better-release[bot] and GitHub
b734a418bf
chore: release v1.7.10 ( #11795 )
2026-10-15 14:22:54 +01:00
better-release[bot] and GitHub
d2a5f83e92
chore: release v1.7.9 ( #11761 )
2026-10-15 04:48:47 +01:00
Taesu and GitHub
c03ced528a
chore: bump @biomejs/biome ( #11760 )
2026-10-14 21:01:10 +00:00
better-release[bot] and GitHub
5f4cc5c110
chore: release v1.7.8 ( #11513 )
2026-10-14 18:47:06 +01:00
Gustavo Valverde and GitHub
adbdc06e33
fix(sso): stop treating the SAML post-login redirect as an identity field ( #11743 )
2026-10-14 09:33:05 +00:00
c3f11cc1a1
docs(sso): clarify SAML callbackUrl vs ACS endpoint in 1.7 ( #11703 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-10-14 10:18:24 +01:00
182e92bd8a
fix(sso): allow rotating SAML IdP signing certificate with linked accounts ( #11687 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-10-14 10:16:38 +01:00
a878f9ab47
fix(sso): support array of emails in OIDC claim resolution ( #11640 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-10-14 10:16:10 +01:00
6c89bb18f1
fix(sso): accept partial mappings when updating a provider ( #11378 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-10-12 13:36:49 +00:00
61f64f46ad
fix(sso): reject mismatched OIDC issuers ( #11438 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-10-08 16:25:31 +00:00
Taesu and GitHub
4175b34a8f
fix(deps): align @better-auth/utils with better-call ( #11512 )
2026-10-01 15:14:19 +00:00
better-release[bot] and GitHub
db02f23391
chore: release v1.7.7 ( #11413 )
2026-09-30 22:25:23 +01:00
Gustavo Valverde and GitHub
ac54bfd678
fix(auth): isolate verification records and encryption purposes ( #11494 )
2026-09-30 20:56:11 +00:00
229a02a652
chore: release v1.7.6 ( #11322 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-24 15:46:09 +00:00
5468e6bfcd
chore: release v1.7.5 ( #11245 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-14 22:02:48 +00:00
735008ff26
chore: release v1.7.4 ( #11216 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-10 11:25:12 +00:00
597d39cb4a
chore: release v1.7.3 ( #11032 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-06 02:53:49 +00:00
Taesu and GitHub
2220ee7269
revert: drop the issuer column and resolve accounts by provider id ( #11153 )
2026-09-05 23:03:14 +00:00
bf0b5da173
chore(deps): bump @xmldom/xmldom from 0.9.10 to 0.9.12 ( #11130 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-09-02 20:55:07 +00:00
Taesu and GitHub
c0444dc979
fix: align OpenAPI required fields with Zod 4.5 ( #11066 )
2026-08-30 18:51:24 +00:00
Taesu and GitHub
e2fb86b27e
test(sso): align mock IdP with SAML redirect binding ( #11058 )
2026-08-29 20:11:38 +00:00
Gustavo Valverde and GitHub
6a0a7cbcb1
fix(auth): preserve provider-scoped account identity ( #10969 )
2026-08-28 22:34:54 +00:00
ba12fcdfa7
chore: release v1.7.2 ( #10870 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-26 18:53:57 +00:00
Taesu and GitHub
79904f0be8
fix(origin-check): support fragments in relative redirect URLs ( #10983 )
2026-08-25 10:12:21 +00:00
better-release[bot] and GitHub
2344536054
chore: release v1.7.1 ( #10864 )
2026-08-18 14:46:12 -04:00
Taesu and GitHub
ccd57c2dcb
docs(changelog): align v1.7 release notes with final behavior ( #10846 )
2026-08-17 18:53:06 -04:00
better-release[bot]
f577ec5c76
chore: exit pre-release mode for v1.7.0
2026-08-17 19:52:57 +00:00
Gustavo Valverde
69258d1670
chore: sync main to next
...
