 Taesu
|
890e0841f7
|
docs(apple): correct first-authorization email guidance
|
2026-10-17 05:51:22 +09:00 |
|
|
Taesu
|
a8ba9dc45c
|
docs(apple): clarify optional picture extension
|
2026-10-16 09:59:00 +09:00 |
|
|
Taesu
|
ad73455231
|
fix(apple)!: align profile claims with identity tokens
|
2026-10-16 09:59:00 +09:00 |
|
  TaesuandGitHub
|
2c7833fad6
|
fix(docs): match documentation sources to release versions (#11869)
|
2026-10-16 00:16:19 +00:00 |
|
|
c7a7926fd2
|
fix(drizzle-adapter): preserve required fields in relations v2 schemas (#11836)
Co-authored-by: ShardulB6 <83481569+ShardulB6@users.noreply.github.com>
|
2026-10-15 17:30:44 +00:00 |
|
 better-release[bot]andGitHub
|
be781d5fd2
|
chore: release v1.8.0-beta.0 (#11825)
v1.8.0-beta.0
|
2026-10-15 18:13:32 +01:00 |
|
 Gustavo ValverdeandGitHub
|
1cf87875d2
|
chore: switch v1.8.0 pre-release channel from rc to beta (#11835)
|
2026-10-15 18:02:07 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
296133cc41
|
fix(oauth-provider): check DPoP before a polled grant consumes its request (#11826)
|
2026-10-15 15:09:47 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
c7c8331400
|
feat(oauth-provider): add RFC 8693 token exchange (#11763)
|
2026-10-15 15:07:26 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
0be0e23762
|
feat(ciba): complete requests from server code (#11812)
|
2026-10-15 13:46:02 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
25f7617db6
|
feat(ciba): add backchannel authentication plugin (#11785)
|
2026-10-15 13:46:01 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
012b0fc570
|
chore: enter rc pre-release mode for v1.8.0 (#11824)
|
2026-10-15 14:44:42 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
1bffcb16a7
|
Merge pull request #11808 from better-auth/chore/sync-main-to-next-11784-20261015
chore: sync main to next
|
2026-10-15 14:29:09 +01:00 |
|
|
Gustavo Valverde
|
62a267ad18
|
Merge remote-tracking branch 'origin/main' into sync-work
|
2026-10-15 14:24:06 +01:00 |
|
|
better-release[bot]andGitHub
|
b734a418bf
|
chore: release v1.7.10 (#11795)
v1.7.10
|
2026-10-15 14:22:54 +01:00 |
|
  
|
eebd47a0e7
|
fix(last-login-method): record Google One Tap sign-ins (#11393)
Co-authored-by: arjunpkulkarni <arjunpkulkarni@gmail.com>
Co-authored-by: breken-ai <312387581+breken-ai@users.noreply.github.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-15 14:15:38 +01:00 |
|
|
eaecb7229e
|
fix(one-tap): apply the Google provider's mapProfileToUser and getUserInfo (#11819)
Co-authored-by: kaiizer777 <kanekigaming786@gmail.com>
|
2026-10-15 13:02:59 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
414e845f12
|
fix(better-auth): keep package subpaths in sync with build entries (#11822)
|
2026-10-15 14:08:25 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
88c9a37856
|
fix(one-tap): apply plugin-level autoSelect and cancelOnTapOutside (#11820)
|
2026-10-15 13:02:01 +00:00 |
|
|
09d07e6fea
|
fix(one-tap): stop calling prompt moment methods unsupported under FedCM (#11821)
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com>
|
2026-10-15 12:58:29 +00:00 |
|
|
0cf1f7c6bc
|
fix(one-tap): add the better-auth/plugins/one-tap subpath export (#11696)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-15 13:45:41 +01:00 |
|
|
Gustavo Valverde
|
609e141202
|
Merge remote-tracking branch 'origin/main' into sync-work
# Conflicts:
# docs/content/docs/plugins/oauth-provider.mdx
# packages/oauth-provider/src/device-code.ts
# packages/oauth-provider/src/introspect.ts
# packages/oauth-provider/src/register.ts
# packages/oauth-provider/src/revoke.ts
# packages/oauth-provider/src/token.ts
|
2026-10-15 13:21:22 +01:00 |
|
|
Gustavo Valverde
|
6c69da7456
|
Merge remote-tracking branch 'origin/next' into sync-work
|
2026-10-15 13:20:01 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
61c913da73
|
fix(oauth-provider): report an unknown client in a client assertion as not found (#11811)
|
2026-10-15 13:11:39 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
bb5edcf9f8
|
fix(core): use a newer cached key set before joining a pending JWKS fetch (#11810)
|
2026-10-15 13:11:09 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
4631c83675
|
fix(oauth-provider): stop token lookup at an expired JWT access token (#11818)
|
2026-10-15 13:08:55 +01:00 |
|
|
|
4d7da0bef8
|
