Commit Graph

6812 Commits

Author SHA1 Message Date
Alex Yang
f2124a8f48 feat: add /update-session (#8084)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-02-23 04:42:31 +00:00
Maxwell
7565c75eb4 fix: force drizzle-adapter to return dates correctly (#8104) 2026-02-22 17:25:44 -08:00
Taesu
e802eaebac fix(stripe): use CHECKOUT_SESSION_ID for success_url and remove cancel callback (#8095) 2026-02-22 09:15:50 -08:00
Oluwatobi Mustapha
664c1d7a9a fix(security): prevent OTP reuse via race condition (#8067) 2026-02-21 23:31:17 -08:00
Taesu
cbd86131d5 fix(db): handle camelCase postgres metadata keys in migration schema detection (#8092) 2026-02-22 04:01:51 +00:00
Taesu
3ec7d41a91 feat: limit enumeration on sign-up when email verification is required (#8091) 2026-02-21 15:51:08 -08:00
Taesu
6f545cad26 fix(expo): delete expired cookies instead of storing empty values (#8090) 2026-02-21 19:55:44 +00:00
Taesu
b894280a46 fix(bearer): use semicolon separator when merging cookie headers (#8089) 2026-02-21 14:49:16 +00:00
Paola Estefanía de Campos
9fed16b6c2 feat(mcp): add framework-agnostic remote MCP auth client (#8087) 2026-02-20 21:29:29 -08:00
Paola Estefanía de Campos
197792318f feat(auth): support dynamic baseURL with allowedHosts (#8009) 2026-02-20 19:58:29 +00:00
dependabot[bot]
27b6f555be chore(deps-dev): bump @sveltejs/kit from 2.50.1 to 2.52.2 (#8075)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-20 13:21:07 +00:00
dependabot[bot]
87767a97e1 chore(deps): bump hono from 4.11.7 to 4.11.10 (#8074)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-20 13:07:53 +00:00
Bereket Engida
07e7b5a18f chore(cli): use beta url for pre-release and resolve open import (#7997)
Co-authored-by: Ghost <ghost@better-github.app>
2026-02-20 05:02:12 -08:00
Bereket Engida
d79c0db73b Revert "feat(cli): use vite to load auth config when we detect a vite project"
This reverts commit 22d238b4bf.
2026-02-19 23:41:28 -08:00
Bereket Engida
22d238b4bf feat(cli): use vite to load auth config when we detect a vite project 2026-02-19 23:18:09 -08:00
Kevin
1bb2a3eb20 docs: add getUser endpoint documentation for the admin plugin (#8072) 2026-02-19 21:21:59 -08:00
Angelica Raborar
8be3480ae9 docs: clarify wording in Admin Roles plugin section (#7522) 2026-02-19 20:25:29 -08:00
starslingdev[bot]
6e1f956e0e chore(ci): optimize Playwright browser installs in E2E (#8073)
Co-authored-by: starslingdev[bot] <248995740+starslingdev[bot]@users.noreply.github.com>
2026-02-19 17:18:49 -08:00
Taesu
96dc13a404 feat(stripe): track subscription schedule ID for pending plan changes (#8070) 2026-02-20 00:19:35 +00:00
Taesu
5eebbe96a9 fix(stripe): inject metadata to schedules on update, not on create (#8069) 2026-02-19 16:03:11 +00:00
Taesu
9ca0fa32a7 fix(stripe): handle line item price replacement on plan upgrade (#8066) 2026-02-19 15:26:50 +00:00
Taesu
5180893ae6 feat(stripe): add scheduleAtPeriodEnd option to defer plan changes (#8064) 2026-02-19 14:34:17 +00:00
Alex Yang
443c67b941 chore: update release.md (#8063) 2026-02-19 13:02:18 +00:00
Joél Solano
8fe651400a fix(phone-number): call callback on password reset (#8046) 2026-02-18 21:19:45 -08:00
Joél Solano
830bfd251a fix: merge trusted origins function from plugin init (#8056) 2026-02-18 18:35:40 -08:00