Merge branch 'main' into next
2026-08-17 15:29:19 -04:00
better-release[bot] and GitHub
e84ec5e76d
chore: release v1.6.30 ( #10840 )
2026-08-17 15:05:06 -04:00
better-release[bot] and GitHub
bc93b27542
chore: release v1.7.0-rc.6 ( #10772 )
2026-08-14 14:15:16 -04:00
better-release[bot] and GitHub
58c49eb97f
chore: release v1.6.29 ( #10809 )
2026-08-14 14:15:00 -04:00
Taesu
80799e6931
chore: sync main to next
2026-08-14 09:19:43 +09:00
86faaee69b
chore: release v1.6.28 ( #10796 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-13 22:29:39 +00:00
better-release[bot] and GitHub
acbe42128f
chore: release v1.7.0-rc.5 ( #10704 )
2026-08-11 18:12:57 -04:00
Gustavo Valverde
1fa55595e8
test(sso): exercise provider pagination boundary
2026-08-11 15:11:30 -04:00
Gustavo Valverde
5071415398
fix(sso): harden domain organization assignment
2026-08-11 14:53:03 -04:00
Gustavo Valverde
970fd0cc9f
test(sso): align legacy provider fixture
2026-08-11 14:15:27 -04:00
Gustavo Valverde
73d6f80e5b
chore(sync): merge main into next
2026-08-11 14:14:49 -04:00
better-release[bot] and GitHub
be47e9418b
chore: release v1.6.27 ( #10686 )
2026-08-11 13:56:17 -04:00
999acbd41d
Merge commit from fork
...
* fix(sso): bind domain verification to provider state
Complete domain verification with an atomic guarded transition keyed by the provider row, exact domain snapshot, and unverified state. Concurrent provider mutations now return a retryable conflict instead of applying stale DNS proof.
Document the conflict behavior and cover provider mutation, replacement, deletion, simultaneous verification, memory-adapter, and downstream trust cases.
* fix(sso): allow domain verification when the stored bit is null
* test(sso): assert the resolved DNS hostname outside the mock callback
* fix(sso): require verified domains for organization assignment
Use verified persisted provider domains and canonical verified user emails for domain-derived routing and organization membership. Keep explicit organization-bound SSO provisioning separate from domain trust.
* fix(sso): scope domain verification to organization assignment
* fix(sso): keep verified provider lookup internal
---------
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-08-11 13:50:45 -04:00
better-release[bot] and GitHub
f41b7c7857
chore: release v1.7.0-rc.4 ( #10677 )
2026-08-04 20:22:07 -04:00
Gustavo Valverde
5af0b3b77e
chore(sync): merge main into next
2026-08-04 18:34:05 -04:00
better-release[bot] and GitHub
a16b30e843
chore: release v1.6.26 ( #10521 )
2026-08-04 17:15:45 -04:00
Gustavo Valverde and GitHub
8bc28daf42
fix(core): preserve issuer-scoped account identities ( #10668 )
2026-08-04 13:47:09 -04:00
better-release[bot] and GitHub
8bb588dde2
chore: release v1.7.0-rc.3 ( #10496 )
2026-08-03 13:27:15 -04:00
Gustavo Valverde and GitHub
26b194960f
feat(scim): add managed connection catalog and runtime connection resolution ( #10592 )
2026-08-03 13:15:13 -04:00
Gustavo Valverde and GitHub
59c4c832fc
feat(sso): extend resolveUser to SAML and harden provider lifecycle ( #10621 )
2026-08-03 12:51:21 -04:00
65b9f78e6b
chore(deps): bump body-parser from 2.2.2 to 2.3.0 ( #10471 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-07-25 08:26:55 +00:00
better-release[bot] and GitHub
07a646ea19
chore: release v1.6.25 ( #10491 )
2026-07-23 11:44:59 -04:00
better-release[bot] and GitHub
cc708e51bc
chore: release v1.7.0-rc.2 ( #10327 )
2026-07-22 15:51:41 -04:00
better-release[bot]andGitHub
TaesuandGitHub
Gustavo ValverdeandGitHub
