Emmanuel Lucius and GitHub
78d7227d05
docs: fix "Database joins is" grammar across all 7 adapter docs ( #10803 )
2026-08-14 12:00:57 +00:00
Toms Sokolovs and GitHub
d9b3e3d17b
docs: add Mailtrap as an email provider example ( #10765 )
2026-08-12 18:34:56 +00:00
Taesu and GitHub
c35c41ef2a
docs: rewrite Hono integration guide ( #10763 )
2026-08-12 18:25:44 +00:00
999acbd41d
Merge commit from fork
...
* fix(sso): bind domain verification to provider state
Complete domain verification with an atomic guarded transition keyed by the provider row, exact domain snapshot, and unverified state. Concurrent provider mutations now return a retryable conflict instead of applying stale DNS proof.
Document the conflict behavior and cover provider mutation, replacement, deletion, simultaneous verification, memory-adapter, and downstream trust cases.
* fix(sso): allow domain verification when the stored bit is null
* test(sso): assert the resolved DNS hostname outside the mock callback
* fix(sso): require verified domains for organization assignment
Use verified persisted provider domains and canonical verified user emails for domain-derived routing and organization membership. Keep explicit organization-bound SSO provisioning separate from domain trust.
* fix(sso): scope domain verification to organization assignment
* fix(sso): keep verified provider lookup internal
---------
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-08-11 13:50:45 -04:00
Taesu and GitHub
b8077b74ef
fix(cli): align packages with running CLI version ( #10743 )
2026-08-10 16:47:54 +00:00
0b075395c5
docs: add SuperSend TX as an email provider example ( #10661 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-04 21:06:48 +09:00
Emmanuel Lucius and GitHub
114214a76a
docs: fix 2FA description in client plugin setup ( #10659 )
2026-08-04 16:45:41 +09:00
4533e2aeea
docs: centralize GHA reporting over email ( #10663 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-04 06:56:14 +00:00
Emmanuel Lucius and GitHub
de5acf171f
docs: fix grammar and wording in concepts/plugins.mdx ( #10500 )
2026-07-28 16:38:14 +09:00
Olivier Allard and GitHub
17cf2b94a4
docs: simplify waitUntil import for Cloudflare Workers ( #10536 )
2026-07-28 16:36:49 +09:00
Oliver Cordingley and GitHub
b4156672fb
docs: update stripe api version number ( #10529 )
2026-07-26 10:21:03 +09:00
9b08f4600e
docs: fix awkward wording in comparison.mdx ( #10517 )
...
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-07-25 06:25:34 +09:00
Emmanuel Lucius and GitHub
0268d2bf61
docs: fix wrong import path in facebook.mdx ( #10518 )
2026-07-25 06:15:26 +09:00
0xHouss and GitHub
0dbfd04e4d
docs: fix description metadata in comparison.mdx ( #10519 )
2026-07-25 06:14:26 +09:00
Emmanuel Lucius and GitHub
b70cacbe47
docs: remove duplicated sentence in database.mdx ( #10489 )
2026-07-23 06:27:04 +09:00
Emmanuel Lucius and GitHub
1abe76285b
docs: fix variable shadowing in api.mdx code example ( #10488 )
2026-07-23 05:47:09 +09:00
Taesu and GitHub
c68b281ec1
docs: add july 2026 security update blog for Auth.js ( #10469 )
2026-07-23 05:20:55 +09:00
c020a9d6a2
fix(sso): redirect idp initiated saml flows in split origin deployments ( #10388 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-07-22 06:14:46 -04:00
Taesu and GitHub
f6ee9e97f5
docs(blog): add theme-aware cover images ( #10470 )
2026-07-22 05:07:13 +09:00
Taesu and GitHub
0b571ff328
docs: add email provider section ( #10459 )
2026-07-21 03:35:09 +09:00
Gustavo Valverde and GitHub
a5f7c05924
docs(oauth): clarify provider field ownership ( #10432 )
2026-07-16 21:03:13 +01:00
Taesu and GitHub
6fe5156ce4
docs: remove "what's next" section from 1.7 rc blog ( #10389 )
2026-07-14 16:19:20 +09:00
c4d1ddaa95
feat: add ctx to verifyIdToken ( #10376 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-12 18:01:00 +00:00
c178eeec5b
docs: warn that community plugins are not official or verified ( #10375 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-12 16:35:41 +00:00
Maxwell and GitHub
097eecdd16
fix(cli): disambiguate Drizzle relations with relationName ( #10352 )
2026-07-12 01:54:16 +00:00
JackFan and GitHub
3526caeb49
docs: fix incorrect option name and reverse proxy example in cookies page ( #10355 )
2026-07-10 12:27:19 -07:00
Maxwell and GitHub
f23ce5012e
feat(last-login-method): beforeStoreCookie option for GDPR compliance ( #5753 )
2026-07-10 01:02:04 +00:00
3bf0e4981e
fix(organization): pass endpoint context to organization delete hooks ( #10190 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-07-08 22:43:03 +00:00
fd6b8c13bb
docs: fix auth0 migration guide for v5 ( #10273 )
...
