  Gustavo ValverdeandGitHub
|
a1f6f0bf19
|
fix(oauth-provider): keep admin changes made during a CIMD refresh (#11830)
|
2026-10-15 16:40:19 +00:00 |
|
  
|
37debaa8a1
|
fix(oauth-provider): correct consent and continue OpenAPI response schemas (#10881)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
|
2026-10-15 15:39:50 +00:00 |
|
|
37a75c95d1
|
fix(rate-limit): convert a string lastRequest before computing X-Retry-After (#11521)
Co-authored-by: Taesu <bytaesu@gmail.com>
|
2026-10-15 15:02:04 +00:00 |
|
|
bd65db02c1
|
fix(db): recognize postgres int8 as a number type in migration diffs (#10719)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
|
2026-10-15 14:22:32 +00:00 |
|
 better-release[bot]andGitHub
|
b734a418bf
|
chore: release v1.7.10 (#11795)
|
2026-10-15 14:22:54 +01:00 |
|
  
|
eebd47a0e7
|
fix(last-login-method): record Google One Tap sign-ins (#11393)
Co-authored-by: arjunpkulkarni <arjunpkulkarni@gmail.com>
Co-authored-by: breken-ai <312387581+breken-ai@users.noreply.github.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-15 14:15:38 +01:00 |
|
|
eaecb7229e
|
fix(one-tap): apply the Google provider's mapProfileToUser and getUserInfo (#11819)
Co-authored-by: kaiizer777 <kanekigaming786@gmail.com>
|
2026-10-15 13:02:59 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
414e845f12
|
fix(better-auth): keep package subpaths in sync with build entries (#11822)
|
2026-10-15 14:08:25 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
88c9a37856
|
fix(one-tap): apply plugin-level autoSelect and cancelOnTapOutside (#11820)
|
2026-10-15 13:02:01 +00:00 |
|
|
09d07e6fea
|
fix(one-tap): stop calling prompt moment methods unsupported under FedCM (#11821)
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com>
|
2026-10-15 12:58:29 +00:00 |
|
|
0cf1f7c6bc
|
fix(one-tap): add the better-auth/plugins/one-tap subpath export (#11696)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-15 13:45:41 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
61c913da73
|
fix(oauth-provider): report an unknown client in a client assertion as not found (#11811)
|
2026-10-15 13:11:39 +01:00 |
|
|
|
4d7da0bef8
|
fix(oauth-provider): return 400 invalid_grant on PKCE verifier mismatch (#11724)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-15 13:07:53 +01:00 |
|
|
8f3da46ae5
|
fix(oauth-provider): return invalid_client for an unknown client at the token endpoint (#11176)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-15 13:02:05 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
44f14bbf82
|
fix(oauth-provider): keep approved resources refreshable after a narrowed device poll (#11815)
|
2026-10-15 12:48:52 +01:00 |
|
 
|
fedd05586c
|
fix(oauth2): report an unreachable JWKS as an error, not an invalid token (#11612)
Co-authored-by: vhinayindia <281186805+vhinayindia@users.noreply.github.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-15 12:35:36 +01:00 |
|
|
963b7f9417
|
fix(oauth-provider): treat unverifiable JWT access tokens as invalid (#11596)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-15 12:13:07 +01:00 |
|
|
906c32f4b5
|
fix(oauth-provider): keep the supported grants from a dynamic registration (#11797)
Co-authored-by: Bereket Engida <Bekacru@gmail.com>
|
2026-10-15 12:02:00 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
bbd0a19c30
|
fix(core): limit JWKS refetches for unknown key IDs (#11805)
|
2026-10-15 11:54:17 +01:00 |
|
|
99cdfe7c2e
|
fix(oauth-provider): keep consent separate per reference (#11801)
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
|
2026-10-15 11:11:01 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
f42c0c220d
|
fix(oauth-provider): report an unknown client_id as not found (#11799)
|
2026-10-15 09:18:07 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
2fa7e2f8bb
|
fix(oauth-provider): infer native for http loopback redirect URIs (#11798)
|
2026-10-15 09:11:34 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
cdd491b9d0
|
fix(oauth-provider): build DPoP htu from the request path (#11786)
|
2026-10-15 08:35:46 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
fe550a9c57
|
feat(oauth-provider): let private_key_jwt clients rotate their own keys (#11695)
|
2026-10-15 08:08:25 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
e34b828274
|
fix(oauth-provider): refuse trusted-client changes with 400, not 500 (#11781)
|
2026-10-15 08:08:25 +00:00 |
|
|
better-release[bot]andGitHub
|
d2a5f83e92
|
chore: release v1.7.9 (#11761)
|
2026-10-15 04:48:47 +01:00 |
|
|
TaesuandGitHub
|
6edaa61e62
|
fix(api): await onAPIError.onError and log hook failures (#11766)
|
2026-10-14 20:13:05 +00:00 |
|
|
0a1a87e388
|
fix(oauth-provider): distinguish post-login continuation from initial selection (#11185)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-14 18:32:15 +00:00 |
|
|
|
54a09948e8
|
fix(oauth-provider): validate DPoP against public URL (#10799)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-14 18:27:25 +00:00 |
|
|
better-release[bot]andGitHub
|
5f4cc5c110
|
chore: release v1.7.8 (#11513)
|
2026-10-14 18:47:06 +01:00 |
|
|
e78f15aa31
|
fix(core): allow 30s of clock skew when verifying ID tokens (#11749)
Co-authored-by: Lohith <ssvlohith@gmail.com>
|
2026-10-14 17:06:19 +01:00 |
|
|
|
60525e08fd
|
fix(core): verify microsoft entra id tokens when jwks keys omit alg (#11663)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-14 17:04:35 +01:00 |
|
|
e9d9921217
|
fix(generic-oauth): retry discovery for providers skipped at startup (#11750)
Co-authored-by: mangomac <mangomac@users.noreply.github.com>
|
2026-10-14 16:53:53 +01:00 |
|
 
