Commit Graph

3314 Commits

Author SHA1 Message Date
Bereket Engida
b8a656efc8 chore: use generate random string helper (#6140) 2025-11-20 22:54:17 +00:00
Alex Yang
252ab7e2fa test: update snapshot expectations to use async/await (#6141) 2025-11-20 20:37:05 +00:00
Alex Yang
e88ea0bd66 fix(oidc-provider): redirect to consent when scope changed (#6116)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-11-20 15:48:49 +00:00
Maxwell Weru
ef15bfb2c5 fix(passkey): ensure addPasskey returns passkey data instead of undefined (#5736) 2025-11-20 00:01:30 -08:00
Taesu
8b2b6ca7f2 feat(device-authorization): add verification uri (#5451)
Co-authored-by: Alex Yang <himself65@outlook.com>
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2025-11-20 00:01:30 -08:00
Albert Putra Purnama
edb090e0d5 chore(sso): support form-urlencoded for callback endpoint (#6123) 2025-11-20 05:20:06 +00:00
Paola Estefanía de Campos
07b7ecf808 feat(generic-oauth): provide pre configured provider helpers (#6085) 2025-11-20 02:53:55 +00:00
Bereket Engida
0fb0398be2 chore: release v1.4.0-beta.25 2025-11-19 18:57:58 -08:00
Albert Putra Purnama
444c8e62f1 sso(fix): generate metadata on saml sign on (#6118) 2025-11-20 02:51:09 +00:00
Alex Yang
c908543a06 feat(oidc-provider): add RP-Initiated Logout endpoint (#6094)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-11-19 22:25:48 +00:00
Bereket Engida
80769194d2 chore: release v1.4.0-beta.24 2025-11-19 08:13:21 -08:00
Maxwell
3396089f86 chore(sso): support form-urlencoded for acs endpoint (#6098) 2025-11-19 16:09:20 +00:00
Alex Yang
caf9ceeeac fix(email-otp): prevent user enumeration on email OTP (#5050) 2025-11-19 10:24:54 +00:00
Alex Yang
3342da3240 fix(oidc-provider): implement proper OIDC prompt parameter handling (#5993)
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-11-19 09:13:39 +00:00
Bereket Engida
87cade689b chore: release v1.4.0-beta.23 2025-11-19 01:16:46 -08:00
Bereket Engida
179eabc298 chore(sso): should trust verified domains 2025-11-19 01:16:30 -08:00
Bereket Engida
bb7723cc35 refactor: improved change email verification flow (#6088) 2025-11-19 08:24:43 +00:00
Jonathan Samines
da9657e53b feat(sso): add domain verification for SSO providers (#5910)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2025-11-19 08:17:12 +00:00
Bereket Engida
14128927b4 chore: upgrade to better-call to 1.2.28 (#6090) 2025-11-19 07:23:25 +00:00
Alex Yang
d737245df0 test: update sample user data in email verification test (#6089) 2025-11-19 05:52:28 +00:00
Bereket Engida
0a72379e70 chore: refactor internal endpoints (#6087) 2025-11-18 20:11:56 -08:00
Alex Yang
f528506820 feat(expo): support multiple cookie prefixes for better-auth detection (#6080) 2025-11-18 22:07:50 +00:00
Alex Yang
cbea5e8487 chore: release v1.4.0-beta.22 2025-11-18 11:14:04 -08:00
Alex Yang
3c9fcd30ea fix(expo): enhance cookie detection for better-auth cookies (#6074) 2025-11-18 19:07:25 +00:00
Alex Yang
c666c12841 refactor(client): revalidate logic (#5691) 2025-11-18 18:07:32 +00:00
Maxwell
bc2ec1500a chore: remove deprecated generateId (#6068) 2025-11-18 18:02:37 +00:00
Gautam Manchandani
99e577f7e2 fix: genericOAuth and SSO ignore discoveryUrl for authorization (#6057)
