821baef304
fix(cookies): relax Cookie separator and centralize parsing
...
Port the hardened Cookie-header parser from main to next. On next,
getChunkedCookie and readExistingChunks parsed the request header with
split("; "), so a chunked account cookie sent behind a proxy that strips the
space after ";" was read as absent and the user appeared logged out. Both now
use the shared parseCookies, which tolerates the missing space and validates
cookie octets. The same parser also backs the two-factor and last-login cookie
helpers, so next matches main again instead of carrying a divergent inline copy.
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
Co-authored-by: sbougerel <5677149+sbougerel@users.noreply.github.com >
2026-05-30 16:18:23 +01:00
Gustavo Valverde and GitHub
e7eb45b065
feat(oauth): per-request additionalParams and loginHint ( #9305 )
2026-05-19 17:18:43 +00:00
03e6c94e96
feat(generic-oauth,sso): support IDP-initiated flows via secure bounce ( #9301 )
...
Co-authored-by: Menachem Hornbacher <mhornbacher@kiddom.co >
2026-05-19 12:29:04 +00:00
602ec40293
feat(sso)!: support multiple IdP signing certificates ( #8805 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-05-18 03:07:37 +00:00
Gustavo Valverde and GitHub
1e5b808472
refactor(oauth): single-source Basic credentials + getHttpTestInstance ( #9657 )
2026-05-17 19:23:45 +00:00
aebf66d8e6
feat: add token endpoint client authentication ( #9625 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-05-16 18:27:15 +00:00
Gautam Manchandani and GitHub
15bb1690b2
feat(cli): add create-admin command ( #9547 )
2026-05-12 10:30:04 +00:00
Taesu and GitHub
75ca6a4585
fix(stripe)!: make onSubscriptionCancel.event required ( #9531 )
2026-05-09 20:17:44 +00:00
4839a2d761
chore: release v1.7.0-beta.3 ( #9323 )
...
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-05-09 19:28:11 +00:00
Taesu and GitHub
9cb67e7606
chore: sync main to next ( #9530 )
...
chore: sync main to next
2026-05-10 04:11:49 +09:00
Taesu
2b83087180
chore: sync main to next
2026-05-10 03:45:29 +09:00
Taesu and GitHub
698678bcd0
chore: revert pnpm v11 upgrade and action-setup bump ( #9529 )
2026-05-09 15:54:10 +00:00
Taesu and GitHub
ad667541c9
chore: bump pnpm/action-setup and drop unnecessary pnpm config ( #9527 )
2026-05-09 15:27:09 +00:00
cbb5014cdf
chore: release v1.6.10 ( #9350 )
...
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-05-09 14:31:47 +00:00
Taesu and GitHub
09f1327acb
fix(api): prevent duplicate set-cookie on redirect ( #9497 )
2026-05-09 13:50:46 +00:00
Taesu and GitHub
15ff28a957
fix(internal-adapter): rename deleteAccount param from accountId to id ( #9503 )
2026-05-09 13:50:32 +00:00
Taesu and GitHub
526aa322ef
chore(changeset): restore changeset for cli named+default fix ( #9477 ) ( #9501 )
2026-05-09 13:50:16 +00:00
Taesu and GitHub
3c45f1a757
test(cli): regression for named + default export via auto-detect ( #9477 ) ( #9500 )
2026-05-09 13:50:00 +00:00
fde043207e
fix: improve link accessibility issues ( #9521 )
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
Co-authored-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2026-05-09 11:31:27 +00:00
Muzzaiyyan Hussain and GitHub
b96bbfe9b7
docs: improve adapter link accessibility ( #9517 )
2026-05-09 11:01:17 +00:00
Muzzaiyyan Hussain and GitHub
ea5bcfaa95
docs: improve accessibility of documentation links ( #9518 )
2026-05-09 11:00:42 +00:00
5e52aa0352
chore(adapters): add shared coverage for empty update where conditions ( #9104 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-05-09 10:57:03 +00:00
Maxwell and GitHub
cf591360e7
fix(organization): re-export field types to prevent TS2742 with additionalFields ( #9349 )
2026-05-08 06:47:33 +00:00
Taesu and GitHub
36464de646
test: assert auth.fetch is the same reference as auth.handler ( #9495 )
2026-05-08 05:17:51 +00:00
Taesu and GitHub
05f9d17aa5
test(e2e): verify auth.fetch default export on Bun and Deno ( #9494 )
2026-05-08 05:17:42 +00:00
Taesu and GitHub
9c4a361520
chore: drop changeset for cli refactor ( #9477 ) ( #9492 )
