 better-release[bot]andGitHub
|
8b1e759c07
|
chore: release v1.7.0-beta.5 (#9905)
@better-auth/api-key@1.7.0-beta.5
@better-auth/cimd@1.7.0-beta.5
@better-auth/core@1.7.0-beta.5
@better-auth/drizzle-adapter@1.7.0-beta.5
@better-auth/electron@1.7.0-beta.5
@better-auth/expo@1.7.0-beta.5
@better-auth/i18n@1.7.0-beta.5
@better-auth/kysely-adapter@1.7.0-beta.5
@better-auth/memory-adapter@1.7.0-beta.5
@better-auth/mongo-adapter@1.7.0-beta.5
@better-auth/oauth-provider@1.7.0-beta.5
@better-auth/passkey@1.7.0-beta.5
@better-auth/redis-storage@1.7.0-beta.5
@better-auth/scim@1.7.0-beta.5
@better-auth/sso@1.7.0-beta.5
@better-auth/stripe@1.7.0-beta.5
@better-auth/telemetry@1.7.0-beta.5
@better-auth/test-utils@1.7.0-beta.5
auth@1.7.0-beta.5
better-auth@1.7.0-beta.5
v1.7.0-beta.5
@better-auth/prisma-adapter@1.7.0-beta.5
|
2026-06-10 12:34:04 -07:00 |
|
 Gustavo ValverdeandGitHub
|
c20ebaf06d
|
chore: sync main to next
chore: sync main to next
|
2026-06-10 12:16:54 -07:00 |
|
Gustavo Valverde
|
d7bba8ee33
|
Merge origin/next into chore/sync-main-to-next
|
2026-06-10 11:34:38 -07:00 |
|
Gustavo Valverde
|
bf7f2c5b4e
|
chore: sync main to next
|
2026-06-10 11:30:38 -07:00 |
|
 Eric LuceandGitHub
|
82dbc9b8bf
|
docs: add ProofKit FileMaker adapter (#9980)
|
2026-06-10 11:26:02 -07:00 |
|
 Prakash KumarandGitHub
|
128bc34572
|
docs: add horizontal scrolling to landing page code block (#9975)
|
2026-06-09 23:22:24 -07:00 |
|
 better-release[bot]andGitHub
|
1a3c8c478a
|
chore: release v1.6.16 (#9958)
@better-auth/api-key@1.6.16
@better-auth/core@1.6.16
@better-auth/drizzle-adapter@1.6.16
@better-auth/electron@1.6.16
@better-auth/expo@1.6.16
@better-auth/i18n@1.6.16
@better-auth/kysely-adapter@1.6.16
@better-auth/memory-adapter@1.6.16
@better-auth/oauth-provider@1.6.16
@better-auth/prisma-adapter@1.6.16
@better-auth/redis-storage@1.6.16
@better-auth/scim@1.6.16
@better-auth/sso@1.6.16
@better-auth/stripe@1.6.16
@better-auth/telemetry@1.6.16
@better-auth/test-utils@1.6.16
auth@1.6.16
better-auth@1.6.16
v1.6.16
@better-auth/passkey@1.6.16
@better-auth/mongo-adapter@1.6.16
|
2026-06-09 22:32:25 -07:00 |
|
 Bereket EngidaandGitHub
|
cb1cbfa4cc
|
fix: address bug findings across packages (#9974)
|
2026-06-09 19:46:12 -07:00 |
|
 Gustavo ValverdeandGitHub
|
0e1770ac75
|
feat(oauth-provider)!: enforce max_age (#9936)
|
2026-06-09 19:36:30 -07:00 |
|
 Gustavo ValverdeandGitHub
|
a6b0295df3
|
fix(sso): consume SAML AuthnRequest atomically (#9972)
|
2026-06-10 01:58:45 +00:00 |
|
 Gustavo ValverdeandGitHub
|
87e7aa5e0f
|
fix(api): validate Origin/Referer on cookieless email sign-in and sign-up (#9973)
|
2026-06-10 01:43:41 +00:00 |
|
 Gustavo ValverdeandGitHub
|
893cf6cb3f
|
fix(session): honor server-side session deletion in update-session and token routes (#9967)
|
2026-06-10 00:42:45 +00:00 |
|
 Gustavo ValverdeandGitHub
|
76a33429fc
|
fix(session): fire session-delete hooks for preserved sessions on secondaryStorage (#9969)
|
2026-06-10 00:40:56 +00:00 |
|
 Gustavo ValverdeandGitHub
|
3e852a2650
|
fix(oauth-provider): report unsupported_token_type for JWT access-token revocation (#9970)
|
2026-06-10 00:39:26 +00:00 |
|
 Gustavo ValverdeandGitHub
|
7abaaed53f
|
fix(oauth-provider): make private_key_jwt jti single-use atomic across processes (#9964)
|
2026-06-10 00:36:06 +00:00 |
|
 Gustavo ValverdeandGitHub
|
ec8a38c08f
|
feat(generic-oauth): verify discovery id_tokens and enable id_token sign-in (#9966)
|
2026-06-10 00:34:26 +00:00 |
|
 Gustavo ValverdeandGitHub
|
5e49c56a9e
|
fix(auth): mark plugin-owned session fields as non-input (#9965)
|
2026-06-09 23:59:09 +00:00 |
|
 TaesuandGitHub
|
2ac00fe421
|
chore: bump better-call and @better-fetch/fetch (#9955)
|
2026-06-09 21:34:16 +00:00 |
|
 TaesuandGitHub
|
2545b7bb13
|
chore: drop two-factor-newsession-null.md changeset (#9960)
|
2026-06-09 14:24:28 -07:00 |
|
 Paola Estefanía de CamposandGitHub
|
afcb4dd7f3
|
docs(two-factor): document newSession is null during 2FA challenge (#9957)
|
2026-06-09 13:15:00 -07:00 |
|
 TaesuandGitHub
|
6a8dfa4f3e
|
docs(changelog): show contributor avatars with proper size and styling (#9956)
|
2026-06-09 19:44:32 +00:00 |
|
 better-release[bot]andGitHub
|
03e0e36a98
|
chore: release v1.6.15 (#9886)
@better-auth/api-key@1.6.15
@better-auth/core@1.6.15
@better-auth/drizzle-adapter@1.6.15
@better-auth/electron@1.6.15
@better-auth/expo@1.6.15
@better-auth/i18n@1.6.15
@better-auth/kysely-adapter@1.6.15
@better-auth/memory-adapter@1.6.15
@better-auth/mongo-adapter@1.6.15
@better-auth/oauth-provider@1.6.15
@better-auth/passkey@1.6.15
@better-auth/prisma-adapter@1.6.15
@better-auth/redis-storage@1.6.15
@better-auth/scim@1.6.15
@better-auth/sso@1.6.15
@better-auth/stripe@1.6.15
@better-auth/telemetry@1.6.15
@better-auth/test-utils@1.6.15
auth@1.6.15
better-auth@1.6.15
v1.6.15
|
2026-06-08 06:57:06 -07:00 |
|
 
