ping-maxwell and Alex Yang
bb51390a36
chore: session refetch cooldown for window focus
...
Everytime you focus the browser, we make a get-session request.
If you alt+tab between the browser frequently, you would hit your server several times (and thus the DB too) within the span of a couple seconds.
It's unnessesary to get the session each browser refocus within the span of a couple seconds.
2025-11-20 15:52:29 -08:00
Bereket Engida and GitHub
b8a656efc8
chore: use generate random string helper ( #6140 )
2025-11-20 22:54:17 +00:00
Alex Yang and GitHub
252ab7e2fa
test: update snapshot expectations to use async/await ( #6141 )
2025-11-20 20:37:05 +00:00
e88ea0bd66
fix(oidc-provider): redirect to consent when scope changed ( #6116 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-20 15:48:49 +00:00
Maxwell Weru and Alex Yang
ef15bfb2c5
fix(passkey): ensure addPasskey returns passkey data instead of undefined ( #5736 )
2025-11-20 00:01:30 -08:00
8b2b6ca7f2
feat(device-authorization): add verification uri ( #5451 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2025-11-20 00:01:30 -08:00
Albert Putra Purnama and GitHub
edb090e0d5
chore(sso): support form-urlencoded for callback endpoint ( #6123 )
2025-11-20 05:20:06 +00:00
Paola Estefanía de Campos and GitHub
07b7ecf808
feat(generic-oauth): provide pre configured provider helpers ( #6085 )
2025-11-20 02:53:55 +00:00
Bereket Engida
0fb0398be2
chore: release v1.4.0-beta.25
2025-11-19 18:57:58 -08:00
Albert Putra Purnama and GitHub
444c8e62f1
sso(fix): generate metadata on saml sign on ( #6118 )
2025-11-20 02:51:09 +00:00
c908543a06
feat(oidc-provider): add RP-Initiated Logout endpoint ( #6094 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-19 22:25:48 +00:00
Bereket Engida
80769194d2
chore: release v1.4.0-beta.24
2025-11-19 08:13:21 -08:00
Maxwell and GitHub
3396089f86
chore(sso): support form-urlencoded for acs endpoint ( #6098 )
2025-11-19 16:09:20 +00:00
Alex Yang and GitHub
caf9ceeeac
fix(email-otp): prevent user enumeration on email OTP ( #5050 )
2025-11-19 10:24:54 +00:00
3342da3240
fix(oidc-provider): implement proper OIDC prompt parameter handling ( #5993 )
...
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-19 09:13:39 +00:00
Bereket Engida
87cade689b
chore: release v1.4.0-beta.23
2025-11-19 01:16:46 -08:00
Bereket Engida
179eabc298
chore(sso): should trust verified domains
2025-11-19 01:16:30 -08:00
Bereket Engida and GitHub
bb7723cc35
refactor: improved change email verification flow ( #6088 )
2025-11-19 08:24:43 +00:00
da9657e53b
feat(sso): add domain verification for SSO providers ( #5910 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2025-11-19 08:17:12 +00:00
Bereket Engida and GitHub
14128927b4
chore: upgrade to better-call to 1.2.28 ( #6090 )
2025-11-19 07:23:25 +00:00
Alex Yang and GitHub
d737245df0
test: update sample user data in email verification test ( #6089 )
2025-11-19 05:52:28 +00:00
Bereket Engida and GitHub
0a72379e70
chore: refactor internal endpoints ( #6087 )
2025-11-18 20:11:56 -08:00
Alex Yang and GitHub
f528506820
feat(expo): support multiple cookie prefixes for better-auth detection ( #6080 )
2025-11-18 22:07:50 +00:00
Alex Yang
cbea5e8487
chore: release v1.4.0-beta.22
2025-11-18 11:14:04 -08:00
Alex Yang and GitHub
3c9fcd30ea
fix(expo): enhance cookie detection for better-auth cookies ( #6074 )
2025-11-18 19:07:25 +00:00
Alex Yang and GitHub
c666c12841
refactor(client): revalidate logic ( #5691 )
2025-11-18 18:07:32 +00:00
Maxwell and GitHub
bc2ec1500a
chore: remove deprecated generateId ( #6068 )
2025-11-18 18:02:37 +00:00
Gautam Manchandani and GitHub
99e577f7e2
fix: genericOAuth and SSO ignore discoveryUrl for authorization ( #6057 )
...
