From d3bde2d21f57d7dc37164b7b43f5c2c571ebd3f3 Mon Sep 17 00:00:00 2001 From: "better-release[bot]" <273320539+better-release[bot]@users.noreply.github.com> Date: Wed, 22 Apr 2026 17:23:06 +0100 Subject: [PATCH] chore: release v1.7.0-beta.2 (#9207) --- .changeset/pre.json | 5 +++++ packages/api-key/CHANGELOG.md | 8 ++++++++ packages/api-key/package.json | 2 +- packages/better-auth/CHANGELOG.md | 29 +++++++++++++++++++++++++++ packages/better-auth/package.json | 2 +- packages/cimd/CHANGELOG.md | 10 +++++++++ packages/cimd/package.json | 2 +- packages/cli/CHANGELOG.md | 9 +++++++++ packages/cli/package.json | 2 +- packages/core/CHANGELOG.md | 2 ++ packages/core/package.json | 2 +- packages/drizzle-adapter/CHANGELOG.md | 11 ++++++++++ packages/drizzle-adapter/package.json | 2 +- packages/electron/CHANGELOG.md | 8 ++++++++ packages/electron/package.json | 2 +- packages/expo/CHANGELOG.md | 8 ++++++++ packages/expo/package.json | 2 +- packages/i18n/CHANGELOG.md | 8 ++++++++ packages/i18n/package.json | 2 +- packages/kysely-adapter/CHANGELOG.md | 11 ++++++++++ packages/kysely-adapter/package.json | 2 +- packages/memory-adapter/CHANGELOG.md | 7 +++++++ packages/memory-adapter/package.json | 2 +- packages/mongo-adapter/CHANGELOG.md | 7 +++++++ packages/mongo-adapter/package.json | 2 +- packages/oauth-provider/CHANGELOG.md | 23 +++++++++++++++++++++ packages/oauth-provider/package.json | 2 +- packages/passkey/CHANGELOG.md | 8 ++++++++ packages/passkey/package.json | 2 +- packages/prisma-adapter/CHANGELOG.md | 7 +++++++ packages/prisma-adapter/package.json | 2 +- packages/redis-storage/CHANGELOG.md | 7 +++++++ packages/redis-storage/package.json | 2 +- packages/scim/CHANGELOG.md | 8 ++++++++ packages/scim/package.json | 2 +- packages/sso/CHANGELOG.md | 8 ++++++++ packages/sso/package.json | 2 +- packages/stripe/CHANGELOG.md | 8 ++++++++ packages/stripe/package.json | 2 +- packages/telemetry/CHANGELOG.md | 7 +++++++ packages/telemetry/package.json | 2 +- packages/test-utils/CHANGELOG.md | 8 ++++++++ packages/test-utils/package.json | 2 +- 43 files changed, 228 insertions(+), 21 deletions(-) create mode 100644 packages/cimd/CHANGELOG.md diff --git a/.changeset/pre.json b/.changeset/pre.json index 8230656720..1ee478bc23 100644 --- a/.changeset/pre.json +++ b/.changeset/pre.json @@ -31,8 +31,11 @@ "dynamic-baseurl-hardening", "fix-2fa-bypass", "fix-backup-codes-storage", + "fix-oauth-provider-rfc-error-envelope", "fix-password-reset-callback-operation-id", + "fix-revert-2fa-broadening", "fix-stripe-defu-prototype-pollution", + "force-allow-id-uuid", "generic-oauth-unification", "honest-regions-jam", "honest-symbols-stick", @@ -40,6 +43,7 @@ "oauth-provider-at-hash", "oauth-provider-token-refactor", "pr-8926", + "pr-8977", "pr-9032", "pr-9084", "private-key-jwt", @@ -47,6 +51,7 @@ "sso-saml-hardening", "sso-saml-model-split", "sso-upgrade-samlify", + "tighten-adapter-peerdeps", "two-factor-otp-enable" ] } diff --git a/packages/api-key/CHANGELOG.md b/packages/api-key/CHANGELOG.md index 241351ebba..313d20ad18 100644 --- a/packages/api-key/CHANGELOG.md +++ b/packages/api-key/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/api-key +## 1.7.0-beta.2 + +### Patch Changes + +- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`954b664`](https://github.com/better-auth/better-auth/commit/954b664f4f251f8dd028451dab3ab43067dbf890), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]: + - better-auth@1.7.0-beta.2 + - @better-auth/core@1.7.0-beta.2 + ## 1.7.0-beta.1 ### Patch Changes diff --git a/packages/api-key/package.json b/packages/api-key/package.json index 733bd9ce9c..05440ed238 100644 --- a/packages/api-key/package.json +++ b/packages/api-key/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/api-key", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "API Key plugin for Better Auth.", "type": "module", "license": "MIT", diff --git a/packages/better-auth/CHANGELOG.md b/packages/better-auth/CHANGELOG.md index 0fb00b13ad..11c9bc2a22 100644 --- a/packages/better-auth/CHANGELOG.md +++ b/packages/better-auth/CHANGELOG.md @@ -1,5 +1,34 @@ # better-auth +## 1.7.0-beta.2 + +### Minor Changes + +- [#8977](https://github.com/better-auth/better-auth/pull/8977) [`954b664`](https://github.com/better-auth/better-auth/commit/954b664f4f251f8dd028451dab3ab43067dbf890) Thanks [@ruban-s](https://github.com/ruban-s)! - allow passing `userId` and `organizationId` to the `listUserTeams` API. `userId` lets callers list teams for another member of an organization (gated behind the `member:update` permission). `organizationId` scopes the result to a specific organization without needing to switch the session's active organization, matching the pattern used by `addTeamMember`/`removeTeamMember`. + +### Patch Changes + +- [#9205](https://github.com/better-auth/better-auth/pull/9205) [`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - fix(two-factor): revert enforcement broadening from [#9122](https://github.com/better-auth/better-auth/issues/9122) + + Restores the pre-[#9122](https://github.com/better-auth/better-auth/issues/9122) enforcement scope. 2FA is challenged only on `/sign-in/email`, `/sign-in/username`, and `/sign-in/phone-number`, matching the behavior that shipped through v1.6.2. Non-credential sign-in flows (magic link, email OTP, OAuth, SSO, passkey, SIWE, one-tap, phone-number OTP, device authorization, email-verification auto-sign-in) are no longer gated by a 2FA challenge by default. + + A broader enforcement scope with per-method opt-outs and alignment to NIST SP 800-63B-4 authenticator assurance levels is planned for a future minor release. + +- [#9068](https://github.com/better-auth/better-auth/pull/9068) [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09) Thanks [@GautamBytes](https://github.com/GautamBytes)! - Fix forced UUID user IDs from create hooks being ignored on PostgreSQL adapters when `advanced.database.generateId` is set to `"uuid"`. + +- [#9165](https://github.com/better-auth/better-auth/pull/9165) [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - chore(adapters): require patched `drizzle-orm` and `kysely` peer versions + + Narrows the `drizzle-orm` peer to `^0.45.2` and the `kysely` peer to `^0.28.14`. Both new ranges track the minor line that carries the vulnerability fix and nothing newer, so the adapters only advertise support for versions that have actually been tested against. Consumers on older ORM releases see an install-time warning and can upgrade alongside the adapter; the peer is marked optional, so installs do not hard-fail. + +- Updated dependencies [[`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]: + - @better-auth/drizzle-adapter@1.7.0-beta.2 + - @better-auth/kysely-adapter@1.7.0-beta.2 + - @better-auth/core@1.7.0-beta.2 + - @better-auth/memory-adapter@1.7.0-beta.2 + - @better-auth/mongo-adapter@1.7.0-beta.2 + - @better-auth/prisma-adapter@1.7.0-beta.2 + - @better-auth/telemetry@1.7.0-beta.2 + ## 1.7.0-beta.1 ### Minor Changes diff --git a/packages/better-auth/package.json b/packages/better-auth/package.json index 3dc905ec1a..f06f491b03 100644 --- a/packages/better-auth/package.json +++ b/packages/better-auth/package.json @@ -1,6 +1,6 @@ { "name": "better-auth", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "The most comprehensive authentication framework for TypeScript.", "type": "module", "license": "MIT", diff --git a/packages/cimd/CHANGELOG.md b/packages/cimd/CHANGELOG.md new file mode 100644 index 0000000000..1694147d93 --- /dev/null +++ b/packages/cimd/CHANGELOG.md @@ -0,0 +1,10 @@ +# @better-auth/cimd + +## 1.7.0-beta.2 + +### Patch Changes + +- Updated dependencies [[`5c6de4e`](https://github.com/better-auth/better-auth/commit/5c6de4ed265e7aa30e7e42a0e493386cf3ad6c96), [`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`954b664`](https://github.com/better-auth/better-auth/commit/954b664f4f251f8dd028451dab3ab43067dbf890), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]: + - @better-auth/oauth-provider@1.7.0-beta.2 + - better-auth@1.7.0-beta.2 + - @better-auth/core@1.7.0-beta.2 diff --git a/packages/cimd/package.json b/packages/cimd/package.json index 4db65ef7bf..ee9cd45af3 100644 --- a/packages/cimd/package.json +++ b/packages/cimd/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/cimd", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "Client ID Metadata Document plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md index 215ee0d9f4..0f8d33744b 100644 --- a/packages/cli/CHANGELOG.md +++ b/packages/cli/CHANGELOG.md @@ -1,5 +1,14 @@ # auth +## 1.7.0-beta.2 + +### Patch Changes + +- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`954b664`](https://github.com/better-auth/better-auth/commit/954b664f4f251f8dd028451dab3ab43067dbf890), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]: + - better-auth@1.7.0-beta.2 + - @better-auth/core@1.7.0-beta.2 + - @better-auth/telemetry@1.7.0-beta.2 + ## 1.7.0-beta.1 ### Patch Changes diff --git a/packages/cli/package.json b/packages/cli/package.json index 09d6aaad1f..14943900aa 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -1,6 +1,6 @@ { "name": "auth", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "The CLI for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md index 8948a1f4eb..a39af8dff8 100644 --- a/packages/core/CHANGELOG.md +++ b/packages/core/CHANGELOG.md @@ -1,5 +1,7 @@ # @better-auth/core +## 1.7.0-beta.2 + ## 1.7.0-beta.1 ## 1.7.0-beta.0 diff --git a/packages/core/package.json b/packages/core/package.json index f4bf7a130a..6fa9fab983 100644 --- a/packages/core/package.json +++ b/packages/core/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/core", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "The most comprehensive authentication framework for TypeScript.", "type": "module", "license": "MIT", diff --git a/packages/drizzle-adapter/CHANGELOG.md b/packages/drizzle-adapter/CHANGELOG.md index 707994252c..401f16415e 100644 --- a/packages/drizzle-adapter/CHANGELOG.md +++ b/packages/drizzle-adapter/CHANGELOG.md @@ -1,5 +1,16 @@ # @better-auth/drizzle-adapter +## 1.7.0-beta.2 + +### Patch Changes + +- [#9165](https://github.com/better-auth/better-auth/pull/9165) [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - chore(adapters): require patched `drizzle-orm` and `kysely` peer versions + + Narrows the `drizzle-orm` peer to `^0.45.2` and the `kysely` peer to `^0.28.14`. Both new ranges track the minor line that carries the vulnerability fix and nothing newer, so the adapters only advertise support for versions that have actually been tested against. Consumers on older ORM releases see an install-time warning and can upgrade alongside the adapter; the peer is marked optional, so installs do not hard-fail. + +- Updated dependencies []: + - @better-auth/core@1.7.0-beta.2 + ## 1.7.0-beta.1 ## 1.6.7 diff --git a/packages/drizzle-adapter/package.json b/packages/drizzle-adapter/package.json index bcecbe98d3..20a4bbe01d 100644 --- a/packages/drizzle-adapter/package.json +++ b/packages/drizzle-adapter/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/drizzle-adapter", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "Drizzle adapter for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/electron/CHANGELOG.md b/packages/electron/CHANGELOG.md index 2f631a0a22..caa9c1ca04 100644 --- a/packages/electron/CHANGELOG.md +++ b/packages/electron/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/electron +## 1.7.0-beta.2 + +### Patch Changes + +- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`954b664`](https://github.com/better-auth/better-auth/commit/954b664f4f251f8dd028451dab3ab43067dbf890), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]: + - better-auth@1.7.0-beta.2 + - @better-auth/core@1.7.0-beta.2 + ## 1.7.0-beta.1 ### Minor Changes diff --git a/packages/electron/package.json b/packages/electron/package.json index d1646a7318..f945953093 100644 --- a/packages/electron/package.json +++ b/packages/electron/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/electron", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "Better Auth integration for Electron applications.", "type": "module", "license": "MIT", diff --git a/packages/expo/CHANGELOG.md b/packages/expo/CHANGELOG.md index 33f9758ce0..49f704d091 100644 --- a/packages/expo/CHANGELOG.md +++ b/packages/expo/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/expo +## 1.7.0-beta.2 + +### Patch Changes + +- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`954b664`](https://github.com/better-auth/better-auth/commit/954b664f4f251f8dd028451dab3ab43067dbf890), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]: + - better-auth@1.7.0-beta.2 + - @better-auth/core@1.7.0-beta.2 + ## 1.7.0-beta.1 ### Minor Changes diff --git a/packages/expo/package.json b/packages/expo/package.json index de7d9b96b4..ffddb037f3 100644 --- a/packages/expo/package.json +++ b/packages/expo/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/expo", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "Better Auth integration for Expo and React Native applications.", "type": "module", "license": "MIT", diff --git a/packages/i18n/CHANGELOG.md b/packages/i18n/CHANGELOG.md index e2e12c3b6d..b9dc85f108 100644 --- a/packages/i18n/CHANGELOG.md +++ b/packages/i18n/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/i18n +## 1.7.0-beta.2 + +### Patch Changes + +- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`954b664`](https://github.com/better-auth/better-auth/commit/954b664f4f251f8dd028451dab3ab43067dbf890), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]: + - better-auth@1.7.0-beta.2 + - @better-auth/core@1.7.0-beta.2 + ## 1.7.0-beta.1 ### Patch Changes diff --git a/packages/i18n/package.json b/packages/i18n/package.json index f4d7463271..0ba19bc1ec 100644 --- a/packages/i18n/package.json +++ b/packages/i18n/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/i18n", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "i18n plugin for Better Auth - translate error messages", "type": "module", "license": "MIT", diff --git a/packages/kysely-adapter/CHANGELOG.md b/packages/kysely-adapter/CHANGELOG.md index 789e66bd40..ac8be1d6ae 100644 --- a/packages/kysely-adapter/CHANGELOG.md +++ b/packages/kysely-adapter/CHANGELOG.md @@ -1,5 +1,16 @@ # @better-auth/kysely-adapter +## 1.7.0-beta.2 + +### Patch Changes + +- [#9165](https://github.com/better-auth/better-auth/pull/9165) [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - chore(adapters): require patched `drizzle-orm` and `kysely` peer versions + + Narrows the `drizzle-orm` peer to `^0.45.2` and the `kysely` peer to `^0.28.14`. Both new ranges track the minor line that carries the vulnerability fix and nothing newer, so the adapters only advertise support for versions that have actually been tested against. Consumers on older ORM releases see an install-time warning and can upgrade alongside the adapter; the peer is marked optional, so installs do not hard-fail. + +- Updated dependencies []: + - @better-auth/core@1.7.0-beta.2 + ## 1.7.0-beta.1 ## 1.6.7 diff --git a/packages/kysely-adapter/package.json b/packages/kysely-adapter/package.json index 8494f94908..ab5f358723 100644 --- a/packages/kysely-adapter/package.json +++ b/packages/kysely-adapter/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/kysely-adapter", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "Kysely adapter for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/memory-adapter/CHANGELOG.md