github-starred/better-auth
2
0
Fork 0
mirror of https://github.com/better-auth/better-auth.git synced 2026-10-22 15:59:56 -05:00
Code Issues 2.5k Packages Projects Releases 112 Wiki Activity

fix(oauth): verify Twitch and Paybin ID tokens (#11884)

Browse Source
This commit is contained in:
Taesu
2026-10-18 23:04:24 +00:00
committed by GitHub
parent 9c4e3d75c2
commit dfd8dd287a
12 changed files with 787 additions and 105 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/content/docs/authentication/paybin.mdx
+4
View File
@@ -89,3 +89,7 @@ Paybin returns user information in the ID token following OpenID Connect standar
* `email` from `email` claim
* `image` from `picture` claim
* `emailVerified` from `email_verified` claim
### ID Token Validation
The built-in provider checks the ID token's signature, issuer, audience, and expiration using signing keys from `<issuer>/.well-known/jwks.json`. Custom `getUserInfo` overrides replace these checks.
docs/content/docs/authentication/twitch.mdx
+4
View File
@@ -56,3 +56,7 @@ description: Twitch provider setup and usage.
</Callout>
</Step>
</Steps>
### ID Token Validation
The built-in provider checks the ID token's signature, issuer, audience, and expiration before mapping the profile. Custom `getUserInfo` overrides replace these checks.