Cyrus Ho
8f92d4e6cd
test(sso): add tests for authorizationEndpoint hydration and discovery logic
2026-02-28 03:31:20 +08:00
Cyrus Ho
d6214d87bb
fix(sso): include authorizationEndpoint check in needsRuntimeDiscovery function
...
needsRuntimeDiscovery() only checked tokenEndpoint and jwksEndpoint, so when a stored config
had both but was missing authorizationEndpoint, discovery was skipped and sign-in failed with
"Authorization URL not found". Since authorizationEndpoint is static and all three endpoints
are equally required, include it in the same check.
2026-02-28 03:31:20 +08:00
Cyrus Ho
f6586537b6
test(sso): add tests for ensureRuntimeDiscovery function
2026-02-28 02:16:10 +08:00
Cyrus Ho
d70a479850
fix(sso): ensure consistent OIDC discovery across APIs
...
Previously, OIDC discovery was inconsistent: some APIs only updated the authorization URL, while others replaced more fields but sometimes omitted the JWKS URL or other endpoints. This change ensures all APIs use the same `ensureRuntimeDiscovery` logic, hydrating all relevant OIDC endpoints (authorization, token, userinfo, JWKS, etc.) for consistency and reliability.
2026-02-28 02:16:10 +08:00
Cyrus Ho
3d4d92b175
test(sso): add OIDC SSO tests with defaultSSO array configuration
2026-02-28 02:16:10 +08:00
Alex Yang
2fd1ef38e7
chore: release v1.5.0-beta.20
2026-02-28 02:20:43 +09:00
Harry Yep and GitHub
49931f04cd
fix(two-factor): handle undefined options verifyTwoFactor ( #8162 )
2026-02-27 13:30:50 +00:00
89e3a8a4e7
docs(electron): add image proxy callout for admin plugin ( #8171 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-02-27 13:29:20 +00:00
1d7f43623b
fix(adapter): map camelCase keys during checkMissingFields in Drizzle adapter ( #8176 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2026-02-27 11:13:05 +00:00
Alex Yang and GitHub
8048a1d367
chore: upgrade dependencies ( #8183 )
2026-02-27 08:11:46 +00:00
Alexander Miehe and GitHub
00dfa4fb34
fix: dynamic base url auth context should contain all properties of context ( #8170 )
2026-02-27 04:47:01 +00:00
85546dd69f
docs: add 'better-auth-audit-logs' plugin to community table ( #8182 )
...
Co-authored-by: Ejiro Asiuwhu <Ejiroasiuwhu10@gmail.com >
2026-02-27 04:45:35 +00:00
Taesu and GitHub
6beb0a1360
fix(cookies): export getAccountCookie from better-auth/cookies ( #8181 )
2026-02-27 04:32:49 +00:00
Jordan Burch and GitHub
f90a59a7ea
fix(nextjs): use explicit .js extension in next/headers imports ( #8178 )
2026-02-27 04:32:30 +00:00
Taesu and GitHub
f7a65b1876
fix(api): respect freshAge in deleteUser ( #8174 )
2026-02-27 04:15:20 +00:00
c45edd6b38
fix(client): broadcast session updates to other tabs on sign-out and user update ( #8177 )
...
