Commit Graph
41 Commits
Author SHA1 Message Date
Gustavo Valverde 7a55ae4f52 Merge remote-tracking branch 'origin/next' into chore/sync-main-to-next-20260611
# Conflicts:
#	.changeset/accept-invitation-team-capacity.md
#	.changeset/adapters-native-increment-one.md
#	.changeset/api-key-atomic-quota.md
#	.changeset/delete-account-token-single-use.md
#	.changeset/device-code-single-use.md
#	.changeset/electron-code-single-use.md
#	.changeset/email-otp-attempts-atomic.md
#	.changeset/increment-one-primitive.md
#	.changeset/memory-adapter-transaction-isolation.md
#	.changeset/one-time-token-single-use.md
#	.changeset/passkey-ceremony-binding.md
#	.changeset/password-reset-token-single-use.md
#	.changeset/phone-otp-attempts-atomic.md
#	.changeset/rate-limit-atomic-consume.md
#	.changeset/redis-increment.md
#	.changeset/reserve-verification-value.md
#	.changeset/saml-replay-reserve.md
#	.changeset/siwe-nonce-single-use.md
#	.changeset/two-factor-challenge-single-use.md
#	.changeset/twofactor-otp-attempts-atomic.md
#	packages/api-key/src/adapter.ts
#	packages/api-key/src/api-key.test.ts
#	packages/better-auth/src/api/rate-limiter/index.ts
#	packages/better-auth/src/api/rate-limiter/rate-limiter.test.ts
#	packages/better-auth/src/db/internal-adapter.ts
#	packages/better-auth/src/plugins/device-authorization/routes.ts
#	packages/better-auth/src/plugins/organization/adapter.ts
#	packages/better-auth/src/plugins/organization/routes/crud-invites.ts
#	packages/better-auth/src/plugins/organization/routes/crud-members.ts
#	packages/better-auth/src/plugins/organization/routes/crud-team.ts
#	packages/better-auth/src/plugins/organization/team.test.ts
#	packages/better-auth/src/plugins/phone-number/routes.ts
#	packages/better-auth/src/plugins/two-factor/two-factor.security.test.ts
#	packages/core/src/db/adapter/factory.ts
#	packages/core/src/db/adapter/index.ts
#	packages/core/src/db/type.ts
#	packages/core/src/types/context.ts
#	packages/core/src/types/init-options.ts
#	packages/drizzle-adapter/src/drizzle-adapter.test.ts
#	packages/drizzle-adapter/src/drizzle-adapter.ts
#	packages/electron/test/electron.test.ts
#	packages/kysely-adapter/src/kysely-adapter.ts
#	packages/memory-adapter/src/memory-adapter.ts
#	packages/mongo-adapter/src/mongodb-adapter.test.ts
#	packages/mongo-adapter/src/mongodb-adapter.ts
#	packages/passkey/src/routes.ts
#	packages/prisma-adapter/src/prisma-adapter.ts
#	packages/redis-storage/src/redis-storage.ts
#	packages/redis-storage/test/redis-storage.test.ts
#	packages/sso/src/saml.test.ts
2026-06-11 18:45:17 -07:00
Gustavo Valverde 381fc6cfaf chore: sync main to next 2026-06-11 18:18:13 -07:00
Gustavo ValverdeandGitHub 86ccb5de91 feat(auth)!: harden atomic state transitions (#10000) 2026-06-12 00:46:44 +00:00
Gustavo ValverdeandGitHub ed7b6c9ac0 fix: enforce team capacity, constant-time SCIM tokens, and org-admin SSO domain verification (#10002) 2026-06-11 19:21:34 +00:00
7343284149 fix: jwks caching, oauth id mapping, team invitations, account cookie, and scim deprovision bugs (#9987)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-06-11 08:25:19 -07:00
Gustavo Valverde bf7f2c5b4e chore: sync main to next 2026-06-10 11:30:38 -07:00
Bereket EngidaandGitHub cb1cbfa4cc fix: address bug findings across packages (#9974) 2026-06-09 19:46:12 -07:00
41cca606d1 feat(auth): add user.validateUserInfo provisioning gate (#9864)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-06-07 14:34:48 -07:00
Gustavo ValverdeandGitHub a8ea86e25e fix(scim)!: always bind personal SCIM connections to their creator (#9840) 2026-05-31 12:53:18 +00:00
43c08a2bc7 fix(account): scope OAuth account identity and fix buggy internalAdapter helpers (#9818)
Co-authored-by: Krish Garg <kgarg@chapman.edu>
2026-05-30 20:48:10 +00:00