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com >
Co-authored-by: Maxwell <ping-maxwell@users.noreply.github.com >
2026-07-07 19:39:36 +00:00
Bereket Engida
0b964a3e3c
docs: Better Auth is joining Vercel announcement
2026-07-07 08:31:44 -07:00
rond and GitHub
8954563112
docs: correct filename for svelte client snippet ( #10284 )
2026-07-05 01:28:09 -07:00
Gustavo Valverde and GitHub
7f510cef53
docs: fix migration errors in the 1.7 upgrade guide and RC blog ( #10292 )
2026-07-02 14:23:27 +01:00
Taesu and GitHub
a76be5029d
docs: consolidate the 1.7 RC blog ( #10280 )
2026-06-29 23:36:46 -04:00
David Stack and GitHub
7d99ee7882
docs: add nuxt module and remove NuxSaaS 404 ( #10279 )
2026-06-29 23:36:23 -04:00
5daa03abf8
docs: add Better Auth 1.7 Release Candidate pages ( #10169 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-06-29 18:02:13 -04:00
8581f97ea0
feat(oauth): add Yandex social provider ( #9138 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-06-27 03:32:45 +00:00
Gustavo Valverde and GitHub
3a035e968e
fix(two-factor): add account-level verification lockout ( #10240 )
2026-06-26 13:40:00 +01:00
Gustavo Valverde and GitHub
7c126dcd1a
fix(scim): scope write-path operations and honor the active attribute ( #10242 )
2026-06-26 12:29:00 +00:00
Gustavo Valverde and GitHub
8bd43d9d83
fix(core): refuse redirects on server-side OAuth requests ( #10241 )
2026-06-26 12:28:17 +00:00
Gustavo Valverde and GitHub
c06a56d83a
fix: revoke unproven credentials on magic-link/email-OTP sign-in ( #10239 )
2026-06-26 13:20:07 +01:00
b5bec193a5
fix(oauth): apply user input rules to provider profiles ( #10196 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-06-26 04:06:54 +00:00
90d509e0b9
fix(adapter): fail closed on update misses ( #10180 )
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-06-26 03:56:39 +00:00
816d7f9252
fix(one-tap): apply configured Google hosted domain (hd) on the callback ( #10197 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-06-26 03:56:20 +00:00
fa1e036ae7
fix(sso): validate SAML response binding against the Service Provider ( #10226 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-06-26 03:07:43 +00:00
fcabaaffcb
fix(sso): require DNS proof for every domain listed on a provider ( #10227 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-06-26 02:49:15 +00:00
Gustavo Valverde and GitHub
1bc370aef5
fix(siwe): reject sign-in when the provided email already belongs to another account ( #10228 )
2026-06-26 02:21:45 +00:00
Maxwell and GitHub
82cbbd6f1d
docs: add missing disable-implicit-linking docs ( #10218 )
2026-06-25 10:59:14 +00:00
5953157acf
fix: harden forwarded client IP resolution ( #10203 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-06-25 04:55:10 +00:00
Taesu and GitHub
e7c8066cf1
docs: refine warning guidance across plugin docs ( #10185 )
2026-06-21 22:39:30 -07:00
moonevm and GitHub
6e5f7e656b
docs: fix the code block format on the Stripe plugin page ( #10181 )
2026-06-21 02:31:43 -07:00
Emmanuel LuciusandGitHub
Toms SokolovsandGitHub
TaesuandGitHub
Olivier AllardandGitHub
Oliver CordingleyandGitHub
0xHoussandGitHub
JackFanandGitHub
Bereket Engida
rondandGitHub
David StackandGitHub
moonevmandGitHub