c1a8a64c14
fix(open-api): generate valid OpenAPI schemas for client generators ( #9555 )
...
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com >
2026-06-12 22:24:56 +00:00
Gustavo Valverde and GitHub
87e7aa5e0f
fix(api): validate Origin/Referer on cookieless email sign-in and sign-up ( #9973 )
2026-06-10 01:43:41 +00:00
Taesu and GitHub
099ee48c41
chore(docs): format markdown including mdx files ( #9085 )
2026-04-10 05:09:33 +00:00
Alex Yang and GitHub
6160564253
docs: add warning about localhost in trusted origins ( #8527 )
2026-03-09 23:08:20 +00:00
John Zila and GitHub
07b839088a
feat: support non-destructive key rotation for BETTER_AUTH_SECRET ( #7738 )
2026-02-28 15:36:52 -08:00
nphlp and GitHub
c9f6ea9cf3
fix: prevent email enumeration on /change-email, add customSyntheticUser ( #8097 )
2026-02-28 13:59:12 -08:00
Paola Estefanía de Campos and GitHub
bb49394036
docs: add trustedProxyHeaders section to security reference ( #7835 )
2026-02-12 06:56:51 +00:00
5989c12611
fix(core): separate CSRF and origin checks ( #7204 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2026-01-10 16:27:54 -08:00
Alex Yang and GitHub
a17468438d
docs: build regression after format ( #7110 )
2026-01-04 01:28:36 +08:00
Alex Yang and GitHub
8b01d6abac
chore: format markdown ( #7103 )
2026-01-03 16:55:39 +08:00
e8aa51c052
feat: support form data for email sign-in/sign-up and fallback to checking fetch Metadata for first login ( #6314 )
...
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
Co-authored-by: Jonathan Samines <jn.samines@gmail.com >
2025-12-25 11:05:23 -08:00
Taesu and GitHub
ae90b482d0
fix: correct wildcard pattern matching for trustedOrigins ( #6904 )
2025-12-23 14:08:58 +08:00
Taesu and GitHub
d3ebfacd91
fix: respect IP headers in dev/test environments ( #6854 )
2025-12-18 20:25:10 +08:00
Jonathan Samines and GitHub
d09c580bcb
feat: add ctx.isTrustedDomain helper ( #6462 )
2025-12-04 12:45:10 -08:00
Bereket Engida and GitHub
14128927b4
chore: upgrade to better-call to 1.2.28 ( #6090 )
2025-11-19 07:23:25 +00:00
6ba15d5657
chore: refactor origin check middleware ( #5411 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-10-19 05:13:44 +00:00
82de683552
fix: resolve custom URL scheme origin matching with wildcards ( #5248 )
...
Co-authored-by: antonvishal <antonvishal@appexert.com >
2025-10-15 02:29:50 +00:00
Bereket Engida
db2c0d0c8a
docs: fix api typo on security guide
2025-06-07 15:04:41 -07:00
Björn Rave and GitHub
ed44847a8d
docs: improve wildcard domains usage ( #2735 )
2025-05-22 11:51:48 -07:00
Bereket Engida
de0aadb37f
docs(security): add IP address header configuration for Better Auth
2025-04-12 21:27:02 +03:00
Gordon Ta and GitHub
6c28ad3e9b
docs: improve cross subdomain cookies docs ( #1324 )
...
docs/concepts/cookies:
- updated the `Cross Subdomain Cookies` section with missing details and additional information to make subdomain cookies work
docs/reference/security:
- updated the `Cookies` section with corrected attribute and option names
2025-02-20 22:02:32 +03:00
Keean and GitHub
f2031065ad
docs: fix spelling, grammar, and framework names, and consistency across pages ( #578 )
2024-11-18 12:26:45 +03:00
Bereket Engida
bbdfb508a9
docs: improve security docs
2024-11-01 10:32:51 +03:00
Bereket Engida
e5cfa6748c
docs: move client to authClient
2024-10-13 21:40:51 +03:00
Bereket Engida
95d457f0c0
docs: add security section
2024-10-11 14:38:31 +03:00
Gustavo ValverdeandGitHub
TaesuandGitHub
Alex YangandGitHub
John ZilaandGitHub
nphlpandGitHub
Paola Estefanía de CamposandGitHub
Bereket Engida
Björn RaveandGitHub
Gordon TaandGitHub
KeeanandGitHub