Bereket Engida
22e81e0e5a
feat(schema-validation): enhance schema validation to report all issues at once and differentiate core and plugin problems
2026-09-04 14:41:57 -07:00
Bereket Engida
f5fc4b66d6
feat(db): validate the database schema against the configuration
...
Report missing tables and columns, and required columns Better Auth never
writes, with the change that fixes each. Drizzle and Prisma check their
schema definition when the adapter is created; the built-in database runs
one introspection query before the first database call. auth migrate and
auth generate report the same problems. Also stop mergeSchema from
mutating shared plugin schema constants.
2026-09-04 11:41:57 -07:00
Bereket Engida
692d96bd49
fix(auth): identify accounts by providerId and accountId again
...
Remove the account issuer column introduced in 1.7.0 together with
account.identityStrategy, the accountIssuer provider option, and the
guided auth migrate plan/apply workflow. Accounts are recognized by
(providerId, accountId) as in 1.6.
2026-09-03 21:13:04 -07:00
5fe5bc21d1
fix(generic-oauth): skip providers whose discovery fails ( #10978 )
...
Co-authored-by: Yuzhong Zhang <BetterAndBetterII@users.noreply.github.com >
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-09-04 01:01:57 +00:00
Taesu and GitHub
a9d8c12d14
feat(haveibeenpwned): expose password compromise check ( #11147 )
2026-09-04 00:26:54 +00:00
74a7369179
fix(last-login-method): handle email otp logins ( #10963 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-09-03 23:10:15 +00:00
1d9b55cfdb
fix(cimd): answer the socket's all-addresses lookup in the Node transport ( #10730 )
...
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-09-03 20:25:17 +00:00
b7aeed84ce
perf(test-utils): stop re-deleting cleaned rows — up to 5.4× faster ( #10762 )
...
Co-authored-by: starslingdev[bot] <248995740+starslingdev[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-09-03 18:24:29 +00:00
Taesu and GitHub
b95b7b31e7
fix(cli): skip empty dependency installs ( #11140 )
2026-09-03 18:21:20 +00:00
Taesu and GitHub
8bb68479f5
fix(cli): skip unsupported upgrade specifiers ( #11127 )
2026-09-03 17:29:26 +00:00
Taesu and GitHub
5024647392
fix(cli): report installed dependency versions ( #11126 )
2026-09-03 17:29:26 +00:00
Taesu and GitHub
fb7c018608
fix(expo): prevent torn cookie storage writes ( #11099 )
2026-09-03 01:45:45 +00:00
bf0b5da173
chore(deps): bump @xmldom/xmldom from 0.9.10 to 0.9.12 ( #11130 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-09-02 20:55:07 +00:00
Taesu and GitHub
a2bae0cad0
refactor(oauth): use shared token flow for Reddit ( #11134 )
2026-09-02 20:35:34 +00:00
Taesu and GitHub
9e36635eb2
refactor(oauth): use shared token flow for PayPal ( #11129 )
2026-09-02 20:33:15 +00:00
Taesu and GitHub
baa08f4ee6
fix(tiktok): authenticate token requests with client_key ( #11102 )
2026-09-02 14:45:21 +00:00
Taesu and GitHub
3e9e19746e
feat(oauth): support custom token request authentication ( #11101 )
2026-09-02 14:45:20 +00:00
Taesu and GitHub
b489373732
feat(cli): add Codex MCP target ( #11100 )
2026-09-02 07:17:25 +00:00
Taesu and GitHub
7473d633c7
ci(release): show fallback review feedback ( #11095 )
2026-09-01 16:37:10 +00:00
Taesu and GitHub
e16b40aead
refactor(vue): make Nuxt session fetching type-safe ( #11085 )
2026-09-01 15:34:53 +00:00
Taesu and GitHub
2d5c63d512
fix(vue): prevent Nuxt session hydration mismatches ( #11084 )
2026-09-01 15:34:52 +00:00
Taesu and GitHub
0bb0dbf6f3
perf(organization): reuse role permission schema ( #11069 )
2026-08-30 20:44:22 +00:00
Taesu and GitHub
157ec8d879
perf(core): optimize IP validation ( #11068 )
