Commit Graph
2361 Commits
Author SHA1 Message Date
Gustavo Valverde eb3cd10d50 chore: resolve main-to-next sync conflicts
- keep next package versions at 1.7.0-beta.1
- keep both changelog streams by inserting the stable 1.6.5, 1.6.6, and 1.6.7 sections below the 1.7.0-beta entries
- keep the cimd and dash deps on demo/nextjs (next-only); regenerate pnpm-lock.yaml
- resolve TODO(sync-from-main-9226) in oauth-provider authorize.ts: findRegisteredRedirectUri now uses isLoopbackIP from @better-auth/core/utils/host to cover the full 127.0.0.0/8 range per RFC 8252 §7.3
- drop the unused saml import that main's #9262 added to sso/src/routes/sso.ts; next already migrated to saml-pipeline
2026-04-22 14:54:27 +01:00
TaesuandGitHub 7fc966942c docs: fix arrow indicator persisting on inactive legal nav item (#9307) 2026-04-22 11:42:42 +00:00
TaesuandGitHub f4750f634f chore(docs): relax typesense sync build (#9300) 2026-04-22 09:19:21 +00:00
Gustavo ValverdeandGitHub 4f373eed8a feat(social-providers): accept array of Client IDs for ID token audience (#9292) 2026-04-22 09:02:56 +00:00
9ab0346dae docs: add subsection for advanced database configuration options (#9149)
Co-authored-by: Morgan PEYRE <morgan.peyre@brickcode.tech>
2026-04-22 05:29:41 +00:00
26d0cec9bd docs: improve Nuxt integration guide (#9232)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-21 15:30:22 +00:00
954b664f4f feat(org): allow passing userId and organizationId to listUserTeams API (#8977)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-21 08:15:16 +00:00
TaesuandGitHub 2ee50c581f docs: add stable/beta versioning with build-time content sync (#9258) 2026-04-21 03:49:33 +00:00
35e9f9f6e4 docs: landing improvements (#9169)
Co-authored-by: Taesu <bytaesu@gmail.com>
2026-04-18 23:04:27 -07:00
Jonathan SaminesandGitHub e37167aaf5 docs: fix fastify integration docs to avoid race conditions (#9230) 2026-04-17 17:51:21 +00:00
MaxwellandGitHub d69d888b78 docs: add please_restart_the_process error page (#9224) 2026-04-17 13:01:31 +00:00
TaesuandGitHub a61083e023 fix(phone-number): allow removing phone number via updateUser (#9219) 2026-04-17 04:19:26 +00:00
938dd80e2d docs(test-utils): clarify production usage (#9119)
Signed-off-by: Gautam Manchandani <manchandanigautam@gmail.com>
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-16 01:20:34 +00:00
25c8f59069 docs: fix wrong AutumnProvider usage in docs (#9176)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-16 01:18:35 +00:00
09005a974d docs: add mention to self service directory sync (#9194)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-16 01:15:52 +00:00
Dylan VanmaliandGitHub 0b52dfcc23 docs(cimd): recommend removal of allowUnauthenticatedClientRegistration for client deduplication (#9191) 2026-04-15 20:57:19 +00:00
Gustavo Valverde 225976c7d2 chore: main to next conflict resolution
Resolve the main to next sync discrepancies after the v1.6.4 release.

Conflict resolution:
- keep next package versions at 1.7.0-beta.1
- keep both changelog streams by inserting the stable 1.6.4 sections below the 1.7.0-beta entries
- restore the next pre-release accumulator changesets that the stable release deleted on main
2026-04-15 15:40:35 +01:00
TaesuandGitHub a0caa1f6f8 docs(device-authorization): fix approval page query param (#9197) 2026-04-14 23:36:23 +00:00
Jonathan SaminesandGitHub 7be52d9403 docs: add docs email normalization on sentinel (#9188) 2026-04-14 14:21:36 -06:00
dd6528f45b docs(guides): move dynamic base url from concepts to guides and options (#9145)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-14 11:36:59 +00:00
Gustavo Valverde b7850f90a4 fix: address merge follow-ups from PR #9172 review
- packages/oauth-provider/src/types/zod.ts: make `state` optional in
  `verificationValueSchema`. Main's PR #9118 hardened authorization code
  validation with a required `state`, but CIMD (next, PR #9159) doesn't send
  state in test flows. Per OAuth 2.0 §4.1.1 state is RECOMMENDED, not
  REQUIRED. Fixes CIMD token exchange (`401 !== 200`) in ci test and smoke.

- docs/content/docs/plugins/sso.mdx: replace remaining `/sso/saml2/callback/`
  references with `/sso/saml2/sp/acs/` to match the endpoint rename from
  next's PR #9117. The merge took main verbatim here, regressing docs that
  next had already updated.
2026-04-14 11:54:29 +01:00
Gustavo Valverde 3fbab44068 chore: sync main to next
Resolves conflicts in PR #9115 which the release bot cannot auto-merge.

