Commit Graph

6812 Commits

Author SHA1 Message Date
Joél Solano
99efdafb36 fix(cookie): relax cookie retrieval for getSessionCookie (#8008) 2026-02-16 15:14:16 -08:00
Paola Estefanía de Campos
a2f6fbce5a fix: encode callbackURL in delete-user verification email (#8007) 2026-02-16 14:26:07 -08:00
Paola Estefanía de Campos
d9b7f7ec42 fix(rate-limit): harden default rules and fix phone-number window (#8006) 2026-02-16 14:25:19 -08:00
Bereket Engida
5466cf758a chore: release workflow should run on github (#8004) 2026-02-16 13:59:41 -08:00
Bereket Engida
a8686cf552 chore: release v1.5.0-beta.14 v1.5.0-beta.14 2026-02-16 13:40:28 -08:00
Carlos Eduardo Medim
cc65d9085e feat(providers): add Railway OAuth provider (#7730) 2026-02-16 12:49:02 -08:00
Paola Estefanía de Campos
a2e1d5fef8 feat(sso): add shared redirectURI option for OIDC providers (#7818) 2026-02-16 12:43:37 -08:00
Jonathan Samines
7f29f4b668 chore(sso): add missing option types to sso plugin types (#8002) 2026-02-16 12:35:35 -08:00
Oscar Cornish
1e30369b2c feat(oauth): add support for legacy OAuth clients that don't use PKCE (#7609)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Paola Estefanía de Campos <84341268+Paola3stefania@users.noreply.github.com>
2026-02-16 12:35:18 -08:00
Alex Yang
6c52e5f6a9 fix(captcha): include error codes in middleware responses (#7991) 2026-02-16 10:04:03 +00:00
Taesu
7c52f359b1 fix(organization): refetch activeMember and activeMemberRole when active organization changes (#7989) 2026-02-16 06:21:53 +00:00
Gautam Manchandani
dce7bf1c00 fix(core): exclude tsconfig.json from published package (#7967)
Co-authored-by: Gautam Manchandani <gautammanch@Gautams-MacBook-Air.local>
2026-02-16 05:59:57 +00:00
Taesu
b857d03426 fix(client): infer additional fields for top-level user and session responses (#7986) 2026-02-16 04:45:46 +00:00
Taesu
b7400754fc docs: use Fumadocs default search engine powered by Orama (#7984) 2026-02-15 13:09:40 -08:00
Jan Hesters
7da833258f docs: add test-utils plugin to sidebar navigation (#7958) 2026-02-15 11:06:35 +00:00
Maxwell
e33d07383b docs: document Safari ITP blocks third-party cookies (#7980) 2026-02-15 10:10:07 +00:00
Alex Yang
62d51d00c7 test: check client output (#7979) 2026-02-15 09:29:23 +00:00
Maxwell
ad111866cd fix(mongo-adapter): updating a FK id should store as ObjectID (#7977) 2026-02-15 01:05:35 -08:00
Joél Solano
cf8322707c feat: auth cli (#7964) 2026-02-15 07:44:50 +00:00
Taesu
74e06e426c fix(stripe): fall back to customers.list when customers.search API is unavailable (#7965) 2026-02-15 07:44:16 +00:00
Joshua Nussbaum
b313e4f5ba docs: updated incorrect import (#7978) 2026-02-14 22:28:14 -08:00
Bereket Engida
5685ecd175 Revert "chore: should keep singleton of ctx (#7654)"
This reverts commit d1b26b1a14.
2026-02-14 21:57:10 -08:00
Joél Solano
639b20fce5 chore(i18n): re-export types (#7974) 2026-02-14 21:38:34 -08:00
Bereket Engida
6846aec6ed Revert "Revert "fix(custom-session): use getSetCookie() to preserve individual Set-Cookie headers (#7879)""
This reverts commit ae30da5de3.
2026-02-14 20:58:46 -08:00
Bereket Engida
ae30da5de3 Revert "fix(custom-session): use getSetCookie() to preserve individual Set-Cookie headers (#7879)"
This reverts commit 64bb8b4d28.
