Commit Graph
4861 Commits
Author SHA1 Message Date
Bereket Engida 22e81e0e5a feat(schema-validation): enhance schema validation to report all issues at once and differentiate core and plugin problems 2026-09-04 14:41:57 -07:00
Bereket Engida f5fc4b66d6 feat(db): validate the database schema against the configuration
Report missing tables and columns, and required columns Better Auth never
writes, with the change that fixes each. Drizzle and Prisma check their
schema definition when the adapter is created; the built-in database runs
one introspection query before the first database call. auth migrate and
auth generate report the same problems. Also stop mergeSchema from
mutating shared plugin schema constants.
2026-09-04 11:41:57 -07:00
Bereket Engida 692d96bd49 fix(auth): identify accounts by providerId and accountId again
Remove the account issuer column introduced in 1.7.0 together with
account.identityStrategy, the accountIssuer provider option, and the
guided auth migrate plan/apply workflow. Accounts are recognized by
(providerId, accountId) as in 1.6.
2026-09-03 21:13:04 -07:00
5fe5bc21d1 fix(generic-oauth): skip providers whose discovery fails (#10978)
Co-authored-by: Yuzhong Zhang <BetterAndBetterII@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
2026-09-04 01:01:57 +00:00
TaesuandGitHub a9d8c12d14 feat(haveibeenpwned): expose password compromise check (#11147) 2026-09-04 00:26:54 +00:00
74a7369179 fix(last-login-method): handle email otp logins (#10963)
Co-authored-by: Taesu <bytaesu@gmail.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
2026-09-03 23:10:15 +00:00
1d9b55cfdb fix(cimd): answer the socket's all-addresses lookup in the Node transport (#10730)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
2026-09-03 20:25:17 +00:00
starslingdev[bot]GitHubstarslingdev[bot] <248995740+starslingdev[bot]@users.noreply.github.com>Taesu
b7aeed84ce perf(test-utils): stop re-deleting cleaned rows — up to 5.4× faster (#10762)
Co-authored-by: starslingdev[bot] <248995740+starslingdev[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
2026-09-03 18:24:29 +00:00
TaesuandGitHub b95b7b31e7 fix(cli): skip empty dependency installs (#11140) 2026-09-03 18:21:20 +00:00
TaesuandGitHub 8bb68479f5 fix(cli): skip unsupported upgrade specifiers (#11127) 2026-09-03 17:29:26 +00:00
TaesuandGitHub 5024647392 fix(cli): report installed dependency versions (#11126) 2026-09-03 17:29:26 +00:00
TaesuandGitHub fb7c018608 fix(expo): prevent torn cookie storage writes (#11099) 2026-09-03 01:45:45 +00:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>Taesu
bf0b5da173 chore(deps): bump @xmldom/xmldom from 0.9.10 to 0.9.12 (#11130)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
2026-09-02 20:55:07 +00:00
TaesuandGitHub a2bae0cad0 refactor(oauth): use shared token flow for Reddit (#11134) 2026-09-02 20:35:34 +00:00
TaesuandGitHub 9e36635eb2 refactor(oauth): use shared token flow for PayPal (#11129) 2026-09-02 20:33:15 +00:00
TaesuandGitHub baa08f4ee6 fix(tiktok): authenticate token requests with client_key (#11102) 2026-09-02 14:45:21 +00:00
TaesuandGitHub 3e9e19746e feat(oauth): support custom token request authentication (#11101) 2026-09-02 14:45:20 +00:00
TaesuandGitHub b489373732 feat(cli): add Codex MCP target (#11100) 2026-09-02 07:17:25 +00:00
TaesuandGitHub 7473d633c7 ci(release): show fallback review feedback (#11095) 2026-09-01 16:37:10 +00:00
TaesuandGitHub e16b40aead refactor(vue): make Nuxt session fetching type-safe (#11085) 2026-09-01 15:34:53 +00:00
TaesuandGitHub 2d5c63d512 fix(vue): prevent Nuxt session hydration mismatches (#11084) 2026-09-01 15:34:52 +00:00
TaesuandGitHub 0bb0dbf6f3 perf(organization): reuse role permission schema (#11069) 2026-08-30 20:44:22 +00:00