b/packages/memory-adapter/CHANGELOG.md index 2c58b9bdd3..c721e11b46 100644 --- a/packages/memory-adapter/CHANGELOG.md +++ b/packages/memory-adapter/CHANGELOG.md @@ -1,5 +1,12 @@ # @better-auth/memory-adapter +## 1.7.0-beta.2 + +### Patch Changes + +- Updated dependencies []: + - @better-auth/core@1.7.0-beta.2 + ## 1.7.0-beta.1 ## 1.6.7 diff --git a/packages/memory-adapter/package.json b/packages/memory-adapter/package.json index fcde7ae0fb..dd3b48f813 100644 --- a/packages/memory-adapter/package.json +++ b/packages/memory-adapter/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/memory-adapter", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "Memory adapter for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/mongo-adapter/CHANGELOG.md b/packages/mongo-adapter/CHANGELOG.md index 4f1af43892..5ac961dba9 100644 --- a/packages/mongo-adapter/CHANGELOG.md +++ b/packages/mongo-adapter/CHANGELOG.md @@ -1,5 +1,12 @@ # @better-auth/mongo-adapter +## 1.7.0-beta.2 + +### Patch Changes + +- Updated dependencies []: + - @better-auth/core@1.7.0-beta.2 + ## 1.7.0-beta.1 ## 1.6.7 diff --git a/packages/mongo-adapter/package.json b/packages/mongo-adapter/package.json index 25d2b6e5c7..c0ed00feb2 100644 --- a/packages/mongo-adapter/package.json +++ b/packages/mongo-adapter/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/mongo-adapter", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "Mongo adapter for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/oauth-provider/CHANGELOG.md b/packages/oauth-provider/CHANGELOG.md index 75498dacd2..b902f3766a 100644 --- a/packages/oauth-provider/CHANGELOG.md +++ b/packages/oauth-provider/CHANGELOG.md @@ -1,5 +1,28 @@ # @better-auth/oauth-provider +## 1.7.0-beta.2 + +### Minor Changes + +- [#9277](https://github.com/better-auth/better-auth/pull/9277) [`5c6de4e`](https://github.com/better-auth/better-auth/commit/5c6de4ed265e7aa30e7e42a0e493386cf3ad6c96) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - fix(oauth-provider): return RFC-compliant `{ error, error_description }` envelopes from validation failures + + An internal `createOAuthEndpoint` wrapper now translates zod validation failures into the envelope required by RFC 6749 §5.2, 7009 §2.2.1, 7662 §2.3, and 7591 §3.2.2. Failing issues are routed per field: + - an absent required value maps to `errorCodesByField[name].missing` or the endpoint's `defaultError`. + - an unsupported value (unknown enum member) maps to `errorCodesByField[name].invalid` or `defaultError`. + - any other failure (wrong type, duplicated query params, invalid format, refinement) maps to `defaultError`, so RFC 6749 §3.1 malformed requests emit the endpoint's default code regardless of field. + + All six OAuth endpoints (`/oauth2/token`, `/oauth2/authorize`, `/oauth2/revoke`, `/oauth2/introspect`, `/oauth2/register`, `/oauth2/end-session`) now return RFC-compliant errors for malformed requests. `/oauth2/authorize` validation failures redirect to the relying party with `error`, `error_description`, echoed `state`, and `iss` whenever `client_id` and `redirect_uri` resolve against the registered client; requests without a trusted RP fall back to the server error page. + + Additional RFC compliance fixes on the same endpoints: + - `/oauth2/revoke` and `/oauth2/introspect` now ignore an unknown `token_type_hint` instead of rejecting it. RFC 7009 §2.2.1 and RFC 7662 §2.1 reserve `unsupported_token_type` for the token itself, not the hint value; servers MAY ignore unrecognized hints and search across supported token types. + - `/oauth2/authorize` error redirects now respect OIDC Core 1.0 §5 response modes. Errors for `response_type=token` or `id_token` are delivered in the URL fragment per RFC 6749 §4.2.2.1; an explicit `response_mode=query` overrides the default. + +### Patch Changes + +- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`954b664`](https://github.com/better-auth/better-auth/commit/954b664f4f251f8dd028451dab3ab43067dbf890), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]: + - better-auth@1.7.0-beta.2 + - @better-auth/core@1.7.0-beta.2 + ## 1.7.0-beta.1 ### Minor Changes diff --git a/packages/oauth-provider/package.json b/packages/oauth-provider/package.json index f59b103541..fdd47689b4 100644 --- a/packages/oauth-provider/package.json +++ b/packages/oauth-provider/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/oauth-provider", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "An oauth provider plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/passkey/CHANGELOG.md b/packages/passkey/CHANGELOG.md index 977cd272d4..222e98924b 100644 --- a/packages/passkey/CHANGELOG.md +++ b/packages/passkey/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/passkey +## 1.7.0-beta.2 + +### Patch Changes + +- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`954b664`](https://github.com/better-auth/better-auth/commit/954b664f4f251f8dd028451dab3ab43067dbf890), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]: + - better-auth@1.7.0-beta.2 + - @better-auth/core@1.7.0-beta.2 + ## 1.7.0-beta.1 ### Patch Changes diff --git a/packages/passkey/package.json b/packages/passkey/package.json index 16cb4e6f8a..ba0ea1ca9b 100644 --- a/packages/passkey/package.json +++ b/packages/passkey/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/passkey", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "Passkey plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/prisma-adapter/CHANGELOG.md b/packages/prisma-adapter/CHANGELOG.md index e4fa54ea60..168b2db78c 100644 --- a/packages/prisma-adapter/CHANGELOG.md +++ b/packages/prisma-adapter/CHANGELOG.md @@ -1,5 +1,12 @@ # @better-auth/prisma-adapter +## 1.7.0-beta.2 + +### Patch Changes + +- Updated dependencies []: + - @better-auth/core@1.7.0-beta.2 + ## 1.7.0-beta.1 ## 1.6.7 diff --git a/packages/prisma-adapter/package.json b/packages/prisma-adapter/package.json index 5a1a53409b..2457d7597a 100644 --- a/packages/prisma-adapter/package.json +++ b/packages/prisma-adapter/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/prisma-adapter", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "Prisma adapter for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/redis-storage/CHANGELOG.md b/packages/redis-storage/CHANGELOG.md index 0afe024529..609da2bb43 100644 --- a/packages/redis-storage/CHANGELOG.md +++ b/packages/redis-storage/CHANGELOG.md @@ -1,5 +1,12 @@ # @better-auth/redis-storage +## 1.7.0-beta.2 + +### Patch Changes + +- Updated dependencies []: + - @better-auth/core@1.7.0-beta.2 + ## 1.7.0-beta.1 ## 1.6.7 diff --git a/packages/redis-storage/package.json b/packages/redis-storage/package.json index b18c08e2c6..88fee9f104 100644 --- a/packages/redis-storage/package.json +++ b/packages/redis-storage/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/redis-storage", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "Redis storage for Better Auth secondary storage", "type": "module", "license": "MIT", diff --git a/packages/scim/CHANGELOG.md b/packages/scim/CHANGELOG.md index 840402fddc..10d6556b34 100644 --- a/packages/scim/CHANGELOG.md +++ b/packages/scim/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/scim +## 1.7.0-beta.2 + +### Patch Changes + +- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`954b664`](https://github.com/better-auth/better-auth/commit/954b664f4f251f8dd028451dab3ab43067dbf890), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]: + - better-auth@1.7.0-beta.2 + - @better-auth/core@1.7.0-beta.2 + ## 1.7.0-beta.1 ### Patch Changes diff --git a/packages/scim/package.json b/packages/scim/package.json index 17b9dcb646..595b93a88f 100644 --- a/packages/scim/package.json +++ b/packages/scim/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/scim", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "SCIM plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/sso/CHANGELOG.md b/packages/sso/CHANGELOG.md index fb7890c096..efa2807ecc 100644 --- a/packages/sso/CHANGELOG.md +++ b/packages/sso/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/sso +## 1.7.0-beta.2 + +### Patch Changes + +- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`954b664`](https://github.com/better-auth/better-auth/commit/954b664f4f251f8dd028451dab3ab43067dbf890), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]: + - better-auth@1.7.0-beta.2 + - @better-auth/core@1.7.0-beta.2 + ## 1.7.0-beta.1 ### Minor Changes diff --git a/packages/sso/package.json b/packages/sso/package.json index 3636fda2ef..9572f34981 100644 --- a/packages/sso/package.json +++ b/packages/sso/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/sso", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "SSO plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/stripe/CHANGELOG.md b/packages/stripe/CHANGELOG.md index d0d9e21eb7..e018b6fca9 100644 --- a/packages/stripe/CHANGELOG.md +++ b/packages/stripe/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/stripe +## 1.7.0-beta.2 + +### Patch Changes + +- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`954b664`](https://github.com/better-auth/better-auth/commit/954b664f4f251f8dd028451dab3ab43067dbf890), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]: + - better-auth@1.7.0-beta.2 + - @better-auth/core@1.7.0-beta.2 + ## 1.7.0-beta.1 ### Patch Changes diff --git a/packages/stripe/package.json b/packages/stripe/package.json index 0a206c862c..387d3f8c72 100644 --- a/packages/stripe/package.json +++ b/packages/stripe/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/stripe", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "Stripe plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/telemetry/CHANGELOG.md b/packages/telemetry/CHANGELOG.md index fe14c8aa34..37168e2c29 100644 --- a/packages/telemetry/CHANGELOG.md +++ b/packages/telemetry/CHANGELOG.md @@ -1,5 +1,12 @@ # @better-auth/telemetry +## 1.7.0-beta.2 + +### Patch Changes + +- Updated dependencies []: + - @better-auth/core@1.7.0-beta.2 + ## 1.7.0-beta.1 ## 1.6.7 diff --git a/packages/telemetry/package.json b/packages/telemetry/package.json index f6239e3d49..b35ad74ae4 100644 --- a/packages/telemetry/package.json +++ b/packages/telemetry/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/telemetry", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "Telemetry package for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/test-utils/CHANGELOG.md b/packages/test-utils/CHANGELOG.md index a89199fcd5..d563287c48 100644 --- a/packages/test-utils/CHANGELOG.md +++ b/packages/test-utils/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/test-utils +## 1.7.0-beta.2 + +### Patch Changes + +- Updated dependencies [[`9aed910`](https://github.com/better-auth/better-auth/commit/9aed910499eb4cbc3dd0c395ff5534893daab7a4), [`acbd6ef`](https://github.com/better-auth/better-auth/commit/acbd6ef69f88ea54174446ac0465a426bad7ca09), [`954b664`](https://github.com/better-auth/better-auth/commit/954b664f4f251f8dd028451dab3ab43067dbf890), [`39d6af2`](https://github.com/better-auth/better-auth/commit/39d6af2a392dc41018a036d1d909dc48c09749c9)]: + - better-auth@1.7.0-beta.2 + - @better-auth/core@1.7.0-beta.2 + ## 1.7.0-beta.1 ### Patch Changes diff --git a/packages/test-utils/package.json b/packages/test-utils/package.json index 783f4d77e4..ce2f33fb64 100644 --- a/packages/test-utils/package.json +++ b/packages/test-utils/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/test-utils", - "version": "1.7.0-beta.1", + "version": "1.7.0-beta.2", "description": "Testing utilities for Better Auth adapter development", "type": "module", "license": "MIT",