Conflict resolutions:
- .github/workflows/release.yml: take main's hardened grep fallback (92256a2d0)
- docs/content/docs/plugins/sso.mdx: take main's named-exports refactor verbatim (#9144)
- packages/oauth-provider/src/token.ts: keep next's at_hash sequencing (#9079),
  add main's customTokenResponseFields spread and credential helper rename (#9118)
- packages/oauth-provider/src/token.test.ts: keep both new describe blocks
  (at_hash in id tokens from next, customTokenResponseFields from main)

Semantic fixes on auto-merged files where git silently dropped main's changes
around next's discriminated-response refactor:
- two-factor/index.ts: restore skipVerificationOnEnable handling in the totp
  enablement path
- two-factor/types.ts: restore the skipVerificationOnEnable type field
- two-factor/two-factor.test.ts: narrow the discriminated enable response via
  method === "totp" guard
2026-04-14 11:30:13 +01:00
Gustavo ValverdeandGitHub 92256a2d0d chore: minor review followups on recent main commits (#9163) 2026-04-14 07:22:10 +00:00
Jaden StantonandGitHub 2514c3d970 docs: correct wording for invocable endpoints in integration guides (#9160) 2026-04-14 05:59:29 +00:00
Sean FilimonandGitHub a1f619969d docs: update Convex Labs link in documentation (#9161) 2026-04-14 05:55:27 +00:00
cd8313ba00 feat(cimd): add Client ID Metadata Document plugin (#9159)
Co-authored-by: Dylan Vanmali <dylanvanmali@yahoo.com>
2026-04-13 20:52:34 +00:00
TaesuandGitHub 8dcb98873e docs: update not-found page (#9158) 2026-04-13 19:54:32 +00:00
Gustavo ValverdeandGitHub c7d22539ec refactor(generic-oauth)!: rewrite as first-class social provider with RFC compliance (#9069) 2026-04-13 12:02:16 +00:00
TaesuandGitHub 6c946a3e0c docs(sso): extract inline fields to named exports (#9144) 2026-04-13 03:01:29 +00:00
TaesuandGitHub daf7ab7aaa docs: fix fk references in schema tables to match actual plugin schemas (#9143) 2026-04-13 02:37:17 +00:00
TaesuandGitHub a6f31972ca docs(landing): polish sentinel section (#9142) 2026-04-13 01:19:15 +00:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>TaesuTaesu
ed2c18df31 chore(deps): bump next from 16.2.2 to 16.2.3 in /docs (#9112)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
2026-04-12 08:47:53 +00:00
TaesuandGitHub a6e9b94318 docs: improve enterprise contact form (#9128) 2026-04-12 08:30:35 +00:00
Gustavo ValverdeandGitHub b70f025bfa refactor(sso)!: remove callbackUrl, consolidate ACS endpoint, fix SLO (#9117) 2026-04-11 10:03:56 +00:00
Gustavo ValverdeandGitHub 314e06f0fd feat(oauth-provider): add customTokenResponseFields and harden authorization code validation (#9118) 2026-04-11 09:54:48 +00:00
Gustavo Valverde 28ccc8cda9 chore: resolve main-to-next sync conflicts
Conflicts resolved:
- docs/content/docs/plugins/2fa.mdx: kept next's OTP feature, applied main's exported const pattern
- docs/content/docs/plugins/oauth-provider.mdx: kept main's formatting, added back private_key_jwt docs
- docs/content/docs/plugins/sso.mdx: kept next's version with private_key_jwt and SAML options
- packages/sso/src/routes/sso.ts: kept next's version (has security fixes and private_key_jwt)
2026-04-10 19:11:05 +01:00
Gustavo ValverdeandGitHub 52c47517a2 fix(sso): unify SAML response processing and fix bugs (#9097) 2026-04-10 15:00:26 +00:00
Gustavo ValverdeandGitHub 544f1c63c9 feat(two-factor)!: add OTP enablement and discriminated response (#9057) 2026-04-10 14:23:20 +00:00
Gustavo ValverdeandGitHub 93d3871bd2 feat(oauth): add private_key_jwt client authentication (RFC 7523) (#8836) 2026-04-10 08:22:05 +00:00
TaesuGitHubleonardo2204better-release[bot] <273320539+better-release[bot]@users.noreply.github.com>
5f84335815 feat(stripe): support Stripe SDK v21 and v22 (#9084)
Co-authored-by: leonardo2204 <1509421+leonardo2204@users.noreply.github.com>
Co-authored-by: better-release[bot] <273320539+better-release[bot]@users.noreply.github.com>
2026-04-10 06:19:34 +00:00
TonyandGitHub d141a3b190 docs: fix PostgreSQL Prisma native type typo (#9090) 2026-04-10 05:21:45 +00:00
TaesuandGitHub 099ee48c41 chore(docs): format markdown including mdx files (#9085) 2026-04-10 05:09:33 +00:00
41679fa817 docs: add database table names (#9062)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-09 19:17:40 +00:00
809da03968 docs: add paragraph specifying need for cookie passage for server methods (#6546)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-09 13:26:13 +00:00
31fd092896 docs: clarify that the redirectURI must include providerId parameter in generic oauth (#6021)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-09 13:23:33 +00:00
cf25761bc1 docs: clarify credential account requirement for phone number plugin (#6401)
Signed-off-by: GautamBytes <manchandanigautam@gmail.com>
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-09 13:19:50 +00:00
b834782e2b docs: add 'better-auth-audit-logs' plugin to community table (#9051)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-09 13:14:25 +00:00
84098432ad feat(two-factor): include enabled 2fa methods in sign-in redirect response (#8772)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-04-09 09:25:49 +00:00
e78a7b120d fix(two-factor): prevent unverified TOTP enrollment from gating sign-in (#8711)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-04-09 08:48:10 +00:00
TaesuandGitHub 438d10d22e docs: scale inline code size inside changelog headings (#9047) 2026-04-08 22:50:40 +00:00