|
ef4e131b85
|
fix(kysely-adapter): inline migration-table constants to fix Turbopack build (#9933)
Co-authored-by: bytaesu <166604494+bytaesu@users.noreply.github.com>
|
2026-06-08 12:20:53 +00:00 |
|
 Gustavo ValverdeandGitHub
|
af572166a2
|
fix(auth)!: harden validateUserInfo source contract (#9940)
|
2026-06-07 22:52:59 -07:00 |
|
 Gustavo ValverdeandGitHub
|
fe9600bc07
|
feat(oauth-provider): accept POST on the userinfo endpoint (#9937)
|
2026-06-07 21:09:27 -07:00 |
|
 
|
0cbaf81bed
|
feat(oauth): server-trusted state channel; fix anonymous cookieless linking (#9930)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
|
2026-06-08 01:00:05 +00:00 |
|
 
|
91f235f860
|
feat(auth): add per-provider requireEmailVerification for social sign-in (#9929)
Co-authored-by: Gautam Manchandani <161146829+GautamBytes@users.noreply.github.com>
|
2026-06-08 00:31:20 +00:00 |
|
 ![cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>](/assets/img/avatar_default.png) 
|
e0140297a5
|
fix(electron)!: enforce S256 PKCE and harden origin checks (#9645)
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-06-07 23:43:06 +00:00 |
|
 
|
d23735b1de
|
feat(passkey): resolve authenticator name from AAGUID at read time (#9927)
Co-authored-by: Maxwell Weru <1645026+mburumaxwell@users.noreply.github.com>
|
2026-06-07 23:22:39 +00:00 |
|
 
|
b0ddfd3433
|
fix(oauth-provider): run configured hooks when authorize resumes (#9919)
Co-authored-by: Gautam Manchandani <manchandanigautam@gmail.com>
|
2026-06-07 14:43:47 -07:00 |
|
 
|
ea64709ae6
|
docs: security update for June 2026 (#9884)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
|
2026-06-07 14:41:58 -07:00 |
|
 Gustavo ValverdeandGitHub
|
7213d1ac3a
|
test(cli): give the integration-style suite a generous timeout (#9926)
|
2026-06-07 14:36:12 -07:00 |
|
 
