Bereket Engida
90127ff2a1
fix(core): make consumeOne and incrementOne optional on custom adapters
...
1.7.0 made both methods required on CustomAdapter and removed the
factory fallback, so a custom adapter written for 1.6 type-checks
against nothing and throws at request time on the first OTP, magic
link, password reset, or two-factor attempt.
Restore the fallbacks. consumeOne without a native implementation runs
findOne then an id-guarded deleteMany and wins only when exactly one
row was deleted. incrementOne runs a bounded compare-and-swap loop:
findOne, then updateMany guarded on the id and the counter values just
read, retried when a concurrent writer changed the row first. Both are
single guarded statements per attempt, so they stay atomic across
processes without transactions.
2026-09-03 22:14:45 -07:00
5fe5bc21d1
fix(generic-oauth): skip providers whose discovery fails ( #10978 )
...
Co-authored-by: Yuzhong Zhang <BetterAndBetterII@users.noreply.github.com >
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-09-04 01:01:57 +00:00
Taesu and GitHub
a9d8c12d14
feat(haveibeenpwned): expose password compromise check ( #11147 )
2026-09-04 00:26:54 +00:00
74a7369179
fix(last-login-method): handle email otp logins ( #10963 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-09-03 23:10:15 +00:00
1d9b55cfdb
fix(cimd): answer the socket's all-addresses lookup in the Node transport ( #10730 )
...
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-09-03 20:25:17 +00:00
b7aeed84ce
perf(test-utils): stop re-deleting cleaned rows — up to 5.4× faster ( #10762 )
...
Co-authored-by: starslingdev[bot] <248995740+starslingdev[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-09-03 18:24:29 +00:00
Taesu and GitHub
b95b7b31e7
fix(cli): skip empty dependency installs ( #11140 )
2026-09-03 18:21:20 +00:00
Taesu and GitHub
8bb68479f5
fix(cli): skip unsupported upgrade specifiers ( #11127 )
2026-09-03 17:29:26 +00:00
Taesu and GitHub
5024647392
fix(cli): report installed dependency versions ( #11126 )
2026-09-03 17:29:26 +00:00
Taesu and GitHub
fb7c018608
fix(expo): prevent torn cookie storage writes ( #11099 )
2026-09-03 01:45:45 +00:00
bf0b5da173
chore(deps): bump @xmldom/xmldom from 0.9.10 to 0.9.12 ( #11130 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-09-02 20:55:07 +00:00
Taesu and GitHub
a2bae0cad0
refactor(oauth): use shared token flow for Reddit ( #11134 )
2026-09-02 20:35:34 +00:00
Taesu and GitHub
9e36635eb2
refactor(oauth): use shared token flow for PayPal ( #11129 )
2026-09-02 20:33:15 +00:00
Taesu and GitHub
baa08f4ee6
fix(tiktok): authenticate token requests with client_key ( #11102 )
2026-09-02 14:45:21 +00:00
Taesu and GitHub
3e9e19746e
feat(oauth): support custom token request authentication ( #11101 )
2026-09-02 14:45:20 +00:00
Taesu and GitHub
b489373732
feat(cli): add Codex MCP target ( #11100 )
2026-09-02 07:17:25 +00:00
Taesu and GitHub
7473d633c7
ci(release): show fallback review feedback ( #11095 )
2026-09-01 16:37:10 +00:00
Taesu and GitHub
e16b40aead
refactor(vue): make Nuxt session fetching type-safe ( #11085 )
2026-09-01 15:34:53 +00:00
Taesu and GitHub
2d5c63d512
fix(vue): prevent Nuxt session hydration mismatches ( #11084 )
2026-09-01 15:34:52 +00:00
Taesu and GitHub
0bb0dbf6f3
perf(organization): reuse role permission schema ( #11069 )
2026-08-30 20:44:22 +00:00
Taesu and GitHub
157ec8d879
perf(core): optimize IP validation ( #11068 )
2026-08-30 20:27:36 +00:00
Taesu and GitHub
c0444dc979
fix: align OpenAPI required fields with Zod 4.5 ( #11066 )
2026-08-30 18:51:24 +00:00
Taesu and GitHub
3660f062d6
fix: prevent slow custom scheme URL parsing ( #11060 )
2026-08-30 00:01:52 +00:00
Taesu and GitHub
e2fb86b27e
test(sso): align mock IdP with SAML redirect binding ( #11058 )
2026-08-29 20:11:38 +00:00
Gustavo Valverde and GitHub
2430e3ff1f
feat(cli): add guided 1.6 to 1.7 migration ( #10575 )
2026-08-28 22:34:56 +00:00
Gustavo Valverde and GitHub
ba4840fbdf
feat(adapters): expose SQL migration connections ( #10966 )
2026-08-28 22:34:55 +00:00
Gustavo Valverde and GitHub
6a0a7cbcb1
fix(auth): preserve provider-scoped account identity ( #10969 )
2026-08-28 22:34:54 +00:00
Amar Kumar Thakur and GitHub
9e0c514aa8
fix: isolate redis storage vitest project ( #11025 )
2026-08-29 04:44:15 +09:00
Taesu and GitHub
bce74ae10b
ci(release): add release note review pass ( #11033 )
2026-08-29 04:29:53 +09:00
Taesu and GitHub
5bd709640a
fix(two-factor): reject re-enrollment when TOTP is active ( #11037 )
2026-08-28 19:20:46 +00:00
9fc7498675
fix(oauth-proxy): run callback hooks for proxied sign-ins ( #10988 )
...
