c779dfc8fc
feat(google): add includeGrantedScopes option to opt out of incremental auth
...
Set `includeGrantedScopes: false` to omit `include_granted_scopes=true` from
Google's authorization URL so each OAuth flow requests only its own scopes.
Defaults to `true`, preserving current behavior.
Closes #9326
Co-authored-by: GautamBytes <161146829+GautamBytes@users.noreply.github.com >
2026-05-31 10:15:51 +01:00
Taesu and Gustavo Valverde
af95f0d305
fix(oauth): preserve account.scope across re-auth and refresh
...
`account.scope` is now treated as the user's accumulated granted-scope
set rather than the latest token's `scope` claim. linkSocial unions
newly granted scopes into the stored value, while sign-in
re-authentication and refresh-token responses leave it untouched.
Generalizes the Google-specific `include_granted_scopes=true` band-aid
from #3013 into a provider-agnostic invariant grounded in RFC 6749 §1.5.
2026-05-31 10:15:50 +01:00
Taesu and GitHub
df9e8b2951
docs: align db adapter guide with adapter contract ( #9830 )
2026-05-31 09:01:50 +00:00
Gustavo Valverde and GitHub
e8696388bf
docs(oauth-provider): align metadata routing guidance ( #9768 )
2026-05-30 22:32:09 +01:00
23d7cbfa79
fix(oauth): apply updateUserInfoOnLink in OAuth callback link flow ( #8758 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-05-30 19:48:38 +01:00
d3919dc1a5
feat(account): support server-side accountInfo calls without session headers ( #9813 )
...
Co-authored-by: Nathan Colosimo <nathancolosimo@gmail.com >
2026-05-30 12:45:40 +01:00
5f282bd382
fix(account): default storeStateStrategy to "database" when using secondaryStorage ( #9591 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-05-30 11:05:28 +01:00
Taesu and GitHub
e131d3ac5b
fix(api-key): verify non-default keys when configId is omitted ( #9794 )
2026-05-30 03:14:57 +00:00
Gustavo Valverde and GitHub
c5b9f93498
fix(generic-oauth): add accessTokenExpiresIn for providers that omit expires_in ( #9799 )
2026-05-29 20:49:59 +00:00
17cd433c66
fix(oauth-proxy): missing state-cookie skip for oauth-proxy ( #9385 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-05-29 15:06:34 +00:00
093115e162
docs(oauth): added Roblox provider and alphabetized "providers without email" table ( #9786 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-05-29 03:16:35 +00:00
ac96316af3
fix(oauth): forward specific callback error codes via shared redirectOnError ( #9788 )
...
Co-authored-by: Gautam Manchandani <manchandanigautam@gmail.com >
2026-05-28 21:42:16 +00:00
Maxwell and GitHub
adc8d7f1af
docs: microsoft base64 profile image warning ( #9692 )
2026-05-19 16:41:44 +00:00
db4263cd3d
chore: use correct auth cli ( #9638 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-05-16 02:27:55 +00:00
Gautam Manchandani and GitHub
95765cfedd
docs: clarify 2fa sign-in enforcement scope ( #9607 )
2026-05-14 08:45:10 +00:00
Gautam Manchandani and GitHub
29599d32b5
docs: document account storeStateStrategy ( #9557 )
2026-05-12 13:16:23 +00:00
Gustavo Valverde and GitHub
5f09d566a6
fix(magic-link): consume verification token atomically on verify ( #9572 )
2026-05-12 12:50:38 +00:00
Gustavo Valverde and GitHub
99a254a79b
fix(device-authorization): bind approval to verifier session ( #9573 )
2026-05-12 11:40:18 +00:00
86765f1597
fix(sso): require org admin role to register SSO providers ( #9220 )
...
