Commit Graph

3519 Commits

Author SHA1 Message Date
Bereket Engida
7a4e8636e7 feat(one-time-token): support setting session cookie on ott verify (#3659) 2025-12-14 06:45:33 +00:00
Joél Solano
3001419af7 chore: properly validate body on email signup (#6744) 2025-12-14 06:23:38 +00:00
Taesu
cecaadddf9 chore: set listSessions token to "" instead of undefined (#6745) 2025-12-14 06:22:00 +00:00
Bereket Engida
700f40ab94 feat(phone-number): add password length validation for reset functionality (#6674) 2025-12-13 23:51:17 +00:00
Bereket Engida
6669911fe5 fix(line): enforce nonce (#6631) 2025-12-13 23:41:27 +00:00
Bereket Engida
87441c5c32 fix(api-key): check metadata is enabled for api key update endpoint (#6632) 2025-12-13 23:41:11 +00:00
Bereket Engida
9fed2ff3ad fix: prevent stateless refresh with database configured (#6700) 2025-12-13 23:23:15 +00:00
Taesu
99defeaf80 chore: bump react and next (#6707) 2025-12-13 11:32:02 +00:00
Josh Sullivan
3d849d8dbb chore(organization): export getAdapter for plugin extensibility (#6726) 2025-12-13 11:30:36 +00:00
Jonathan Samines
50248360d2 feat(sso): add URL normalization and validation to all discovery URLs (#6503)
Co-authored-by: Paola Estefanía de Campos <paolaestefania.decampos@gmail.com>
Co-authored-by: Paola Estefanía de Campos <84341268+Paola3stefania@users.noreply.github.com>
Co-authored-by: Bereket Engida <Bekacru@gmail.com>
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2025-12-12 23:16:58 -08:00
Paola Estefanía de Campos
b9d4b1c8e1 feat(sso): add OIDC discovery (#6395)
Co-authored-by: Bereket Engida <Bekacru@gmail.com>
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2025-12-12 23:14:57 -08:00
Bereket Engida
61ec19e598 chore: shouldn't show path conflict error for virtual endpoints (#6718) 2025-12-12 16:05:29 +00:00
Paola Estefanía de Campos
f9875ecb4c feat(saml): assertion timestamp validation with per-provider clock skew (#6706) 2025-12-12 07:02:03 +00:00
dependabot[bot]
6089a57dc7 chore(deps): bump next from 16.0.7 to 16.0.9 (#6702)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-12 01:10:09 +00:00
Paola Estefanía de Campos
9c1a37edbf fix(saml): remove signature validation bypass (#6682) 2025-12-11 23:57:31 +00:00
Paola Estefanía de Campos
5a49f7102e feat(sso): add InResponseTo validation (#6557) 2025-12-11 23:57:15 +00:00
Bereket Engida
6c68e10f4b feat(admin): add support role with permissions for user updates and enforce role change validation (#6699)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-12-11 23:36:18 +00:00
Bereket Engida
3f3cfd3db8 test: add tests for API key quota persistence and magic link origin validation (#6698) 2025-12-11 22:34:57 +00:00
Jonathan Samines
a249908388 chore: add support for scoped endpoints (#6275)
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2025-12-11 20:22:26 +00:00
Taesu
f228410903 chore: drop ms package (#6686) 2025-12-11 04:47:31 +00:00
Dylan Vanmali
22a0053232 chore: independent pkg bumping (#6628) 2025-12-11 00:23:32 +00:00
Augustin
d7125870f8 chore: fix type inference for future TS compatibility (#6643)
Co-authored-by: Azzerty <azzerty@azzair.home>
2025-12-10 08:10:50 +00:00
Alex Yang
02b792261b chore: use unbuild for better-auth package (#6654) 2025-12-10 05:44:35 +00:00
Alex Yang
41753e5a78 chore: import async_hooks per conditional exports (#6630) 2025-12-10 04:55:36 +00:00