fix(oauth-provider): return 400 invalid_grant on PKCE verifier mismatch (#11724)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-15 13:07:53 +01:00 |
|
|
8f3da46ae5
|
fix(oauth-provider): return invalid_client for an unknown client at the token endpoint (#11176)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-15 13:02:05 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
44f14bbf82
|
fix(oauth-provider): keep approved resources refreshable after a narrowed device poll (#11815)
|
2026-10-15 12:48:52 +01:00 |
|
 
|
fedd05586c
|
fix(oauth2): report an unreachable JWKS as an error, not an invalid token (#11612)
Co-authored-by: vhinayindia <281186805+vhinayindia@users.noreply.github.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-15 12:35:36 +01:00 |
|
|
963b7f9417
|
fix(oauth-provider): treat unverifiable JWT access tokens as invalid (#11596)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-15 12:13:07 +01:00 |
|
|
906c32f4b5
|
fix(oauth-provider): keep the supported grants from a dynamic registration (#11797)
Co-authored-by: Bereket Engida <Bekacru@gmail.com>
|
2026-10-15 12:02:00 +01:00 |
|
|
Gustavo Valverde
|
81b082a519
|
Merge remote-tracking branch 'origin/main' into chore/sync-main-to-next-11784-20261015
# Conflicts:
# docs/content/docs/plugins/oauth-provider.mdx
# packages/oauth-provider/src/authorize.ts
# packages/oauth-provider/src/oauthClient/endpoints.ts
# packages/oauth-provider/src/register.ts
# packages/oauth-provider/src/token.test.ts
|
2026-10-15 11:56:08 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
bbd0a19c30
|
fix(core): limit JWKS refetches for unknown key IDs (#11805)
|
2026-10-15 11:54:17 +01:00 |
|
|
99cdfe7c2e
|
fix(oauth-provider): keep consent separate per reference (#11801)
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
|
2026-10-15 11:11:01 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
2832dbda06
|
fix(oauth-provider): accept key-rotation assertions when baseURL ends in a slash (#11804)
|
2026-10-15 10:59:35 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
f42c0c220d
|
fix(oauth-provider): report an unknown client_id as not found (#11799)
|
2026-10-15 09:18:07 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
2fa7e2f8bb
|
fix(oauth-provider): infer native for http loopback redirect URIs (#11798)
|
2026-10-15 09:11:34 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
9f532221be
|
fix(oauth-provider)!: follow RFC 7009 and RFC 7662 token lookup in revoke and introspect (#11796)
|
2026-10-15 10:07:05 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
af4b7965e8
|
test(oauth-provider): add black-box DPoP interop smoke tests (#11791)
|
2026-10-15 08:35:47 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
cdd491b9d0
|
fix(oauth-provider): build DPoP htu from the request path (#11786)
|
2026-10-15 08:35:46 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
cdf413695c
|
test(oauth-provider): force both orderings of the revoke vs rotate race (#11793)
|
2026-10-15 08:20:00 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
fe550a9c57
|
feat(oauth-provider): let private_key_jwt clients rotate their own keys (#11695)
|
2026-10-15 08:08:25 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
e34b828274
|
fix(oauth-provider): refuse trusted-client changes with 400, not 500 (#11781)
|
2026-10-15 08:08:25 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
6e5a88e57b
|
fix(oauth-provider)!: store pairwise sectors and isolate native clients (#11650)
|
2026-10-15 07:57:45 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
cd404a0b46
|
feat(oauth-provider): carry acr and amr through the device code grant (#11788)
|
2026-10-15 07:15:20 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
ed71a211e8
|
feat(oauth-provider): assert acr and amr through authenticationContext (#11787)
|
2026-10-15 07:15:19 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
034da07dbe
|
feat(oauth-provider)!: approve device codes through the consent flow (#11610)
|
2026-10-15 06:51:01 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
ec0afdef5a
|
fix(device-authorization)!: record one decision per device code (#11772)
|
2026-10-15 05:35:45 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
ef3175ae52
|
refactor(demo): share demo base URL and MCP resource (#11765)
|
2026-10-15 04:25:55 +00:00 |
|