Paola Estefanía de Campos and Alex Yang
35caa43242
fix(core): separate CSRF and origin checks ( #7204 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2026-01-12 02:50:02 -08:00
3f06dd2ddd
feat: support form data for email sign-in/sign-up and fallback to checking fetch Metadata for first login ( #6314 )
...
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
Co-authored-by: Jonathan Samines <jn.samines@gmail.com >
2025-12-31 21:36:19 +08:00
Taesu and github-actions[bot]
5c2180e967
fix: correct wildcard pattern matching for trustedOrigins ( #6904 )
2025-12-23 06:09:15 +00:00
Taesu and github-actions[bot]
c01b867bd4
fix: respect IP headers in dev/test environments ( #6854 )
2025-12-18 12:25:26 +00:00
Jonathan Samines and github-actions[bot]
197e88dd0d
feat: add ctx.isTrustedDomain helper ( #6462 )
2025-12-04 20:45:25 +00:00
Bereket Engida and GitHub
14128927b4
chore: upgrade to better-call to 1.2.28 ( #6090 )
2025-11-19 07:23:25 +00:00
6ba15d5657
chore: refactor origin check middleware ( #5411 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-10-19 05:13:44 +00:00
82de683552
fix: resolve custom URL scheme origin matching with wildcards ( #5248 )
...
Co-authored-by: antonvishal <antonvishal@appexert.com >
2025-10-15 02:29:50 +00:00
Bereket Engida
db2c0d0c8a
docs: fix api typo on security guide
2025-06-07 15:04:41 -07:00
Björn Rave and GitHub
ed44847a8d
docs: improve wildcard domains usage ( #2735 )
2025-05-22 11:51:48 -07:00
Bereket Engida
de0aadb37f
docs(security): add IP address header configuration for Better Auth
2025-04-12 21:27:02 +03:00
Gordon Ta and GitHub
6c28ad3e9b
docs: improve cross subdomain cookies docs ( #1324 )
...
docs/concepts/cookies:
- updated the `Cross Subdomain Cookies` section with missing details and additional information to make subdomain cookies work
docs/reference/security:
- updated the `Cookies` section with corrected attribute and option names
2025-02-20 22:02:32 +03:00
Keean and GitHub
f2031065ad
docs: fix spelling, grammar, and framework names, and consistency across pages ( #578 )
2024-11-18 12:26:45 +03:00
Bereket Engida
bbdfb508a9
docs: improve security docs
2024-11-01 10:32:51 +03:00
Bereket Engida
e5cfa6748c
docs: move client to authClient
2024-10-13 21:40:51 +03:00
Bereket Engida
95d457f0c0
docs: add security section
2024-10-11 14:38:31 +03:00