Jonathan Samines
30b867a172 chore: add types linter (#6648) 2025-12-10 02:53:35 +00:00
Jonathan Samines
262df9b699 chore: remove unused variables (#6647) 2025-12-09 21:51:48 +00:00
Matteo Badini
c3fe979cb5 perf: add index on organizations slug field (#6303)
Co-authored-by: matteobadini <matteo.badini@gellify.com>
2025-12-09 06:13:47 +00:00
Bereket Engida
f6f3752e3d chore: release v1.4.6 2025-12-08 22:09:26 -08:00
César Rodríguez Vilagrá
e95439ddb6 feat: Add Refresh Token Support to Kick OAuth Provider (#6263) 2025-12-09 06:08:05 +00:00
Martin Riviere
69b88f2023 fix(magic-link): handle query params in errorCallbackUrl (#6383) 2025-12-09 06:01:39 +00:00
Bereket Engida
3e122f3063 chore: cleanup account cookie and state on signout (#6624)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-12-09 05:46:28 +00:00
Joél Solano
b7d3281f91 feat(expo): last-login-method client plugin (#6413)
Co-authored-by: Alex Yang <himself65@outlook.com>
2025-12-09 00:25:08 +00:00
Joél Solano
812a648e18 feat(multi-session): allow to infer additional fields (#6585) 2025-12-09 00:22:38 +00:00
Bereket Engida
d814cdbc93 fix(prisma): use findFirst instead of findMany for findOne (#6429) 2025-12-08 16:07:34 -08:00
Joél Solano
9d4526be98 feat(admin): prevent impersonating admins by default [breaking] (#6454)
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2025-12-09 00:05:50 +00:00
Joél Solano
df8be6819b fix(kysely): wrong affected row count in updateMany & deleteMany (#6572) 2025-12-09 00:01:20 +00:00
Brendan Delfortrie
c47b5594b7 fix: should always remove 2FA verification token after successful verification (#6604) 2025-12-09 00:00:23 +00:00
Joél Solano
b43205deee fix(username): await username validator (#6611) 2025-12-08 23:54:39 +00:00
Alex Yang
49c6bb2e1f fix: storeStateStrategy default to database if provided (#6619) 2025-12-08 23:52:59 +00:00
Maxwell
6494d9039a fix: array field handling across adapters and schema generation (#6601)
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2025-12-08 23:51:05 +00:00
Jonathan Samines
f758f14a4b chore: add nonce check and verifying jwt claims for google (#6614) 2025-12-08 21:49:47 +00:00
Paola Estefanía de Campos
312fc0248a feat(sso): use domain verified flag to trust providers automatically 2025-12-08 21:12:31 +00:00
Jonathan Samines
14d5ef9ab6 chore: configure code coverage for project (#6339)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
2025-12-08 20:50:09 +00:00
Alex Yang
adb75d6792 fix(adapter): allow run internal adapter outside context (#6617) 2025-12-08 19:57:20 +00:00
Gautam Manchandani
cda9901f87 feat(organization): allow invited users to see organization name (#6602)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-12-08 06:50:59 +00:00
Alex Yang
a2e3a31d04 chore: fix tsdown config (#6575) 2025-12-08 06:50:35 +00:00
Joél Solano
969527ea0f chore(admin): throw error on invalid adminRoles configuration (#6590) 2025-12-08 03:43:23 +00:00
Paola Estefanía de Campos
cfafcad575 fix(sso): safely parse provider configs on registration (#6550)
Co-authored-by: Bereket Engida <Bekacru@gmail.com>
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2025-12-08 03:26:15 +00:00
Maxwell
99b4f8757c fix(adapter): add logger creation in adapter factory (#6597) 2025-12-08 03:18:18 +00:00
Joél Solano
29b192dc34 chore(api-key): re-export types (#6574) 2025-12-07 05:40:26 +00:00