Taesu and GitHub
6e227c42c5
docs: clarify remaining 1.7 migration details ( #10744 )
2026-08-10 12:44:18 -04:00
81ef812251
docs: align the 1.7 migration guide with current behavior ( #10742 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-08-10 11:56:27 -04:00
Gustavo Valverde
5af0b3b77e
chore(sync): merge main into next
2026-08-04 18:34:05 -04:00
Gustavo Valverde and GitHub
8bc28daf42
fix(core): preserve issuer-scoped account identities ( #10668 )
2026-08-04 13:47:09 -04:00
Emmanuel Lucius and GitHub
0268d2bf61
docs: fix wrong import path in facebook.mdx ( #10518 )
2026-07-25 06:15:26 +09:00
0683a5f36b
fix(microsoft)!: use oid as account id ( #10204 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-07-23 12:23:34 +00:00
Gustavo Valverde
558d2de0a7
chore(sync): merge main into next
2026-07-22 10:39:55 -04:00
Gustavo Valverde and GitHub
a5f7c05924
docs(oauth): clarify provider field ownership ( #10432 )
2026-07-16 21:03:13 +01:00
c4d1ddaa95
feat: add ctx to verifyIdToken ( #10376 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-12 18:01:00 +00:00
Gustavo Valverde
4bcda56649
chore: resolve 10178 main-to-next sync conflicts
...
Merges origin/main into origin/next for the replacement sync PR and records the hand-resolved package metadata, changelog, OAuth/social provider, admin, SIWE, SCIM, SSO, username, rate-limiter, and next-owned MCP/OIDC provider conflicts.
2026-06-26 06:33:24 +01:00
816d7f9252
fix(one-tap): apply configured Google hosted domain (hd) on the callback ( #10197 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-06-26 03:56:20 +00:00
bdda5162f9
docs: remove extra spaces in documentation ( #10174 )
...
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-06-20 22:48:59 -07:00
Gustavo Valverde and GitHub
3a79aff58e
feat(google): add includeGrantedScopes option ( #10129 )
2026-06-18 08:31:10 -07:00
Gustavo Valverde and GitHub
27f06181c7
revert(oauth): remove granted scopes architecture ( #10123 )
2026-06-17 22:27:20 -07:00
Gustavo Valverde
849f6e8aca
chore: sync main to next
2026-06-15 18:30:49 -07:00
Gustavo Valverde and GitHub
1e69725027
docs: clarify stateless Cognito token refresh ( #10092 )
2026-06-15 17:06:35 -07:00
Gustavo Valverde
d2949a8700
Merge remote-tracking branch 'origin/main' into chore/sync-main-to-next-20260611
2026-06-11 18:45:33 -07:00
ZerGo0 and GitHub
029cbdc072
docs: update Apple client secret JWT guidance ( #9938 )
2026-06-11 17:54:44 -07:00
91f235f860
feat(auth): add per-provider requireEmailVerification for social sign-in ( #9929 )
...
Co-authored-by: Gautam Manchandani <161146829+GautamBytes@users.noreply.github.com >
2026-06-08 00:31:20 +00:00
7fe0e2b165
feat: add clientAssertion support to the Microsoft Entra ID social provider ( #9898 )
...
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
Co-authored-by: Bereket Engida <Bekacru@gmail.com >
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-05 20:28:46 -07:00
Gustavo Valverde and GitHub
40b392ae21
feat(oauth)!: accumulate granted scopes as grantedScopes string[] ( #9825 )
2026-06-04 17:54:52 -04:00
Gustavo Valverde
ef4fb0ff95
chore: merge main into next ( #9533 )
...
Sync main (through #9821/#9820/#9822/#9768) into next. Conflicting
package.json files keep next's version and intentional divergences (for
example the cli's c12 v4) while taking main's dependency updates, including
the samlify 2.13.1 and fast-xml-parser security bumps; the lockfile is
regenerated from the reconciled set. The 13 source/doc/test conflicts take
next's refactored architecture as the baseline; main's colliding fixes are
re-applied on top in the following per-domain commits.
Clean main fixes land via this merge, including the auto-restored
account-takeover defenses #9578 and #9577 .
2026-05-31 00:10:16 +01:00
Gustavo Valverde and GitHub
e7eb45b065
feat(oauth): per-request additionalParams and loginHint ( #9305 )
2026-05-19 17:18:43 +00:00
Maxwell and GitHub
adc8d7f1af
docs: microsoft base64 profile image warning ( #9692 )
2026-05-19 16:41:44 +00:00
Taesu
2b83087180
chore: sync main to next
2026-05-10 03:45:29 +09:00
Muzzaiyyan Hussain and GitHub
ea5bcfaa95
docs: improve accessibility of documentation links ( #9518 )
2026-05-09 11:00:42 +00:00
89af592e93
docs: add revokeSessionsOnPasswordReset to password reset section ( #8551 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-25 00:19:51 +00:00
Gustavo Valverde and GitHub
9aa8e63de8
fix(oauth): support mapProfileToUser fallback for providers that may omit email ( #9331 )
2026-04-23 10:15:36 +00:00
Gustavo Valverde
eb3cd10d50
chore: resolve main-to-next sync conflicts
...
