Commit Graph
6933 Commits
Author SHA1 Message Date
TaesuandGitHub 2468a2d918 fix(expo): support wildcard trusted origins in deep link cookie injection (#8013) 2026-02-18 12:06:15 +00:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
67b53e61b6 chore(deps): bump fast-xml-parser from 5.3.3 to 5.3.6 (#8034)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-18 11:14:15 +00:00
Alex YangandGitHub 425ec38f84 fix(sso): import cjs dep (#8041) 2026-02-18 10:44:43 +00:00
Joél SolanoandGitHub 62ed645354 fix(admin): optional chain user in hooks (#8026) 2026-02-18 10:06:20 +00:00
RosanoandGitHub b633d0745d docs: fix account linking example (#8035) 2026-02-18 01:41:19 -08:00
e5683a7a64 chore: bump all packages to v1.5.0-beta.16 (#8037)
Co-authored-by: Ghost <ghost@better-github.app>
v1.5.0-beta.16
2026-02-18 00:49:17 -08:00
TaesuandGitHub 9f79147bdb fix(oauth-provider): return "invalid_client" on encrypted secret verification failure (#8030) 2026-02-18 00:21:05 -08:00
07d216dc29 feat: support accepting callback for trusted providers function (#7904)
Co-authored-by: Paola Estefanía de Campos <84341268+Paola3stefania@users.noreply.github.com>
2026-02-17 23:24:59 -08:00
TaesuandGitHub 76d9ba140c fix(stripe): use correct stripeCustomerId on /subscription/cancel/callback endpoint (#8032) 2026-02-18 02:47:41 +00:00
Raphaël BaletandGitHub b6744552f3 docs(admin.mdx): export const ac (#8000) 2026-02-17 16:08:50 -08:00
Joél SolanoandGitHub b7de9e7b2d chore(electron): fix race condition (#8025) 2026-02-17 15:54:29 -08:00
Dylan VanmaliandGitHub 30d17fc989 fix(oauth-provider): add missing oauthClient createdAt/updatedAt values (#7851) 2026-02-17 15:39:02 -08:00
TaesuandGitHub 0dbff0ee56 test(oauth-provider): update remaining consent response assertions from uri to url (#8029) 2026-02-17 22:40:03 +00:00
TaesuandGitHub 88e1e995b1 fix(oauth-provider): return url instead of uri in continue and consent endpoints (#7811) 2026-02-17 09:23:51 -08:00
d241f4ccac fix(phone-number): reset password should create credential account (#6862)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2026-02-16 23:10:12 -08:00
Joél SolanoandGitHub 7306c5af05 feat(electron): allow manual token exchange & add sanitizeUser option (#7976) 2026-02-16 23:10:02 -08:00
Joél SolanoandGitHub 1e18da7620 feat(electron): fetch user image securely regardless of csp (#7844) 2026-02-16 16:57:02 -08:00
Joél SolanoandGitHub cec49694e9 fix(db): infer default value for required attr properly (#7996) 2026-02-16 16:56:50 -08:00
Paola Estefanía de CamposandGitHub bcf76b8b74 fix: add error handling for id token verification in Apple and Google providers (#8011) 2026-02-16 16:29:54 -08:00
starslingdev[bot]GitHubstarslingdev[bot] <248995740+starslingdev[bot]@users.noreply.github.com>
0d24f3f8b5 chore(ci): add Docker Compose healthchecks for faster CI service readiness (#8010)
Co-authored-by: starslingdev[bot] <248995740+starslingdev[bot]@users.noreply.github.com>
2026-02-16 15:57:12 -08:00
Bereket Engida fae56a1b5c chore: release v1.5.0-beta.15 v1.5.0-beta.15 2026-02-16 15:23:33 -08:00
Joél SolanoandGitHub 99efdafb36 fix(cookie): relax cookie retrieval for getSessionCookie (#8008) 2026-02-16 15:14:16 -08:00
Paola Estefanía de CamposandGitHub a2f6fbce5a fix: encode callbackURL in delete-user verification email (#8007) 2026-02-16 14:26:07 -08:00
Paola Estefanía de CamposandGitHub d9b7f7ec42 fix(rate-limit): harden default rules and fix phone-number window (#8006) 2026-02-16 14:25:19 -08:00
