Commit Graph
3966 Commits
Author SHA1 Message Date
Paola Estefanía de CamposandAlex Yang 90ffd2cffe fix: add error handling for id token verification in Apple and Google providers (#8011)
(cherry picked from commit bcf76b8b74)
2026-02-18 22:31:37 +08:00
Joél SolanoandAlex Yang 81f507a92f fix(cookie): relax cookie retrieval for getSessionCookie (#8008)
(cherry picked from commit 99efdafb36)
2026-02-18 22:31:37 +08:00
Paola Estefanía de CamposandAlex Yang fab61af713 fix: encode callbackURL in delete-user verification email (#8007)
(cherry picked from commit a2f6fbce5a)
2026-02-18 22:31:37 +08:00
Alex Yang c682ac8605 fix(generic-oauth): emit duplicate id warning (#7779)
(cherry picked from commit 9f40c35ee4)
(cherry picked from commit d69802ec6a7a1c1b38d946fd090c579cc1e8b203)
2026-02-18 22:31:37 +08:00
sakamoto-wkandAlex Yang 327ee71411 fix(adapter): use getCurrentAdapter for user lookup to avoid transaction deadlock (#7758)
(cherry picked from commit 7db4e60952)
(cherry picked from commit ae14b2ebda4745d04ae3d8babe6911381ea9a7c8)
2026-02-18 22:31:37 +08:00
TaesuandAlex Yang 61cc2a5251 fix: correct error redirect URL construction (#7799)
(cherry picked from commit 4fe3731847)
(cherry picked from commit 758d36a829887b9bffbf661c4e2e2f98365fd1c5)
2026-02-18 22:31:37 +08:00
Alex Yang e804ef1a6e fix(cli): add .env.local to dotenv (#7831)
(cherry picked from commit 3b2b9834c5)
(cherry picked from commit 42a3bbaa5cb1bb7c50480b379357d0a10156b931)
2026-02-18 22:31:37 +08:00
LaurinandAlex Yang 3f5c1a2c1a fix(expo): avoid a leading “; ” when constructing the first cookie (#7821)
(cherry picked from commit a2b64cd990)
(cherry picked from commit 4b49627d7d1e5a9f1b1680fa636dede2ddb05549)
2026-02-18 22:31:37 +08:00
Shyam VermaandAlex Yang 5f61124417 fix(admin): apply listUsers filter when filterValue is defined (#7827)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
(cherry picked from commit 2d59c928d5)
(cherry picked from commit 495844493cc730b17f640840fd946aa145e03ef7)
2026-02-18 22:31:37 +08:00
Paola Estefanía de CamposandAlex Yang 87093e7258 fix(sso): resolve TXT record at verification subdomain instead of root domain (#7935)
(cherry picked from commit cc80515644)
(cherry picked from commit a23a921e83ec79d1f5b81ab0b4cbb8155be17dc6)
2026-02-18 22:31:37 +08:00
Alex Yang f7074a3401 fix: safely coerce date values from DB in OAuth provider plugin (#7937)
(cherry picked from commit 09adc74d80)
(cherry picked from commit 3579836b5025849e86fcd569517064092c4be9e6)
2026-02-18 22:31:37 +08:00
KaruppusamyandAlex Yang 987f4549dc fix(oauth): support case-insensitive email matching for social account linking (#7812)
(cherry picked from commit af0c885a6c)
(cherry picked from commit d1031aa424c34d3be20fce2c5add945e5bd0451f)
2026-02-18 22:31:37 +08:00
TaesuandAlex Yang 1dc6a7fe28 fix: improve Headers detection with instanceof check and cross-realm fallback (#7651)
(cherry picked from commit bb45c2dc14)
2026-02-18 22:31:37 +08:00
TaesuandAlex Yang 8d98bcc0f0 fix(organization): prevent deletion of roles assigned to members (#7736)
(cherry picked from commit 3308ecef65)
2026-02-18 22:31:37 +08:00
TaesuandAlex Yang 5e83ebc2f9 fix(expo): construct the new Request to avoid immutable headers error on Cloudflare Workers (#7774)
(cherry picked from commit ecbd1e0b2a)
2026-02-18 22:31:37 +08:00
Muzzaiyyan HussainandAlex Yang 2803e1e8fa fix(sso): allow custom organization roles in provisioning types (#7722)
(cherry picked from commit a605e70f4e)
2026-02-18 22:31:37 +08:00
09ebd0d988 chore: correct environment variable name in baseURL warning (#7749)
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-18 22:31:37 +08:00
MaxwellandAlex Yang 8fd94d3c83 fix(api-key): error details not passed to response (#7692)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-02-18 22:31:37 +08:00
defcb362fe fix(email-otp): typo in OpenAPI response metadata (#7737)
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-18 22:31:37 +08:00
TaesuandAlex Yang 1667f4b013 fix: skip sending email verification to already verified users without a session (#7712) 2026-02-18 22:31:37 +08:00
