Commit Graph

3531 Commits

Author SHA1 Message Date
Paola Estefanía de Campos
dc6afbc8a1 feat(saml): validate SAML crypto algorithms during initial phase (#6785) 2025-12-15 22:41:23 +00:00
Gautam Manchandani
6c0cd58b90 fix(organization): validate role existence in inviteMember endpoint (#6774)
Co-authored-by: Gautam Manchandani <gautammanch@Gautams-MacBook-Air.local>
2025-12-15 22:39:57 +00:00
Joél Solano
5cec48dbd7 fix: properly merge updated data in account cookie (#6758) 2025-12-15 22:39:12 +00:00
Joél Solano
172ab54109 chore: fix drizzle peer dependency version (#6771) 2025-12-15 12:22:04 +00:00
Alex Yang
a63e70ea27 fix: compatible with openapi 3.1 (#6705)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-12-15 12:14:45 +00:00
noctarius aka Christoph Engelbert
5368ab690d feat: add additionalFields option in verification table schema (#6747) 2025-12-15 07:41:27 +00:00
Alexander Wong
1f59130daf chore: update peerDependencies vitest (#6760)
Co-authored-by: Alex Yang <himself65@outlook.com>
2025-12-15 07:35:23 +00:00
Taesu
0ba8989403 fix: revert token masking in listSessions route (#6749) 2025-12-15 07:25:43 +00:00
Joél Solano
0d98f9a5d9 chore: fix prisma peer dependency version (#6751) 2025-12-14 16:12:23 +00:00
Balbuzar
6f914fc90e fix(api-key): prevent id update error with MongoDB adapter (#6752) 2025-12-14 16:11:13 +00:00
Bereket Engida
e79b900bac chore: bump package versions to 1.4.7 for better-auth modules 2025-12-13 22:49:57 -08:00
Bereket Engida
cc3c7bf60b Revert "chore: independent pkg bumping (#6628)"
This reverts commit ce17ac2616.
2025-12-13 22:48:25 -08:00
Bereket Engida
7a4e8636e7 feat(one-time-token): support setting session cookie on ott verify (#3659) 2025-12-14 06:45:33 +00:00
Joél Solano
3001419af7 chore: properly validate body on email signup (#6744) 2025-12-14 06:23:38 +00:00
Taesu
cecaadddf9 chore: set listSessions token to "" instead of undefined (#6745) 2025-12-14 06:22:00 +00:00
Bereket Engida
700f40ab94 feat(phone-number): add password length validation for reset functionality (#6674) 2025-12-13 23:51:17 +00:00
Bereket Engida
6669911fe5 fix(line): enforce nonce (#6631) 2025-12-13 23:41:27 +00:00
Bereket Engida
87441c5c32 fix(api-key): check metadata is enabled for api key update endpoint (#6632) 2025-12-13 23:41:11 +00:00
Bereket Engida
9fed2ff3ad fix: prevent stateless refresh with database configured (#6700) 2025-12-13 23:23:15 +00:00
Taesu
99defeaf80 chore: bump react and next (#6707) 2025-12-13 11:32:02 +00:00
Josh Sullivan
3d849d8dbb chore(organization): export getAdapter for plugin extensibility (#6726) 2025-12-13 11:30:36 +00:00
Jonathan Samines
50248360d2 feat(sso): add URL normalization and validation to all discovery URLs (#6503)
Co-authored-by: Paola Estefanía de Campos <paolaestefania.decampos@gmail.com>
Co-authored-by: Paola Estefanía de Campos <84341268+Paola3stefania@users.noreply.github.com>
Co-authored-by: Bereket Engida <Bekacru@gmail.com>
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2025-12-12 23:16:58 -08:00
Paola Estefanía de Campos
b9d4b1c8e1 feat(sso): add OIDC discovery (#6395)
Co-authored-by: Bereket Engida <Bekacru@gmail.com>
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2025-12-12 23:14:57 -08:00
Bereket Engida
61ec19e598 chore: shouldn't show path conflict error for virtual endpoints (#6718) 2025-12-12 16:05:29 +00:00
