Commit Graph

6692 Commits

Author SHA1 Message Date
better-release[bot]
0290077760 chore: release v1.6.6 (#9222) @better-auth/api-key@1.6.6 @better-auth/core@1.6.6 @better-auth/drizzle-adapter@1.6.6 @better-auth/electron@1.6.6 @better-auth/expo@1.6.6 @better-auth/i18n@1.6.6 @better-auth/kysely-adapter@1.6.6 @better-auth/memory-adapter@1.6.6 @better-auth/mongo-adapter@1.6.6 @better-auth/oauth-provider@1.6.6 @better-auth/passkey@1.6.6 @better-auth/prisma-adapter@1.6.6 @better-auth/redis-storage@1.6.6 @better-auth/scim@1.6.6 @better-auth/sso@1.6.6 @better-auth/stripe@1.6.6 @better-auth/telemetry@1.6.6 @better-auth/test-utils@1.6.6 auth@1.6.6 better-auth@1.6.6 v1.6.6 2026-04-21 17:42:18 +01:00
Taesu
9ea7eb1eab fix(cookies): preserve partitioned attribute on set-cookie round-trip (#9235)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-21 16:11:29 +00:00
Jonathan Samines
fe5f36c7e3 chore(sso): fix samlify ESM/CJS loading compat issue (#9262) 2026-04-21 16:06:04 +00:00
Taesu
b5742f9d08 feat(core): add mapConcurrent bounded-concurrency utility (#9227) 2026-04-21 15:31:08 +00:00
Taesu
26d0cec9bd docs: improve Nuxt integration guide (#9232)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-21 15:30:22 +00:00
Maxwell
4debfb600f fix(custom-session): use coerced boolean for disableRefresh query param validation (#9214) 2026-04-21 10:22:32 +00:00
Maxwell
ab4c10fbc0 fix(organization): infer team additional fields correctly (#9266) 2026-04-21 08:16:39 +00:00
Terijaki
4677601429 fix(expo): read cached session data from SecureStore on app startup (#8953)
Co-authored-by: Taesu <bytaesu@gmail.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
2026-04-21 06:49:49 +00:00
Taesu
2ee50c581f docs: add stable/beta versioning with build-time content sync (#9258) 2026-04-21 03:49:33 +00:00
Bereket Engida
35e9f9f6e4 docs: landing improvements (#9169)
Co-authored-by: Taesu <bytaesu@gmail.com>
2026-04-18 23:04:27 -07:00
Gustavo Valverde
e64ff720fb fix: unify host classification and close SSRF gaps across packages (#9226) 2026-04-17 23:25:25 +00:00
Jonathan Samines
e37167aaf5 docs: fix fastify integration docs to avoid race conditions (#9230) 2026-04-17 17:51:21 +00:00
Jonathan Samines
a844c7dd08 chore(core): update @opentelemetry/api dep declaration to be optional (#9111)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
2026-04-17 14:26:40 +00:00
Maxwell
d69d888b78 docs: add please_restart_the_process error page (#9224) 2026-04-17 13:01:31 +00:00
Maxwell
3728518d1c fix(api-key): run secondary-storage api-key executions in parallel (#9187)
Co-authored-by: Taesu <bytaesu@gmail.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
2026-04-17 12:43:30 +00:00
Gustavo Valverde
2c1b1994d5 ci(verify-changesets): always run and report pass/fail (#9223) 2026-04-17 09:52:37 +00:00
Taesu
a61083e023 fix(phone-number): allow removing phone number via updateUser (#9219) 2026-04-17 04:19:26 +00:00
better-release[bot]
c8a91f4167 chore: release v1.6.5 (#9209) @better-auth/api-key@1.6.5 @better-auth/drizzle-adapter@1.6.5 @better-auth/expo@1.6.5 @better-auth/i18n@1.6.5 @better-auth/kysely-adapter@1.6.5 @better-auth/memory-adapter@1.6.5 @better-auth/mongo-adapter@1.6.5 @better-auth/oauth-provider@1.6.5 @better-auth/passkey@1.6.5 @better-auth/prisma-adapter@1.6.5 @better-auth/redis-storage@1.6.5 @better-auth/scim@1.6.5 @better-auth/stripe@1.6.5 auth@1.6.5 better-auth@1.6.5 v1.6.5 @better-auth/sso@1.6.5 @better-auth/telemetry@1.6.5 @better-auth/electron@1.6.5 @better-auth/test-utils@1.6.5 @better-auth/core@1.6.5 2026-04-16 11:05:30 +01:00
Daniel Müller
5b900a2b43 Merge commit from fork
* Add tests reproducing GHSA-xr8f-h2gw-9xh6