Co-authored-by: Oscar Bolmsten <85102+oscar-b@users.noreply.github.com >
2026-08-28 00:21:53 +09:00
ba12fcdfa7
chore: release v1.7.2 ( #10870 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-26 18:53:57 +00:00
Taesu and GitHub
99da8a6cac
ci(release): clarify preview boundaries ( #11011 )
2026-08-27 00:34:58 +09:00
Taesu and GitHub
860dd435c8
ci(release): replace command acknowledgement with status ( #11009 )
2026-08-26 23:27:34 +09:00
bb8d7c4541
fix(oauth-provider): backport CIMD grant intersection ( #11010 )
...
Co-authored-by: Erik Pastor Rios <erikpastorrios1994@gmail.com >
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-08-26 14:13:59 +00:00
Taesu and GitHub
5dae088f08
ci(release): stabilize preview feedback flow ( #11008 )
2026-08-26 22:29:27 +09:00
Taesu and GitHub
83bec1e716
ci(release): add command feedback reactions ( #11007 )
2026-08-26 21:30:31 +09:00
Taesu and GitHub
6494f2061a
ci(release): add reviewable release note previews ( #10990 )
2026-08-26 20:29:24 +09:00
Taesu and GitHub
79904f0be8
fix(origin-check): support fragments in relative redirect URLs ( #10983 )
2026-08-25 10:12:21 +00:00
c8dcfa57e1
fix(origin-check): validate null origins using fetch metadata ( #10959 )
...
Co-authored-by: Alex Yang <14026360+himself65@users.noreply.github.com >
2026-08-25 08:53:55 +00:00
5aea9f7728
fix(drizzle-adapter): resolve one-to-one relation keys with usePlural ( #10941 )
...
Co-authored-by: Md Nahid Hassan Bhuiyan <70757745+Nahid-NHB@users.noreply.github.com >
2026-08-25 08:49:55 +00:00
Taesu and GitHub
e1d40116e2
fix(logger): respect configured logger in auth request context ( #10939 )
2026-08-25 08:37:57 +00:00
Taesu and GitHub
557e19bfad
refactor(context): clarify auth endpoint context access ( #10938 )
2026-08-25 08:19:52 +00:00
Taesu and GitHub
b4ad5a110c
refactor: centralize placeholder email generation ( #10982 )
2026-08-25 08:15:14 +00:00
Taesu and GitHub
fced1a5d36
fix(origin-check): improve relative callback URL validation ( #10979 )
2026-08-25 00:55:14 +00:00
Gautam Manchandani and GitHub
f6891a2d2d
fix(origin-check): allow tilde in relative callback URLs ( #10041 )
2026-08-25 07:37:05 +09:00
ce8a3ab544
fix(admin): ban without a duration should clear the previous expiration ( #10823 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-08-24 21:47:04 +00:00
Pragnyan Ramtha and GitHub
2c4b6016a3
docs(redis-storage): fix documentation links ( #9731 )
2026-08-25 03:34:39 +09:00
a021eafaf2
fix(client): a client with more plugins fits a narrower client type again ( #10907 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-08-22 17:19:03 +09:00
Taesu and GitHub
c7a5c1a7ed
fix(cookies): warn on invalid cookie cache payloads ( #10934 )
2026-08-22 07:46:42 +00:00
Bereket Engida
Gustavo ValverdeandGitHub
Amar Kumar ThakurandGitHub
Gautam ManchandaniandGitHub
Pragnyan RamthaandGitHub
