Commit Graph
7030 Commits
Author SHA1 Message Date
TaesuandGitHub 5d65d98a3b docs(careers): replace hardcoded roles with gem job board api (#9426) 2026-05-02 23:53:25 +00:00
TaesuandGitHub d4d7888d62 chore: upgrade to pnpm v11 (#9416) 2026-05-01 02:22:49 +00:00
TaesuandGitHub 906b7b34a7 fix(bearer): write one entry per cookie name when merging session token (#9387) 2026-05-01 02:13:16 +00:00
TaesuandGitHub fe64413cef chore: bump vitest (#9413) 2026-05-01 01:40:28 +00:00
TaesuandGitHub d17ee3e534 test: add regression tests for public type exports from better-auth/types (#9419) 2026-05-01 01:16:02 +00:00
TaesuandGitHub f266c7d6f0 docs: centralize community plugin data (#9403) 2026-04-30 22:44:40 +00:00
TaesuandGitHub eb6061acb1 docs(stripe): document user deletion with active subscriptions recipe (#9404) 2026-04-30 22:44:30 +00:00
TaesuandGitHub 6cc30e7950 ci(backport): drop persist-credentials false and unnecessary fetch-depth (#9384) 2026-04-29 22:19:23 +00:00
a6a3e8face docs: update brand assets (#9377)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-04-29 20:04:16 +00:00
2220a6d6c2 fix(core): use pure instrumentation entry for workerd (#9395)
Co-authored-by: cyphercodes <7407177+cyphercodes@users.noreply.github.com>
2026-04-29 12:59:31 -07:00
Craig (Michael) ThompsonandGitHub 006e809b92 fix(sso): use findSAMLProvider in spMetadata so defaultSSO works (#9398) 2026-04-29 12:56:44 -07:00
c8ec03d26e docs: add MikroORM better-auth adapter to community adapters (#9379)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com>
2026-04-28 22:56:02 +00:00
TaesuandGitHub 8200d3c748 docs: adjust docs page header layout (#9376) 2026-04-28 14:08:02 +00:00
Gustavo ValverdeandGitHub 408a3076bd fix(oauth-provider): honor prompt=login across consent continuation (#9344) 2026-04-27 08:49:55 +00:00
TaesuandGitHub edc321a7f5 chore: add detailed changeset guides for contributing (#9362) 2026-04-27 00:32:30 +00:00
TaesuandGitHub 3e4fc8ca74 fix(stripe): pass post-update subscription to onSubscriptionDeleted and trial callbacks (#9356) 2026-04-26 10:26:56 +00:00
TaesuandGitHub a9d48c993d fix(stripe)!: remove optional marker from onSubscriptionCancel event (#9359) 2026-04-26 10:23:30 +00:00
TaesuandGitHub 012b4e6331 refactor(stripe): rename subscription webhook variables for clarity (#9355) 2026-04-26 09:56:30 +00:00
TaesuandGitHub 5d24a7478b fix(stripe): expose stripeSubscription in onSubscriptionUpdate and fix stale snapshot (#9354) 2026-04-26 09:41:11 +00:00
MaxwellandGitHub 88a7c678f4 fix: openAPI schema for POST /sign-in/social mis-declares required fields (#9268) 2026-04-25 07:18:10 +00:00
MaxwellandGitHub 1e0f26d4c8 fix(captcha): breaks email-otp flow (#8339) 2026-04-25 00:28:55 +00:00
b67783d364 docs(hooks): add example for handling multiple endpoints in a single hook (#8792)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-25 00:26:20 +00:00
89af592e93 docs: add revokeSessionsOnPasswordReset to password reset section (#8551)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-25 00:19:51 +00:00
c1336c563d fix(organization): scope setActiveTeam to active organization (#9239)
Signed-off-by: Gautam Manchandani <manchandanigautam@gmail.com>
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-24 23:48:16 +00:00
7fbe9282ba docs: update import path for drizzleAdapter (#9218)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-04-24 23:22:13 +00:00
skalkiiandGitHub ca57b001b9 docs(test): cross-reference #8897 on cookie-strategy OAuth state CSRF test (#9334) 2026-04-24 16:25:18 +09:00
TaesuandGitHub 75524d61b1 test(api-key): add regression test for listApiKeys with integer user.id (#9343) 2026-04-24 06:44:25 +00:00
TaesuandGitHub ae3374c6d5 docs: clean up DatabaseTable component (#9342) 2026-04-24 06:37:38 +00:00
better-release[bot]andGitHub f484269228 chore: release v1.6.9 (#9341) @better-auth/api-key@1.6.9 @better-auth/core@1.6.9 @better-auth/drizzle-adapter@1.6.9 @better-auth/electron@1.6.9 @better-auth/expo@1.6.9 @better-auth/i18n@1.6.9 @better-auth/kysely-adapter@1.6.9 @better-auth/memory-adapter@1.6.9 @better-auth/mongo-adapter@1.6.9 @better-auth/oauth-provider@1.6.9 @better-auth/passkey@1.6.9 @better-auth/prisma-adapter@1.6.9 @better-auth/redis-storage@1.6.9 @better-auth/scim@1.6.9 @better-auth/sso@1.6.9 @better-auth/stripe@1.6.9 @better-auth/telemetry@1.6.9 @better-auth/test-utils@1.6.9 auth@1.6.9 better-auth@1.6.9 v1.6.9 2026-04-24 06:25:08 +01:00
815ecf62b6 fix(core): resolve instrumentation via package self-reference in adapter factory (#9340)
