Taesu
a172ca3abe
fix(oauth-provider): scope essential ACR checks to OIDC
2026-08-14 00:03:10 +09:00
Taesu
b554b91076
fix(oauth-provider): enforce essential ACR requests
2026-08-13 23:48:26 +09:00
Taesu
1b4b0ac556
test(oauth-provider): verify unsupported acr_values flow
2026-08-13 14:25:27 +09:00
Taesu
1065fe2a44
fix(oauth-provider): treat acr_values as voluntary
2026-08-13 14:25:10 +09:00
692b22c517
fix(drizzle): export generated pgSchema for drizzle-kit ( #10770 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-12 16:25:58 +00:00
better-release[bot] and GitHub
acbe42128f
chore: release v1.7.0-rc.5 ( #10704 )
2026-08-11 18:12:57 -04:00
Gustavo Valverde and GitHub
3ca2c08dc3
fix(device-authorization): enforce RFC device flow requirements ( #10752 )
2026-08-11 18:05:25 -04:00
6782647d7c
refactor(oauth-provider)!: separate device grant ownership ( #10746 )
...
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-08-11 19:45:23 +00:00
Gustavo Valverde and GitHub
26e05cdecd
chore: sync main to next
...
chore: sync main to next
2026-08-11 15:30:36 -04:00
Gustavo Valverde
4052cfea74
refactor(cli): derive upgrade packages from release config
2026-08-11 15:15:10 -04:00
Gustavo Valverde
ebf5ae2145
test(cli): enforce release-train upgrade coverage
2026-08-11 15:11:37 -04:00
Gustavo Valverde
1fa55595e8
test(sso): exercise provider pagination boundary
2026-08-11 15:11:30 -04:00
Gustavo Valverde
74270029c7
fix(docs): classify AI rate limits contextually
2026-08-11 14:53:18 -04:00
Gustavo Valverde
dfa95cf560
fix(cli): limit version alignment to release train
2026-08-11 14:53:12 -04:00
Gustavo Valverde
5071415398
fix(sso): harden domain organization assignment
2026-08-11 14:53:03 -04:00
Gustavo Valverde
970fd0cc9f
test(sso): align legacy provider fixture
2026-08-11 14:15:27 -04:00
Gustavo Valverde
73d6f80e5b
chore(sync): merge main into next
2026-08-11 14:14:49 -04:00
better-release[bot] and GitHub
be47e9418b
chore: release v1.6.27 ( #10686 )
2026-08-11 13:56:17 -04:00
999acbd41d
Merge commit from fork
...
* fix(sso): bind domain verification to provider state
Complete domain verification with an atomic guarded transition keyed by the provider row, exact domain snapshot, and unverified state. Concurrent provider mutations now return a retryable conflict instead of applying stale DNS proof.
Document the conflict behavior and cover provider mutation, replacement, deletion, simultaneous verification, memory-adapter, and downstream trust cases.
* fix(sso): allow domain verification when the stored bit is null
* test(sso): assert the resolved DNS hostname outside the mock callback
* fix(sso): require verified domains for organization assignment
Use verified persisted provider domains and canonical verified user emails for domain-derived routing and organization membership. Keep explicit organization-bound SSO provisioning separate from domain trust.
* fix(sso): scope domain verification to organization assignment
* fix(sso): keep verified provider lookup internal
---------
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-08-11 13:50:45 -04:00
Taesu and GitHub
b8077b74ef
fix(cli): align packages with running CLI version ( #10743 )
2026-08-10 16:47:54 +00:00
Taesu and GitHub
d79740cb9c
docs(two-factor): align enrollment guidance with current behavior ( #10745 )
2026-08-10 12:45:03 -04:00
Taesu and GitHub
6e227c42c5
docs: clarify remaining 1.7 migration details ( #10744 )
2026-08-10 12:44:18 -04:00
81ef812251
docs: align the 1.7 migration guide with current behavior ( #10742 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-08-10 11:56:27 -04:00
8a3fa826e1
docs: make AI chat failures recoverable ( #10737 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-10 15:11:39 +00:00
95e248eb88
chore(deps): bump mermaid from 11.15.0 to 11.16.1 ( #10715 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-07 12:30:18 +00:00
Taesu and GitHub
2ae491eac3
fix(types): align auth endpoints with better-call ( #10657 )
2026-08-07 11:33:52 +00:00
Maxwell and GitHub
081d3c379c
feat(username): disable display-name ( #10330 )
2026-08-06 05:39:24 +00:00
a7962147b3
feat(oauth-provider): remove silenceWarnings config and well-known endpoint warnings ( #10703 )
...
