client updates can now remove a logout URI. Sending `backchannel_logout_uri: null` or `frontchannel_logout_uri: null` to `/oauth2/update-client` or `adminUpdateOAuthClient` clears the URI and its `*_session_required` flag, and the client stops receiving those logout notifications. Before, `null` was rejected and a registered logout URI could only be replaced. + +- [#11610](https://github.com/better-auth/better-auth/pull/11610) [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - An authorization request with an empty `scope` parameter no longer stores a consent for a scope named `""`. The consent endpoint now ignores empty entries in both the requested and the accepted scopes. + +- Updated dependencies [[`5fd850f`](https://github.com/better-auth/better-auth/commit/5fd850f926a9500219d14d13adc5cbd2436d105e), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1)]: + - better-auth@1.8.0-beta.0 + - @better-auth/core@1.8.0-beta.0 + ## 1.7.10 ### Patch Changes diff --git a/packages/oauth-provider/package.json b/packages/oauth-provider/package.json index 3f7e844831..be2ae4fdd5 100644 --- a/packages/oauth-provider/package.json +++ b/packages/oauth-provider/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/oauth-provider", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "An oauth provider plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/passkey/CHANGELOG.md b/packages/passkey/CHANGELOG.md index 0b6c21ebf1..9e8afe0e89 100644 --- a/packages/passkey/CHANGELOG.md +++ b/packages/passkey/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/passkey +## 1.8.0-beta.0 + +### Patch Changes + +- Updated dependencies [[`5fd850f`](https://github.com/better-auth/better-auth/commit/5fd850f926a9500219d14d13adc5cbd2436d105e), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1)]: + - better-auth@1.8.0-beta.0 + - @better-auth/core@1.8.0-beta.0 + ## 1.7.10 ## 1.7.9 diff --git a/packages/passkey/package.json b/packages/passkey/package.json index 8859a3eac5..26bcc3e71b 100644 --- a/packages/passkey/package.json +++ b/packages/passkey/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/passkey", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "Passkey plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/prisma-adapter/CHANGELOG.md b/packages/prisma-adapter/CHANGELOG.md index b64998bbf2..58963b0dbc 100644 --- a/packages/prisma-adapter/CHANGELOG.md +++ b/packages/prisma-adapter/CHANGELOG.md @@ -1,5 +1,12 @@ # @better-auth/prisma-adapter +## 1.8.0-beta.0 + +### Patch Changes + +- Updated dependencies []: + - @better-auth/core@1.8.0-beta.0 + ## 1.7.10 ## 1.7.9 diff --git a/packages/prisma-adapter/package.json b/packages/prisma-adapter/package.json index 5b93fe5614..033b12765e 100644 --- a/packages/prisma-adapter/package.json +++ b/packages/prisma-adapter/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/prisma-adapter", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "Prisma adapter for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/redis-storage/CHANGELOG.md b/packages/redis-storage/CHANGELOG.md index b26dcff8b0..a6ed8f676b 100644 --- a/packages/redis-storage/CHANGELOG.md +++ b/packages/redis-storage/CHANGELOG.md @@ -1,5 +1,12 @@ # @better-auth/redis-storage +## 1.8.0-beta.0 + +### Patch Changes + +- Updated dependencies []: + - @better-auth/core@1.8.0-beta.0 + ## 1.7.10 ## 1.7.9 diff --git a/packages/redis-storage/package.json b/packages/redis-storage/package.json index ac20a01acb..72a704d236 100644 --- a/packages/redis-storage/package.json +++ b/packages/redis-storage/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/redis-storage", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "Redis storage for Better Auth secondary storage", "type": "module", "license": "MIT", diff --git a/packages/scim/CHANGELOG.md b/packages/scim/CHANGELOG.md index a36badc975..ec0ba2ff98 100644 --- a/packages/scim/CHANGELOG.md +++ b/packages/scim/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/scim +## 1.8.0-beta.0 + +### Patch Changes + +- Updated dependencies [[`5fd850f`](https://github.com/better-auth/better-auth/commit/5fd850f926a9500219d14d13adc5cbd2436d105e), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1)]: + - better-auth@1.8.0-beta.0 + - @better-auth/core@1.8.0-beta.0 + ## 1.7.10 ## 1.7.9 diff --git a/packages/scim/package.json b/packages/scim/package.json index a5623c3079..87ab35840c 100644 --- a/packages/scim/package.json +++ b/packages/scim/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/scim", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "SCIM plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/sso/CHANGELOG.md b/packages/sso/CHANGELOG.md index ddbc93db77..09600ae446 100644 --- a/packages/sso/CHANGELOG.md +++ b/packages/sso/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/sso +## 1.8.0-beta.0 + +### Patch Changes + +- Updated dependencies [[`5fd850f`](https://github.com/better-auth/better-auth/commit/5fd850f926a9500219d14d13adc5cbd2436d105e), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1)]: + - better-auth@1.8.0-beta.0 + - @better-auth/core@1.8.0-beta.0 + ## 1.7.10 ## 1.7.9 diff --git a/packages/sso/package.json b/packages/sso/package.json index b8758bbdc8..f1b7f098b6 100644 --- a/packages/sso/package.json +++ b/packages/sso/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/sso", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "SSO plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/stripe/CHANGELOG.md b/packages/stripe/CHANGELOG.md index c19eec0f70..6f7e7c221d 100644 --- a/packages/stripe/CHANGELOG.md +++ b/packages/stripe/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/stripe +## 1.8.0-beta.0 + +### Patch Changes + +- Updated dependencies [[`5fd850f`](https://github.com/better-auth/better-auth/commit/5fd850f926a9500219d14d13adc5cbd2436d105e), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1)]: + - better-auth@1.8.0-beta.0 + - @better-auth/core@1.8.0-beta.0 + ## 1.7.10 ## 1.7.9 diff --git a/packages/stripe/package.json b/packages/stripe/package.json index 9ca7eb9b24..375b09fd28 100644 --- a/packages/stripe/package.json +++ b/packages/stripe/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/stripe", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "Stripe plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/telemetry/CHANGELOG.md b/packages/telemetry/CHANGELOG.md index 07ac055a61..008787447b 100644 --- a/packages/telemetry/CHANGELOG.md +++ b/packages/telemetry/CHANGELOG.md @@ -1,5 +1,12 @@ # @better-auth/telemetry +## 1.8.0-beta.0 + +### Patch Changes + +- Updated dependencies []: + - @better-auth/core@1.8.0-beta.0 + ## 1.7.10 ## 1.7.9 diff --git a/packages/telemetry/package.json b/packages/telemetry/package.json index 29febea507..7b87ac4529 100644 --- a/packages/telemetry/package.json +++ b/packages/telemetry/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/telemetry", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "Telemetry package for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/test-utils/CHANGELOG.md b/packages/test-utils/CHANGELOG.md index a101ee8230..d9fb43fb4d 100644 --- a/packages/test-utils/CHANGELOG.md +++ b/packages/test-utils/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/test-utils +## 1.8.0-beta.0 + +### Patch Changes + +- Updated dependencies [[`5fd850f`](https://github.com/better-auth/better-auth/commit/5fd850f926a9500219d14d13adc5cbd2436d105e), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`ec0afde`](https://github.com/better-auth/better-auth/commit/ec0afdef5aa6d0dfb93b14357ae470977e28ecdf), [`034da07`](https://github.com/better-auth/better-auth/commit/034da07dbe92a0ce0ef735f2f31baff756cc25d1)]: + - better-auth@1.8.0-beta.0 + - @better-auth/core@1.8.0-beta.0 + ## 1.7.10 ## 1.7.9 diff --git a/packages/test-utils/package.json b/packages/test-utils/package.json index e334faf5d7..41d7caee94 100644 --- a/packages/test-utils/package.json +++ b/packages/test-utils/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/test-utils", - "version": "1.7.10", + "version": "1.8.0-beta.0", "description": "Testing utilities for Better Auth adapter development", "type": "module", "license": "MIT",