Co-authored-by: Abhinav-kodes <183825080+Abhinav-kodes@users.noreply.github.com >
2026-02-27 03:46:27 +00:00
fd964c23e9
chore(deps): bump fast-xml-parser from 5.3.6 to 5.3.8 ( #8180 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-27 02:37:25 +00:00
f77c391393
chore: bump prisma to v7 ( #8166 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-27 02:24:32 +00:00
Taesu and GitHub
e8a84726e9
fix(docs): redirect legacy /docs/errors routes to /docs/reference/errors ( #8160 )
2026-02-26 05:59:28 -08:00
84565ccc2a
fix: remove max validation on siwe verify endpoint ( #8158 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2026-02-26 09:25:54 +00:00
Bereket Engida
554f0ef7e1
chore: release v1.5.0-beta.19
2026-02-25 16:21:37 -08:00
Joél Solano and GitHub
0ce2316ae1
fix(electron): redirect in oauth init proxy ( #8143 )
2026-02-25 14:13:38 -08:00
Maxwell and GitHub
ddbbd0b67e
chore: temp delete cla workflow ( #8153 )
2026-02-25 09:44:42 -08:00
Alex Yang and GitHub
93a035c77b
test: fix flaky test ( #8149 )
2026-02-25 16:15:08 +00:00
Luis G Estrades and GitHub
ffdf7f1794
docs: correct video link ( #8142 )
2026-02-25 11:51:41 +00:00
f83118fa4f
docs(convex-integration): clarify instructions for generating the schema to avoid confusion ( #8141 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-02-25 11:03:57 +00:00
Jason Richard Kendrick and Alex Yang
f3f8261ba6
docs: add better-auth-razorpay and better-auth-payu to community plugins ( #8138 )
2026-02-25 16:51:05 +09:00
Taesu and GitHub
953acce259
docs: fix description code example mismatch ( #8132 )
2026-02-25 16:38:42 +09:00
Alex Yang and GitHub
c9ccdda1b8
ci: add cla.yml ( #8137 )
2026-02-25 14:11:44 +09:00
Alex Yang and GitHub
087dc6e096
chore: use node 24 as default version ( #8129 )
2026-02-25 02:47:48 +00:00
Marcel Losso Forte and GitHub
a187e02d48
fix(captcha): add $ERROR_CODES ( #8136 )
2026-02-25 02:47:09 +00:00
Alex Yang and GitHub
1710d67b58
chore: bump pnpm ( #8130 )
2026-02-24 20:58:09 +00:00
66446bf418
chore: align package.json fields and add missing README.md files ( #8131 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-24 20:58:06 +00:00
Oluwatobi Mustapha and GitHub
f48c66efa3
fix(multi-session): allow setActive with multi-session cookies only ( #8121 )
2026-02-24 11:01:37 -08:00
Joél Solano and GitHub
bbe4fe32c7
chore(electron): improve build config ( #8126 )
2026-02-25 00:16:55 +08:00
Alex Yang and GitHub
9c65287d32
chore: bump version ( #8128 )
2026-02-24 14:02:43 +00:00
5fc0936400
fix(expo): expo-web-browser is not installed as a dependency ( #7752 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2026-02-24 08:30:10 +00:00
ad3fc4cca5
feat(api-key): Organization support in API-Keys & Multiple config support ( #4210 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2026-02-24 08:25:00 +00:00
Бат-Орших and GitHub
151362b167
fix(swie): remove max chainId validation ( #8123 )
2026-02-23 23:49:26 -08:00
Lucas Herzinger Souza and GitHub
1129a3061d
fix: use invalid_grant instead of invalid_request for refresh token errors ( #8103 )
2026-02-23 18:06:19 +00:00
Alex Yang
714e5433a3
chore: release v1.5.0-beta.18
2026-02-24 01:36:14 +08:00
2e1c17754d
fix: drizzle transform input crashes dates ( #8105 )
...
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2026-02-23 15:40:04 +00:00
Alex Yang
0ce6c7ed7a
chore: release v1.5.0-beta.17
2026-02-23 22:29:34 +08:00
f2124a8f48
feat: add /update-session ( #8084 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-02-23 04:42:31 +00:00
Maxwell and GitHub
7565c75eb4
fix: force drizzle-adapter to return dates correctly ( #8104 )
2026-02-22 17:25:44 -08:00
Taesu and GitHub
e802eaebac
fix(stripe): use CHECKOUT_SESSION_ID for success_url and remove cancel callback ( #8095 )
2026-02-22 09:15:50 -08:00
Oluwatobi Mustapha and GitHub
664c1d7a9a
fix(security): prevent OTP reuse via race condition ( #8067 )
2026-02-21 23:31:17 -08:00
Taesu and GitHub
cbd86131d5
fix(db): handle camelCase postgres metadata keys in migration schema detection ( #8092 )
2026-02-22 04:01:51 +00:00
Taesu and GitHub
3ec7d41a91
feat: limit enumeration on sign-up when email verification is required ( #8091 )
2026-02-21 15:51:08 -08:00
Taesu and GitHub
6f545cad26
fix(expo): delete expired cookies instead of storing empty values ( #8090 )
2026-02-21 19:55:44 +00:00
Cyrus Ho
Alex Yang
Harry YepandGitHub
Alexander MieheandGitHub
TaesuandGitHub
Jordan BurchandGitHub
Bereket Engida
MaxwellandGitHub
Luis G EstradesandGitHub
Jason Richard KendrickandAlex Yang
Marcel Losso ForteandGitHub
Oluwatobi MustaphaandGitHub
Lucas Herzinger SouzaandGitHub