Bereket Engida
90127ff2a1
fix(core): make consumeOne and incrementOne optional on custom adapters
...
1.7.0 made both methods required on CustomAdapter and removed the
factory fallback, so a custom adapter written for 1.6 type-checks
against nothing and throws at request time on the first OTP, magic
link, password reset, or two-factor attempt.
Restore the fallbacks. consumeOne without a native implementation runs
findOne then an id-guarded deleteMany and wins only when exactly one
row was deleted. incrementOne runs a bounded compare-and-swap loop:
findOne, then updateMany guarded on the id and the counter values just
read, retried when a concurrent writer changed the row first. Both are
single guarded statements per attempt, so they stay atomic across
processes without transactions.
2026-09-03 22:14:45 -07:00
5fe5bc21d1
fix(generic-oauth): skip providers whose discovery fails ( #10978 )
...
Co-authored-by: Yuzhong Zhang <BetterAndBetterII@users.noreply.github.com >
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-09-04 01:01:57 +00:00
Taesu and GitHub
a9d8c12d14
feat(haveibeenpwned): expose password compromise check ( #11147 )
2026-09-04 00:26:54 +00:00
b7aeed84ce
perf(test-utils): stop re-deleting cleaned rows — up to 5.4× faster ( #10762 )
...
Co-authored-by: starslingdev[bot] <248995740+starslingdev[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-09-03 18:24:29 +00:00
Taesu and GitHub
fb7c018608
fix(expo): prevent torn cookie storage writes ( #11099 )
2026-09-03 01:45:45 +00:00
Taesu and GitHub
3e9e19746e
feat(oauth): support custom token request authentication ( #11101 )
2026-09-02 14:45:20 +00:00
Taesu and GitHub
b489373732
feat(cli): add Codex MCP target ( #11100 )
2026-09-02 07:17:25 +00:00
Haakam Aujla and GitHub
9fdc5ae023
docs: list AgentID community provider helper ( #11104 )
2026-09-02 16:15:53 +09:00
c652830089
docs: list EVE Online community provider helper ( #10989 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-09-01 23:00:35 +09:00
Taesu and GitHub
626adf6717
docs: establish social provider integration policy ( #11059 )
2026-08-30 01:29:44 +00:00
2471f1ac8b
docs: consolidate dash plugin docs ( #11036 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-08-29 21:18:00 +00:00
Gustavo Valverde and GitHub
2430e3ff1f
feat(cli): add guided 1.6 to 1.7 migration ( #10575 )
2026-08-28 22:34:56 +00:00
Gustavo Valverde and GitHub
6a0a7cbcb1
fix(auth): preserve provider-scoped account identity ( #10969 )
2026-08-28 22:34:54 +00:00
Taesu and GitHub
88f36c63cf
docs: add versioned documentation ( #11041 )
2026-08-29 07:10:36 +09:00
Taesu and GitHub
5bd709640a
fix(two-factor): reject re-enrollment when TOTP is active ( #11037 )
2026-08-28 19:20:46 +00:00
Taesu and GitHub
79904f0be8
fix(origin-check): support fragments in relative redirect URLs ( #10983 )
2026-08-25 10:12:21 +00:00
c8dcfa57e1
fix(origin-check): validate null origins using fetch metadata ( #10959 )
...
Co-authored-by: Alex Yang <14026360+himself65@users.noreply.github.com >
2026-08-25 08:53:55 +00:00
Taesu and GitHub
b4ad5a110c
refactor: centralize placeholder email generation ( #10982 )
2026-08-25 08:15:14 +00:00
Taesu and GitHub
fced1a5d36
fix(origin-check): improve relative callback URL validation ( #10979 )
2026-08-25 00:55:14 +00:00
Bereket Engida and GitHub
0e5181abaa
docs(cli): document schema generation options ( #7319 )
2026-08-25 06:21:55 +09:00
Kevin Marrec and GitHub
fc8655a163
docs: flag indexed fields in the core schema tables ( #10759 )
2026-08-25 06:04:44 +09:00
Taesu and GitHub
bc0e75244a
docs(express): clarify raw body requirements ( #10975 )
2026-08-25 05:21:16 +09:00
Vincent and GitHub
6697f6afd6
docs: fix typo on session management page ( #7202 )
2026-08-25 03:36:55 +09:00
Taesu and GitHub
45e6d0e889
docs(database): reorganize Redis storage examples ( #10964 )
2026-08-24 20:46:44 +09:00
25e92defa0
docs(database): update redis secondary storage example ( #10955 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-08-24 19:58:47 +09:00
d7141a8a31
docs: add APIMethod documentation for anonymous sign-in endpoint ( #7516 )
...