Signed-off-by: GautamBytes <manchandanigautam@gmail.com >
2025-11-18 17:53:40 +00:00
Bereket Engida and GitHub
26bb01b6a4
fix(multi-session): reject cookies without valid signatures on signout hook ( #6049 )
2025-11-18 15:22:32 +00:00
Bereket Engida
20940c5f54
fix(stripe): throw error if query.referenceId is defined
2025-11-18 07:23:08 -08:00
Bereket Engida
06d68239eb
fix(passkey): filter delete passkey with userId
2025-11-18 07:16:19 -08:00
Alex Yang and GitHub
9ce4433c84
test: use vitest proejcts ( #6050 )
2025-11-18 06:20:34 +00:00
Jonathan Samines and GitHub
57ee11a26f
chore(lint): enforce consistent import type style ( #6044 )
2025-11-17 21:11:39 +00:00
Jonathan Samines and GitHub
276ffd6e44
chore(sso): add support for custom field mapping ( #6047 )
2025-11-17 21:02:05 +00:00
8e754afff0
feat: refactor fetch plugins config disableDefaultFetchPlugins to include userAgentPlugin ( #6020 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2025-11-17 20:21:39 +00:00
Henrik and GitHub
8a5df1cdc5
fix: preserve provided string IDs in the MongoDB adapter when they are not valid ObjectId ( #6033 )
2025-11-17 20:15:43 +00:00
Gautam Manchandani and GitHub
c4ee48b741
fix: resolve SESSION_IS_NOT_FRESH error with cookieCache ( #6031 )
...
Signed-off-by: GautamBytes <manchandanigautam@gmail.com >
2025-11-17 20:02:46 +00:00
Shotaro Nakamura and GitHub
9e41891d10
fix(oauth-proxy): return multiple Set-Cookie headers instead of a single comma-separated header ( #6039 )
2025-11-17 19:41:04 +00:00
9571c96e40
fix(client): ensure refetchInterval triggers active network request ( #6032 )
...
Signed-off-by: GautamBytes <manchandanigautam@gmail.com >
Co-authored-by: Alex Yang <himself65@outlook.com >
2025-11-17 19:24:06 +00:00
Gautam Manchandani and GitHub
e4ba0cb31e
chore: fix incorrect error code expectation in tests ( #6005 )
...
Signed-off-by: GautamBytes <manchandanigautam@gmail.com >
2025-11-17 17:48:25 +00:00
Bereket Engida
b913dd752f
chore: release v1.4.0-beta.21
2025-11-16 16:42:59 -08:00
9d1453d1e9
chore: fix crash in getMigrations after the first migration run ( #6029 )
...
Co-authored-by: Bereket Engida <Bekacru@gmail.com >
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2025-11-17 00:36:40 +00:00
b855a956fe
feat(phone-number): allow custom verifyOTP implementation ( #5926 )
...
Co-authored-by: Zain Memon <zain@inzain.net >
2025-11-16 22:30:40 +00:00
Maxwell and GitHub
3abc8e1e04
fix: /change-email should trigger session signal ( #6025 )
2025-11-16 22:22:51 +00:00
Maxwell and GitHub
da37456fd0
fix(anonymous): isAnonymous should default to false instead of null ( #6026 )
2025-11-16 22:09:34 +00:00
rovertrack and GitHub
0831632074
feat(last-login-method): add support for 'siwe' as a last login method and added tests ( #6027 )
2025-11-16 22:07:50 +00:00
Maxwell and GitHub
37f5a619fb
fix(organization): activeOrgId no longer inferred after enabling dynamic AC ( #6023 )
2025-11-16 17:57:02 +00:00
nbifrye and GitHub
b54c257231
fix(last-login-method): LastLoginMethod cookie is not set when using a generic oauth provider ( #6016 )
2025-11-16 17:15:53 +00:00
Taesu and GitHub
69fa6b73ab
chore: update zod email chaining ( #6017 )
2025-11-16 17:14:59 +00:00
Alex Yang and GitHub
6c9fe209e2
chore: bump vitest ( #6012 )
2025-11-15 23:28:56 +00:00
ping-maxwellandAlex Yang
Bereket EngidaandGitHub
Maxwell WeruandAlex Yang
Albert Putra PurnamaandGitHub
Paola Estefanía de CamposandGitHub
Bereket Engida
MaxwellandGitHub
Gautam ManchandaniandGitHub
HenrikandGitHub
Shotaro NakamuraandGitHub
rovertrackandGitHub
nbifryeandGitHub