Commit Graph

6804 Commits

Author SHA1 Message Date
Gustavo Valverde
37f60cb176 fix(sso): validate user-supplied OIDC endpoint URLs at registration and update (#9574)
Co-authored-by: vaadata-poyetont <poyetont@vaadata.com>
2026-05-12 13:12:42 +00:00
Gustavo Valverde
23094a628f fix(organization): default-on requireEmailVerificationOnInvitation & extend gate to get/list (#9577) 2026-05-12 13:12:03 +00:00
Gustavo Valverde
1f2ff4215c fix(oidc-provider, mcp): authenticate confidential clients on refresh_token grant (#9576) 2026-05-12 13:09:27 +00:00
Gustavo Valverde
5f09d566a6 fix(magic-link): consume verification token atomically on verify (#9572) 2026-05-12 12:50:38 +00:00
Gustavo Valverde
2f5d91c5bb fix(scim): reject built-in provider id collisions on SCIM token issuance (#9579) 2026-05-12 12:44:41 +00:00
Gustavo Valverde
99a254a79b fix(device-authorization): bind approval to verifier session (#9573) 2026-05-12 11:40:18 +00:00
Taesu
455efb67b7 docs: add per-ip rate limit to enterprise contact form (#9570) 2026-05-12 08:16:40 +00:00
dependabot[bot]
e0f94294a5 chore(deps): bump mermaid from 11.13.0 to 11.15.0 (#9566)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
2026-05-12 08:15:35 +00:00
Taesu
98e7e38867 test(stripe): restructure test suite with typed Stripe factories (#9542) 2026-05-12 08:06:52 +00:00
Gustavo Valverde
0cbddb8fa4 refactor(db): rename claimOne adapter primitive to consumeOne (#9568) 2026-05-12 07:44:07 +00:00
Taesu
62b8793c11 chore(deps): consolidate kysely into pnpm catalog (#9569) 2026-05-12 07:38:59 +00:00
dependabot[bot]
3bec284c4f chore(deps): bump kysely from 0.28.14 to 0.28.17 (#9567)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
2026-05-12 06:25:23 +00:00
Gustavo Valverde
a2c0c9346e feat(db): add atomic claimOne adapter primitive (#9560) 2026-05-11 20:10:29 +00:00
Maxwell
a26333b5fb fix: cleanup sessions when deleting users (#9162)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-05-11 19:14:18 +00:00
Jarod Stewart
86765f1597 fix(sso): require org admin role to register SSO providers (#9220)
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-05-11 17:04:01 +00:00
Jonathan Samines
eae63a9aff docs: add docs for infra timeout options (#9559) 2026-05-11 08:59:03 -06:00
Maxwell
ee93485499 fix: add error code to change-email-disabled (#8948) 2026-05-11 11:49:38 +00:00
Vishesh Verma
c20796fd7d chore(ci): use ubuntu-24.04 fallback runner for forks (#9544)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-05-11 11:07:24 +00:00
Dipan Chakraborty
142b86c43d fix(anonymous): call onLinkAccount on email verification sign-in (#9548)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-05-11 10:58:53 +00:00
Gustavo Valverde
e21d744987 fix(rate-limit): widen ipv6Subnet type and correct default in docs (#9545) 2026-05-11 07:04:16 +00:00
Adomas
b03998586a fix(api-key): return 429 instead of 401 when API key is rate limited (#9505)
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
2026-05-09 20:09:43 +00:00
Taesu
698678bcd0 chore: revert pnpm v11 upgrade and action-setup bump (#9529) @better-auth/api-key@1.6.10 @better-auth/core@1.6.10 @better-auth/drizzle-adapter@1.6.10 @better-auth/electron@1.6.10 @better-auth/expo@1.6.10 @better-auth/i18n@1.6.10 @better-auth/kysely-adapter@1.6.10 @better-auth/memory-adapter@1.6.10 @better-auth/mongo-adapter@1.6.10 @better-auth/oauth-provider@1.6.10 @better-auth/passkey@1.6.10 @better-auth/prisma-adapter@1.6.10 @better-auth/redis-storage@1.6.10 @better-auth/scim@1.6.10 @better-auth/sso@1.6.10 @better-auth/stripe@1.6.10 @better-auth/telemetry@1.6.10 @better-auth/test-utils@1.6.10 auth@1.6.10 better-auth@1.6.10 v1.6.10 2026-05-09 15:54:10 +00:00
Taesu
ad667541c9 chore: bump pnpm/action-setup and drop unnecessary pnpm config (#9527) 2026-05-09 15:27:09 +00:00
better-release[bot]
cbb5014cdf chore: release v1.6.10 (#9350)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-05-09 14:31:47 +00:00
Taesu
09f1327acb fix(api): prevent duplicate set-cookie on redirect (#9497) 2026-05-09 13:50:46 +00:00
