3720d57fb6
fix(sso): accept SAML responses addressed to the callbackUrl ACS ( #11730 )
...
Co-authored-by: kaiizer777 <292549577+kaiizer777@users.noreply.github.com >
2026-10-14 10:22:19 +01:00
54e96dd6b0
fix(oauth): persist account cookie after implicit linking ( #11300 )
...
Co-authored-by: Vishesh Verma <visheshverma250703@gmail.com >
2026-09-16 15:59:56 +09:00
c11bfa667f
chore: release v1.6.33 ( #11292 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-15 07:01:23 +09:00
ecc4e0df7b
fix(core): preserve database option type inference ( #11291 )
...
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
Co-authored-by: Alexey Sokolov <alexvyber@gmail.com >
2026-09-15 06:55:48 +09:00
c768d73625
chore: release v1.6.32 ( #11288 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-15 03:40:46 +09:00
a17efd7cf0
fix(captcha): log Turnstile verification failures ( #11286 )
...
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-09-15 03:32:33 +09:00
Taesu and GitHub
bb2b9ef45d
ci(release): align v1.6 release configuration ( #11256 )
2026-09-11 17:58:55 +09:00
886311168d
chore: release v1.6.31 ( #11241 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-10 18:16:55 +09:00
Taesu and GitHub
22e932e2d5
ci(release): bootstrap v1.6 release workflows ( #11239 )
2026-09-10 17:54:53 +09:00
0e58f97aa1
feat(instrumentation): add option to disable tracing ( #11228 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-09-09 19:03:39 +09:00
Taesu and GitHub
3dac8247a6
docs: preserve v1.6 navigation metadata ( #11005 )
2026-08-27 03:59:00 +09:00
better-release[bot] and GitHub
e84ec5e76d
chore: release v1.6.30 ( #10840 )
2026-08-17 15:05:06 -04:00
Taesu and GitHub
07c17189f5
fix(core): prevent async context initialization races ( #10833 )
2026-08-17 17:37:39 +00:00
better-release[bot] and GitHub
58c49eb97f
chore: release v1.6.29 ( #10809 )
2026-08-14 14:15:00 -04:00
e6e1b4e814
perf(db): replace sequential get-then-delete loop with parallel deletes in deleteSessions ( #10805 )
...
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com >
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-08-14 13:42:47 +00:00
Emmanuel Lucius and GitHub
78d7227d05
docs: fix "Database joins is" grammar across all 7 adapter docs ( #10803 )
2026-08-14 12:00:57 +00:00
86faaee69b
chore: release v1.6.28 ( #10796 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-13 22:29:39 +00:00
Taesu and GitHub
773de54b18
fix(client): deduplicate settled session requests during Suspense retries ( #10769 )
2026-08-13 22:04:08 +00:00
Taesu and GitHub
2ad2928f96
fix(build): restore declaration compatibility ( #10794 )
2026-08-13 18:21:53 +00:00
Taesu and GitHub
c92a1ca27b
chore: upgrade next to 16.3 ( #10787 )
2026-08-13 18:06:00 +00:00
Toms Sokolovs and GitHub
d9b3e3d17b
docs: add Mailtrap as an email provider example ( #10765 )
2026-08-12 18:34:56 +00:00
Hussein Ahmad and GitHub
c8e047a10a
docs: add better-auth-azure-cosmos to community adapters ( #10768 )
2026-08-12 18:30:20 +00:00
Fabian Hiller and GitHub
11b91e27c3
docs: fix validator JSDoc to mention Standard Schema ( #10761 )
2026-08-12 18:29:40 +00:00
Taesu and GitHub
c35c41ef2a
docs: rewrite Hono integration guide ( #10763 )
2026-08-12 18:25:44 +00:00
better-release[bot] and GitHub
be47e9418b
chore: release v1.6.27 ( #10686 )
2026-08-11 13:56:17 -04:00
999acbd41d
Merge commit from fork
...
* fix(sso): bind domain verification to provider state
Complete domain verification with an atomic guarded transition keyed by the provider row, exact domain snapshot, and unverified state. Concurrent provider mutations now return a retryable conflict instead of applying stale DNS proof.
Document the conflict behavior and cover provider mutation, replacement, deletion, simultaneous verification, memory-adapter, and downstream trust cases.