2026-08-30 20:27:36 +00:00
Taesu and GitHub
c0444dc979
fix: align OpenAPI required fields with Zod 4.5 ( #11066 )
2026-08-30 18:51:24 +00:00
Taesu and GitHub
3660f062d6
fix: prevent slow custom scheme URL parsing ( #11060 )
2026-08-30 00:01:52 +00:00
Taesu and GitHub
e2fb86b27e
test(sso): align mock IdP with SAML redirect binding ( #11058 )
2026-08-29 20:11:38 +00:00
Gustavo Valverde and GitHub
2430e3ff1f
feat(cli): add guided 1.6 to 1.7 migration ( #10575 )
2026-08-28 22:34:56 +00:00
Gustavo Valverde and GitHub
ba4840fbdf
feat(adapters): expose SQL migration connections ( #10966 )
2026-08-28 22:34:55 +00:00
Gustavo Valverde and GitHub
6a0a7cbcb1
fix(auth): preserve provider-scoped account identity ( #10969 )
2026-08-28 22:34:54 +00:00
Amar Kumar Thakur and GitHub
9e0c514aa8
fix: isolate redis storage vitest project ( #11025 )
2026-08-29 04:44:15 +09:00
Taesu and GitHub
bce74ae10b
ci(release): add release note review pass ( #11033 )
2026-08-29 04:29:53 +09:00
Taesu and GitHub
5bd709640a
fix(two-factor): reject re-enrollment when TOTP is active ( #11037 )
2026-08-28 19:20:46 +00:00
9fc7498675
fix(oauth-proxy): run callback hooks for proxied sign-ins ( #10988 )
...
Co-authored-by: Oscar Bolmsten <85102+oscar-b@users.noreply.github.com >
2026-08-28 00:21:53 +09:00
ba12fcdfa7
chore: release v1.7.2 ( #10870 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-26 18:53:57 +00:00
Taesu and GitHub
99da8a6cac
ci(release): clarify preview boundaries ( #11011 )
2026-08-27 00:34:58 +09:00
Taesu and GitHub
860dd435c8
ci(release): replace command acknowledgement with status ( #11009 )
2026-08-26 23:27:34 +09:00
bb8d7c4541
fix(oauth-provider): backport CIMD grant intersection ( #11010 )
...
Co-authored-by: Erik Pastor Rios <erikpastorrios1994@gmail.com >
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-08-26 14:13:59 +00:00
Taesu and GitHub
5dae088f08
ci(release): stabilize preview feedback flow ( #11008 )
2026-08-26 22:29:27 +09:00
Taesu and GitHub
83bec1e716
ci(release): add command feedback reactions ( #11007 )
2026-08-26 21:30:31 +09:00
Taesu and GitHub
6494f2061a
ci(release): add reviewable release note previews ( #10990 )
2026-08-26 20:29:24 +09:00
Taesu and GitHub
79904f0be8
fix(origin-check): support fragments in relative redirect URLs ( #10983 )
2026-08-25 10:12:21 +00:00
c8dcfa57e1
fix(origin-check): validate null origins using fetch metadata ( #10959 )
...
Co-authored-by: Alex Yang <14026360+himself65@users.noreply.github.com >
2026-08-25 08:53:55 +00:00
5aea9f7728
fix(drizzle-adapter): resolve one-to-one relation keys with usePlural ( #10941 )
...
Co-authored-by: Md Nahid Hassan Bhuiyan <70757745+Nahid-NHB@users.noreply.github.com >
2026-08-25 08:49:55 +00:00
Taesu and GitHub
e1d40116e2
fix(logger): respect configured logger in auth request context ( #10939 )
2026-08-25 08:37:57 +00:00
Taesu and GitHub
557e19bfad
refactor(context): clarify auth endpoint context access ( #10938 )
2026-08-25 08:19:52 +00:00
Taesu and GitHub
b4ad5a110c
refactor: centralize placeholder email generation ( #10982 )
2026-08-25 08:15:14 +00:00
Taesu and GitHub
fced1a5d36
fix(origin-check): improve relative callback URL validation ( #10979 )
2026-08-25 00:55:14 +00:00
Gautam Manchandani and GitHub
f6891a2d2d
fix(origin-check): allow tilde in relative callback URLs ( #10041 )
2026-08-25 07:37:05 +09:00
ce8a3ab544
fix(admin): ban without a duration should clear the previous expiration ( #10823 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-08-24 21:47:04 +00:00
Pragnyan Ramtha and GitHub
2c4b6016a3
docs(redis-storage): fix documentation links ( #9731 )
2026-08-25 03:34:39 +09:00