Bereket EngidaandGitHub 5466cf758a chore: release workflow should run on github (#8004) 2026-02-16 13:59:41 -08:00
Bereket Engida a8686cf552 chore: release v1.5.0-beta.14 v1.5.0-beta.14 2026-02-16 13:40:28 -08:00
Carlos Eduardo MedimandGitHub cc65d9085e feat(providers): add Railway OAuth provider (#7730) 2026-02-16 12:49:02 -08:00
Paola Estefanía de CamposandGitHub a2e1d5fef8 feat(sso): add shared redirectURI option for OIDC providers (#7818) 2026-02-16 12:43:37 -08:00
Jonathan SaminesandGitHub 7f29f4b668 chore(sso): add missing option types to sso plugin types (#8002) 2026-02-16 12:35:35 -08:00
1e30369b2c feat(oauth): add support for legacy OAuth clients that don't use PKCE (#7609)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Paola Estefanía de Campos <84341268+Paola3stefania@users.noreply.github.com>
2026-02-16 12:35:18 -08:00
Alex YangandGitHub 6c52e5f6a9 fix(captcha): include error codes in middleware responses (#7991) 2026-02-16 10:04:03 +00:00
TaesuandGitHub 7c52f359b1 fix(organization): refetch activeMember and activeMemberRole when active organization changes (#7989) 2026-02-16 06:21:53 +00:00
dce7bf1c00 fix(core): exclude tsconfig.json from published package (#7967)
Co-authored-by: Gautam Manchandani <gautammanch@Gautams-MacBook-Air.local>
2026-02-16 05:59:57 +00:00
TaesuandGitHub b857d03426 fix(client): infer additional fields for top-level user and session responses (#7986) 2026-02-16 04:45:46 +00:00
TaesuandGitHub b7400754fc docs: use Fumadocs default search engine powered by Orama (#7984) 2026-02-15 13:09:40 -08:00
Jan HestersandGitHub 7da833258f docs: add test-utils plugin to sidebar navigation (#7958) 2026-02-15 11:06:35 +00:00
MaxwellandGitHub e33d07383b docs: document Safari ITP blocks third-party cookies (#7980) 2026-02-15 10:10:07 +00:00
Alex YangandGitHub 62d51d00c7 test: check client output (#7979) 2026-02-15 09:29:23 +00:00
MaxwellandGitHub ad111866cd fix(mongo-adapter): updating a FK id should store as ObjectID (#7977) 2026-02-15 01:05:35 -08:00
Joél SolanoandGitHub cf8322707c feat: auth cli (#7964) 2026-02-15 07:44:50 +00:00
TaesuandGitHub 74e06e426c fix(stripe): fall back to customers.list when customers.search API is unavailable (#7965) 2026-02-15 07:44:16 +00:00
Joshua NussbaumandGitHub b313e4f5ba docs: updated incorrect import (#7978) 2026-02-14 22:28:14 -08:00
Bereket Engida 5685ecd175 Revert "chore: should keep singleton of ctx (#7654)"
This reverts commit d1b26b1a14.
2026-02-14 21:57:10 -08:00
Joél SolanoandGitHub 639b20fce5 chore(i18n): re-export types (#7974) 2026-02-14 21:38:34 -08:00
Bereket Engida 6846aec6ed Revert "Revert "fix(custom-session): use getSetCookie() to preserve individual Set-Cookie headers (#7879)""
This reverts commit ae30da5de3.
2026-02-14 20:58:46 -08:00
Bereket Engida ae30da5de3 Revert "fix(custom-session): use getSetCookie() to preserve individual Set-Cookie headers (#7879)"
This reverts commit 64bb8b4d28.
2026-02-14 20:40:47 -08:00
Alex YangandBereket Engida d1b26b1a14 chore: should keep singleton of ctx (#7654) 2026-02-14 20:40:42 -08:00
Gustavo ValverdeandGitHub 5b2604b0bd fix(oauth-provider): support scope narrowing at consent submission (#7873) 2026-02-14 20:25:01 -08:00
Thomas PeklakandGitHub 64bb8b4d28 fix(custom-session): use getSetCookie() to preserve individual Set-Cookie headers (#7879) 2026-02-14 20:19:44 -08:00
Joél SolanoandGitHub a4a3727dde fix(email-otp): avoid user enumeration when disabled sign-up (#7971) 2026-02-14 19:17:29 -08:00