- keep next package versions at 1.7.0-beta.1
- keep both changelog streams by inserting the stable 1.6.5, 1.6.6, and 1.6.7 sections below the 1.7.0-beta entries
- keep the cimd and dash deps on demo/nextjs (next-only); regenerate pnpm-lock.yaml
- resolve TODO(sync-from-main-9226) in oauth-provider authorize.ts: findRegisteredRedirectUri now uses isLoopbackIP from @better-auth/core/utils/host to cover the full 127.0.0.0/8 range per RFC 8252 §7.3
- drop the unused saml import that main's #9262 added to sso/src/routes/sso.ts; next already migrated to saml-pipeline
2026-04-22 14:54:27 +01:00
Gustavo Valverde and GitHub
4f373eed8a
feat(social-providers): accept array of Client IDs for ID token audience ( #9292 )
2026-04-22 09:02:56 +00:00
Gustavo Valverde and GitHub
c7d22539ec
refactor(generic-oauth)!: rewrite as first-class social provider with RFC compliance ( #9069 )
2026-04-13 12:02:16 +00:00
Taesu and GitHub
099ee48c41
chore(docs): format markdown including mdx files ( #9085 )
2026-04-10 05:09:33 +00:00
809da03968
docs: add paragraph specifying need for cookie passage for server methods ( #6546 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-09 13:26:13 +00:00
Maxwell and GitHub
ffaeb9f29c
docs: apple social login requires JWT client-secret ( #8771 )
2026-03-25 21:46:22 +10:00
Dave and GitHub
33de2e2a3a
docs: fix formatting in Polar integration content ( #8748 )
2026-03-23 21:05:54 +00:00
6061bed1f8
feat(social-provider): add wechat social provider ( #5189 )
...
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Alex Yang <himself65@outlook.com >
2026-03-11 18:07:06 +00:00
Carlos Eduardo Medim and GitHub
ab84a59ca9
docs: fix railway developer portal link ( #8381 )
2026-03-05 20:42:06 +00:00
nphlp and GitHub
c9f6ea9cf3
fix: prevent email enumeration on /change-email, add customSyntheticUser ( #8097 )
2026-02-28 13:59:12 -08:00
Taesu and GitHub
3ec7d41a91
feat: limit enumeration on sign-up when email verification is required ( #8091 )
2026-02-21 15:51:08 -08:00
Carlos Eduardo Medim and GitHub
cc65d9085e
feat(providers): add Railway OAuth provider ( #7730 )
2026-02-16 12:49:02 -08:00
5c6ccfa688
docs: update to React Router v7 and improve docs ( #7457 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
Co-authored-by: Paola Estefanía de Campos <84341268+Paola3stefania@users.noreply.github.com >
Co-authored-by: Tim Keller <36288711+tjkeller-xyz@users.noreply.github.com >
Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Alex Yang <himself65@users.noreply.github.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
2026-02-05 18:46:34 +00:00
Alex Yang
00c95728f1
Revert "feat: make name field optional ( #7617 )"
...
This reverts commit e0df7c9e38
2026-02-02 10:52:19 -08:00
Taesu and GitHub
e0df7c9e38
feat: make name field optional ( #7617 )
2026-01-29 23:42:52 +00:00
d201ea93cc
docs: add a callout about the Kakao Biz App requirement for the account_email scope ( #7486 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-01-20 08:43:21 +00:00
Taesu and GitHub
5a360ba69c
fix: update Figma provider default scope and oauth endpoints ( #7422 )
2026-01-16 21:22:15 +00:00
Alex Yang and GitHub
a17468438d
docs: build regression after format ( #7110 )
2026-01-04 01:28:36 +08:00
Alex Yang and GitHub
8b01d6abac
chore: format markdown ( #7103 )
2026-01-03 16:55:39 +08:00
Abhijit Bhattacharjee and GitHub
cb02bdf801
docs: update Spotify provider guide to use 127.0.0.1 ( #7075 )
2026-01-01 09:11:40 +08:00
Taesu and GitHub
e9cd882f1f
docs: use dotenv instead of env ( #6883 )
2025-12-19 09:03:46 -08:00
4981827262
docs: add baseURL configuration warning to Google provider ( #6878 )
...
Co-authored-by: Gautam Manchandani <gautammanch@Gautams-MacBook-Air.local >
2025-12-19 20:00:13 +08:00
TaesuandGitHub
Emmanuel LuciusandGitHub
ZerGo0andGitHub
Muzzaiyyan HussainandGitHub
DaveandGitHub
Carlos Eduardo MedimandGitHub
nphlpandGitHub
Abhijit BhattacharjeeandGitHub