2026-02-14 20:40:47 -08:00
Alex Yang
d1b26b1a14 chore: should keep singleton of ctx (#7654) 2026-02-14 20:40:42 -08:00
Gustavo Valverde
5b2604b0bd fix(oauth-provider): support scope narrowing at consent submission (#7873) 2026-02-14 20:25:01 -08:00
Thomas Peklak
64bb8b4d28 fix(custom-session): use getSetCookie() to preserve individual Set-Cookie headers (#7879) 2026-02-14 20:19:44 -08:00
Joél Solano
a4a3727dde fix(email-otp): avoid user enumeration when disabled sign-up (#7971) 2026-02-14 19:17:29 -08:00
Taesu
0a1dd5fbf3 feat(stripe): add billingInterval field to subscription (#7221) 2026-02-13 22:15:10 +00:00
Joél Solano
b1f917e5e6 refactor(electron): hoist setupRenderer and bundle into separate file (#7936) 2026-02-13 09:34:56 +00:00
Paola Estefanía de Campos
95a5a6e1f4 feat(sso): add IdP-initiated SAML Single Logout (SLO) (#7567)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-02-13 06:49:42 +00:00
Taesu
ddc2740724 fix(stripe): propagate trial data in subscription webhook handlers (#7955) 2026-02-13 03:35:09 +00:00
starslingdev[bot]
221b6aef64 chore: fix turbo cache configuration in ci (#7950)
Co-authored-by: starslingdev[bot] <248995740+starslingdev[bot]@users.noreply.github.com>
2026-02-13 03:18:47 +00:00
Joél Solano
fe3b4ec3b5 docs: fix typo & unresolved imports (#7954) 2026-02-13 03:06:18 +00:00
Taesu
04217429c5 fix(stripe): drop metered billing, use generic lineItems instead (#7951) 2026-02-12 22:17:22 +00:00
Taesu
7950f98df0 fix(stripe): remove getSubscriptionUsage endpoint (#7949) 2026-02-12 20:50:17 +00:00
Taesu
4fb5227641 fix(stripe): prevent duplicate line item when priceId equals seatPriceId (#7947) 2026-02-12 20:18:42 +00:00
Taesu
9b5a786175 fix(stripe): move meters config into plans for usage-based billing (#7946) 2026-02-12 18:13:48 +00:00
Alex Yang
d5955d6ab2 chore: bump version (#7882) 2026-02-12 13:27:12 +00:00
Rosano
15479c763e docs: fix typo (#7942) 2026-02-12 11:18:32 +00:00
Alex Yang
86ca6d0b19 fix: separate rate limit request and response handling (#7939) 2026-02-12 10:40:51 +00:00
Alex Yang
61c7d07857 chore: bump better-call (#7938) 2026-02-12 09:38:40 +00:00
Saurav3004
32d0682ecc fix(organization): remove unreachable null check in acceptInvitation (#7825)
Co-authored-by: Taesu <bytaesu@gmail.com>
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-02-12 07:48:15 +00:00
Karuppusamy
af0c885a6c fix(oauth): support case-insensitive email matching for social account linking (#7812) 2026-02-12 07:36:17 +00:00
Alex Yang
09adc74d80 fix: safely coerce date values from DB in OAuth provider plugin (#7937) 2026-02-12 07:19:21 +00:00
Paola Estefanía de Campos
bb49394036 docs: add trustedProxyHeaders section to security reference (#7835) 2026-02-12 06:56:51 +00:00
Jonathan Samines
10aa14d406 feat(scim): introduce ownership model for SCIM (#7931) 2026-02-12 06:54:19 +00:00
Alex Yang
d692555a65 chore: use throw APIError.from (#7934) 2026-02-12 06:53:32 +00:00
Paola Estefanía de Campos
cc80515644 fix(sso): resolve TXT record at verification subdomain instead of root domain (#7935) 2026-02-12 06:52:03 +00:00