* Fix GHSA-xr8f-h2gw-9xh6

* Move clientPrivilege assertion to shared helper

* chore: add oauth-provider changeset for GHSA-xr8f-h2gw-9xh6

---------

Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-04-16 10:52:33 +01:00
Gautam Manchandani
938dd80e2d docs(test-utils): clarify production usage (#9119)
Signed-off-by: Gautam Manchandani <manchandanigautam@gmail.com>
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-16 01:20:34 +00:00
Ahmed Abdullah
25c8f59069 docs: fix wrong AutumnProvider usage in docs (#9176)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-16 01:18:35 +00:00
Jonathan Samines
09005a974d docs: add mention to self service directory sync (#9194)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-16 01:15:52 +00:00
Ray
05386271ca fix(client): trigger $sessionSignal for session-rotating endpoints (#9087) 2026-04-15 15:27:48 +00:00
better-release[bot]
9ec849ff71 chore: release v1.6.4 (#9175) @better-auth/core@1.6.4 @better-auth/drizzle-adapter@1.6.4 @better-auth/electron@1.6.4 @better-auth/expo@1.6.4 @better-auth/i18n@1.6.4 @better-auth/kysely-adapter@1.6.4 @better-auth/memory-adapter@1.6.4 @better-auth/mongo-adapter@1.6.4 @better-auth/oauth-provider@1.6.4 @better-auth/passkey@1.6.4 @better-auth/prisma-adapter@1.6.4 @better-auth/redis-storage@1.6.4 @better-auth/scim@1.6.4 @better-auth/sso@1.6.4 @better-auth/stripe@1.6.4 @better-auth/telemetry@1.6.4 @better-auth/test-utils@1.6.4 auth@1.6.4 better-auth@1.6.4 @better-auth/api-key@1.6.4 v1.6.4 2026-04-15 13:00:42 +01:00
Gustavo Valverde
39d6af2a39 chore(adapters): require patched drizzle-orm and kysely peer versions (#9165)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-15 11:37:50 +00:00
Gustavo Valverde
ba03fb59f4 chore(deps): bump electron and next devDependencies to patched versions (#9166) 2026-04-15 11:24:20 +00:00
Gustavo Valverde
9aed910499 fix(two-factor): revert enforcement broadening from #9122 (#9205) 2026-04-15 10:59:53 +00:00
Taesu
a0caa1f6f8 docs(device-authorization): fix approval page query param (#9197) 2026-04-14 23:36:23 +00:00
Jonathan Samines
7be52d9403 docs: add docs email normalization on sentinel (#9188) 2026-04-14 14:21:36 -06:00
Gautam Manchandani
acbd6ef69f fix: honor forceAllowId UUIDs on postgres adapters (#9068)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-14 13:05:11 +00:00
Taesu
dd6528f45b docs(guides): move dynamic base url from concepts to guides and options (#9145)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-14 11:36:59 +00:00
better-release[bot]
6f17bb3ebd chore: release v1.6.3 (#9081) @better-auth/core@1.6.3 @better-auth/drizzle-adapter@1.6.3 @better-auth/electron@1.6.3 @better-auth/expo@1.6.3 @better-auth/i18n@1.6.3 @better-auth/kysely-adapter@1.6.3 @better-auth/memory-adapter@1.6.3 @better-auth/mongo-adapter@1.6.3 @better-auth/oauth-provider@1.6.3 @better-auth/passkey@1.6.3 @better-auth/prisma-adapter@1.6.3 @better-auth/redis-storage@1.6.3 @better-auth/scim@1.6.3 @better-auth/sso@1.6.3 @better-auth/stripe@1.6.3 @better-auth/telemetry@1.6.3 @better-auth/test-utils@1.6.3 auth@1.6.3 better-auth@1.6.3 @better-auth/api-key@1.6.3 v1.6.3 2026-04-14 12:04:31 +01:00
Maxwell
9a6d4759cd fix(client): prevent isMounted race condition causing many rps (#9078)
Co-authored-by: Taesu <bytaesu@gmail.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-04-14 09:36:59 +00:00
Gustavo Valverde
390a03190c fix(stripe): prevent prototype pollution via user-supplied metadata (#9164) 2026-04-14 08:05:31 +00:00
Gustavo Valverde
5142e9cec5 fix(auth): harden dynamic baseURL resolution (#9131) 2026-04-14 08:01:13 +00:00
Gustavo Valverde
92256a2d0d chore: minor review followups on recent main commits (#9163) 2026-04-14 07:22:10 +00:00
Taesu
513dabb132 fix: resolve dynamic baseURL for direct auth.api calls (#9113) 2026-04-14 06:16:53 +00:00
Jaden Stanton
2514c3d970 docs: correct wording for invocable endpoints in integration guides (#9160) 2026-04-14 05:59:29 +00:00
Sean Filimon
a1f619969d docs: update Convex Labs link in documentation (#9161) 2026-04-14 05:55:27 +00:00
Taesu
8dcb98873e docs: update not-found page (#9158) 2026-04-13 19:54:32 +00:00
Taesu
6c946a3e0c docs(sso): extract inline fields to named exports (#9144) 2026-04-13 03:01:29 +00:00
Taesu
daf7ab7aaa docs: fix fk references in schema tables to match actual plugin schemas (#9143) 2026-04-13 02:37:17 +00:00
Taesu
a6f31972ca docs(landing): polish sentinel section (#9142) 2026-04-13 01:19:15 +00:00
dependabot[bot]
ed2c18df31 chore(deps): bump next from 16.2.2 to 16.2.3 in /docs (#9112)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
2026-04-12 08:47:53 +00:00
Taesu
a6e9b94318 docs: improve enterprise contact form (#9128) 2026-04-12 08:30:35 +00:00
dependabot[bot]
504ea253ac chore(deps-dev): bump @sveltejs/kit from 2.53.3 to 2.57.1 (#9109)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-12 08:24:12 +00:00
Gustavo Valverde
e2e25a4954 fix(oauth-provider): graceful DCR override for unauthenticated confidential clients (#9123) 2026-04-11 15:25:06 +00:00
Byte-Biscuit
f8758975ae fix(two-factor): updated backup codes respect storeBackupCodes option (#7231)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-04-11 13:19:46 +00:00
Gustavo Valverde
484ce6a262 fix(two-factor): enforce 2FA on all sign-in paths (#9122) 2026-04-11 12:33:58 +00:00
Gustavo Valverde
314e06f0fd feat(oauth-provider): add customTokenResponseFields and harden authorization code validation (#9118) 2026-04-11 09:54:48 +00:00