github-starred/better-auth
2
0
Fork 0
mirror of https://github.com/better-auth/better-auth.git synced 2026-07-29 03:55:52 -05:00
Code Issues 2.5k Packages Projects Releases 112 Wiki Activity
6,684 Commits 142 Branches 1,417 Tags
@better-auth/cimd@1.7.0-beta.1
Commit Graph
1771 Commits
Author SHA1 Message Date
Gustavo Valverde b7850f90a4 fix: address merge follow-ups from PR #9172 review 
- packages/oauth-provider/src/types/zod.ts: make `state` optional in
  `verificationValueSchema`. Main's PR #9118 hardened authorization code
  validation with a required `state`, but CIMD (next, PR #9159) doesn't send
  state in test flows. Per OAuth 2.0 §4.1.1 state is RECOMMENDED, not
  REQUIRED. Fixes CIMD token exchange (`401 !== 200`) in ci test and smoke.

- docs/content/docs/plugins/sso.mdx: replace remaining `/sso/saml2/callback/`
  references with `/sso/saml2/sp/acs/` to match the endpoint rename from
  next's PR #9117. The merge took main verbatim here, regressing docs that
  next had already updated.
 2026-04-14 11:54:29 +01:00
Gustavo Valverde 3fbab44068 chore: sync main to next 
Resolves conflicts in PR #9115 which the release bot cannot auto-merge.

Conflict resolutions:
- .github/workflows/release.yml: take main's hardened grep fallback (92256a2d0)
- docs/content/docs/plugins/sso.mdx: take main's named-exports refactor verbatim (#9144)
- packages/oauth-provider/src/token.ts: keep next's at_hash sequencing (#9079),
  add main's customTokenResponseFields spread and credential helper rename (#9118)
- packages/oauth-provider/src/token.test.ts: keep both new describe blocks
  (at_hash in id tokens from next, customTokenResponseFields from main)

