  Gustavo ValverdeandGitHub
|
3a79aff58e
|
feat(google): add includeGrantedScopes option (#10129)
|
2026-06-18 08:31:10 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
97903c9cca
|
fix(oauth): preserve account.scope across re-auth and refresh (#10128)
|
2026-06-18 08:17:27 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
7c7313c818
|
fix(oauth): derive redirect URI from per-request baseURL (#10127)
|
2026-06-18 07:26:59 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
a83152e2e8
|
fix(oauth): create new oauth account in transaction (#10125)
|
2026-06-17 22:58:04 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
06daf7011e
|
fix(oauth): preserve user on null profile override (#10124)
|
2026-06-17 22:48:14 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
27f06181c7
|
revert(oauth): remove granted scopes architecture (#10123)
|
2026-06-17 22:27:20 -07:00 |
|
 better-release[bot]andGitHub
|
1bf3c9d374
|
chore: release v1.7.0-beta.7 (#10116)
v1.7.0-beta.7
|
2026-06-17 18:34:04 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
de8394de20
|
fix(cimd): route client_id SSRF checks through the shared host classifier (#10126)
|
2026-06-17 18:29:06 -07:00 |
|
|
3d04fababb
|
feat(generic-oauth): forward refreshTokenParams to token endpoint (#9948)
Signed-off-by: Yordis Prieto <yordis.prieto@gmail.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-06-17 21:03:56 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
4fe730a9c1
|
feat(oauth-provider): expose sessionId to id_token claim contributors (#10113)
|
2026-06-17 11:53:30 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
27b5d80227
|
fix(generic-oauth): bind id token nonce in redirect flow (#10095)
|
2026-06-16 21:20:07 +00:00 |
|
|
better-release[bot]andGitHub
|
477044a065
|
chore: release v1.7.0-beta.6 (#10009)
v1.7.0-beta.6
|
2026-06-16 13:44:27 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
7e754f3c7c
|
chore: sync main to next
chore: sync main to next
|
2026-06-15 18:48:45 -07:00 |
|
|
Gustavo Valverde
|
849f6e8aca
|
chore: sync main to next
|
2026-06-15 18:30:49 -07:00 |
|
|
better-release[bot]andGitHub
|
ac4d81df74
|
chore: release v1.6.19 (#10034)
v1.6.19
|
2026-06-15 17:40:36 -07:00 |
|
 
|
cac8d2ae7b
|
chore(deps): bump the github-actions group across 1 directory with 3 updates (#10049)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-06-16 00:30:29 +00:00 |
|
 TaesuandGitHub
|
91202774a8
|
chore: bump @better-auth/utils and better-fetch (#10090)
|
2026-06-16 00:21:18 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
9d32c488bb
|
fix(ci): scope Compose services per job (#10093)
|
2026-06-15 17:19:28 -07:00 |
|
|
TaesuandGitHub
|
6743e58472
|
chore: add greptile review config (#10094)
|
2026-06-15 17:07:49 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
1e69725027
|
docs: clarify stateless Cognito token refresh (#10092)
|
2026-06-15 17:06:35 -07:00 |
|
|
TaesuandGitHub
|
de4aa52e99
|
fix(cookies): chunk session and account cookies near the browser size limit (#10088)
|
2026-06-15 21:50:03 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
5bd5e1cc73
|
fix: make guarded state transitions portable on Prisma (#10086)
|
2026-06-15 14:03:33 -07:00 |
|
|
TaesuandGitHub
|
8b2ef2c40e
|
test(cli): avoid shell interpolation in info tests (#10089)
|
2026-06-15 19:48:47 +00:00 |
|
|
TaesuandGitHub
|
f3e1a405cd
|
chore(scim): remove filter values from list users log (#10087)
|
2026-06-15 18:36:44 +00:00 |
|
 
|
2c8f925c48
|
docs: generate blog cover images from post titles (#10032)
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
|
2026-06-15 09:28:45 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
f8f44e3d49
|
docs: add agent issue triage guidance (#10075)
|
2026-06-15 15:10:11 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
08959936d2
|
fix(drizzle-adapter): return consumed MySQL rows (#10081)
|
2026-06-15 15:05:01 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
36f345b1bc
|
revert: fix: allow headerless get session checks (#10053) (#10074)
|
2026-06-15 00:10:22 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
4475f4a39b
|
fix(sso): reject OIDC endpoint redirects portably (#10072)
|
2026-06-15 06:56:55 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
635f190870
|
fix(client): name auth client return types (#10071)
|
2026-06-15 06:45:35 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
a787e0b66b
|
fix(core): reuse active transactions (#10070)
|
2026-06-15 06:29:21 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
6d97c4754c
|
fix(oauth-provider): challenge invalid userinfo tokens (#10068)
|
2026-06-15 06:27:28 +00:00 |
|
 TusharandGitHub
|
d009daedc7
|
fix: allow headerless get session checks (#10053)
|
2026-06-15 06:14:34 +00:00 |
|
|
TaesuandGitHub
|
840788502a
|
fix(oauth-popup): filter internal state keys from additionalData (#10067)
|
2026-06-15 05:12:13 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
3ef3cfecfa
|
fix(oauth-provider)!: bind client authentication to the issuing grant (#10063)
|
2026-06-14 20:46:40 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
2196ea65e7
|
feat(oauth): enforce no-store on credential responses via a declarative flag (#10065)
|
2026-06-14 20:45:45 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
aedcb974f0
|
feat(oauth-provider): add DPoP support (#10039)
|
2026-06-14 18:28:21 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
0143d69195
|
feat(oauth-provider): support protected dynamic client registration (#10037)
|
2026-06-14 15:00:17 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
050ef2dfcf
|
feat(oauth-provider): add extension surface (#10030)
|
2026-06-14 11:37:28 -07:00 |
|
 BWM0223andGitHub
|
30f6a78129
|
chore: add missing metadata fields to package.json (#10047)
|
2026-06-14 00:45:14 +00:00 |
|
 
|
d6aec123d8
|
fix(cli): serialize array additionalField defaultValue in drizzle generator (#10048)
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com>
|
2026-06-14 00:41:09 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
2fd3d58500
|
feat(oauth-provider): consistent and audience-scoped token introspection (#10045)
|
2026-06-13 12:58:25 -07:00 |
|
 MaxwellandGitHub
|
c2f718fcde
|
fix: cookie cache fallback lookup (#9348)
|
2026-06-13 14:53:33 +00:00 |
|
|
MaxwellandGitHub
|
581f8271fb
|
fix(last-login-method): include domain when clearing cross-subdomain cookies (#9319)
|
2026-06-13 11:52:33 +00:00 |
|
|
cfbb9a0524
|
fix(cli): handle directory path passed to --output in generate command (#9564)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com>
|
2026-06-13 11:47:44 +00:00 |
|
|
TaesuandGitHub
|
ad35eadd13
|
fix(one-tap)!: require client id for audience validation (#10036)
|
2026-06-13 01:05:01 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
cd38ebc313
|
chore: sync main to next
chore: sync main to next
|
2026-06-12 17:54:54 -07:00 |
|
|
Gustavo Valverde
|
9dcc0318da
|
chore: sync main to next
|
2026-06-12 17:34:58 -07:00 |
|
 
|
b4b02660c7
|
feat(device-authorization): allow pre-binding device codes to a user (#9995)
Co-authored-by: Taesu <bytaesu@gmail.com>
|
2026-06-12 22:57:37 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
0f0afd381b
|
fix(ci): surface new packages in release notes (#9208)
|
2026-06-12 15:35:12 -07:00 |
|