Paola Estefanía de Campos
f9875ecb4c feat(saml): assertion timestamp validation with per-provider clock skew (#6706) 2025-12-12 07:02:03 +00:00
dependabot[bot]
6089a57dc7 chore(deps): bump next from 16.0.7 to 16.0.9 (#6702)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-12 01:10:09 +00:00
Paola Estefanía de Campos
9c1a37edbf fix(saml): remove signature validation bypass (#6682) 2025-12-11 23:57:31 +00:00
Paola Estefanía de Campos
5a49f7102e feat(sso): add InResponseTo validation (#6557) 2025-12-11 23:57:15 +00:00
Bereket Engida
6c68e10f4b feat(admin): add support role with permissions for user updates and enforce role change validation (#6699)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-12-11 23:36:18 +00:00
Bereket Engida
3f3cfd3db8 test: add tests for API key quota persistence and magic link origin validation (#6698) 2025-12-11 22:34:57 +00:00
Jonathan Samines
a249908388 chore: add support for scoped endpoints (#6275)
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2025-12-11 20:22:26 +00:00
Taesu
f228410903 chore: drop ms package (#6686) 2025-12-11 04:47:31 +00:00
Dylan Vanmali
22a0053232 chore: independent pkg bumping (#6628) 2025-12-11 00:23:32 +00:00
Augustin
d7125870f8 chore: fix type inference for future TS compatibility (#6643)
Co-authored-by: Azzerty <azzerty@azzair.home>
2025-12-10 08:10:50 +00:00
Alex Yang
02b792261b chore: use unbuild for better-auth package (#6654) 2025-12-10 05:44:35 +00:00
Alex Yang
41753e5a78 chore: import async_hooks per conditional exports (#6630) 2025-12-10 04:55:36 +00:00
Jonathan Samines
30b867a172 chore: add types linter (#6648) 2025-12-10 02:53:35 +00:00
Jonathan Samines
262df9b699 chore: remove unused variables (#6647) 2025-12-09 21:51:48 +00:00
Matteo Badini
c3fe979cb5 perf: add index on organizations slug field (#6303)
Co-authored-by: matteobadini <matteo.badini@gellify.com>
2025-12-09 06:13:47 +00:00
Bereket Engida
f6f3752e3d chore: release v1.4.6 2025-12-08 22:09:26 -08:00
César Rodríguez Vilagrá
e95439ddb6 feat: Add Refresh Token Support to Kick OAuth Provider (#6263) 2025-12-09 06:08:05 +00:00
Martin Riviere
69b88f2023 fix(magic-link): handle query params in errorCallbackUrl (#6383) 2025-12-09 06:01:39 +00:00
Bereket Engida
3e122f3063 chore: cleanup account cookie and state on signout (#6624)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-12-09 05:46:28 +00:00
Joél Solano
b7d3281f91 feat(expo): last-login-method client plugin (#6413)
Co-authored-by: Alex Yang <himself65@outlook.com>
2025-12-09 00:25:08 +00:00
Joél Solano
812a648e18 feat(multi-session): allow to infer additional fields (#6585) 2025-12-09 00:22:38 +00:00
Bereket Engida
d814cdbc93 fix(prisma): use findFirst instead of findMany for findOne (#6429) 2025-12-08 16:07:34 -08:00
Joél Solano
9d4526be98 feat(admin): prevent impersonating admins by default [breaking] (#6454)
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2025-12-09 00:05:50 +00:00
Joél Solano
df8be6819b fix(kysely): wrong affected row count in updateMany & deleteMany (#6572) 2025-12-09 00:01:20 +00:00
Brendan Delfortrie
c47b5594b7 fix: should always remove 2FA verification token after successful verification (#6604) 2025-12-09 00:00:23 +00:00
Joél Solano
b43205deee fix(username): await username validator (#6611) 2025-12-08 23:54:39 +00:00