Semantic fixes on auto-merged files where git silently dropped main's changes
around next's discriminated-response refactor:
- two-factor/index.ts: restore skipVerificationOnEnable handling in the totp
  enablement path
- two-factor/types.ts: restore the skipVerificationOnEnable type field
- two-factor/two-factor.test.ts: narrow the discriminated enable response via
  method === "totp" guard
 2026-04-14 11:30:13 +01:00
Jaden StantonandGitHub 2514c3d970 docs: correct wording for invocable endpoints in integration guides (#9160) 2026-04-14 05:59:29 +00:00
Sean FilimonandGitHub a1f619969d docs: update Convex Labs link in documentation (#9161) 2026-04-14 05:55:27 +00:00
Gustavo ValverdeGitHubDylan Vanmali
 		cd8313ba00 feat(cimd): add Client ID Metadata Document plugin (#9159) 
Co-authored-by: Dylan Vanmali <dylanvanmali@yahoo.com>
 2026-04-13 20:52:34 +00:00
Gustavo ValverdeandGitHub c7d22539ec refactor(generic-oauth)!: rewrite as first-class social provider with RFC compliance (#9069) 2026-04-13 12:02:16 +00:00
TaesuandGitHub 6c946a3e0c docs(sso): extract inline fields to named exports (#9144) 2026-04-13 03:01:29 +00:00
TaesuandGitHub daf7ab7aaa docs: fix fk references in schema tables to match actual plugin schemas (#9143) 2026-04-13 02:37:17 +00:00
Gustavo ValverdeandGitHub b70f025bfa refactor(sso)!: remove callbackUrl, consolidate ACS endpoint, fix SLO (#9117) 2026-04-11 10:03:56 +00:00
Gustavo ValverdeandGitHub 314e06f0fd feat(oauth-provider): add customTokenResponseFields and harden authorization code validation (#9118) 2026-04-11 09:54:48 +00:00
Gustavo Valverde 28ccc8cda9 chore: resolve main-to-next sync conflicts 
Conflicts resolved:
- docs/content/docs/plugins/2fa.mdx: kept next's OTP feature, applied main's exported const pattern
- docs/content/docs/plugins/oauth-provider.mdx: kept main's formatting, added back private_key_jwt docs
- docs/content/docs/plugins/sso.mdx: kept next's version with private_key_jwt and SAML options
- packages/sso/src/routes/sso.ts: kept next's version (has security fixes and private_key_jwt)
 2026-04-10 19:11:05 +01:00
Gustavo ValverdeandGitHub 52c47517a2 fix(sso): unify SAML response processing and fix bugs (#9097) 2026-04-10 15:00:26 +00:00
Gustavo ValverdeandGitHub 544f1c63c9 feat(two-factor)!: add OTP enablement and discriminated response (#9057) 2026-04-10 14:23:20 +00:00
Gustavo ValverdeandGitHub 93d3871bd2 feat(oauth): add private_key_jwt client authentication (RFC 7523) (#8836) 2026-04-10 08:22:05 +00:00
TaesuGitHubleonardo2204better-release[bot] <273320539+better-release[bot]@users.noreply.github.com>
 		5f84335815 feat(stripe): support Stripe SDK v21 and v22 (#9084) 
Co-authored-by: leonardo2204 <1509421+leonardo2204@users.noreply.github.com>
Co-authored-by: better-release[bot] <273320539+better-release[bot]@users.noreply.github.com>
 2026-04-10 06:19:34 +00:00
TaesuandGitHub 099ee48c41 chore(docs): format markdown including mdx files (#9085) 2026-04-10 05:09:33 +00:00
Ahmed SaidGitHubMaxwell
 		41679fa817 docs: add database table names (#9062) 
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
 2026-04-09 19:17:40 +00:00
Doug WebbGitHubMaxwell
 		809da03968 docs: add paragraph specifying need for cookie passage for server methods (#6546) 
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
 2026-04-09 13:26:13 +00:00
Idris GadiGitHubMaxwell
 		31fd092896 docs: clarify that the redirectURI must include providerId parameter in generic oauth (#6021) 
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
 2026-04-09 13:23:33 +00:00
Gautam ManchandaniGitHubMaxwell
 		cf25761bc1 docs: clarify credential account requirement for phone number plugin (#6401) 
Signed-off-by: GautamBytes <manchandanigautam@gmail.com>
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
 2026-04-09 13:19:50 +00:00
armfulGitHubGustavo Valverde
 		84098432ad feat(two-factor): include enabled 2fa methods in sign-in redirect response (#8772) 
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
 2026-04-09 09:25:49 +00:00
armfulGitHubGustavo Valverde
 		e78a7b120d fix(two-factor): prevent unverified TOTP enrollment from gating sign-in (#8711) 
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
 2026-04-09 08:48:10 +00:00
TaesuandGitHub b24fd23790 docs: remove commet plugin from sidebar (#9034) 2026-04-08 07:11:21 +00:00
TaesuGitHubGustavo Valverde
 		e2df67cf0d docs: add v1.6 release blog post (#9009) 
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
 2026-04-08 06:50:50 +00:00
nphlpGitHubMaxwell
 		c665898953 docs(email): document beforeEmailVerification and onExistingUserSignUp callbacks (#8914) 
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
 2026-04-08 02:15:29 +00:00
Allan DelmareandGitHub fcd25d5057 docs: move @delmaredigital/payload-better-auth from plugins to adapters (#9027) 2026-04-08 02:04:00 +00:00
MaxwellandGitHub fe6b72b675 docs: improve state-mismatch documentation (#9026) 2026-04-08 09:29:13 +10:00
Jonathan SaminesGitHubMaxwellCopilot
 		a7e359d870 docs: add expo sentinel docs (#9025) 
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2026-04-07 23:08:15 +00:00
Jonathan SaminesandGitHub 2e537df5f7 fix: endpoint instrumentation to always use route template (#9023) 2026-04-08 08:41:31 +10:00
TaesuandGitHub 374985e340 docs: update community adapters and plugins pages (#9014) 2026-04-07 15:43:55 +00:00
Muzzaiyyan HussainGitHubTaesu
 		60123da09c docs: add missing secret to getSignedCookie and remove misleading comments (#9008) 
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
 2026-04-07 15:26:25 +00:00
Gustavo ValverdeandGitHub bd9bd58f87 fix(security): enforce authorization on SCIM management endpoints and normalize passkey ownership (#8843) 2026-04-06 13:47:24 +00:00
TaesuandGitHub 91a838fdb7 docs: remove openfort plugin (#8940) 2026-04-04 07:09:24 +09:00
Yanick J.S.GitHubClaude Opus 4.6
 		5970053e6a docs: improve descriptions for appName, trustedOrigins, useSecureCookies (#8935) 
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-03 18:31:00 +00:00
MaxwellGitHubTaesu
 		51518c372d docs: rework AI resources documentation (#8856) 
Co-authored-by: Taesu <bytaesu@gmail.com>
 2026-04-01 20:53:42 +00:00
Florian Amette (F4K)GitHubMaxwell
 		2f7106dae8 docs: add neo4j-better-auth to community adapters (#8851) 
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
 2026-04-01 20:51:31 +00:00
Bereket KinfeandGitHub 8682b9d8d2 docs: add missing error pages and update errors index/sidebar (#8868) (#8873) 2026-04-01 20:12:38 +00:00
AlishGitHubcubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>MaxwellTaesu
 		f676436c2c docs: added documentation for @chargebee/better-auth. (#8753) 
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
 2026-04-01 17:43:01 +00:00
TaesuGitHubMaxwell
 		82409d2ede chore: replace canary branch references with main (#8808) 
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
 2026-04-01 01:29:47 +00:00
Pawel BaczaandGitHub 84250cbd12 docs: fix createAuthMiddleware imports in plugins and waku guides (#8865) 2026-03-31 21:51:39 +00:00
Gustavo ValverdeandGitHub 3860c09d9f fix(two-factor): allow passwordless 2FA management (#7243) 2026-03-30 07:43:18 +00:00
Gustavo ValverdeandGitHub 7c2ce8a371 feat(passkey): add pre-auth registration and extensions (#7154) 2026-03-30 06:43:10 +00:00
TaesuandGitHub 23bad5139f feat(sso): enable InResponseTo validation by default for SAML flows (#8736) 2026-03-30 06:20:27 +00:00
Martin RädlingerandGitHub e16b184b0b fix(sso): provisionUser inconsistency and option to run on every login (#8818) 2026-03-30 06:18:11 +00:00
Dipan ChakrabortyandGitHub c25eb2f39b docs: fix incorrect cookie method names in hooks documentation (#8813) 2026-03-28 15:28:46 +00:00
MaxwellandGitHub 00246a473c docs(fastify): use better-auth utils for header conversions (#8804) 2026-03-27 17:53:04 +00:00
MaxwellandGitHub 9ced335922 docs: ai tooling page (#8795) 2026-03-27 08:29:50 +00:00
TaesuandGitHub efae37dc61 docs(agent-auth): remove duplicate warning callout (#8797) 2026-03-27 03:38:30 +00:00
MaxwellandGitHub ffaeb9f29c docs: apple social login requires JWT client-secret (#8771) 2026-03-25 21:46:22 +10:00
MaxwellGitHubBereket Engida
 		f785113c5e chore: add warning on agent auth docs (#8766) 
Co-authored-by: Bereket Engida <Bekacru@gmail.com>
 2026-03-25 05:13:53 +00:00