  Gustavo ValverdeandGitHub
|
3ef3cfecfa
|
fix(oauth-provider)!: bind client authentication to the issuing grant (#10063)
|
2026-06-14 20:46:40 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
2196ea65e7
|
feat(oauth): enforce no-store on credential responses via a declarative flag (#10065)
|
2026-06-14 20:45:45 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
aedcb974f0
|
feat(oauth-provider): add DPoP support (#10039)
|
2026-06-14 18:28:21 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
0143d69195
|
feat(oauth-provider): support protected dynamic client registration (#10037)
|
2026-06-14 15:00:17 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
050ef2dfcf
|
feat(oauth-provider): add extension surface (#10030)
|
2026-06-14 11:37:28 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
2fd3d58500
|
feat(oauth-provider): consistent and audience-scoped token introspection (#10045)
|
2026-06-13 12:58:25 -07:00 |
|
 TaesuandGitHub
|
ad35eadd13
|
fix(one-tap)!: require client id for audience validation (#10036)
|
2026-06-13 01:05:01 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
cd38ebc313
|
chore: sync main to next
chore: sync main to next
|
2026-06-12 17:54:54 -07:00 |
|
|
Gustavo Valverde
|
9dcc0318da
|
chore: sync main to next
|
2026-06-12 17:34:58 -07:00 |
|
 
|
b4b02660c7
|
feat(device-authorization): allow pre-binding device codes to a user (#9995)
Co-authored-by: Taesu <bytaesu@gmail.com>
|
2026-06-12 22:57:37 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
0f0afd381b
|
fix(ci): surface new packages in release notes (#9208)
|
2026-06-12 15:35:12 -07:00 |
|
 
|
c1a8a64c14
|
fix(open-api): generate valid OpenAPI schemas for client generators (#9555)
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com>
|
2026-06-12 22:24:56 +00:00 |
|
 
|
7d18175637
|
fix: propagate sendVerificationEmail errors (#8863)
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
|
2026-06-12 21:49:10 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
6fe9faab65
|
refactor!: remove deprecated oidc-provider plugin (#10031)
|
2026-06-12 21:45:19 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
5e8b2e5180
|
chore: sync main to next
chore: sync main to next
|
2026-06-12 10:54:57 -07:00 |
|
|
Gustavo Valverde
|
c40989def2
|
fix: address sync review comments
|
2026-06-12 10:40:36 -07:00 |
|
|
Gustavo Valverde
|
6f5c707459
|
chore: sync main to next
|
2026-06-12 10:25:24 -07:00 |
|
 better-release[bot]andGitHub
|
04debbff04
|
chore: release v1.6.18 (#10026)
v1.6.18
|
2026-06-12 10:15:14 -07:00 |
|
|
d2a79bae79
|
feat(oauth-provider)!: model OAuth protected resources explicitly (#9648)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-06-12 10:08:43 -07:00 |
|
|
48070ada8b
|
feat(sso): support additionalFields on ssoProvider (#9445)
Signed-off-by: Gautam Manchandani <manchandanigautam@gmail.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-06-12 10:00:55 -07:00 |
|
|
|
445b0343ec
|
feat(scim): add durable group resources (#10018)
Co-authored-by: Gautam Manchandani <manchandanigautam@gmail.com>
|
2026-06-12 15:37:16 +00:00 |
|
|
|
9ef7240fec
|
fix(open-api): serialize zod request schemas accurately (#9315)
Signed-off-by: Gautam Manchandani <manchandanigautam@gmail.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-06-12 15:18:36 +00:00 |
|
|
|
729fd84034
|
fix(oauth-provider): canonicalize signed OAuth query params (#9941)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-06-12 15:17:00 +00:00 |
|
|
Gautam ManchandaniandGitHub
|
b21a5f7f6c
|
fix(client): preserve plugin inference in composite monorepos (#9583)
|
2026-06-12 15:05:58 +00:00 |
|
|
|
34558bc52b
|
feat(session): support JWKS-backed JWT session cookie cache (#8931)
Signed-off-by: Gautam Manchandani <manchandanigautam@gmail.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-06-12 15:03:33 +00:00 |
|
|
TaesuandGitHub
|
def1624a13
|
docs(changelog): avoid false contributor avatars (#10019)
