github-starred/better-auth
2
0
Fork 0
mirror of https://github.com/better-auth/better-auth.git synced 2026-07-28 06:47:20 -05:00
Code Issues 2.5k Packages Projects Releases 112 Wiki Activity
6,975 Commits 139 Branches 1,417 Tags
@better-auth/scim@1.7.0-beta.4
Commit Graph
6975 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Gustavo ValverdeandGitHub 5142e9cec5 fix(auth): harden dynamic baseURL resolution (#9131) 2026-04-14 08:01:13 +00:00
Gustavo ValverdeandGitHub 92256a2d0d chore: minor review followups on recent main commits (#9163) 2026-04-14 07:22:10 +00:00
TaesuandGitHub 513dabb132 fix: resolve dynamic baseURL for direct auth.api calls (#9113) 2026-04-14 06:16:53 +00:00
Jaden StantonandGitHub 2514c3d970 docs: correct wording for invocable endpoints in integration guides (#9160) 2026-04-14 05:59:29 +00:00
Sean FilimonandGitHub a1f619969d docs: update Convex Labs link in documentation (#9161) 2026-04-14 05:55:27 +00:00
Gustavo ValverdeGitHubDylan Vanmali
 		cd8313ba00 feat(cimd): add Client ID Metadata Document plugin (#9159) 
Co-authored-by: Dylan Vanmali <dylanvanmali@yahoo.com>
 2026-04-13 20:52:34 +00:00
TaesuandGitHub 8dcb98873e docs: update not-found page (#9158) 2026-04-13 19:54:32 +00:00
Gustavo ValverdeandGitHub c7d22539ec refactor(generic-oauth)!: rewrite as first-class social provider with RFC compliance (#9069) 2026-04-13 12:02:16 +00:00
TaesuandGitHub 6c946a3e0c docs(sso): extract inline fields to named exports (#9144) 2026-04-13 03:01:29 +00:00
TaesuandGitHub daf7ab7aaa docs: fix fk references in schema tables to match actual plugin schemas (#9143) 2026-04-13 02:37:17 +00:00
TaesuandGitHub a6f31972ca docs(landing): polish sentinel section (#9142) 2026-04-13 01:19:15 +00:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>TaesuTaesu
 		ed2c18df31 chore(deps): bump next from 16.2.2 to 16.2.3 in /docs (#9112) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
 2026-04-12 08:47:53 +00:00
TaesuandGitHub a6e9b94318 docs: improve enterprise contact form (#9128) 2026-04-12 08:30:35 +00:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		504ea253ac chore(deps-dev): bump @sveltejs/kit from 2.53.3 to 2.57.1 (#9109) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-12 08:24:12 +00:00
Gustavo ValverdeandGitHub e2e25a4954 fix(oauth-provider): graceful DCR override for unauthenticated confidential clients (#9123) 2026-04-11 15:25:06 +00:00
Byte-BiscuitGitHubGustavo Valverde
 		f8758975ae fix(two-factor): updated backup codes respect storeBackupCodes option (#7231) 
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
 2026-04-11 13:19:46 +00:00
Gustavo ValverdeandGitHub 484ce6a262 fix(two-factor): enforce 2FA on all sign-in paths (#9122) 2026-04-11 12:33:58 +00:00
Gustavo ValverdeandGitHub 960304354a fix(sso): upgrade samlify to 2.12.0 with XPath injection and XXE fixes (#9121) 2026-04-11 10:46:50 +00:00
Gustavo ValverdeandGitHub 6f2948e87b feat(oauth-provider): compute at_hash in id tokens per OIDC Core §3.1.3.6 (#9079) 2026-04-11 10:29:20 +00:00
Gustavo ValverdeandGitHub b70f025bfa refactor(sso)!: remove callbackUrl, consolidate ACS endpoint, fix SLO (#9117) 2026-04-11 10:03:56 +00:00
Gustavo ValverdeandGitHub 314e06f0fd feat(oauth-provider): add customTokenResponseFields and harden authorization code validation (#9118) 2026-04-11 09:54:48 +00:00
Gustavo Valverde 9fd0192d0e fix(ci): fix grep -c fallback producing invalid integer in release validation 
grep -coP outputs "0" to stdout on no matches but exits 1, causing
the || echo 0 fallback to append a second "0". The resulting "0\n0"
value fails the -lt integer comparison. Use || true instead since
grep -c already outputs the correct count.