TaesuandGitHub 157ec8d879 perf(core): optimize IP validation (#11068) 2026-08-30 20:27:36 +00:00
TaesuandGitHub c0444dc979 fix: align OpenAPI required fields with Zod 4.5 (#11066) 2026-08-30 18:51:24 +00:00
TaesuandGitHub 3660f062d6 fix: prevent slow custom scheme URL parsing (#11060) 2026-08-30 00:01:52 +00:00
TaesuandGitHub e2fb86b27e test(sso): align mock IdP with SAML redirect binding (#11058) 2026-08-29 20:11:38 +00:00
Gustavo ValverdeandGitHub 2430e3ff1f feat(cli): add guided 1.6 to 1.7 migration (#10575) 2026-08-28 22:34:56 +00:00
Gustavo ValverdeandGitHub ba4840fbdf feat(adapters): expose SQL migration connections (#10966) 2026-08-28 22:34:55 +00:00
Gustavo ValverdeandGitHub 6a0a7cbcb1 fix(auth): preserve provider-scoped account identity (#10969) 2026-08-28 22:34:54 +00:00
Amar Kumar ThakurandGitHub 9e0c514aa8 fix: isolate redis storage vitest project (#11025) 2026-08-29 04:44:15 +09:00
TaesuandGitHub bce74ae10b ci(release): add release note review pass (#11033) 2026-08-29 04:29:53 +09:00
TaesuandGitHub 5bd709640a fix(two-factor): reject re-enrollment when TOTP is active (#11037) 2026-08-28 19:20:46 +00:00
9fc7498675 fix(oauth-proxy): run callback hooks for proxied sign-ins (#10988)
Co-authored-by: Oscar Bolmsten <85102+oscar-b@users.noreply.github.com>
2026-08-28 00:21:53 +09:00
better-release[bot]GitHubgithub-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
ba12fcdfa7 chore: release v1.7.2 (#10870)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-26 18:53:57 +00:00
TaesuandGitHub 99da8a6cac ci(release): clarify preview boundaries (#11011) 2026-08-27 00:34:58 +09:00
TaesuandGitHub 860dd435c8 ci(release): replace command acknowledgement with status (#11009) 2026-08-26 23:27:34 +09:00
bb8d7c4541 fix(oauth-provider): backport CIMD grant intersection (#11010)
Co-authored-by: Erik Pastor Rios <erikpastorrios1994@gmail.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-08-26 14:13:59 +00:00
TaesuandGitHub 5dae088f08 ci(release): stabilize preview feedback flow (#11008) 2026-08-26 22:29:27 +09:00
TaesuandGitHub 83bec1e716 ci(release): add command feedback reactions (#11007) 2026-08-26 21:30:31 +09:00
TaesuandGitHub 6494f2061a ci(release): add reviewable release note previews (#10990) 2026-08-26 20:29:24 +09:00
TaesuandGitHub 79904f0be8 fix(origin-check): support fragments in relative redirect URLs (#10983) 2026-08-25 10:12:21 +00:00
c8dcfa57e1 fix(origin-check): validate null origins using fetch metadata (#10959)
Co-authored-by: Alex Yang <14026360+himself65@users.noreply.github.com>
2026-08-25 08:53:55 +00:00
5aea9f7728 fix(drizzle-adapter): resolve one-to-one relation keys with usePlural (#10941)
Co-authored-by: Md Nahid Hassan Bhuiyan <70757745+Nahid-NHB@users.noreply.github.com>
2026-08-25 08:49:55 +00:00
TaesuandGitHub e1d40116e2 fix(logger): respect configured logger in auth request context (#10939) 2026-08-25 08:37:57 +00:00
TaesuandGitHub 557e19bfad refactor(context): clarify auth endpoint context access (#10938) 2026-08-25 08:19:52 +00:00
TaesuandGitHub b4ad5a110c refactor: centralize placeholder email generation (#10982) 2026-08-25 08:15:14 +00:00
TaesuandGitHub fced1a5d36 fix(origin-check): improve relative callback URL validation (#10979) 2026-08-25 00:55:14 +00:00
Gautam ManchandaniandGitHub f6891a2d2d fix(origin-check): allow tilde in relative callback URLs (#10041) 2026-08-25 07:37:05 +09:00
ce8a3ab544 fix(admin): ban without a duration should clear the previous expiration (#10823)
Co-authored-by: Taesu <bytaesu@gmail.com>
2026-08-24 21:47:04 +00:00
Pragnyan RamthaandGitHub 2c4b6016a3 docs(redis-storage): fix documentation links (#9731) 2026-08-25 03:34:39 +09:00