Co-authored-by: Bereket Engida <bekacru@gmail.com >
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-06 05:32:06 +00:00
better-release[bot] and GitHub
f41b7c7857
chore: release v1.7.0-rc.4 ( #10677 )
2026-08-04 20:22:07 -04:00
Gustavo Valverde and GitHub
8b96573d78
fix(scim): create filtered PATCH values when no target matches ( #10682 )
2026-08-04 20:01:07 -04:00
Gustavo Valverde and GitHub
749483b7c8
chore: sync main to next
2026-08-04 19:58:12 -04:00
Gustavo Valverde
d3f00b7388
docs(rate-limit): clarify awaited cleanup
2026-08-04 18:55:06 -04:00
Gustavo Valverde
194c7a38a2
fix(docs): preserve shallow blog table of contents
2026-08-04 18:54:51 -04:00
Gustavo Valverde
fd49908b48
fix(db): defer cached session cleanup until deletion
2026-08-04 18:54:22 -04:00
Gustavo Valverde
8dee276dfd
test(kysely-adapter): handle missing migration export
2026-08-04 18:42:30 -04:00
Gustavo Valverde
803aa51b32
fix(docs): coerce blog frontmatter dates
2026-08-04 18:34:18 -04:00
Gustavo Valverde
5af0b3b77e
chore(sync): merge main into next
2026-08-04 18:34:05 -04:00
Taesu and GitHub
90b5093447
fix(client): deduplicate session requests across suspense retries ( #10676 )
2026-08-04 22:25:16 +00:00
Taesu and GitHub
c3dc5726b4
test(electron): wait for session refresh after sign-out ( #10685 )
2026-08-05 07:18:26 +09:00
Taesu and GitHub
7672d175ce
chore(deps): tighten undici override to >=7.29.0 ( #10684 )
2026-08-04 21:57:42 +00:00
Taesu and GitHub
d68fec0c9e
chore: bump postcss ( #10683 )
2026-08-04 21:49:53 +00:00
a8d52f29d2
chore(deps): bump hono from 4.12.31 to 4.12.34 ( #10669 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 21:19:15 +00:00
Taesu and GitHub
1e7f8754c4
docs: update TanStack logo ( #10678 )
2026-08-05 06:23:23 +09:00
better-release[bot] and GitHub
a16b30e843
chore: release v1.6.26 ( #10521 )
2026-08-04 17:15:45 -04:00
Taesu and GitHub
44e04d4bbe
fix(expo)!: use async secure storage access ( #10438 )
2026-08-04 21:00:23 +00:00
40ced39621
fix(cookies): decouple cookie cache from JWT plugin internals ( #10666 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-08-04 14:40:27 -04:00
Gustavo Valverde and GitHub
8bc28daf42
fix(core): preserve issuer-scoped account identities ( #10668 )
2026-08-04 13:47:09 -04:00
0b075395c5
docs: add SuperSend TX as an email provider example ( #10661 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-04 21:06:48 +09:00
Emmanuel Lucius and GitHub
114214a76a
docs: fix 2FA description in client plugin setup ( #10659 )
2026-08-04 16:45:41 +09:00
4533e2aeea
docs: centralize GHA reporting over email ( #10663 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-04 06:56:14 +00:00
Taesu
better-release[bot]andGitHub
Gustavo ValverdeandGitHub
Emmanuel LuciusandGitHub