 2026-04-11 07:53:07 +01:00
better-release[bot]andGitHub c8cf0f7c1a chore: release v1.7.0-beta.0 (#9073) @better-auth/core@1.7.0-beta.0 @better-auth/drizzle-adapter@1.7.0-beta.0 @better-auth/electron@1.7.0-beta.0 @better-auth/expo@1.7.0-beta.0 @better-auth/i18n@1.7.0-beta.0 @better-auth/kysely-adapter@1.7.0-beta.0 @better-auth/memory-adapter@1.7.0-beta.0 @better-auth/mongo-adapter@1.7.0-beta.0 @better-auth/oauth-provider@1.7.0-beta.0 @better-auth/passkey@1.7.0-beta.0 @better-auth/prisma-adapter@1.7.0-beta.0 @better-auth/redis-storage@1.7.0-beta.0 @better-auth/scim@1.7.0-beta.0 @better-auth/sso@1.7.0-beta.0 @better-auth/stripe@1.7.0-beta.0 @better-auth/telemetry@1.7.0-beta.0 @better-auth/test-utils@1.7.0-beta.0 auth@1.7.0-beta.0 better-auth@1.7.0-beta.0 @better-auth/api-key@1.7.0-beta.0 v1.7.0-beta.0 2026-04-10 21:29:25 +01:00
Gustavo ValverdeandGitHub bee0df595d chore: sync main to next 
chore: sync main to next
 2026-04-10 21:16:58 +01:00
Gustavo Valverde 2e0ad30369 fix(ci): fix grep -c fallback producing invalid integer in release validation 
grep -coP outputs "0" to stdout on no matches but exits 1, causing
the || echo 0 fallback to append a second "0". The resulting "0\n0"
value fails the -lt integer comparison. Use || true instead since
grep -c already outputs the correct count.
 2026-04-10 21:10:10 +01:00
Gustavo Valverde ca5d303607 fix(sso): guard toLowerCase against falsy email and use safe redirect 
- Add empty string fallback before .toLowerCase() to prevent TypeError
  when both mapped email attribute and extract.nameID are falsy
- Use validated samlRedirectUrl instead of raw callbackUrl in error
  redirect to maintain open-redirect and loop-protection guarantees
 2026-04-10 21:06:47 +01:00
TaesuandGitHub f32099449e chore: fix typecheck command in CLAUDE.md (#9110) 2026-04-10 19:43:07 +00:00
Gustavo Valverde 97fca6a1cf refactor(sso): adopt saml-pipeline and port security fixes 
Use main's saml-pipeline.ts for SAML response processing, replacing
~1000 lines of duplicated inline code in sso.ts. Port the four
security fixes from #9055 into the pipeline:

- Fix InResponseTo field path (extract.response?.inResponseTo)
- Add Audience Restriction validation
- Fix SessionIndex stored as string, not object
- Fix allowIdpInitiated default to false

Delegate to validateInResponseTo/validateAudience from
response-validation.ts instead of reimplementing inline.

Graft private_key_jwt (RFC 7523) support from #8836 onto main's
pipeline-based sso.ts.
