86faaee69b
chore: release v1.6.28 ( #10796 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-13 22:29:39 +00:00
Taesu and GitHub
773de54b18
fix(client): deduplicate settled session requests during Suspense retries ( #10769 )
2026-08-13 22:04:08 +00:00
Taesu and GitHub
2ad2928f96
fix(build): restore declaration compatibility ( #10794 )
2026-08-13 18:21:53 +00:00
Taesu and GitHub
c92a1ca27b
chore: upgrade next to 16.3 ( #10787 )
2026-08-13 18:06:00 +00:00
Toms Sokolovs and GitHub
d9b3e3d17b
docs: add Mailtrap as an email provider example ( #10765 )
2026-08-12 18:34:56 +00:00
Hussein Ahmad and GitHub
c8e047a10a
docs: add better-auth-azure-cosmos to community adapters ( #10768 )
2026-08-12 18:30:20 +00:00
Fabian Hiller and GitHub
11b91e27c3
docs: fix validator JSDoc to mention Standard Schema ( #10761 )
2026-08-12 18:29:40 +00:00
Taesu and GitHub
c35c41ef2a
docs: rewrite Hono integration guide ( #10763 )
2026-08-12 18:25:44 +00:00
better-release[bot] and GitHub
be47e9418b
chore: release v1.6.27 ( #10686 )
2026-08-11 13:56:17 -04:00
999acbd41d
Merge commit from fork
...
* fix(sso): bind domain verification to provider state
Complete domain verification with an atomic guarded transition keyed by the provider row, exact domain snapshot, and unverified state. Concurrent provider mutations now return a retryable conflict instead of applying stale DNS proof.
Document the conflict behavior and cover provider mutation, replacement, deletion, simultaneous verification, memory-adapter, and downstream trust cases.
* fix(sso): allow domain verification when the stored bit is null
* test(sso): assert the resolved DNS hostname outside the mock callback
* fix(sso): require verified domains for organization assignment
Use verified persisted provider domains and canonical verified user emails for domain-derived routing and organization membership. Keep explicit organization-bound SSO provisioning separate from domain trust.
* fix(sso): scope domain verification to organization assignment
* fix(sso): keep verified provider lookup internal
---------
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-08-11 13:50:45 -04:00
Taesu and GitHub
b8077b74ef
fix(cli): align packages with running CLI version ( #10743 )
2026-08-10 16:47:54 +00:00
8a3fa826e1
docs: make AI chat failures recoverable ( #10737 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-10 15:11:39 +00:00
95e248eb88
chore(deps): bump mermaid from 11.15.0 to 11.16.1 ( #10715 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-07 12:30:18 +00:00
Taesu and GitHub
2ae491eac3
fix(types): align auth endpoints with better-call ( #10657 )
2026-08-07 11:33:52 +00:00
Taesu and GitHub
90b5093447
fix(client): deduplicate session requests across suspense retries ( #10676 )
2026-08-04 22:25:16 +00:00
Taesu and GitHub
c3dc5726b4
test(electron): wait for session refresh after sign-out ( #10685 )
2026-08-05 07:18:26 +09:00
Taesu and GitHub
7672d175ce
chore(deps): tighten undici override to >=7.29.0 ( #10684 )
2026-08-04 21:57:42 +00:00
Taesu and GitHub
d68fec0c9e
chore: bump postcss ( #10683 )
2026-08-04 21:49:53 +00:00
a8d52f29d2
chore(deps): bump hono from 4.12.31 to 4.12.34 ( #10669 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 21:19:15 +00:00
Taesu and GitHub
1e7f8754c4
docs: update TanStack logo ( #10678 )
2026-08-05 06:23:23 +09:00
better-release[bot] and GitHub
a16b30e843
chore: release v1.6.26 ( #10521 )
2026-08-04 17:15:45 -04:00
0b075395c5
docs: add SuperSend TX as an email provider example ( #10661 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-04 21:06:48 +09:00
Emmanuel Lucius and GitHub
114214a76a
docs: fix 2FA description in client plugin setup ( #10659 )
2026-08-04 16:45:41 +09:00
4533e2aeea
