Commit Graph
7030 Commits
Author SHA1 Message Date
better-release[bot]andGitHub 8b1e759c07 chore: release v1.7.0-beta.5 (#9905) @better-auth/api-key@1.7.0-beta.5 @better-auth/cimd@1.7.0-beta.5 @better-auth/core@1.7.0-beta.5 @better-auth/drizzle-adapter@1.7.0-beta.5 @better-auth/electron@1.7.0-beta.5 @better-auth/expo@1.7.0-beta.5 @better-auth/i18n@1.7.0-beta.5 @better-auth/kysely-adapter@1.7.0-beta.5 @better-auth/memory-adapter@1.7.0-beta.5 @better-auth/mongo-adapter@1.7.0-beta.5 @better-auth/oauth-provider@1.7.0-beta.5 @better-auth/passkey@1.7.0-beta.5 @better-auth/redis-storage@1.7.0-beta.5 @better-auth/scim@1.7.0-beta.5 @better-auth/sso@1.7.0-beta.5 @better-auth/stripe@1.7.0-beta.5 @better-auth/telemetry@1.7.0-beta.5 @better-auth/test-utils@1.7.0-beta.5 auth@1.7.0-beta.5 better-auth@1.7.0-beta.5 v1.7.0-beta.5 @better-auth/prisma-adapter@1.7.0-beta.5 2026-06-10 12:34:04 -07:00
Gustavo ValverdeandGitHub c20ebaf06d chore: sync main to next
chore: sync main to next
2026-06-10 12:16:54 -07:00
Gustavo Valverde d7bba8ee33 Merge origin/next into chore/sync-main-to-next 2026-06-10 11:34:38 -07:00
Gustavo Valverde bf7f2c5b4e chore: sync main to next 2026-06-10 11:30:38 -07:00
Eric LuceandGitHub 82dbc9b8bf docs: add ProofKit FileMaker adapter (#9980) 2026-06-10 11:26:02 -07:00
Prakash KumarandGitHub 128bc34572 docs: add horizontal scrolling to landing page code block (#9975) 2026-06-09 23:22:24 -07:00
better-release[bot]andGitHub 1a3c8c478a chore: release v1.6.16 (#9958) @better-auth/api-key@1.6.16 @better-auth/core@1.6.16 @better-auth/drizzle-adapter@1.6.16 @better-auth/electron@1.6.16 @better-auth/expo@1.6.16 @better-auth/i18n@1.6.16 @better-auth/kysely-adapter@1.6.16 @better-auth/memory-adapter@1.6.16 @better-auth/oauth-provider@1.6.16 @better-auth/prisma-adapter@1.6.16 @better-auth/redis-storage@1.6.16 @better-auth/scim@1.6.16 @better-auth/sso@1.6.16 @better-auth/stripe@1.6.16 @better-auth/telemetry@1.6.16 @better-auth/test-utils@1.6.16 auth@1.6.16 better-auth@1.6.16 v1.6.16 @better-auth/passkey@1.6.16 @better-auth/mongo-adapter@1.6.16 2026-06-09 22:32:25 -07:00
Bereket EngidaandGitHub cb1cbfa4cc fix: address bug findings across packages (#9974) 2026-06-09 19:46:12 -07:00
Gustavo ValverdeandGitHub 0e1770ac75 feat(oauth-provider)!: enforce max_age (#9936) 2026-06-09 19:36:30 -07:00
Gustavo ValverdeandGitHub a6b0295df3 fix(sso): consume SAML AuthnRequest atomically (#9972) 2026-06-10 01:58:45 +00:00
Gustavo ValverdeandGitHub 87e7aa5e0f fix(api): validate Origin/Referer on cookieless email sign-in and sign-up (#9973) 2026-06-10 01:43:41 +00:00
Gustavo ValverdeandGitHub 893cf6cb3f fix(session): honor server-side session deletion in update-session and token routes (#9967) 2026-06-10 00:42:45 +00:00
Gustavo ValverdeandGitHub 76a33429fc fix(session): fire session-delete hooks for preserved sessions on secondaryStorage (#9969) 2026-06-10 00:40:56 +00:00
Gustavo ValverdeandGitHub 3e852a2650 fix(oauth-provider): report unsupported_token_type for JWT access-token revocation (#9970) 2026-06-10 00:39:26 +00:00
Gustavo ValverdeandGitHub 7abaaed53f fix(oauth-provider): make private_key_jwt jti single-use atomic across processes (#9964) 2026-06-10 00:36:06 +00:00