LovelessCodesandAlex Yang 3c0c5ad3f1 fix(admin): change list type from never[] to UserWithRole[] (#7701) 2026-02-18 22:31:37 +08:00
TaesuandAlex Yang f308056ee6 feat(phone-number): support user additionalFields in signUpOnVerification flow (#7699)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-02-18 22:31:37 +08:00
Paola Estefanía de CamposandAlex Yang cf473b2bb1 feat(oauth-provider): enforce HTTPS for redirect URIs (#7670) 2026-02-18 22:31:37 +08:00
Joél SolanoandAlex Yang 4aae092b64 feat(adapter): improve select support (#7667) 2026-02-18 22:31:37 +08:00
Joél SolanoandAlex Yang 9312d97202 fix(access): allow passing statements directly into newRole (#7687) 2026-02-18 22:31:37 +08:00
TaesuandAlex Yang f63bfad2ed fix(stripe): restore better-call peerDeps (#7675) 2026-02-18 22:31:37 +08:00
TaesuandAlex Yang d323b1a008 fix(sso): add better-call peerDeps (#7676) 2026-02-18 22:31:37 +08:00
Paola Estefanía de CamposandAlex Yang 2410d70ee9 feat(oauth-provider): add configurable rate limiting for OAuth endpoints (#7666) 2026-02-18 22:31:37 +08:00
Paola Estefanía de CamposandAlex Yang 766fcc8a2d feat(oauth-provider): add iss parameter to authorization responses (RFC 9207) (#7669) 2026-02-18 22:31:37 +08:00
TaesuandAlex Yang d660f4dd6b chore(stripe): remove unused better-call devDependency (#7664) 2026-02-18 22:31:37 +08:00
Alex Yang d99d3ceae6 chore: release v1.4.18 2026-01-28 17:07:44 -08:00
Paola Estefanía de CamposandAlex Yang 5d15bf4a0a fix(2fa): server-side trust device expiration and configurable maxAge (#7644)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-01-28 17:06:03 -08:00
Paola Estefanía de CamposAlex Yangclaude[bot] <41898282+claude[bot]@users.noreply.github.com>Alex Yang
c6f8f3b270 fix(saml): IdP-Initiated Callback Routing (#6675)
Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Alex Yang <himself65@users.noreply.github.com>
2026-01-28 17:06:03 -08:00
Alex Yang 040c624413 chore: improve rate limiting type definitions (#7313) 2026-01-28 17:06:03 -08:00
CalandAlex Yang 133a2b27af fix(anonymous): export types (#7661)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-01-28 17:06:03 -08:00
TaesuandAlex Yang dcc289e49d fix(email-otp): add stricter default rate limits for password reset endpoints (#7658) 2026-01-28 17:06:03 -08:00
TaesuandAlex Yang 12631bbcb7 chore: make expo-network optional peerDeps (#7655) 2026-01-28 17:06:03 -08:00
jyc.devandAlex Yang 9cb459c9f1 fix: check jsconfig.json in getPathAliases (#7650) 2026-01-28 17:06:03 -08:00
TaesuandAlex Yang 8f3330dae8 feat: mark /forget-password/email-otp as deprecation (#7645) 2026-01-28 17:06:03 -08:00
Alex Yang 4d79c43caf feat(device-authorization): add user id checks (#7632) 2026-01-28 17:06:03 -08:00
TaesuandAlex Yang cf619d7f87 fix: consistent api version for facebook provider (#7445) 2026-01-28 17:06:03 -08:00
TaesuandAlex Yang d401be9c8e fix: update google oauth endpoints (#7442) 2026-01-28 17:06:03 -08:00
Paola Estefanía de CamposandAlex Yang a7740bc3b9 feat: add disableImplicitLinking to accountLinking (#7270)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-01-28 17:06:03 -08:00
Paola Estefanía de CamposandAlex Yang 9db76abbea fix(multi-session): prevent duplicate cookies when same user signs in multiple times (#7256)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-01-28 17:06:03 -08:00
Paola Estefanía de CamposandAlex Yang 94b7589162 fix(github): surface OAuth token exchange errors (#7186) 2026-01-28 17:06:03 -08:00
Paola Estefanía de CamposandAlex Yang b69869656f fix(session): skip invalid sessions in list (#7182)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-01-28 17:06:03 -08:00
Alex Yang d0ec239d14 chore: enable sourcemap for packages (#7622) 2026-01-28 17:06:03 -08:00
Alex Yang 162015af14 fix: log error when misconfigured (#7584) 2026-01-28 17:06:03 -08:00
TaesuandAlex Yang 949cdb5512 fix: handle serial and false cases in generateId (#7474) 2026-01-28 17:06:03 -08:00
Alex Yang 08fa4f53b5 chore: simplify type (#7618) 2026-01-28 17:06:03 -08:00