Taesu and GitHub
79904f0be8
fix(origin-check): support fragments in relative redirect URLs ( #10983 )
2026-08-25 10:12:21 +00:00
c8dcfa57e1
fix(origin-check): validate null origins using fetch metadata ( #10959 )
...
Co-authored-by: Alex Yang <14026360+himself65@users.noreply.github.com >
2026-08-25 08:53:55 +00:00
Taesu and GitHub
b4ad5a110c
refactor: centralize placeholder email generation ( #10982 )
2026-08-25 08:15:14 +00:00
Taesu and GitHub
fced1a5d36
fix(origin-check): improve relative callback URL validation ( #10979 )
2026-08-25 00:55:14 +00:00
Bereket Engida and GitHub
0e5181abaa
docs(cli): document schema generation options ( #7319 )
2026-08-25 06:21:55 +09:00
Kevin Marrec and GitHub
fc8655a163
docs: flag indexed fields in the core schema tables ( #10759 )
2026-08-25 06:04:44 +09:00
Taesu and GitHub
bc0e75244a
docs(express): clarify raw body requirements ( #10975 )
2026-08-25 05:21:16 +09:00
Vincent and GitHub
6697f6afd6
docs: fix typo on session management page ( #7202 )
2026-08-25 03:36:55 +09:00
Taesu and GitHub
45e6d0e889
docs(database): reorganize Redis storage examples ( #10964 )
2026-08-24 20:46:44 +09:00
25e92defa0
docs(database): update redis secondary storage example ( #10955 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-08-24 19:58:47 +09:00
d7141a8a31
docs: add APIMethod documentation for anonymous sign-in endpoint ( #7516 )
...
Co-authored-by: Arthur Zhang <a8zhang@uwaterloo.ca >
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-08-24 17:50:37 +09:00
468d3d7e50
docs: update for nitro v3 ( #10462 )
...
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
2026-08-24 16:59:43 +09:00
Taesu and GitHub
238564f311
docs: improve Prisma 7 adapter setup guide ( #10943 )
2026-08-23 15:56:32 +00:00
a4595391d1
docs: add PrismaPg adapter configuration ( #10927 )
...
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2026-08-22 23:21:39 +09:00
Taesu and GitHub
73a61ec1b7
docs: sync sidebar navigation and links ( #10868 )
2026-08-18 21:27:37 +00:00
Gustavo Valverde and GitHub
845bbd1de6
fix(db): refuse adding required no-default columns to populated tables ( #10863 )
2026-08-18 13:47:15 -04:00
Gustavo Valverde and GitHub
73dc9f8c0e
chore: sync main to next
...
chore: sync main to next
2026-08-17 15:44:35 -04:00
Gustavo Valverde
69258d1670
chore: sync main to next
...
Merge branch 'main' into next
2026-08-17 15:29:19 -04:00
Taesu and GitHub
ac1a47553b
docs: refine 1.7 release guidance ( #10841 )
2026-08-17 15:24:42 -04:00
5315e6cd47
docs: announce Better Auth 1.7 ( #10836 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-08-17 14:59:21 -04:00
Jonathan Samines and GitHub
68ad56598c
docs: update infrastructure docs ( #10815 )
2026-08-18 02:38:53 +09:00
Gustavo Valverde and GitHub
14975fbf4b
chore: sync main to next
...
chore: sync main to next
2026-08-14 14:13:30 -04:00
Gustavo Valverde and GitHub
f451d1c758
fix(oauth-provider): complete RP-initiated logout flow ( #10812 )
2026-08-14 17:35:54 +00:00
Gustavo Valverde and GitHub
801968e354
fix(oauth-provider): accept issuer audience for client assertions ( #10811 )
2026-08-14 17:35:53 +00:00
Emmanuel Lucius and GitHub
78d7227d05
docs: fix "Database joins is" grammar across all 7 adapter docs ( #10803 )
2026-08-14 12:00:57 +00:00
Taesu
80799e6931
chore: sync main to next
2026-08-14 09:19:43 +09:00
Taesu and GitHub
a966815b13
fix(oauth-provider): handle voluntary and essential ACR requests ( #10790 )
2026-08-13 19:10:36 +00:00
Taesu and GitHub
8e85b12a62
docs(core): clarify dynamic base URL proxy trust ( #10779 )
2026-08-13 15:16:04 -04:00
Toms Sokolovs and GitHub
d9b3e3d17b
docs: add Mailtrap as an email provider example ( #10765 )
2026-08-12 18:34:56 +00:00
Taesu and GitHub
c35c41ef2a
docs: rewrite Hono integration guide ( #10763 )
2026-08-12 18:25:44 +00:00
Gustavo Valverde and GitHub
3ca2c08dc3
fix(device-authorization): enforce RFC device flow requirements ( #10752 )
2026-08-11 18:05:25 -04:00
6782647d7c
refactor(oauth-provider)!: separate device grant ownership ( #10746 )
...