Gustavo ValverdeandGitHub ec8a38c08f feat(generic-oauth): verify discovery id_tokens and enable id_token sign-in (#9966) 2026-06-10 00:34:26 +00:00
Gustavo ValverdeandGitHub 5e49c56a9e fix(auth): mark plugin-owned session fields as non-input (#9965) 2026-06-09 23:59:09 +00:00
TaesuandGitHub 2ac00fe421 chore: bump better-call and @better-fetch/fetch (#9955) 2026-06-09 21:34:16 +00:00
TaesuandGitHub 2545b7bb13 chore: drop two-factor-newsession-null.md changeset (#9960) 2026-06-09 14:24:28 -07:00
Paola Estefanía de CamposandGitHub afcb4dd7f3 docs(two-factor): document newSession is null during 2FA challenge (#9957) 2026-06-09 13:15:00 -07:00
TaesuandGitHub 6a8dfa4f3e docs(changelog): show contributor avatars with proper size and styling (#9956) 2026-06-09 19:44:32 +00:00
better-release[bot]andGitHub 03e0e36a98 chore: release v1.6.15 (#9886) @better-auth/api-key@1.6.15 @better-auth/core@1.6.15 @better-auth/drizzle-adapter@1.6.15 @better-auth/electron@1.6.15 @better-auth/expo@1.6.15 @better-auth/i18n@1.6.15 @better-auth/kysely-adapter@1.6.15 @better-auth/memory-adapter@1.6.15 @better-auth/mongo-adapter@1.6.15 @better-auth/oauth-provider@1.6.15 @better-auth/passkey@1.6.15 @better-auth/prisma-adapter@1.6.15 @better-auth/redis-storage@1.6.15 @better-auth/scim@1.6.15 @better-auth/sso@1.6.15 @better-auth/stripe@1.6.15 @better-auth/telemetry@1.6.15 @better-auth/test-utils@1.6.15 auth@1.6.15 better-auth@1.6.15 v1.6.15 2026-06-08 06:57:06 -07:00
ef4e131b85 fix(kysely-adapter): inline migration-table constants to fix Turbopack build (#9933)
Co-authored-by: bytaesu <166604494+bytaesu@users.noreply.github.com>
2026-06-08 12:20:53 +00:00
Gustavo ValverdeandGitHub af572166a2 fix(auth)!: harden validateUserInfo source contract (#9940) 2026-06-07 22:52:59 -07:00
Gustavo ValverdeandGitHub fe9600bc07 feat(oauth-provider): accept POST on the userinfo endpoint (#9937) 2026-06-07 21:09:27 -07:00
0cbaf81bed feat(oauth): server-trusted state channel; fix anonymous cookieless linking (#9930)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
2026-06-08 01:00:05 +00:00
91f235f860 feat(auth): add per-provider requireEmailVerification for social sign-in (#9929)
Co-authored-by: Gautam Manchandani <161146829+GautamBytes@users.noreply.github.com>
2026-06-08 00:31:20 +00:00
MaxwellGitHubcubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>Gustavo Valverde
e0140297a5 fix(electron)!: enforce S256 PKCE and harden origin checks (#9645)
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-06-07 23:43:06 +00:00
d23735b1de feat(passkey): resolve authenticator name from AAGUID at read time (#9927)
Co-authored-by: Maxwell Weru <1645026+mburumaxwell@users.noreply.github.com>
2026-06-07 23:22:39 +00:00
b0ddfd3433 fix(oauth-provider): run configured hooks when authorize resumes (#9919)
Co-authored-by: Gautam Manchandani <manchandanigautam@gmail.com>
2026-06-07 14:43:47 -07:00
ea64709ae6 docs: security update for June 2026 (#9884)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-06-07 14:41:58 -07:00
Gustavo ValverdeandGitHub 7213d1ac3a test(cli): give the integration-style suite a generous timeout (#9926) 2026-06-07 14:36:12 -07:00
