Cyrus Ho
8f92d4e6cd
test(sso): add tests for authorizationEndpoint hydration and discovery logic
2026-02-28 03:31:20 +08:00
Cyrus Ho
d6214d87bb
fix(sso): include authorizationEndpoint check in needsRuntimeDiscovery function
...
needsRuntimeDiscovery() only checked tokenEndpoint and jwksEndpoint, so when a stored config
had both but was missing authorizationEndpoint, discovery was skipped and sign-in failed with
"Authorization URL not found". Since authorizationEndpoint is static and all three endpoints
are equally required, include it in the same check.
2026-02-28 03:31:20 +08:00
Cyrus Ho
f6586537b6
test(sso): add tests for ensureRuntimeDiscovery function
2026-02-28 02:16:10 +08:00
Cyrus Ho
d70a479850
fix(sso): ensure consistent OIDC discovery across APIs
...
Previously, OIDC discovery was inconsistent: some APIs only updated the authorization URL, while others replaced more fields but sometimes omitted the JWKS URL or other endpoints. This change ensures all APIs use the same `ensureRuntimeDiscovery` logic, hydrating all relevant OIDC endpoints (authorization, token, userinfo, JWKS, etc.) for consistency and reliability.
2026-02-28 02:16:10 +08:00
Cyrus Ho
3d4d92b175
test(sso): add OIDC SSO tests with defaultSSO array configuration
2026-02-28 02:16:10 +08:00
Alex Yang
2fd1ef38e7
chore: release v1.5.0-beta.20
2026-02-28 02:20:43 +09:00
Harry Yep and GitHub
49931f04cd
fix(two-factor): handle undefined options verifyTwoFactor ( #8162 )
2026-02-27 13:30:50 +00:00
1d7f43623b
fix(adapter): map camelCase keys during checkMissingFields in Drizzle adapter ( #8176 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2026-02-27 11:13:05 +00:00
Alex Yang and GitHub
8048a1d367
chore: upgrade dependencies ( #8183 )
2026-02-27 08:11:46 +00:00
Alexander Miehe and GitHub
00dfa4fb34
fix: dynamic base url auth context should contain all properties of context ( #8170 )
2026-02-27 04:47:01 +00:00
Taesu and GitHub
6beb0a1360
fix(cookies): export getAccountCookie from better-auth/cookies ( #8181 )
2026-02-27 04:32:49 +00:00
Jordan Burch and GitHub
f90a59a7ea
fix(nextjs): use explicit .js extension in next/headers imports ( #8178 )
2026-02-27 04:32:30 +00:00
Taesu and GitHub
f7a65b1876
fix(api): respect freshAge in deleteUser ( #8174 )
2026-02-27 04:15:20 +00:00
c45edd6b38
fix(client): broadcast session updates to other tabs on sign-out and user update ( #8177 )
...
Co-authored-by: Abhinav-kodes <183825080+Abhinav-kodes@users.noreply.github.com >
2026-02-27 03:46:27 +00:00
fd964c23e9
chore(deps): bump fast-xml-parser from 5.3.6 to 5.3.8 ( #8180 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-27 02:37:25 +00:00
f77c391393
chore: bump prisma to v7 ( #8166 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-27 02:24:32 +00:00
84565ccc2a
fix: remove max validation on siwe verify endpoint ( #8158 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2026-02-26 09:25:54 +00:00
Bereket Engida
554f0ef7e1
chore: release v1.5.0-beta.19
2026-02-25 16:21:37 -08:00
Joél Solano and GitHub
0ce2316ae1
fix(electron): redirect in oauth init proxy ( #8143 )
2026-02-25 14:13:38 -08:00
Alex Yang and GitHub
93a035c77b
test: fix flaky test ( #8149 )
2026-02-25 16:15:08 +00:00
Marcel Losso Forte and GitHub
a187e02d48
fix(captcha): add $ERROR_CODES ( #8136 )
2026-02-25 02:47:09 +00:00
66446bf418
chore: align package.json fields and add missing README.md files ( #8131 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-24 20:58:06 +00:00
Oluwatobi Mustapha and GitHub
f48c66efa3
fix(multi-session): allow setActive with multi-session cookies only ( #8121 )
2026-02-24 11:01:37 -08:00
Joél Solano and GitHub
bbe4fe32c7
chore(electron): improve build config ( #8126 )
2026-02-25 00:16:55 +08:00
Alex Yang and GitHub
9c65287d32
chore: bump version ( #8128 )
2026-02-24 14:02:43 +00:00
5fc0936400
fix(expo): expo-web-browser is not installed as a dependency ( #7752 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2026-02-24 08:30:10 +00:00
ad3fc4cca5
feat(api-key): Organization support in API-Keys & Multiple config support ( #4210 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2026-02-24 08:25:00 +00:00
Бат-Орших and GitHub
151362b167
fix(swie): remove max chainId validation ( #8123 )
2026-02-23 23:49:26 -08:00
Lucas Herzinger Souza and GitHub
1129a3061d
fix: use invalid_grant instead of invalid_request for refresh token errors ( #8103 )
2026-02-23 18:06:19 +00:00
Alex Yang
714e5433a3
chore: release v1.5.0-beta.18
2026-02-24 01:36:14 +08:00
2e1c17754d
fix: drizzle transform input crashes dates ( #8105 )
...