Gustavo ValverdeandGitHub 2f5d91c5bb fix(scim): reject built-in provider id collisions on SCIM token issuance (#9579) 2026-05-12 12:44:41 +00:00
a26333b5fb fix: cleanup sessions when deleting users (#9162)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-05-11 19:14:18 +00:00
Gustavo ValverdeandGitHub bd9bd58f87 fix(security): enforce authorization on SCIM management endpoints and normalize passkey ownership (#8843) 2026-04-06 13:47:24 +00:00
Jonathan SaminesandGitHub cd01a42e60 feat: expose plugin version (#8750) 2026-03-31 16:08:21 +00:00
John ZilaandGitHub 07b839088a feat: support non-destructive key rotation for BETTER_AUTH_SECRET (#7738) 2026-02-28 15:36:52 -08:00
Alex YangandGitHub cd4d1c6362 test(scim): split scim.test.ts to fix CI flaky timeout (#8208) 2026-02-28 04:13:10 +00:00
ad3fc4cca5 feat(api-key): Organization support in API-Keys & Multiple config support (#4210)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-02-24 08:25:00 +00:00
Jonathan SaminesandGitHub 10aa14d406 feat(scim): introduce ownership model for SCIM (#7931) 2026-02-12 06:54:19 +00:00
Jonathan SaminesandGitHub 4595d12cfd feat(scim): add SCIM connection management endpoints (#7898) 2026-02-11 12:34:19 +00:00
Alex YangandGitHub 5bd49694a0 chore: bump better-call (#7906) 2026-02-11 09:31:04 +00:00
Alex YangandGitHub c5803173fe test: use vitest best practice (#7888) 2026-02-10 06:32:03 +00:00
Jonathan SaminesandGitHub 5a8e1c0a0f chore(scim): fix empty IN queries in user list endpoint (#7808) 2026-02-05 18:49:56 +00:00
Alex Yang 00c95728f1 Revert "feat: make name field optional (#7617)"
This reverts commit e0df7c9e38.
2026-02-02 10:52:19 -08:00
TaesuandGitHub e0df7c9e38 feat: make name field optional (#7617) 2026-01-29 23:42:52 +00:00
Alex YangandGitHub 1251787f72 feat: remove deprecated API (#7623) 2026-01-28 01:49:50 +00:00
Alex YangandGitHub b0a6fb89c4 chore: bump version (#7626) 2026-01-27 21:05:02 +00:00
dedb4255de fix(session): skip invalid sessions in list (#7182)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-01-26 23:44:40 +00:00
6a1ff9bea9 docs: use type-only import for BetterAuthClientPlugin (#7565)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-01-23 19:34:53 +00:00
4f5c7c812f feat(sso): add provider list and detail endpoints (#6967)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-01-22 22:42:30 +00:00
Alex YangandGitHub 50de0a1d48 refactor: generic in BetterAuthPluginRegistry (#7514) 2026-01-22 20:33:12 +00:00
Bereket Engida ab5c2e7d64 chore(demo): hide admin dashboard for non-admin users 2026-01-17 22:18:42 -08:00
Alex YangandGitHub 531b9d56a5 chore: add lint rule useConst (#7369) 2026-01-14 14:18:18 -08:00
2a728dbd95 chore(scim): add SCIM demo (#6639)
Co-authored-by: Alex Yang <himself65@outlook.com>
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-13 16:15:24 -08:00
96675f7515 feat(scim): add Microsoft Entra ID SCIM Compatibility (#6589)
Co-authored-by: Cem Cevik <soslubok01@gmail.com>
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-01-13 14:40:12 -08:00
Alex YangandGitHub 91331a9607 chore(core): add BetterAuthPluginRegistry for type system (#7146) 2026-01-07 14:51:28 +08:00
Joél SolanoandGitHub c8039f075f chore: pass options to plugin configurations (#6858) 2025-12-19 12:16:05 +08:00
744f30d665 chore: add support for scoped endpoints (#6275)
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2025-12-11 12:22:12 -08:00
Jonathan SaminesandGitHub 5436b95ada chore: remove unused exports and export types (#6513) 2025-12-04 22:30:15 -08:00
868504f2c2 chore: hoist endpoint schemas (#6283)
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2025-12-04 12:48:10 -08:00
Jonathan SaminesandGitHub a91a81b2f9 feat(scim): add support to parse custom scim+json media type (#6365) 2025-11-28 09:22:06 -08:00
Jonathan SaminesandGitHub ffa29ee573 feat: adding support for SCIM provisioning (#5685) 2025-11-21 16:52:12 -08:00