Bereket Engida
72ec62ff06 chore: integrate new dash and sentinel into authentication flow (#8053) 2026-02-18 13:02:21 -08:00
Bereket Engida
0c14446710 chore: fix lockfile 2026-02-18 12:34:47 -08:00
Bereket Engida
b8ed56d135 chore: update infra version (#8052) 2026-02-18 12:27:53 -08:00
Bereket Engida
794f14688b Fix: Handle escaped $user in Supabase PostgreSQL search_path (#8051) 2026-02-18 11:16:50 -08:00
Taesu
2468a2d918 fix(expo): support wildcard trusted origins in deep link cookie injection (#8013) 2026-02-18 12:06:15 +00:00
dependabot[bot]
67b53e61b6 chore(deps): bump fast-xml-parser from 5.3.3 to 5.3.6 (#8034)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-18 11:14:15 +00:00
Alex Yang
425ec38f84 fix(sso): import cjs dep (#8041) 2026-02-18 10:44:43 +00:00
Joél Solano
62ed645354 fix(admin): optional chain user in hooks (#8026) 2026-02-18 10:06:20 +00:00
Rosano
b633d0745d docs: fix account linking example (#8035) 2026-02-18 01:41:19 -08:00
Bereket Engida
e5683a7a64 chore: bump all packages to v1.5.0-beta.16 (#8037)
Co-authored-by: Ghost <ghost@better-github.app>
v1.5.0-beta.16
2026-02-18 00:49:17 -08:00
Taesu
9f79147bdb fix(oauth-provider): return "invalid_client" on encrypted secret verification failure (#8030) 2026-02-18 00:21:05 -08:00
Mauricio Siu
07d216dc29 feat: support accepting callback for trusted providers function (#7904)
Co-authored-by: Paola Estefanía de Campos <84341268+Paola3stefania@users.noreply.github.com>
2026-02-17 23:24:59 -08:00
Taesu
76d9ba140c fix(stripe): use correct stripeCustomerId on /subscription/cancel/callback endpoint (#8032) 2026-02-18 02:47:41 +00:00
Raphaël Balet
b6744552f3 docs(admin.mdx): export const ac (#8000) 2026-02-17 16:08:50 -08:00
Joél Solano
b7de9e7b2d chore(electron): fix race condition (#8025) 2026-02-17 15:54:29 -08:00
Dylan Vanmali
30d17fc989 fix(oauth-provider): add missing oauthClient createdAt/updatedAt values (#7851) 2026-02-17 15:39:02 -08:00
Taesu
0dbff0ee56 test(oauth-provider): update remaining consent response assertions from uri to url (#8029) 2026-02-17 22:40:03 +00:00
Taesu
88e1e995b1 fix(oauth-provider): return url instead of uri in continue and consent endpoints (#7811) 2026-02-17 09:23:51 -08:00
Joél Solano
d241f4ccac fix(phone-number): reset password should create credential account (#6862)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2026-02-16 23:10:12 -08:00
Joél Solano
7306c5af05 feat(electron): allow manual token exchange & add sanitizeUser option (#7976) 2026-02-16 23:10:02 -08:00
Joél Solano
1e18da7620 feat(electron): fetch user image securely regardless of csp (#7844) 2026-02-16 16:57:02 -08:00
Joél Solano
cec49694e9 fix(db): infer default value for required attr properly (#7996) 2026-02-16 16:56:50 -08:00
Paola Estefanía de Campos
bcf76b8b74 fix: add error handling for id token verification in Apple and Google providers (#8011) 2026-02-16 16:29:54 -08:00
starslingdev[bot]
0d24f3f8b5 chore(ci): add Docker Compose healthchecks for faster CI service readiness (#8010)
Co-authored-by: starslingdev[bot] <248995740+starslingdev[bot]@users.noreply.github.com>
2026-02-16 15:57:12 -08:00
Bereket Engida
fae56a1b5c chore: release v1.5.0-beta.15 v1.5.0-beta.15 2026-02-16 15:23:33 -08:00