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2026-02-23 15:40:04 +00:00
Alex Yang
0ce6c7ed7a
chore: release v1.5.0-beta.17
2026-02-23 22:29:34 +08:00
f2124a8f48
feat: add /update-session ( #8084 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-02-23 04:42:31 +00:00
Maxwell and GitHub
7565c75eb4
fix: force drizzle-adapter to return dates correctly ( #8104 )
2026-02-22 17:25:44 -08:00
Taesu and GitHub
e802eaebac
fix(stripe): use CHECKOUT_SESSION_ID for success_url and remove cancel callback ( #8095 )
2026-02-22 09:15:50 -08:00
Oluwatobi Mustapha and GitHub
664c1d7a9a
fix(security): prevent OTP reuse via race condition ( #8067 )
2026-02-21 23:31:17 -08:00
Taesu and GitHub
cbd86131d5
fix(db): handle camelCase postgres metadata keys in migration schema detection ( #8092 )
2026-02-22 04:01:51 +00:00
Taesu and GitHub
3ec7d41a91
feat: limit enumeration on sign-up when email verification is required ( #8091 )
2026-02-21 15:51:08 -08:00
Taesu and GitHub
6f545cad26
fix(expo): delete expired cookies instead of storing empty values ( #8090 )
2026-02-21 19:55:44 +00:00
Taesu and GitHub
b894280a46
fix(bearer): use semicolon separator when merging cookie headers ( #8089 )
2026-02-21 14:49:16 +00:00
Paola Estefanía de Campos and GitHub
9fed16b6c2
feat(mcp): add framework-agnostic remote MCP auth client ( #8087 )
2026-02-20 21:29:29 -08:00
Paola Estefanía de Campos and GitHub
197792318f
feat(auth): support dynamic baseURL with allowedHosts ( #8009 )
2026-02-20 19:58:29 +00:00
27b6f555be
chore(deps-dev): bump @sveltejs/kit from 2.50.1 to 2.52.2 ( #8075 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-20 13:21:07 +00:00
07e7b5a18f
chore(cli): use beta url for pre-release and resolve open import ( #7997 )
...
Co-authored-by: Ghost <ghost@better-github.app >
2026-02-20 05:02:12 -08:00
Bereket Engida
d79c0db73b
Revert "feat(cli): use vite to load auth config when we detect a vite project"
...
This reverts commit 22d238b4bf
2026-02-19 23:41:28 -08:00
Bereket Engida
22d238b4bf
feat(cli): use vite to load auth config when we detect a vite project
2026-02-19 23:18:09 -08:00
Taesu and GitHub
96dc13a404
feat(stripe): track subscription schedule ID for pending plan changes ( #8070 )
2026-02-20 00:19:35 +00:00
Taesu and GitHub
5eebbe96a9
fix(stripe): inject metadata to schedules on update, not on create ( #8069 )
2026-02-19 16:03:11 +00:00
Taesu and GitHub
9ca0fa32a7
fix(stripe): handle line item price replacement on plan upgrade ( #8066 )
2026-02-19 15:26:50 +00:00
Taesu and GitHub
5180893ae6
feat(stripe): add scheduleAtPeriodEnd option to defer plan changes ( #8064 )
2026-02-19 14:34:17 +00:00
Cyrus Ho
Alex Yang
Harry YepandGitHub
Alexander MieheandGitHub
TaesuandGitHub
Jordan BurchandGitHub
Bereket Engida
Joél SolanoandGitHub
Marcel Losso ForteandGitHub
Oluwatobi MustaphaandGitHub
Lucas Herzinger SouzaandGitHub
Paola Estefanía de CamposandGitHub
