Commit Graph
7760 Commits
Author SHA1 Message Date
TaesuandGitHub e5b971444a fix(docs): match documentation sources to release versions (#11868) 2026-10-16 00:11:46 +00:00
Gustavo ValverdeandGitHub a1f6f0bf19 fix(oauth-provider): keep admin changes made during a CIMD refresh (#11830) 2026-10-15 16:40:19 +00:00
Gustavo ValverdeandGitHub 92eab88689 docs(oauth-provider): explain how clients connect to organizations (#11831) 2026-10-15 17:39:56 +01:00
37debaa8a1 fix(oauth-provider): correct consent and continue OpenAPI response schemas (#10881)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
2026-10-15 15:39:50 +00:00
TaesuandGitHub 9ecd71fd6c fix(docs): preserve sidebar scroll position on navigation (#11829) 2026-10-16 00:23:46 +09:00
37a75c95d1 fix(rate-limit): convert a string lastRequest before computing X-Retry-After (#11521)
Co-authored-by: Taesu <bytaesu@gmail.com>
2026-10-15 15:02:04 +00:00
TaesuandGitHub 41f9ff6162 chore: use biome vcs ignore file and ci command (#11816) 2026-10-15 14:29:03 +00:00
bd65db02c1 fix(db): recognize postgres int8 as a number type in migration diffs (#10719)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
2026-10-15 14:22:32 +00:00
better-release[bot]andGitHub b734a418bf chore: release v1.7.10 (#11795) v1.7.10 2026-10-15 14:22:54 +01:00
eebd47a0e7 fix(last-login-method): record Google One Tap sign-ins (#11393)
Co-authored-by: arjunpkulkarni <arjunpkulkarni@gmail.com>
Co-authored-by: breken-ai <312387581+breken-ai@users.noreply.github.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-15 14:15:38 +01:00
eaecb7229e fix(one-tap): apply the Google provider's mapProfileToUser and getUserInfo (#11819)
Co-authored-by: kaiizer777 <kanekigaming786@gmail.com>
2026-10-15 13:02:59 +00:00
Gustavo ValverdeandGitHub 414e845f12 fix(better-auth): keep package subpaths in sync with build entries (#11822) 2026-10-15 14:08:25 +01:00
Gustavo ValverdeandGitHub 88c9a37856 fix(one-tap): apply plugin-level autoSelect and cancelOnTapOutside (#11820) 2026-10-15 13:02:01 +00:00
09d07e6fea fix(one-tap): stop calling prompt moment methods unsupported under FedCM (#11821)
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com>
2026-10-15 12:58:29 +00:00
0cf1f7c6bc fix(one-tap): add the better-auth/plugins/one-tap subpath export (#11696)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-15 13:45:41 +01:00
Gustavo ValverdeandGitHub 61c913da73 fix(oauth-provider): report an unknown client in a client assertion as not found (#11811) 2026-10-15 13:11:39 +01:00
Gustavo ValverdeandGitHub bb5edcf9f8 fix(core): use a newer cached key set before joining a pending JWKS fetch (#11810) 2026-10-15 13:11:09 +01:00
4d7da0bef8 fix(oauth-provider): return 400 invalid_grant on PKCE verifier mismatch (#11724)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-15 13:07:53 +01:00
8f3da46ae5 fix(oauth-provider): return invalid_client for an unknown client at the token endpoint (#11176)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-15 13:02:05 +01:00
Gustavo ValverdeandGitHub 44f14bbf82 fix(oauth-provider): keep approved resources refreshable after a narrowed device poll (#11815) 2026-10-15 12:48:52 +01:00
fedd05586c fix(oauth2): report an unreachable JWKS as an error, not an invalid token (#11612)
Co-authored-by: vhinayindia <281186805+vhinayindia@users.noreply.github.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-15 12:35:36 +01:00
963b7f9417 fix(oauth-provider): treat unverifiable JWT access tokens as invalid (#11596)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-15 12:13:07 +01:00
906c32f4b5 fix(oauth-provider): keep the supported grants from a dynamic registration (#11797)
Co-authored-by: Bereket Engida <Bekacru@gmail.com>
2026-10-15 12:02:00 +01:00
Gustavo ValverdeandGitHub bbd0a19c30 fix(core): limit JWKS refetches for unknown key IDs (#11805) 2026-10-15 11:54:17 +01:00
Gustavo ValverdeGitHubcubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
