Commit Graph

66 Commits

Author SHA1 Message Date
better-release[bot]
700d298e1e chore: version packages (#9052) 2026-04-09 15:19:07 +01:00
Gustavo Valverde
4c829bf289 fix(oauth-provider): preserve multi-valued query params through prompt redirects (#9060) 2026-04-09 13:13:39 +00:00
Gustavo Valverde
b20fa424c3 fix(next-js): replace cookie probe with header-based RSC detection in nextCookies (#9059)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-09 12:41:10 +00:00
Gustavo Valverde
608d8c3082 fix(sso): include RelayState in signed SAML AuthnRequests (#9058) 2026-04-09 12:05:02 +00:00
Dylan Vanmali
c6922dce8e refactor(oauth-provider): reject skip_consent at schema level in DCR (#8998) 2026-04-09 11:56:29 +00:00
Rayan Salhab
5e5d3f62fc fix(sso): normalize SAMLResponse whitespace at request boundary (#8968)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-04-09 11:04:10 +00:00
Jaydeep pipaliya
2cbcb9baac fix(oauth2): prevent cross-provider account collision in link-social callback (#8983)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-04-09 10:17:42 +00:00
Maxwell
9deb7936ab fix: cookie store strategy should verify oauth state (#8949)
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-04-09 09:26:36 +00:00
armful
84098432ad feat(two-factor): include enabled 2fa methods in sign-in redirect response (#8772)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-04-09 09:25:49 +00:00
armful
e78a7b120d fix(two-factor): prevent unverified TOTP enrollment from gating sign-in (#8711)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-04-09 08:48:10 +00:00
better-release[bot]
85bb710edc chore: version packages (#9018)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-04-08 19:22:59 +00:00
Taesu
7495830659 fix(api): restore getSession accessibility in generic Auth<O> context (#9017) 2026-04-08 17:34:12 +00:00
Jonathan Samines
2e537df5f7 fix: endpoint instrumentation to always use route template (#9023) 2026-04-08 08:41:31 +10:00
Maxwell
f61ad1cab7 fix: use INVALID_PASSWORD for all checkPassword failures (#8902) 2026-04-07 18:17:10 +00:00
Gustavo Valverde
8737dbf3f6 chore: remove pending pr-8927 changeset (#8993) 2026-04-06 16:03:44 +00:00
Gustavo Valverde
d9b16d2551 chore: sync main to next
chore: sync main to next
2026-04-06 16:47:42 +01:00
Gustavo Valverde
535655bc0d chore: fix release-blocking Changesets null versions on next (#8992) 2026-04-06 15:31:00 +00:00
Taesu
141781d6fc fix: generate session id when using secondary storage without database (#8927) 2026-04-06 14:43:47 +00:00
better-release[bot]
d666a03372 chore: exit pre-release mode for v1.6.0 2026-04-06 14:41:56 +00:00
Gustavo Valverde
29d197e688 chore: sync main to next (#8976)
chore: sync main to next
2026-04-06 15:31:29 +01:00
Gustavo Valverde
e5091ee1e6 fix(oauth-provider): scope loss on PAR, loopback redirect matching, DCR skip_consent (#8632) 2026-04-06 14:14:39 +00:00
Gustavo Valverde
bd9bd58f87 fix(security): enforce authorization on SCIM management endpoints and normalize passkey ownership (#8843) 2026-04-06 13:47:24 +00:00
Gustavo Valverde
ee8b40d502 fix(deps): patch Dependabot security issues (#8838)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-04-06 13:16:45 +00:00
Taesu
560230f751 fix(types): prevent any from collapsing base type and client inference (#8981) 2026-04-06 12:18:58 +00:00
Gustavo Valverde
dd537cbdeb chore(oidc-provider): deprecate plugin in favor of @better-auth/oauth-provider (#8985) 2026-04-06 12:13:35 +00:00
Taesu
469eee6d84 fix(oauth): prevent double-hashing of state when storeIdentifier is hashed (#8980)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-04-06 11:14:55 +00:00
better-auth-releases[bot]
73beda26f9 chore: version packages (beta) (#8945)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-04-04 15:52:24 +00:00
Gustavo Valverde
9b4ccb1f11 fix: restore original changeset bump types now that peer dep patch is in place 2026-04-04 15:52:24 +00:00
Gustavo Valverde
64c2978516 fix: prevent major version escalation in changeset peer dep resolution 2026-04-04 15:52:24 +00:00
Gustavo Valverde
5dd9e44c04 chore: enter beta pre-release mode with changesets for 1.6.0 2026-04-04 15:52:24 +00:00
Gustavo Valverde
dea55f0385 chore: add all packages to changesets fixed group (#8944) 2026-04-03 23:35:04 +00:00
Gustavo Valverde
0afc6a1e78 ci: replace bumpp with changesets release automation (#8903) 2026-04-03 21:43:23 +00:00
Bereket Engida
95c7ee3e44 chore: remove changeset 2025-08-11 14:45:50 -07:00
dogus
422aa488b7 feat(stripe): create billing portal session (#3625)
* feat(stripe) : add billing portal session endpoint

