Gustavo Valverde
bf7f2c5b4e
chore: sync main to next
2026-06-10 11:30:38 -07:00
Bereket Engida and GitHub
cb1cbfa4cc
fix: address bug findings across packages ( #9974 )
2026-06-09 19:46:12 -07:00
Gustavo Valverde and GitHub
87e7aa5e0f
fix(api): validate Origin/Referer on cookieless email sign-in and sign-up ( #9973 )
2026-06-10 01:43:41 +00:00
d23735b1de
feat(passkey): resolve authenticator name from AAGUID at read time ( #9927 )
...
Co-authored-by: Maxwell Weru <1645026+mburumaxwell@users.noreply.github.com >
2026-06-07 23:22:39 +00:00
Suliman Abdulrazzaq and GitHub
f3396987a9
docs: add DBSC plugin documentation ( #9892 )
2026-06-05 18:58:50 -07:00
Gustavo Valverde and GitHub
40b392ae21
feat(oauth)!: accumulate granted scopes as grantedScopes string[] ( #9825 )
2026-06-04 17:54:52 -04:00
Gustavo Valverde
065f5ad72d
chore: sync main to next
...
Brings the v1.6.13 stable fixes into next: redirect_uri scheme validation in oidc-provider and mcp (#9838 ), clientPrivileges enforcement on dynamic client registration (#9837 ), null organization logo support (#9842 ), the consumeOne non-numeric deleteMany guard (#9831 ), and the db-adapter guide alignment (#9830 ).
Conflicts were limited to release version bumps and CHANGELOG entries; resolved by keeping next's 1.7.0-beta.3 line. The ten changesets consumed by the v1.6.13 release are accepted as deleted, and no external dependencies changed.
2026-05-31 13:02:15 +01:00
Gustavo Valverde and GitHub
be32012ca3
fix(oauth): validate redirect_uri schemes in oidc-provider and mcp ( #9838 )
2026-05-31 11:38:52 +01:00
Gustavo Valverde
ef4fb0ff95
chore: merge main into next ( #9533 )
...
Sync main (through #9821/#9820/#9822/#9768) into next. Conflicting
package.json files keep next's version and intentional divergences (for
example the cli's c12 v4) while taking main's dependency updates, including
the samlify 2.13.1 and fast-xml-parser security bumps; the lockfile is
regenerated from the reconciled set. The 13 source/doc/test conflicts take
next's refactored architecture as the baseline; main's colliding fixes are
re-applied on top in the following per-domain commits.
Clean main fixes land via this merge, including the auto-restored
account-takeover defenses #9578 and #9577 .
2026-05-31 00:10:16 +01:00
Jonathan Samines and GitHub
64dd51c78a
docs: add automatic reply to enterprise customer inquiries ( #9775 )
2026-05-28 00:15:22 +00:00
Gustavo Valverde and GitHub
e7eb45b065
feat(oauth): per-request additionalParams and loginHint ( #9305 )
2026-05-19 17:18:43 +00:00
MonoBit and GitHub
314ea2887d
docs: add ton-better-auth plugin information ( #9637 )
2026-05-19 07:14:38 +09:00
Taesu and GitHub
8cd6fc5136
chore: restore pnpm v11 upgrade and bump to v11.1.1 ( #9541 )
2026-05-12 19:12:14 +00:00
Gustavo Valverde and GitHub
5f09d566a6
fix(magic-link): consume verification token atomically on verify ( #9572 )
2026-05-12 12:50:38 +00:00
Taesu
2b83087180
chore: sync main to next
2026-05-10 03:45:29 +09:00
Taesu and GitHub
698678bcd0
chore: revert pnpm v11 upgrade and action-setup bump ( #9529 )
2026-05-09 15:54:10 +00:00
Taesu and GitHub
ad667541c9
chore: bump pnpm/action-setup and drop unnecessary pnpm config ( #9527 )
2026-05-09 15:27:09 +00:00
Maxwell and GitHub
8c1e91757d
fix: warn for cookie-plugin being last in array ( #9484 )
2026-05-08 02:55:33 +00:00
30a1fb9c05
feat(i18n): add built-in translations for 22 languages ( #9157 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
2026-05-06 11:51:17 +00:00
a0087adcb3
docs: add better-near-auth to community plugins ( #9459 )
...
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com >
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-05-06 02:54:06 +00:00
c8ec03d26e
docs: add MikroORM better-auth adapter to community adapters ( #9379 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com >
2026-04-28 22:56:02 +00:00
Gustavo Valverde
eb3cd10d50
chore: resolve main-to-next sync conflicts
...
- keep next package versions at 1.7.0-beta.1
- keep both changelog streams by inserting the stable 1.6.5, 1.6.6, and 1.6.7 sections below the 1.7.0-beta entries
- keep the cimd and dash deps on demo/nextjs (next-only); regenerate pnpm-lock.yaml
- resolve TODO(sync-from-main-9226) in oauth-provider authorize.ts: findRegisteredRedirectUri now uses isLoopbackIP from @better-auth/core/utils/host to cover the full 127.0.0.0/8 range per RFC 8252 §7.3
- drop the unused saml import that main's #9262 added to sso/src/routes/sso.ts; next already migrated to saml-pipeline
2026-04-22 14:54:27 +01:00
Gustavo Valverde and GitHub
e64ff720fb
fix: unify host classification and close SSRF gaps across packages ( #9226 )
2026-04-17 23:25:25 +00:00
cd8313ba00
feat(cimd): add Client ID Metadata Document plugin ( #9159 )
...