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-08-11 19:45:23 +00:00
Gustavo Valverde
dfa95cf560
fix(cli): limit version alignment to release train
2026-08-11 14:53:12 -04:00
Gustavo Valverde
73d6f80e5b
chore(sync): merge main into next
2026-08-11 14:14:49 -04:00
999acbd41d
Merge commit from fork
...
* fix(sso): bind domain verification to provider state
Complete domain verification with an atomic guarded transition keyed by the provider row, exact domain snapshot, and unverified state. Concurrent provider mutations now return a retryable conflict instead of applying stale DNS proof.
Document the conflict behavior and cover provider mutation, replacement, deletion, simultaneous verification, memory-adapter, and downstream trust cases.
* fix(sso): allow domain verification when the stored bit is null
* test(sso): assert the resolved DNS hostname outside the mock callback
* fix(sso): require verified domains for organization assignment
Use verified persisted provider domains and canonical verified user emails for domain-derived routing and organization membership. Keep explicit organization-bound SSO provisioning separate from domain trust.
* fix(sso): scope domain verification to organization assignment
* fix(sso): keep verified provider lookup internal
---------
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-08-11 13:50:45 -04:00
Taesu and GitHub
b8077b74ef
fix(cli): align packages with running CLI version ( #10743 )
2026-08-10 16:47:54 +00:00
Taesu and GitHub
d79740cb9c
docs(two-factor): align enrollment guidance with current behavior ( #10745 )
2026-08-10 12:45:03 -04:00
Taesu and GitHub
6e227c42c5
docs: clarify remaining 1.7 migration details ( #10744 )
2026-08-10 12:44:18 -04:00
81ef812251
docs: align the 1.7 migration guide with current behavior ( #10742 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-08-10 11:56:27 -04:00
Maxwell and GitHub
081d3c379c
feat(username): disable display-name ( #10330 )
2026-08-06 05:39:24 +00:00
Gustavo Valverde and GitHub
8b96573d78
fix(scim): create filtered PATCH values when no target matches ( #10682 )
2026-08-04 20:01:07 -04:00
Gustavo Valverde
5af0b3b77e
chore(sync): merge main into next
2026-08-04 18:34:05 -04:00
Taesu and GitHub
44e04d4bbe
fix(expo)!: use async secure storage access ( #10438 )
2026-08-04 21:00:23 +00:00
40ced39621
fix(cookies): decouple cookie cache from JWT plugin internals ( #10666 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-08-04 14:40:27 -04:00
Gustavo Valverde and GitHub
8bc28daf42
fix(core): preserve issuer-scoped account identities ( #10668 )
2026-08-04 13:47:09 -04:00
0b075395c5
docs: add SuperSend TX as an email provider example ( #10661 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-04 21:06:48 +09:00
Emmanuel Lucius and GitHub
114214a76a
docs: fix 2FA description in client plugin setup ( #10659 )
2026-08-04 16:45:41 +09:00
4533e2aeea
docs: centralize GHA reporting over email ( #10663 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-04 06:56:14 +00:00
Gustavo Valverde and GitHub
26b194960f
feat(scim): add managed connection catalog and runtime connection resolution ( #10592 )
2026-08-03 13:15:13 -04:00
Gustavo Valverde and GitHub
59c4c832fc
feat(sso): extend resolveUser to SAML and harden provider lifecycle ( #10621 )
2026-08-03 12:51:21 -04:00
TaesuandGitHub
Bereket EngidaandGitHub
Kevin MarrecandGitHub
VincentandGitHub
Gustavo ValverdeandGitHub
Jonathan SaminesandGitHub
Emmanuel LuciusandGitHub
Toms SokolovsandGitHub
MaxwellandGitHub