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-05-11 17:04:01 +00:00
Jonathan Samines and GitHub
eae63a9aff
docs: add docs for infra timeout options ( #9559 )
2026-05-11 08:59:03 -06:00
Gustavo Valverde and GitHub
e21d744987
fix(rate-limit): widen ipv6Subnet type and correct default in docs ( #9545 )
2026-05-11 07:04:16 +00:00
fde043207e
fix: improve link accessibility issues ( #9521 )
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
Co-authored-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2026-05-09 11:31:27 +00:00
Muzzaiyyan Hussain and GitHub
b96bbfe9b7
docs: improve adapter link accessibility ( #9517 )
2026-05-09 11:01:17 +00:00
Muzzaiyyan Hussain and GitHub
ea5bcfaa95
docs: improve accessibility of documentation links ( #9518 )
2026-05-09 11:00:42 +00:00
Jonathan Samines and GitHub
2f9454b625
docs: add docs for infra getAllAuditLogs() ( #9478 )
2026-05-06 19:47:38 -06:00
Gautam Manchandani and GitHub
4b34df8bdc
docs: fix organization invite callout list ( #9442 )
2026-05-03 19:00:15 +00:00
Taesu and GitHub
eb6061acb1
docs(stripe): document user deletion with active subscriptions recipe ( #9404 )
2026-04-30 22:44:30 +00:00
c8ec03d26e
docs: add MikroORM better-auth adapter to community adapters ( #9379 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com >
2026-04-28 22:56:02 +00:00
Taesu and GitHub
5d24a7478b
fix(stripe): expose stripeSubscription in onSubscriptionUpdate and fix stale snapshot ( #9354 )
2026-04-26 09:41:11 +00:00
b67783d364
docs(hooks): add example for handling multiple endpoints in a single hook ( #8792 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-25 00:26:20 +00:00
89af592e93
docs: add revokeSessionsOnPasswordReset to password reset section ( #8551 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-25 00:19:51 +00:00
c1336c563d
fix(organization): scope setActiveTeam to active organization ( #9239 )
...
Signed-off-by: Gautam Manchandani <manchandanigautam@gmail.com >
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-24 23:48:16 +00:00
7fbe9282ba
docs: update import path for drizzleAdapter ( #9218 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-24 23:22:13 +00:00
Taesu and GitHub
ae3374c6d5
docs: clean up DatabaseTable component ( #9342 )
2026-04-24 06:37:38 +00:00
Gustavo Valverde and GitHub
9aa8e63de8
fix(oauth): support mapProfileToUser fallback for providers that may omit email ( #9331 )
2026-04-23 10:15:36 +00:00
Gustavo Valverde and GitHub
8e3cc3453c
fix(oauth-provider): accept authorization flows without state ( #9328 )
2026-04-23 07:00:05 +00:00
Gustavo Valverde and GitHub
4f373eed8a
feat(social-providers): accept array of Client IDs for ID token audience ( #9292 )
2026-04-22 09:02:56 +00:00
9ab0346dae
docs: add subsection for advanced database configuration options ( #9149 )
...
Co-authored-by: Morgan PEYRE <morgan.peyre@brickcode.tech >
2026-04-22 05:29:41 +00:00
26d0cec9bd
docs: improve Nuxt integration guide ( #9232 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-21 15:30:22 +00:00
Taesu and GitHub
2ee50c581f
docs: add stable/beta versioning with build-time content sync ( #9258 )
2026-04-21 03:49:33 +00:00
35e9f9f6e4
docs: landing improvements ( #9169 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-04-18 23:04:27 -07:00
Jonathan Samines and GitHub
e37167aaf5
docs: fix fastify integration docs to avoid race conditions ( #9230 )
2026-04-17 17:51:21 +00:00
Maxwell and GitHub
d69d888b78
docs: add please_restart_the_process error page ( #9224 )
2026-04-17 13:01:31 +00:00
Taesu and GitHub
a61083e023
fix(phone-number): allow removing phone number via updateUser ( #9219 )
2026-04-17 04:19:26 +00:00
938dd80e2d
docs(test-utils): clarify production usage ( #9119 )
...
Signed-off-by: Gautam Manchandani <manchandanigautam@gmail.com >
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-16 01:20:34 +00:00
25c8f59069
docs: fix wrong AutumnProvider usage in docs ( #9176 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-16 01:18:35 +00:00
09005a974d
docs: add mention to self service directory sync ( #9194 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-16 01:15:52 +00:00
Taesu and GitHub
a0caa1f6f8
docs(device-authorization): fix approval page query param ( #9197 )
2026-04-14 23:36:23 +00:00
Jonathan Samines and GitHub
7be52d9403
docs: add docs email normalization on sentinel ( #9188 )
2026-04-14 14:21:36 -06:00
dd6528f45b
docs(guides): move dynamic base url from concepts to guides and options ( #9145 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-14 11:36:59 +00:00
TaesuandGitHub
Jonathan SaminesandGitHub
Muzzaiyyan HussainandGitHub