docs: centralize GHA reporting over email ( #10663 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-04 06:56:14 +00:00
Gustavo Valverde and GitHub
701cd43bab
docs(changeset): describe the jwt transaction fix by its mechanism ( #10633 )
2026-08-03 12:52:31 -04:00
Jeroen van der Merwe and GitHub
9ede8059b5
fix(rate-limit): await database cleanup by default ( #10619 )
2026-08-03 10:48:19 +00:00
Krish Vachhani and GitHub
af50c45553
fix(one-tap): preserve client plugin inference with oneTapClient ( #10635 )
2026-08-03 10:47:22 +00:00
Gustavo Valverde and GitHub
222facff55
fix(jwt): resolve the transaction-scoped adapter when signing ( #10623 )
2026-08-01 12:04:34 +00:00
d8327f1fea
fix(email-otp): verify OTP before revealing whether the email exists ( #10605 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-07-31 07:32:40 +00:00
Taesu and GitHub
e7b0eba327
fix(oauth-proxy): preserve Apple user data ( #10599 )
2026-07-31 07:11:05 +00:00
Taesu and GitHub
5a811f1b43
fix(email-otp): pass verification type on sign-up ( #10608 )
2026-07-31 06:06:06 +00:00
Gustavo Valverde and GitHub
675eae7a8d
chore(deps): patch remaining security floors ( #10604 )
2026-07-30 22:39:43 -04:00
Gustavo Valverde and GitHub
157ed18c02
chore(deps): upgrade sharp to patched 0.35 ( #10602 )
2026-07-30 23:11:30 +00:00
Gustavo Valverde and GitHub
e18606b1c4
chore(deps): upgrade OpenTelemetry to v2 ( #10601 )
2026-07-30 22:32:35 +00:00
Gustavo Valverde and GitHub
7082933376
chore(deps): apply patched security floors ( #10600 )
2026-07-30 22:31:38 +00:00
ea38fcac74
fix(db): skip null-parsed session token in findSessions instead of returning early ( #10580 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-07-29 09:02:48 +00:00
7552a3b563
perf(next-js): reuse the next/headers import promise in production ( #10467 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-07-29 08:13:24 +00:00
Taesu and GitHub
a30e274b5d
feat(core): add placeholder email utility ( #10576 )
2026-07-29 08:00:42 +00:00
Emmanuel Lucius and GitHub
de5acf171f
docs: fix grammar and wording in concepts/plugins.mdx ( #10500 )
2026-07-28 16:38:14 +09:00
Olivier Allard and GitHub
17cf2b94a4
docs: simplify waitUntil import for Cloudflare Workers ( #10536 )
2026-07-28 16:36:49 +09:00
bjorntechTobbe and GitHub
bf916755ff
docs: add BjornTech DynamoDB community adapter ( #10544 )
2026-07-28 16:21:55 +09:00
e2c73fbec8
fix(jwt): preserve client plugin inference with jwtClient ( #10513 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-27 16:25:27 +00:00
Jash Ramde Karangiya and GitHub
2ebd766d60
fix(redis-storage): use SCAN instead of KEYS to avoid blocking Redis ( #10507 )
2026-07-27 16:23:01 +00:00
Taesu and GitHub
2b4a14f180
fix(email-otp): preserve otp after password validation errors ( #10552 )
2026-07-27 16:09:28 +00:00
1190e0498f
chore(deps): bump @babel/core from 7.29.0 to 7.29.7 ( #10548 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-07-27 13:54:12 +09:00
3177f17f0a
chore(deps): bump ua-parser-js from 2.0.9 to 2.0.10 in /demo/nextjs ( #10546 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-07-27 13:51:47 +09:00
Taesu and GitHub
2e011495c8
chore: bump vite ( #10538 )
2026-07-27 13:50:25 +09:00
Taesu and GitHub
e6e6fb3d4f
chore: bump vitest ( #10539 )
2026-07-27 13:44:49 +09:00
Taesu and GitHub
0b8f5b7df7
chore: bump undici ( #10540 )
2026-07-27 13:44:36 +09:00
Oliver Cordingley and GitHub
b4156672fb
docs: update stripe api version number ( #10529 )
2026-07-26 10:21:03 +09:00
TaesuandGitHub
Toms SokolovsandGitHub
Hussein AhmadandGitHub
Fabian HillerandGitHub
Emmanuel LuciusandGitHub
Jeroen van der MerweandGitHub
Krish VachhaniandGitHub
Olivier AllardandGitHub
bjorntechTobbeandGitHub
Jash Ramde KarangiyaandGitHub
Oliver CordingleyandGitHub