Signed-off-by: GautamBytes <manchandanigautam@gmail.com>
2025-11-18 17:53:40 +00:00
Bereket Engida
26bb01b6a4 fix(multi-session): reject cookies without valid signatures on signout hook (#6049) 2025-11-18 15:22:32 +00:00
Bereket Engida
20940c5f54 fix(stripe): throw error if query.referenceId is defined 2025-11-18 07:23:08 -08:00
Bereket Engida
06d68239eb fix(passkey): filter delete passkey with userId 2025-11-18 07:16:19 -08:00
Alex Yang
9ce4433c84 test: use vitest proejcts (#6050) 2025-11-18 06:20:34 +00:00
Jonathan Samines
57ee11a26f chore(lint): enforce consistent import type style (#6044) 2025-11-17 21:11:39 +00:00
Jonathan Samines
276ffd6e44 chore(sso): add support for custom field mapping (#6047) 2025-11-17 21:02:05 +00:00
Kaan Ozdokmeci
8e754afff0 feat: refactor fetch plugins config disableDefaultFetchPlugins to include userAgentPlugin (#6020)
Co-authored-by: Alex Yang <himself65@outlook.com>
2025-11-17 20:21:39 +00:00
Henrik
8a5df1cdc5 fix: preserve provided string IDs in the MongoDB adapter when they are not valid ObjectId (#6033) 2025-11-17 20:15:43 +00:00
Gautam Manchandani
c4ee48b741 fix: resolve SESSION_IS_NOT_FRESH error with cookieCache (#6031)
Signed-off-by: GautamBytes <manchandanigautam@gmail.com>
2025-11-17 20:02:46 +00:00
Shotaro Nakamura
9e41891d10 fix(oauth-proxy): return multiple Set-Cookie headers instead of a single comma-separated header (#6039) 2025-11-17 19:41:04 +00:00
Gautam Manchandani
9571c96e40 fix(client): ensure refetchInterval triggers active network request (#6032)
Signed-off-by: GautamBytes <manchandanigautam@gmail.com>
Co-authored-by: Alex Yang <himself65@outlook.com>
2025-11-17 19:24:06 +00:00
Gautam Manchandani
e4ba0cb31e chore: fix incorrect error code expectation in tests (#6005)
Signed-off-by: GautamBytes <manchandanigautam@gmail.com>
2025-11-17 17:48:25 +00:00
Bereket Engida
b913dd752f chore: release v1.4.0-beta.21 2025-11-16 16:42:59 -08:00
Shridhar Deshmukh
9d1453d1e9 chore: fix crash in getMigrations after the first migration run (#6029)
Co-authored-by: Bereket Engida <Bekacru@gmail.com>
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2025-11-17 00:36:40 +00:00
Taesu
b855a956fe feat(phone-number): allow custom verifyOTP implementation (#5926)
Co-authored-by: Zain Memon <zain@inzain.net>
2025-11-16 22:30:40 +00:00
Maxwell
3abc8e1e04 fix: /change-email should trigger session signal (#6025) 2025-11-16 22:22:51 +00:00
Maxwell
da37456fd0 fix(anonymous): isAnonymous should default to false instead of null (#6026) 2025-11-16 22:09:34 +00:00
rovertrack
0831632074 feat(last-login-method): add support for 'siwe' as a last login method and added tests (#6027) 2025-11-16 22:07:50 +00:00
Maxwell
37f5a619fb fix(organization): activeOrgId no longer inferred after enabling dynamic AC (#6023) 2025-11-16 17:57:02 +00:00
nbifrye
b54c257231 fix(last-login-method): LastLoginMethod cookie is not set when using a generic oauth provider (#6016) 2025-11-16 17:15:53 +00:00
Taesu
69fa6b73ab chore: update zod email chaining (#6017) 2025-11-16 17:14:59 +00:00
Alex Yang
6c9fe209e2 chore: bump vitest (#6012) 2025-11-15 23:28:56 +00:00
Turgay Saba
3715eb7073 chore: improve zod imports tree shaking (#5995)
Co-authored-by: Alex Yang <himself65@outlook.com>
2025-11-15 21:06:01 +00:00