Commit Graph
16 Commits
Author SHA1 Message Date
Paola Estefanía de CamposandAlex Yang 35caa43242 fix(core): separate CSRF and origin checks (#7204)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-01-12 02:50:02 -08:00
3f06dd2ddd feat: support form data for email sign-in/sign-up and fallback to checking fetch Metadata for first login (#6314)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
Co-authored-by: Jonathan Samines <jn.samines@gmail.com>
2025-12-31 21:36:19 +08:00
Taesuandgithub-actions[bot] 5c2180e967 fix: correct wildcard pattern matching for trustedOrigins (#6904) 2025-12-23 06:09:15 +00:00
Taesuandgithub-actions[bot] c01b867bd4 fix: respect IP headers in dev/test environments (#6854) 2025-12-18 12:25:26 +00:00
Jonathan Saminesandgithub-actions[bot] 197e88dd0d feat: add ctx.isTrustedDomain helper (#6462) 2025-12-04 20:45:25 +00:00
Bereket EngidaandGitHub 14128927b4 chore: upgrade to better-call to 1.2.28 (#6090) 2025-11-19 07:23:25 +00:00
6ba15d5657 chore: refactor origin check middleware (#5411)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-10-19 05:13:44 +00:00
82de683552 fix: resolve custom URL scheme origin matching with wildcards (#5248)
Co-authored-by: antonvishal <antonvishal@appexert.com>
2025-10-15 02:29:50 +00:00
Bereket Engida db2c0d0c8a docs: fix api typo on security guide 2025-06-07 15:04:41 -07:00
Björn RaveandGitHub ed44847a8d docs: improve wildcard domains usage (#2735) 2025-05-22 11:51:48 -07:00
Bereket Engida de0aadb37f docs(security): add IP address header configuration for Better Auth 2025-04-12 21:27:02 +03:00
Gordon TaandGitHub 6c28ad3e9b docs: improve cross subdomain cookies docs (#1324)
docs/concepts/cookies:
- updated the `Cross Subdomain Cookies` section  with missing details and additional information to make subdomain cookies work

docs/reference/security:
- updated the `Cookies` section with corrected attribute and option names
2025-02-20 22:02:32 +03:00
KeeanandGitHub f2031065ad docs: fix spelling, grammar, and framework names, and consistency across pages (#578) 2024-11-18 12:26:45 +03:00
Bereket Engida bbdfb508a9 docs: improve security docs 2024-11-01 10:32:51 +03:00
Bereket Engida e5cfa6748c docs: move client to authClient 2024-10-13 21:40:51 +03:00
Bereket Engida 95d457f0c0 docs: add security section 2024-10-11 14:38:31 +03:00