* fix(sso): allow domain verification when the stored bit is null
* test(sso): assert the resolved DNS hostname outside the mock callback
* fix(sso): require verified domains for organization assignment
Use verified persisted provider domains and canonical verified user emails for domain-derived routing and organization membership. Keep explicit organization-bound SSO provisioning separate from domain trust.
* fix(sso): scope domain verification to organization assignment
* fix(sso): keep verified provider lookup internal
---------
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-08-11 13:50:45 -04:00
Taesu and GitHub
b8077b74ef
fix(cli): align packages with running CLI version ( #10743 )
2026-08-10 16:47:54 +00:00
8a3fa826e1
docs: make AI chat failures recoverable ( #10737 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-10 15:11:39 +00:00
95e248eb88
chore(deps): bump mermaid from 11.15.0 to 11.16.1 ( #10715 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-07 12:30:18 +00:00
Taesu and GitHub
2ae491eac3
fix(types): align auth endpoints with better-call ( #10657 )
2026-08-07 11:33:52 +00:00
Taesu and GitHub
90b5093447
fix(client): deduplicate session requests across suspense retries ( #10676 )
2026-08-04 22:25:16 +00:00
Taesu and GitHub
c3dc5726b4
test(electron): wait for session refresh after sign-out ( #10685 )
2026-08-05 07:18:26 +09:00
Taesu and GitHub
7672d175ce
chore(deps): tighten undici override to >=7.29.0 ( #10684 )
2026-08-04 21:57:42 +00:00
Taesu and GitHub
d68fec0c9e
chore: bump postcss ( #10683 )
2026-08-04 21:49:53 +00:00
a8d52f29d2
chore(deps): bump hono from 4.12.31 to 4.12.34 ( #10669 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 21:19:15 +00:00
Taesu and GitHub
1e7f8754c4
docs: update TanStack logo ( #10678 )
2026-08-05 06:23:23 +09:00
better-release[bot] and GitHub
a16b30e843
chore: release v1.6.26 ( #10521 )
2026-08-04 17:15:45 -04:00
0b075395c5
docs: add SuperSend TX as an email provider example ( #10661 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-04 21:06:48 +09:00
Emmanuel Lucius and GitHub
114214a76a
docs: fix 2FA description in client plugin setup ( #10659 )
2026-08-04 16:45:41 +09:00
4533e2aeea
docs: centralize GHA reporting over email ( #10663 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-04 06:56:14 +00:00
Gustavo Valverde and GitHub
701cd43bab
docs(changeset): describe the jwt transaction fix by its mechanism ( #10633 )
2026-08-03 12:52:31 -04:00
Jeroen van der Merwe and GitHub
9ede8059b5
fix(rate-limit): await database cleanup by default ( #10619 )
2026-08-03 10:48:19 +00:00
Krish Vachhani and GitHub
af50c45553
fix(one-tap): preserve client plugin inference with oneTapClient ( #10635 )
2026-08-03 10:47:22 +00:00
Gustavo Valverde and GitHub
222facff55
fix(jwt): resolve the transaction-scoped adapter when signing ( #10623 )
2026-08-01 12:04:34 +00:00
d8327f1fea
fix(email-otp): verify OTP before revealing whether the email exists ( #10605 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-07-31 07:32:40 +00:00
Taesu and GitHub
e7b0eba327
fix(oauth-proxy): preserve Apple user data ( #10599 )
2026-07-31 07:11:05 +00:00
Taesu and GitHub
5a811f1b43
fix(email-otp): pass verification type on sign-up ( #10608 )
2026-07-31 06:06:06 +00:00
Gustavo Valverde and GitHub
675eae7a8d
chore(deps): patch remaining security floors ( #10604 )
2026-07-30 22:39:43 -04:00
Gustavo Valverde and GitHub
157ed18c02
chore(deps): upgrade sharp to patched 0.35 ( #10602 )
2026-07-30 23:11:30 +00:00
Gustavo Valverde and GitHub
e18606b1c4
chore(deps): upgrade OpenTelemetry to v2 ( #10601 )
2026-07-30 22:32:35 +00:00
Toms SokolovsandGitHub
Hussein AhmadandGitHub
Fabian HillerandGitHub
Jeroen van der MerweandGitHub
Krish VachhaniandGitHub