2026-05-08 03:29:01 +00:00
Maxwell and GitHub
8c1e91757d
fix: warn for cookie-plugin being last in array ( #9484 )
2026-05-08 02:55:33 +00:00
Pooya Parsa and GitHub
12a4128494
refactor(cli): leverage c12 v4 resolveModule for auth config loading ( #9477 )
2026-05-07 13:56:37 -07:00
Pooya Parsa and GitHub
523f95c10d
feat: make Auth instance fetchable ( #9431 )
2026-05-07 13:55:03 -07:00
3a9a2c37ee
chore: expose refreshUserSessions on internal adapter ( #7764 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com >
2026-05-07 10:17:56 +00:00
e9c978e2af
fix(username): respect callbackURL on sign-in ( #9475 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-05-07 05:56:00 +00:00
Taesu and GitHub
51de32e1e8
fix(stripe): lock library-owned Checkout Session fields against getCheckoutSessionParams ( #9481 )
2026-05-07 04:47:02 +00:00
Jonathan Samines and GitHub
2f9454b625
docs: add docs for infra getAllAuditLogs() ( #9478 )
2026-05-06 19:47:38 -06:00
729c00d74c
feat(username): add immutable username option ( #9240 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-05-06 20:58:46 +00:00
Maxwell and GitHub
36ef808c6c
fix: incorrect email casing across one-tap, email-otp & email-verification ( #9369 )
2026-05-06 18:42:13 +00:00
62c4050850
fix(api-keys): api.verifyApiKey does not check against the configId ( #9393 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-05-06 18:22:10 +00:00
9a7b51d0d3
fix(credential): apply enumeration protection when autoSignIn is false ( #8839 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-05-06 18:17:46 +00:00
e71aad3b6d
fix(organization): refresh active role on sign out ( #9440 )
...
Co-authored-by: cyphercodes <cyphercodes@users.noreply.github.com >
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-05-06 18:08:22 +00:00
fc02cedb70
fix(oauth): reject callbacks missing provider account id ( #9456 )
...
Co-authored-by: cyphercodes <cyphercodes@users.noreply.github.com >
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-05-06 17:57:15 +00:00
e44427b373
fix(cli): emit working Kysely init configs ( #9455 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-05-06 17:45:32 +00:00
9f1ef1f7e5
fix(siwe): add getNonce client alias ( #9461 )
...
Co-authored-by: cyphercodes <cyphercodes@users.noreply.github.com >
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-05-06 17:36:35 +00:00
Taesu and GitHub
07b52cbb79
fix(stripe): preserve freeTrial and internal metadata in getCheckoutSessionParams merge ( #9474 )
2026-05-06 15:36:52 +00:00
Taesu and GitHub
8d71f42421
test(types): regression for plugin types through factory and indirection ( #9466 )
2026-05-06 14:16:21 +00:00
Taesu and GitHub
93fd0524e9
test(generic-oauth): cover first-time signin with storeAccountCookie + JWE ( #9470 )
2026-05-06 14:16:05 +00:00
30a1fb9c05
feat(i18n): add built-in translations for 22 languages ( #9157 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
2026-05-06 11:51:17 +00:00
Maxwell and GitHub
1b259024dc
fix(generic-oauth): non-ASCII error_description causes TypeError on redirect ( #9065 )
2026-05-06 11:25:56 +00:00
b2d655c77c
fix: allow dynamic organization invitation roles ( #9437 )
...
Co-authored-by: cyphercodes <cyphercodes@users.noreply.github.com >
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-05-06 08:15:02 +00:00
ddae5817c8
fix(passkey): handle autofill ceremony failures ( #9429 )
...
Co-authored-by: cyphercodes <7407177+cyphercodes@users.noreply.github.com >
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-05-06 05:23:37 +00:00
f7bc1c7349
fix(oauth-provider): index OAuth foreign keys ( #9389 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-05-06 05:22:28 +00:00
d427d1dba9
fix(oauth-provider): export declaration helper types ( #9406 )
...
Co-authored-by: cyphercodes <7407177+cyphercodes@users.noreply.github.com >
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-05-06 05:20:44 +00:00
Gautam ManchandaniandGitHub
Taesu
Muzzaiyyan HussainandGitHub
Pooya ParsaandGitHub
Jonathan SaminesandGitHub