Taesu
15ff28a957 fix(internal-adapter): rename deleteAccount param from accountId to id (#9503) 2026-05-09 13:50:32 +00:00
Maxwell
fde043207e fix: improve link accessibility issues (#9521)
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
Co-authored-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2026-05-09 11:31:27 +00:00
Muzzaiyyan Hussain
b96bbfe9b7 docs: improve adapter link accessibility (#9517) 2026-05-09 11:01:17 +00:00
Muzzaiyyan Hussain
ea5bcfaa95 docs: improve accessibility of documentation links (#9518) 2026-05-09 11:00:42 +00:00
Muzzaiyyan Hussain
5e52aa0352 chore(adapters): add shared coverage for empty update where conditions (#9104)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-05-09 10:57:03 +00:00
Maxwell
cf591360e7 fix(organization): re-export field types to prevent TS2742 with additionalFields (#9349) 2026-05-08 06:47:33 +00:00
Maxwell
8c1e91757d fix: warn for cookie-plugin being last in array (#9484) 2026-05-08 02:55:33 +00:00
oimmi
3a9a2c37ee chore: expose refreshUserSessions on internal adapter (#7764)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com>
2026-05-07 10:17:56 +00:00
Jaydeep pipaliya
e9c978e2af fix(username): respect callbackURL on sign-in (#9475)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-05-07 05:56:00 +00:00
Taesu
51de32e1e8 fix(stripe): lock library-owned Checkout Session fields against getCheckoutSessionParams (#9481) 2026-05-07 04:47:02 +00:00
Jonathan Samines
2f9454b625 docs: add docs for infra getAllAuditLogs() (#9478) 2026-05-06 19:47:38 -06:00
Maxwell
36ef808c6c fix: incorrect email casing across one-tap, email-otp & email-verification (#9369) 2026-05-06 18:42:13 +00:00
Samuel Hurel
62c4050850 fix(api-keys): api.verifyApiKey does not check against the configId (#9393)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-05-06 18:22:10 +00:00
Dipan Chakraborty
9a7b51d0d3 fix(credential): apply enumeration protection when autoSignIn is false (#8839)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-05-06 18:17:46 +00:00
Rayan Salhab
e71aad3b6d fix(organization): refresh active role on sign out (#9440)
Co-authored-by: cyphercodes <cyphercodes@users.noreply.github.com>
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-05-06 18:08:22 +00:00
Rayan Salhab
fc02cedb70 fix(oauth): reject callbacks missing provider account id (#9456)
Co-authored-by: cyphercodes <cyphercodes@users.noreply.github.com>
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-05-06 17:57:15 +00:00
Gautam Manchandani
e44427b373 fix(cli): emit working Kysely init configs (#9455)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-05-06 17:45:32 +00:00
Rayan Salhab
9f1ef1f7e5 fix(siwe): add getNonce client alias (#9461)
Co-authored-by: cyphercodes <cyphercodes@users.noreply.github.com>
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-05-06 17:36:35 +00:00
Taesu
07b52cbb79 fix(stripe): preserve freeTrial and internal metadata in getCheckoutSessionParams merge (#9474) 2026-05-06 15:36:52 +00:00
Taesu
8d71f42421 test(types): regression for plugin types through factory and indirection (#9466) 2026-05-06 14:16:21 +00:00
Taesu
93fd0524e9 test(generic-oauth): cover first-time signin with storeAccountCookie + JWE (#9470) 2026-05-06 14:16:05 +00:00
Maxwell
1b259024dc fix(generic-oauth): non-ASCII error_description causes TypeError on redirect (#9065) 2026-05-06 11:25:56 +00:00
Rayan Salhab
b2d655c77c fix: allow dynamic organization invitation roles (#9437)
Co-authored-by: cyphercodes <cyphercodes@users.noreply.github.com>
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-05-06 08:15:02 +00:00
Rayan Salhab
ddae5817c8 fix(passkey): handle autofill ceremony failures (#9429)
Co-authored-by: cyphercodes <7407177+cyphercodes@users.noreply.github.com>
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-05-06 05:23:37 +00:00
Rachel Chen
f7bc1c7349 fix(oauth-provider): index OAuth foreign keys (#9389)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-05-06 05:22:28 +00:00