 2026-04-10 20:25:41 +01:00
Gustavo Valverde 28ccc8cda9 chore: resolve main-to-next sync conflicts 
Conflicts resolved:
- docs/content/docs/plugins/2fa.mdx: kept next's OTP feature, applied main's exported const pattern
- docs/content/docs/plugins/oauth-provider.mdx: kept main's formatting, added back private_key_jwt docs
- docs/content/docs/plugins/sso.mdx: kept next's version with private_key_jwt and SAML options
- packages/sso/src/routes/sso.ts: kept next's version (has security fixes and private_key_jwt)
 2026-04-10 19:11:05 +01:00
TaesuandGitHub 4673c6d83c fix(cli): handle extends and mid-path wildcards in tsconfig paths (#9032) 2026-04-10 16:26:53 +00:00
Gustavo ValverdeandGitHub 52c47517a2 fix(sso): unify SAML response processing and fix bugs (#9097) 2026-04-10 15:00:26 +00:00
Gustavo ValverdeandGitHub 7fb4a55b65 fix(ci): rename release PR with actual version (#9066) 2026-04-10 14:58:56 +00:00
Gustavo ValverdeandGitHub 544f1c63c9 feat(two-factor)!: add OTP enablement and discriminated response (#9057) 2026-04-10 14:23:20 +00:00
TaesuGitHubbetter-release[bot] <273320539+better-release[bot]@users.noreply.github.com>
 		c5066fe5d6 fix(stripe): omit quantity for metered prices in checkout and upgrades (#8926) 
Co-authored-by: better-release[bot] <273320539+better-release[bot]@users.noreply.github.com>
 2026-04-10 12:55:44 +00:00
SAI YASWANTHGitHubMaxwellTaesuTaesu
 		684154d3d1 chore: replace z.union with z.xor for permission schemas in admin plugin (#8982) 
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
 2026-04-10 12:47:23 +00:00
Gustavo ValverdeandGitHub 93d3871bd2 feat(oauth): add private_key_jwt client authentication (RFC 7523) (#8836) 2026-04-10 08:22:05 +00:00
TaesuGitHubleonardo2204better-release[bot] <273320539+better-release[bot]@users.noreply.github.com>
 		5f84335815 feat(stripe): support Stripe SDK v21 and v22 (#9084) 
Co-authored-by: leonardo2204 <1509421+leonardo2204@users.noreply.github.com>
Co-authored-by: better-release[bot] <273320539+better-release[bot]@users.noreply.github.com>
 2026-04-10 06:19:34 +00:00
TonyandGitHub d141a3b190 docs: fix PostgreSQL Prisma native type typo (#9090) 2026-04-10 05:21:45 +00:00
TaesuandGitHub 099ee48c41 chore(docs): format markdown including mdx files (#9085) 2026-04-10 05:09:33 +00:00
Oluwatobi MustaphaGitHubMaxwellping-maxwell
 		f6428d02fc fix(open-api): correct get-session nullable schema for OAS 3.1 (#8389) 
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com>
 2026-04-09 20:44:35 +00:00
RayGitHubMaxwell
 		6ce30cf138 fix: incorrect operationId in password reset callback endpoint (#9072) 
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
 2026-04-09 20:13:06 +00:00
Ahmed SaidGitHubMaxwell
 		41679fa817 docs: add database table names (#9062) 
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
 2026-04-09 19:17:40 +00:00
Gustavo ValverdeandGitHub a2fbe079f8 refactor(ci): simplify release notes to one-line entries (#9067) 2026-04-09 18:24:25 +00:00
Gustavo ValverdeandGitHub 83ed1fe360 fix(ci): prevent label explosion on PRs targeting the next branch (#9071) 2026-04-09 18:15:14 +00:00
Gustavo ValverdeandGitHub b790144a2e fix(sso)!: harden SAML response validation (InResponseTo, Audience, SessionIndex) (#9055) 2026-04-09 17:30:01 +00:00
Gustavo ValverdeandGitHub 3d9ea81232 chore: sync main to next 
chore: sync main to next
 2026-04-09 15:25:00 +01:00
better-release[bot]andGitHub 700d298e1e chore: version packages (#9052) @better-auth/api-key@1.6.2 @better-auth/core@1.6.2 @better-auth/drizzle-adapter@1.6.2 @better-auth/electron@1.6.2 @better-auth/expo@1.6.2 @better-auth/i18n@1.6.2 @better-auth/kysely-adapter@1.6.2 @better-auth/memory-adapter@1.6.2 @better-auth/mongo-adapter@1.6.2 @better-auth/oauth-provider@1.6.2 @better-auth/passkey@1.6.2 @better-auth/prisma-adapter@1.6.2 @better-auth/redis-storage@1.6.2 @better-auth/scim@1.6.2 @better-auth/sso@1.6.2 @better-auth/stripe@1.6.2 @better-auth/telemetry@1.6.2 @better-auth/test-utils@1.6.2 auth@1.6.2 better-auth@1.6.2 v1.6.2 2026-04-09 15:19:07 +01:00
Gustavo ValverdeandGitHub ef7cd5ba79 ci: restructure release notes to group by npm package (#9011) 2026-04-09 15:15:58 +01:00
Dipan ChakrabortyGitHubMaxwell
 		7ac092ec52 docs: fix missing secret param in getSignedCookie example (#8827) 
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
 2026-04-09 13:57:45 +00:00
Doug WebbGitHubMaxwell
 		809da03968 docs: add paragraph specifying need for cookie passage for server methods (#6546) 
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
 2026-04-09 13:26:13 +00:00