|
2026-06-12 01:18:52 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
652fa53e49
|
fix(auth)!: ignore x-forwarded headers by default on dynamic baseURL (#9134)
|
2026-06-11 21:54:05 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
73541c1190
|
fix: cloudflare runtime require helper (#10014)
|
2026-06-11 21:53:18 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
e53582ce55
|
feat(mcp)!: ship MCP as its own package built on the OAuth provider (#9992)
|
2026-06-11 21:34:38 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
d752c7c13a
|
chore: sync main to next
chore: sync main to next
|
2026-06-11 20:25:47 -07:00 |
|
|
Gustavo Valverde
|
94c0d7c569
|
fix(client): clean up query equality gate
|
2026-06-11 20:16:29 -07:00 |
|
|
Gustavo Valverde
|
5ce8d4cb55
|
chore: keep beta Apple docs component available
|
2026-06-11 20:03:44 -07:00 |
|
|
Gustavo Valverde
|
167f3c7645
|
Merge remote-tracking branch 'origin/main' into chore/sync-main-to-next-20260611
# Conflicts:
# .changeset/accept-invitation-team-capacity.md
# .changeset/adapters-native-increment-one.md
# .changeset/api-key-atomic-quota.md
# .changeset/delete-account-token-single-use.md
# .changeset/device-code-single-use.md
# .changeset/electron-code-single-use.md
# .changeset/email-otp-attempts-atomic.md
# .changeset/increment-one-primitive.md
# .changeset/memory-adapter-transaction-isolation.md
# .changeset/one-time-token-single-use.md
# .changeset/passkey-ceremony-binding.md
# .changeset/password-reset-token-single-use.md
# .changeset/phone-otp-attempts-atomic.md
# .changeset/rate-limit-atomic-consume.md
# .changeset/redis-increment.md
# .changeset/reserve-verification-value.md
# .changeset/saml-replay-reserve.md
# .changeset/siwe-nonce-single-use.md
# .changeset/two-factor-challenge-single-use.md
# .changeset/twofactor-otp-attempts-atomic.md
# packages/api-key/CHANGELOG.md
# packages/api-key/package.json
# packages/better-auth/CHANGELOG.md
# packages/better-auth/package.json
# packages/cli/CHANGELOG.md
# packages/cli/package.json
# packages/core/CHANGELOG.md
# packages/core/package.json
# packages/drizzle-adapter/CHANGELOG.md
# packages/drizzle-adapter/package.json
# packages/electron/CHANGELOG.md
# packages/electron/package.json
# packages/expo/CHANGELOG.md
# packages/expo/package.json
# packages/i18n/CHANGELOG.md
# packages/i18n/package.json
# packages/kysely-adapter/CHANGELOG.md
# packages/kysely-adapter/package.json
# packages/memory-adapter/CHANGELOG.md
# packages/memory-adapter/package.json
# packages/mongo-adapter/CHANGELOG.md
# packages/mongo-adapter/package.json
# packages/oauth-provider/CHANGELOG.md
# packages/oauth-provider/package.json
# packages/passkey/CHANGELOG.md
# packages/passkey/package.json
# packages/prisma-adapter/CHANGELOG.md
# packages/prisma-adapter/package.json
# packages/redis-storage/CHANGELOG.md
# packages/redis-storage/package.json
# packages/scim/CHANGELOG.md
# packages/scim/package.json
# packages/sso/CHANGELOG.md
# packages/sso/package.json
# packages/stripe/CHANGELOG.md
# packages/stripe/package.json
# packages/telemetry/CHANGELOG.md
# packages/telemetry/package.json
# packages/test-utils/CHANGELOG.md
# packages/test-utils/package.json
|
2026-06-11 19:56:06 -07:00 |
|
|
better-release[bot]andGitHub
|
0d8b238acc
|
chore: release v1.6.17 (#9984)
v1.6.17
|
2026-06-11 19:50:30 -07:00 |
|
|
Gustavo Valverde
|
218974f3be
|
chore: avoid organization role lookup leak
|
2026-06-11 19:47:50 -07:00 |
|
|
Gustavo Valverde
|
b648df065f
|
chore: address sync review comments
|
2026-06-11 19:41:35 -07:00 |
|
|
Gustavo Valverde
|
79b698cbae
|
chore: resolve main to next sync validation
|
2026-06-11 19:27:46 -07:00 |
|
|
TaesuandGitHub
|
eff3c99952
|
test(next-js): verify nextCookies forwards all set-cookie headers (#10013)
|
2026-06-11 18:46:21 -07:00 |
|
|
Gustavo Valverde
|
d2949a8700
|
Merge remote-tracking branch 'origin/main' into chore/sync-main-to-next-20260611
|