99cdfe7c2e fix(oauth-provider): keep consent separate per reference (#11801)
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2026-10-15 11:11:01 +01:00
Gustavo ValverdeandGitHub 2832dbda06 fix(oauth-provider): accept key-rotation assertions when baseURL ends in a slash (#11804) 2026-10-15 10:59:35 +01:00
Gustavo ValverdeandGitHub f42c0c220d fix(oauth-provider): report an unknown client_id as not found (#11799) 2026-10-15 09:18:07 +00:00
Gustavo ValverdeandGitHub 2fa7e2f8bb fix(oauth-provider): infer native for http loopback redirect URIs (#11798) 2026-10-15 09:11:34 +00:00
Gustavo ValverdeandGitHub af4b7965e8 test(oauth-provider): add black-box DPoP interop smoke tests (#11791) 2026-10-15 08:35:47 +00:00
Gustavo ValverdeandGitHub cdd491b9d0 fix(oauth-provider): build DPoP htu from the request path (#11786) 2026-10-15 08:35:46 +00:00
Gustavo ValverdeandGitHub cdf413695c test(oauth-provider): force both orderings of the revoke vs rotate race (#11793) 2026-10-15 08:20:00 +00:00
Gustavo ValverdeandGitHub fe550a9c57 feat(oauth-provider): let private_key_jwt clients rotate their own keys (#11695) 2026-10-15 08:08:25 +00:00
Gustavo ValverdeandGitHub e34b828274 fix(oauth-provider): refuse trusted-client changes with 400, not 500 (#11781) 2026-10-15 08:08:25 +00:00
Gustavo ValverdeandGitHub ef3175ae52 refactor(demo): share demo base URL and MCP resource (#11765) 2026-10-15 04:25:55 +00:00
better-release[bot]andGitHub d2a5f83e92 chore: release v1.7.9 (#11761) v1.7.9 2026-10-15 04:48:47 +01:00
TaesuandGitHub 13c0726d8d fix(demo): show admin action errors instead of success toasts (#11771) 2026-10-15 06:58:39 +09:00
TaesuandGitHub e3e87ddbeb fix(demo): reset loading state after unbanning a user (#11770) 2026-10-14 21:34:54 +00:00
TaesuandGitHub dbca31145c test: fix test names in bearer and organization (#11768) 2026-10-15 06:20:29 +09:00
TaesuandGitHub c03ced528a chore: bump @biomejs/biome (#11760) 2026-10-14 21:01:10 +00:00
TaesuandGitHub 6edaa61e62 fix(api): await onAPIError.onError and log hook failures (#11766) 2026-10-14 20:13:05 +00:00
Gustavo ValverdeandGitHub bdf20eb93e fix(demo): link dynamically registered MCP clients to the MCP resource (#11764) 2026-10-14 19:47:33 +00:00
0a1a87e388 fix(oauth-provider): distinguish post-login continuation from initial selection (#11185)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-14 18:32:15 +00:00
54a09948e8 fix(oauth-provider): validate DPoP against public URL (#10799)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-14 18:27:25 +00:00
better-release[bot]andGitHub 5f4cc5c110 chore: release v1.7.8 (#11513) v1.7.8 2026-10-14 18:47:06 +01:00
Gustavo ValverdeandGitHub 133765b48e ci(release): keep PR titles for every changeset a PR adds (#11759) 2026-10-14 18:24:04 +01:00
e78f15aa31 fix(core): allow 30s of clock skew when verifying ID tokens (#11749)
Co-authored-by: Lohith <ssvlohith@gmail.com>
2026-10-14 17:06:19 +01:00
60525e08fd fix(core): verify microsoft entra id tokens when jwks keys omit alg (#11663)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-14 17:04:35 +01:00
e9d9921217 fix(generic-oauth): retry discovery for providers skipped at startup (#11750)
Co-authored-by: mangomac <mangomac@users.noreply.github.com>
2026-10-14 16:53:53 +01:00
916ef5c530 fix(mongo-adapter): retry a transaction aborted with a transient error (#11515)
Co-authored-by: Maxwell Afamefuna Nzekwe <70326615+maxnze1@users.noreply.github.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-14 16:30:50 +01:00
aaf0d7da3e fix(oauth-provider): keep auth working when startup resource seeding fails (#11726)
Co-authored-by: Panagiotis Plytas <34184381+pplytas@users.noreply.github.com>
Co-authored-by: Arjun Vijay Prakash <137415649+ArjunCodess@users.noreply.github.com>
Co-authored-by: Tushar <192458782+Tushar-Khandelwal-2004@users.noreply.github.com>
Co-authored-by: zoom-dustin-moriarty <221604897+zoom-dustin-moriarty@users.noreply.github.com>
2026-10-14 12:33:21 +01:00