* create billing portal session

* update docs

* chore: changeset

* chore: fix stripe

* chore: remove comment

* chore: update docs

---------

Co-authored-by: Bereket Engida <Bekacru@gmail.com>
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2025-08-06 16:38:50 -07:00
KinfeMichael Tariku
0eef0abc3b fix(org): use correct slug lookup when setting active org 2025-08-06 16:38:40 -07:00
Bereket Engida
ee63084a2e chore: remove changeset ci 2025-08-04 10:51:59 -07:00
Bereket Engida
b71e8a7ec0 Merge branch 'main' into canary 2025-08-04 10:43:02 -07:00
Alex Yang
d313d0093e fix: await ctx in middleware (#3783)
* fix: await ctx in middleware

* fix: lint

* Create tidy-impalas-fail.md
2025-08-04 10:27:55 -07:00
Bereket Engida
af239b7879 chore: remove changeset and add contributing code of conduct 2025-08-02 13:01:02 -07:00
Alex Yang
5124b40283 chore: upgrade TypeScript version (#3748)
* chore: fix TypeScript to a correct version

* fixup! chore: fix TypeScript to a correct version

* chore: fix typecheck

---------

Co-authored-by: Bereket Engida <Bekacru@gmail.com>
2025-08-02 10:18:55 -07:00
Jumpei Ogawa
2d8d05330d fix(cli): --yes option does not work on @better-auth/cli generate (#3749)
* fix: do not prompt before overwriting schema on `@better-auth/cli generate --yes ...`

* chore: changeset

---------

Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2025-08-02 08:58:44 -07:00
Andrew Patton
91cae8aa1e docs: fix wrong cancelUrl and returnUrl descriptions (#3647)
* docs: fix wrong cancelUrl and returnUrl descriptions

* chore: changeset

* chore: update changeset

---------

Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2025-08-01 09:43:48 -07:00
Marti
e5f3f31311 feat(passkey): allow custom passkey name during registration (#3587)
* feat(passkey): allow custom passkey name during registration

* lint

* docs: specify name prop in passkey docs

* chore: add changeset

* chore: changeset

* chore: update changeset

* remove changest

---------

Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2025-08-01 09:43:35 -07:00
Timur
7fa90f8d4d fix(organization): updated types for the user argument in allowUserToCreateOrganization to support custom fields (#3600)
* fix: organization allowUserToCreateOrganization user argument typing

* chore: changeset

---------

Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2025-08-01 08:45:14 -07:00
KinfeMichael Tariku
c726753e69 feat: support multiple aud for apple oauth (#3710)
* support multiple aud

* update

* update

* changeset
2025-08-01 08:10:57 -07:00
Earl Oliver
4833a4b395 fix: incorrect initialization of remaining value within API key (#3648)
* Fixes #3640 - Resolves issue related to incorrect initialization of remaining value within API key.

* Adding test cases for fix of #3640.

* chore: update changeset

---------

Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2025-08-01 00:22:15 -07:00
Bereket Engida
4d85d8709d revert "fix(username): isUsernameAvailable should validate usernames (#3680)" (#3730)
This reverts commit e60f780f28.
2025-07-31 23:53:32 -07:00
Maxwell
e60f780f28 fix(username): isUsernameAvailable should validate usernames (#3680) 2025-07-31 23:50:22 -07:00
Shawn Erquhart
142136076a fix: cast dates from session to Date when using date methods (#3704)
* fix: cast dates from session to Date when using date methods

* add changeset
2025-07-31 23:15:19 -07:00
Grant G
60c92fab0b fix(jwt): expose jwt options to plugins (#3726) 2025-07-31 22:27:26 -07:00