41cca606d1 feat(auth): add user.validateUserInfo provisioning gate (#9864)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-06-07 14:34:48 -07:00
Gustavo ValverdeandGitHub b32094a46d docs(oauth-provider): reframe back-channel logout changeset and fill doc gaps (#9916) 2026-06-06 07:39:23 -07:00
Gustavo ValverdeandGitHub e0d2b9eb9b feat(oauth-provider)!: add OIDC back-channel logout (#9304) 2026-06-06 07:06:53 -07:00
bff65fd620 fix(sso): pass clockSkew to samlify clockDrifts to fix ERR_SUBJECT_UNCONFIRMED (#9748)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com>
2026-06-06 04:20:14 +00:00
74c32fe56e docs: clarify organization-owned api keys also require a user (#9780)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-06-05 21:09:03 -07:00
7fe0e2b165 feat: add clientAssertion support to the Microsoft Entra ID social provider (#9898)
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
Co-authored-by: Bereket Engida <Bekacru@gmail.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-05 20:28:46 -07:00
Suliman AbdulrazzaqandGitHub f3396987a9 docs: add DBSC plugin documentation (#9892) 2026-06-05 18:58:50 -07:00
Gustavo ValverdeandGitHub 5898bd10da fix(ci): resolve the latest Node patch for the smoke matrix (#9906) 2026-06-05 09:01:59 -04:00
Gustavo ValverdeandGitHub 4f53b61f49 refactor(oauth)!: verify provider id_tokens with a single shared verifier (#9828) 2026-06-05 08:00:03 -04:00
Gustavo ValverdeandGitHub 40b392ae21 feat(oauth)!: accumulate granted scopes as grantedScopes string[] (#9825) 2026-06-04 17:54:52 -04:00
DeckerandGitHub 3bc7d09083 docs: restore Commet plugin documentation (#9798) 2026-06-04 20:46:46 +09:00
0933c050ff fix(kysely-adapter): import migration constants from 'kysely/migration' (#9811)
Co-authored-by: unsiqasik <rkhandriantonew@gmail.com>
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-06-03 22:32:20 +00:00
17130ec6ef docs: mention minimal import option in installation guide (#9891)
Co-authored-by: Parship Chowdhury <parshipchowdhury@gmail.com>
2026-06-03 21:37:23 +00:00
1012b69046 fix(admin): return USER_NOT_FOUND for missing users before update (#9875)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-06-03 16:07:47 +00:00
ad60333d15 fix: list-session fresh age session check (#9865)
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Maxwell <ping-maxwell@users.noreply.github.com>
2026-06-03 11:23:14 +00:00
TaesuandGitHub 695753106d docs: update community adapters (#9881) 2026-06-03 09:11:14 +00:00
TaesuandGitHub e111d63b8e refactor(cookies): clarify cookie regex ranges (#9879) 2026-06-03 04:05:55 +00:00
better-release[bot]andGitHub 5038d41ca2 chore: release v1.6.14 (#9846) @better-auth/core@1.6.14 @better-auth/drizzle-adapter@1.6.14 @better-auth/electron@1.6.14 @better-auth/expo@1.6.14 @better-auth/i18n@1.6.14 @better-auth/kysely-adapter@1.6.14 @better-auth/memory-adapter@1.6.14 @better-auth/mongo-adapter@1.6.14 @better-auth/oauth-provider@1.6.14 @better-auth/passkey@1.6.14 @better-auth/prisma-adapter@1.6.14 @better-auth/redis-storage@1.6.14 @better-auth/scim@1.6.14 @better-auth/sso@1.6.14 @better-auth/stripe@1.6.14 @better-auth/telemetry@1.6.14 @better-auth/test-utils@1.6.14 auth@1.6.14 better-auth@1.6.14 @better-auth/api-key@1.6.14 v1.6.14 2026-06-02 16:56:28 -04:00