Co-authored-by: Arthur Zhang <a8zhang@uwaterloo.ca >
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-08-24 17:50:37 +09:00
468d3d7e50
docs: update for nitro v3 ( #10462 )
...
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
2026-08-24 16:59:43 +09:00
Taesu and GitHub
238564f311
docs: improve Prisma 7 adapter setup guide ( #10943 )
2026-08-23 15:56:32 +00:00
a4595391d1
docs: add PrismaPg adapter configuration ( #10927 )
...
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2026-08-22 23:21:39 +09:00
Taesu and GitHub
73a61ec1b7
docs: sync sidebar navigation and links ( #10868 )
2026-08-18 21:27:37 +00:00
Gustavo Valverde and GitHub
845bbd1de6
fix(db): refuse adding required no-default columns to populated tables ( #10863 )
2026-08-18 13:47:15 -04:00
Gustavo Valverde and GitHub
73dc9f8c0e
chore: sync main to next
...
chore: sync main to next
2026-08-17 15:44:35 -04:00
Gustavo Valverde
69258d1670
chore: sync main to next
...
Merge branch 'main' into next
2026-08-17 15:29:19 -04:00
Taesu and GitHub
ac1a47553b
docs: refine 1.7 release guidance ( #10841 )
2026-08-17 15:24:42 -04:00
5315e6cd47
docs: announce Better Auth 1.7 ( #10836 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-08-17 14:59:21 -04:00
Jonathan Samines and GitHub
68ad56598c
docs: update infrastructure docs ( #10815 )
2026-08-18 02:38:53 +09:00
Gustavo Valverde and GitHub
14975fbf4b
chore: sync main to next
...
chore: sync main to next
2026-08-14 14:13:30 -04:00
Gustavo Valverde and GitHub
f451d1c758
fix(oauth-provider): complete RP-initiated logout flow ( #10812 )
2026-08-14 17:35:54 +00:00
Gustavo Valverde and GitHub
801968e354
fix(oauth-provider): accept issuer audience for client assertions ( #10811 )
2026-08-14 17:35:53 +00:00
Emmanuel Lucius and GitHub
78d7227d05
docs: fix "Database joins is" grammar across all 7 adapter docs ( #10803 )
2026-08-14 12:00:57 +00:00
Taesu
80799e6931
chore: sync main to next
2026-08-14 09:19:43 +09:00
Taesu and GitHub
a966815b13
fix(oauth-provider): handle voluntary and essential ACR requests ( #10790 )
2026-08-13 19:10:36 +00:00
Taesu and GitHub
8e85b12a62
docs(core): clarify dynamic base URL proxy trust ( #10779 )
2026-08-13 15:16:04 -04:00
Toms Sokolovs and GitHub
d9b3e3d17b
docs: add Mailtrap as an email provider example ( #10765 )
2026-08-12 18:34:56 +00:00
Taesu and GitHub
c35c41ef2a
docs: rewrite Hono integration guide ( #10763 )
2026-08-12 18:25:44 +00:00
Gustavo Valverde and GitHub
3ca2c08dc3
fix(device-authorization): enforce RFC device flow requirements ( #10752 )
2026-08-11 18:05:25 -04:00
6782647d7c
refactor(oauth-provider)!: separate device grant ownership ( #10746 )
...
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-08-11 19:45:23 +00:00
Gustavo Valverde
dfa95cf560
fix(cli): limit version alignment to release train
2026-08-11 14:53:12 -04:00
Gustavo Valverde
73d6f80e5b
chore(sync): merge main into next
2026-08-11 14:14:49 -04:00
999acbd41d
Merge commit from fork
...
* fix(sso): bind domain verification to provider state
Complete domain verification with an atomic guarded transition keyed by the provider row, exact domain snapshot, and unverified state. Concurrent provider mutations now return a retryable conflict instead of applying stale DNS proof.
Document the conflict behavior and cover provider mutation, replacement, deletion, simultaneous verification, memory-adapter, and downstream trust cases.
* fix(sso): allow domain verification when the stored bit is null
* test(sso): assert the resolved DNS hostname outside the mock callback
* fix(sso): require verified domains for organization assignment
Use verified persisted provider domains and canonical verified user emails for domain-derived routing and organization membership. Keep explicit organization-bound SSO provisioning separate from domain trust.
* fix(sso): scope domain verification to organization assignment
* fix(sso): keep verified provider lookup internal
---------
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-08-11 13:50:45 -04:00
Bereket Engida
Haakam AujlaandGitHub
Gustavo ValverdeandGitHub
Bereket EngidaandGitHub
Kevin MarrecandGitHub
VincentandGitHub
Emmanuel LuciusandGitHub
Toms SokolovsandGitHub