|
41cca606d1
|
feat(auth): add user.validateUserInfo provisioning gate (#9864)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-06-07 14:34:48 -07:00 |
|
 Gustavo ValverdeandGitHub
|
b32094a46d
|
docs(oauth-provider): reframe back-channel logout changeset and fill doc gaps (#9916)
|
2026-06-06 07:39:23 -07:00 |
|
 Gustavo ValverdeandGitHub
|
e0d2b9eb9b
|
feat(oauth-provider)!: add OIDC back-channel logout (#9304)
|
2026-06-06 07:06:53 -07:00 |
|
  
|
bff65fd620
|
fix(sso): pass clockSkew to samlify clockDrifts to fix ERR_SUBJECT_UNCONFIRMED (#9748)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com>
|
2026-06-06 04:20:14 +00:00 |
|
 
|
74c32fe56e
|
docs: clarify organization-owned api keys also require a user (#9780)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
|
2026-06-05 21:09:03 -07:00 |
|
   
|
7fe0e2b165
|
feat: add clientAssertion support to the Microsoft Entra ID social provider (#9898)
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
Co-authored-by: Bereket Engida <Bekacru@gmail.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-05 20:28:46 -07:00 |
|
 Suliman AbdulrazzaqandGitHub
|
f3396987a9
|
docs: add DBSC plugin documentation (#9892)
|
2026-06-05 18:58:50 -07:00 |
|
 Gustavo ValverdeandGitHub
|
5898bd10da
|
fix(ci): resolve the latest Node patch for the smoke matrix (#9906)
|
2026-06-05 09:01:59 -04:00 |
|
 Gustavo ValverdeandGitHub
|
4f53b61f49
|
refactor(oauth)!: verify provider id_tokens with a single shared verifier (#9828)
|
2026-06-05 08:00:03 -04:00 |
|
 Gustavo ValverdeandGitHub
|
40b392ae21
|
feat(oauth)!: accumulate granted scopes as grantedScopes string[] (#9825)
|
2026-06-04 17:54:52 -04:00 |
|
 DeckerandGitHub
|
3bc7d09083
|
docs: restore Commet plugin documentation (#9798)
|
2026-06-04 20:46:46 +09:00 |
|
  
|
0933c050ff
|
fix(kysely-adapter): import migration constants from 'kysely/migration' (#9811)
Co-authored-by: unsiqasik <rkhandriantonew@gmail.com>
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
|
2026-06-03 22:32:20 +00:00 |
|
 
|
17130ec6ef
|
docs: mention minimal import option in installation guide (#9891)
Co-authored-by: Parship Chowdhury <parshipchowdhury@gmail.com>
|
2026-06-03 21:37:23 +00:00 |
|
 
|
1012b69046
|
fix(admin): return USER_NOT_FOUND for missing users before update (#9875)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
|
2026-06-03 16:07:47 +00:00 |
|
  
|
ad60333d15
|
fix: list-session fresh age session check (#9865)
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Maxwell <ping-maxwell@users.noreply.github.com>
|
2026-06-03 11:23:14 +00:00 |
|
 TaesuandGitHub
|
695753106d
|
docs: update community adapters (#9881)
|
2026-06-03 09:11:14 +00:00 |
|
 TaesuandGitHub
|
e111d63b8e
|
refactor(cookies): clarify cookie regex ranges (#9879)
|
2026-06-03 04:05:55 +00:00 |
|
 better-release[bot]andGitHub
|
5038d41ca2
|
chore: release v1.6.14 (#9846)
@better-auth/core@1.6.14
@better-auth/drizzle-adapter@1.6.14
@better-auth/electron@1.6.14
@better-auth/expo@1.6.14
@better-auth/i18n@1.6.14
@better-auth/kysely-adapter@1.6.14
@better-auth/memory-adapter@1.6.14
@better-auth/mongo-adapter@1.6.14
@better-auth/oauth-provider@1.6.14
@better-auth/passkey@1.6.14
@better-auth/prisma-adapter@1.6.14
@better-auth/redis-storage@1.6.14
@better-auth/scim@1.6.14
@better-auth/sso@1.6.14
@better-auth/stripe@1.6.14
@better-auth/telemetry@1.6.14
@better-auth/test-utils@1.6.14
auth@1.6.14
better-auth@1.6.14
@better-auth/api-key@1.6.14
v1.6.14
|
2026-06-02 16:56:28 -04:00 |
|