2026-06-11 18:45:33 -07:00 |
|
|
Gustavo Valverde
|
7a55ae4f52
|
Merge remote-tracking branch 'origin/next' into chore/sync-main-to-next-20260611
# Conflicts:
# .changeset/accept-invitation-team-capacity.md
# .changeset/adapters-native-increment-one.md
# .changeset/api-key-atomic-quota.md
# .changeset/delete-account-token-single-use.md
# .changeset/device-code-single-use.md
# .changeset/electron-code-single-use.md
# .changeset/email-otp-attempts-atomic.md
# .changeset/increment-one-primitive.md
# .changeset/memory-adapter-transaction-isolation.md
# .changeset/one-time-token-single-use.md
# .changeset/passkey-ceremony-binding.md
# .changeset/password-reset-token-single-use.md
# .changeset/phone-otp-attempts-atomic.md
# .changeset/rate-limit-atomic-consume.md
# .changeset/redis-increment.md
# .changeset/reserve-verification-value.md
# .changeset/saml-replay-reserve.md
# .changeset/siwe-nonce-single-use.md
# .changeset/two-factor-challenge-single-use.md
# .changeset/twofactor-otp-attempts-atomic.md
# packages/api-key/src/adapter.ts
# packages/api-key/src/api-key.test.ts
# packages/better-auth/src/api/rate-limiter/index.ts
# packages/better-auth/src/api/rate-limiter/rate-limiter.test.ts
# packages/better-auth/src/db/internal-adapter.ts
# packages/better-auth/src/plugins/device-authorization/routes.ts
# packages/better-auth/src/plugins/organization/adapter.ts
# packages/better-auth/src/plugins/organization/routes/crud-invites.ts
# packages/better-auth/src/plugins/organization/routes/crud-members.ts
# packages/better-auth/src/plugins/organization/routes/crud-team.ts
# packages/better-auth/src/plugins/organization/team.test.ts
# packages/better-auth/src/plugins/phone-number/routes.ts
# packages/better-auth/src/plugins/two-factor/two-factor.security.test.ts
# packages/core/src/db/adapter/factory.ts
# packages/core/src/db/adapter/index.ts
# packages/core/src/db/type.ts
# packages/core/src/types/context.ts
# packages/core/src/types/init-options.ts
# packages/drizzle-adapter/src/drizzle-adapter.test.ts
# packages/drizzle-adapter/src/drizzle-adapter.ts
# packages/electron/test/electron.test.ts
# packages/kysely-adapter/src/kysely-adapter.ts
# packages/memory-adapter/src/memory-adapter.ts
# packages/mongo-adapter/src/mongodb-adapter.test.ts
# packages/mongo-adapter/src/mongodb-adapter.ts
# packages/passkey/src/routes.ts
# packages/prisma-adapter/src/prisma-adapter.ts
# packages/redis-storage/src/redis-storage.ts
# packages/redis-storage/test/redis-storage.test.ts
# packages/sso/src/saml.test.ts
|
2026-06-11 18:45:17 -07:00 |
|
|
Gustavo Valverde
|
381fc6cfaf
|
chore: sync main to next
|
2026-06-11 18:18:13 -07:00 |
|
 ZerGo0andGitHub
|
029cbdc072
|
docs: update Apple client secret JWT guidance (#9938)
|
2026-06-11 17:54:44 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
86ccb5de91
|
feat(auth)!: harden atomic state transitions (#10000)
|
2026-06-12 00:46:44 +00:00 |
|
 Jordan KahtavaandGitHub
|
44a24ed948
|
docs: highlighted emailVerified requirement on manually inserted users (#9999)
|
2026-06-11 17:45:37 -07:00 |
|
|
TaesuandGitHub
|
24a6b01463
|
chore(deps): update hono and shell-quote (#10010)
|
2026-06-11 17:23:05 -07:00 |
|
|
TaesuandGitHub
|
ac69e81a29
|
fix(cli): skip Unsupported() fields when regenerating prisma schema (#10011)
|
2026-06-11 17:19:17 -07:00 |
|
 
|
2edeb33228
|
chore(deps): bump the github-actions group across 1 directory with 12 updates (#9827)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-06-11 17:13:18 -07:00 |
|
|
Gautam ManchandaniandGitHub
|
e0a768c973
|
refactor(access): flatten access plugin role authorization logic (#9677)
|
2026-06-11 17:04:07 -07:00 |
|
|
Gautam ManchandaniandGitHub
|
3310ebc4a0
|
fix(open-api): mark model ids as required (#9704)
|
2026-06-11 17:01:24 -07:00 |
|
|
|
108aadd251
|
fix(cli): update existing prisma field types (#9729)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
|
2026-06-11 16:59:14 -07:00 |
|