Co-authored-by: Dylan Vanmali <dylanvanmali@yahoo.com >
2026-04-13 20:52:34 +00:00
Gustavo Valverde and GitHub
7b65767628
fix(ci): run tests in merge queue, add summary gate jobs, cover next branch ( #8964 )
2026-04-05 12:14:13 +00:00
Gustavo Valverde and GitHub
126e92ab24
ci: add auto-changeset generation on PR approval ( #8959 )
2026-04-05 09:44:05 +00:00
Gustavo Valverde and GitHub
b79c045927
fix(ci): replace rebase sync with batched merge PR, add auto-retarget ( #8957 )
2026-04-04 17:42:07 +00:00
Gustavo Valverde and GitHub
0afc6a1e78
ci: replace bumpp with changesets release automation ( #8903 )
2026-04-03 21:43:23 +00:00
Gustavo Valverde and GitHub
e089ce127d
chore(knip): fix CI blind spots and remove dead code ( #8888 )
2026-04-02 19:28:30 +00:00
Gustavo Valverde and GitHub
e80cc38b0d
fix: turbo caching, enforce lockfile integrity, expand pre-commit hooks ( #8892 )
2026-04-02 07:35:24 +00:00
Jonathan Samines and GitHub
a1b0fdcd70
feat(db): add case insensitive queries support ( #8556 )
2026-03-23 13:09:29 -07:00
df9abae0bc
feat(haveibeenpwned): add enable option ( #8728 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-03-22 22:30:56 +00:00
Harshit Sharma and GitHub
1f1a9362e5
docs: add better-auth-devtools to community plugins ( #8714 )
2026-03-20 19:28:06 +00:00
5648bd8680
feat: agent auth plugin ( #8696 )
...
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2026-03-19 12:18:34 -07:00
Ivan Cernja and Alex Yang
208f6fdd27
docs: add Encore integration docs ( #7760 )
2026-03-17 11:02:24 -07:00
Taesu and GitHub
bbe1affa40
feat(email-otp): add resendStrategy option to reuse existing OTP ( #8560 )
2026-03-17 00:13:12 +00:00
Alex Yang and GitHub
a1a9745305
fix(docs): improve AI chat security and cleanup ( #8597 )
2026-03-13 19:42:37 +00:00
bce10c0285
docs: custom AI chat ( #8523 )
...
Co-authored-by: Sandy <github@sandy00.aleeas.com >
2026-03-13 18:21:29 +00:00
6061bed1f8
feat(social-provider): add wechat social provider ( #5189 )
...
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Alex Yang <himself65@outlook.com >
2026-03-11 18:07:06 +00:00
Kamil Marczak and GitHub
c2d4b48516
docs: add better-auth-usos plugin ( #8493 )
2026-03-09 17:39:16 +00:00
Sandy and GitHub
134207ea60
docs: add better-auth-invite-plugin to community plugins ( #7948 )
2026-03-08 00:15:12 +00:00
Alex Yang and GitHub
71c3a85d2f
fix(sso): handle bare domains in domain verification ( #8369 )
2026-03-06 08:03:20 +00:00
d8139e5c79
fix: pass user field through idToken sign-in body for Apple name support ( #8417 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-03-06 02:12:55 +00:00
5e0fe841dd
chore: migrate infrastructure links to dash.better-auth.com ( #8391 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-03-04 18:02:34 -08:00
3601bf053b
docs: add Openfort third party plugin ( #5911 )
...
Co-authored-by: joalavedra <62625514+joalavedra@users.noreply.github.com >
2026-03-04 09:06:41 +00:00
0c73a08593
docs: infrastructure docs ( #8086 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2026-03-01 13:35:36 -08:00
143cca16ca
docs: fix typo in keyPrefix option for redisStorage ( #8262 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2026-03-02 02:00:49 +09:00
Alex Yang and GitHub
9b861015bb
docs: add 1.5 release note ( #8197 )
2026-02-28 11:01:44 +09:00
Maxwell and GitHub
5bc743b002
docs: new documentation/landing page ( #8195 )
2026-02-27 16:49:34 -08:00
85546dd69f
docs: add 'better-auth-audit-logs' plugin to community table ( #8182 )
...
Co-authored-by: Ejiro Asiuwhu <Ejiroasiuwhu10@gmail.com >
2026-02-27 04:45:35 +00:00
Gustavo Valverde
Bereket EngidaandGitHub
Suliman AbdulrazzaqandGitHub
Jonathan SaminesandGitHub
MonoBitandGitHub
TaesuandGitHub
Taesu
MaxwellandGitHub
Harshit SharmaandGitHub
Ivan CernjaandAlex Yang
Kamil MarczakandGitHub