|
916ef5c530
|
fix(mongo-adapter): retry a transaction aborted with a transient error (#11515)
Co-authored-by: Maxwell Afamefuna Nzekwe <70326615+maxnze1@users.noreply.github.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-14 16:30:50 +01:00 |
|
   
|
aaf0d7da3e
|
fix(oauth-provider): keep auth working when startup resource seeding fails (#11726)
Co-authored-by: Panagiotis Plytas <34184381+pplytas@users.noreply.github.com>
Co-authored-by: Arjun Vijay Prakash <137415649+ArjunCodess@users.noreply.github.com>
Co-authored-by: Tushar <192458782+Tushar-Khandelwal-2004@users.noreply.github.com>
Co-authored-by: zoom-dustin-moriarty <221604897+zoom-dustin-moriarty@users.noreply.github.com>
|
2026-10-14 12:33:21 +01:00 |
|
|
f0ce580fbd
|
fix(phone-number): use custom verifyOTP when resetting the password (#10698)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-14 11:37:54 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
adbdc06e33
|
fix(sso): stop treating the SAML post-login redirect as an identity field (#11743)
|
2026-10-14 09:33:05 +00:00 |
|
|
|
182e92bd8a
|
fix(sso): allow rotating SAML IdP signing certificate with linked accounts (#11687)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-14 10:16:38 +01:00 |
|
|
a878f9ab47
|
fix(sso): support array of emails in OIDC claim resolution (#11640)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-14 10:16:10 +01:00 |
|
|
|
0cfe07dccd
|
fix(drizzle-adapter): support dates in string columns (#11731)
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com>
|
2026-10-14 08:50:41 +01:00 |
|
|
|
ea85d133d6
|
fix(mongo-adapter): abort a transaction whose commit did not complete (#11602)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-13 20:47:45 +01:00 |
|
|
1d95ebf3fe
|
fix(session): fall back to database for bulk session lookups (#11718)
Co-authored-by: choksi2212 <choksi2212@users.noreply.github.com>
|
2026-10-13 03:15:11 +00:00 |
|
|
|
766cfb3f42
|
fix(magic-link): stop double-decoding callback URLs on verify (#11174)
Co-authored-by: Taesu <bytaesu@gmail.com>
|
2026-10-12 21:32:53 +00:00 |
|
|
TaesuandGitHub
|
9725f1b361
|
fix(core): prevent stalled AsyncLocalStorage initialization (#11711)
|
2026-10-12 21:19:17 +00:00 |
|
|
TaesuandGitHub
|
c46d2a6ac4
|
fix(core): resolve pure AsyncLocalStorage on first use (#11712)
|
2026-10-12 21:19:10 +00:00 |
|
|
|
6c89bb18f1
|
fix(sso): accept partial mappings when updating a provider (#11378)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-12 13:36:49 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
847acd02bb
|
feat(oauth-provider): pass client ID to privilege checks (#11658)
|
2026-10-11 18:29:52 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
38f3bb34af
|
feat(oauth-provider): link resources during managed client registration (#11655)
|
2026-10-11 18:29:51 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
1a9be41d18
|
feat(oauth-provider): allow client disable through admin update (#11654)
|
2026-10-10 14:52:35 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
8409fb250d
|
fix(scim): return 409 when concurrent updates claim the same unique key (#11669)
|
2026-10-10 11:38:31 +00:00 |
|