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
2026-04-24 05:12:34 +00:00
fef7dd6df5 chore: update readme (#9330)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-04-23 19:50:25 +00:00
better-release[bot]andGitHub b289ac6c4b chore: release v1.6.8 (#9316) @better-auth/api-key@1.6.8 @better-auth/core@1.6.8 @better-auth/drizzle-adapter@1.6.8 @better-auth/expo@1.6.8 @better-auth/i18n@1.6.8 @better-auth/kysely-adapter@1.6.8 @better-auth/memory-adapter@1.6.8 @better-auth/mongo-adapter@1.6.8 @better-auth/oauth-provider@1.6.8 @better-auth/passkey@1.6.8 @better-auth/prisma-adapter@1.6.8 @better-auth/redis-storage@1.6.8 @better-auth/scim@1.6.8 @better-auth/stripe@1.6.8 auth@1.6.8 better-auth@1.6.8 v1.6.8 @better-auth/telemetry@1.6.8 @better-auth/sso@1.6.8 @better-auth/electron@1.6.8 @better-auth/test-utils@1.6.8 2026-04-23 11:31:03 +01:00
Gustavo ValverdeandGitHub 9aa8e63de8 fix(oauth): support mapProfileToUser fallback for providers that may omit email (#9331) 2026-04-23 10:15:36 +00:00
a02e07cb89 fix(passkey): resolve exactOptionalPropertyTypes incompatibility (#9270)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-04-23 09:48:05 +00:00
Gustavo ValverdeandGitHub 8e3cc3453c fix(oauth-provider): accept authorization flows without state (#9328) 2026-04-23 07:00:05 +00:00
TaesuandGitHub 4e8e4c7fc5 feat(client): add hydrateSession for SSR session hydration (#8733) 2026-04-22 21:09:45 +00:00
856ab2426c fix(organization): allow passing id through beforeCreateTeam and beforeCreateInvitation (#9253)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-22 16:56:50 +00:00
better-release[bot]andGitHub d3bde2d21f chore: release v1.7.0-beta.2 (#9207) @better-auth/cimd@1.7.0-beta.2 @better-auth/core@1.7.0-beta.2 @better-auth/drizzle-adapter@1.7.0-beta.2 @better-auth/electron@1.7.0-beta.2 @better-auth/expo@1.7.0-beta.2 @better-auth/i18n@1.7.0-beta.2 @better-auth/kysely-adapter@1.7.0-beta.2 @better-auth/memory-adapter@1.7.0-beta.2 @better-auth/mongo-adapter@1.7.0-beta.2 @better-auth/oauth-provider@1.7.0-beta.2 @better-auth/passkey@1.7.0-beta.2 @better-auth/prisma-adapter@1.7.0-beta.2 @better-auth/redis-storage@1.7.0-beta.2 @better-auth/scim@1.7.0-beta.2 @better-auth/sso@1.7.0-beta.2 @better-auth/stripe@1.7.0-beta.2 @better-auth/telemetry@1.7.0-beta.2 @better-auth/test-utils@1.7.0-beta.2 auth@1.7.0-beta.2 better-auth@1.7.0-beta.2 @better-auth/api-key@1.7.0-beta.2 v1.7.0-beta.2 2026-04-22 17:23:06 +01:00
Gustavo ValverdeandGitHub a3348dab01 chore(deps): pin patched versions in demo lockfiles (#9168) 2026-04-22 16:22:24 +00:00
TaesuandGitHub 14ef858971 docs: remove duplicated Dynamic Base URL link from sidebar (#9313) 2026-04-23 00:36:23 +09:00
Gustavo ValverdeandGitHub 402ca23ad9 chore: sync main to next
chore: sync main to next
2026-04-22 16:28:45 +01:00
Gustavo Valverde 888b1fc90e test(generic-oauth): align GET-callback-without-state test with rewritten plugin contract
Caught during the main-to-next sync in #9312. The test was imported from main
in #9293, which targeted the legacy /oauth2/callback/:providerId endpoint that
the generic-oauth rewrite (#9069) removed on next; callbacks now flow through
the core /callback/:id route. That route preserves the security contract (GET
without state redirects to the error page, never crashes) via an early state
guard that emits `state_not_found` instead of `please_restart_the_process`.
2026-04-22 16:19:42 +01:00
Gustavo Valverde 827aeede1b chore: sync dependabot bumps from main
Catches the electron (38.8.6 -> 41.2.2) and @hono/node-server (1.19.11 -> 1.19.14) dep bumps that landed on main after the previous sync commit. Auto-merged without conflicts.
2026-04-22 15:52:52 +01:00
Gustavo Valverde eb3cd10d50 chore: resolve main-to-next sync conflicts
- keep next package versions at 1.7.0-beta.1
- keep both changelog streams by inserting the stable 1.6.5, 1.6.6, and 1.6.7 sections below the 1.7.0-beta entries
- keep the cimd and dash deps on demo/nextjs (next-only); regenerate pnpm-lock.yaml
- resolve TODO(sync-from-main-9226) in oauth-provider authorize.ts: findRegisteredRedirectUri now uses isLoopbackIP from @better-auth/core/utils/host to cover the full 127.0.0.0/8 range per RFC 8252 §7.3
- drop the unused saml import that main's #9262 added to sso/src/routes/sso.ts; next already migrated to saml-pipeline
2026-04-22 14:54:27 +01:00
TaesuandGitHub b828c54698 chore(deps-dev): bump electron from 38.8.6 to 41.2.2 (#9310) 2026-04-22 12:19:47 +00:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>TaesuTaesu
88d4a0507e chore(deps): bump @hono/node-server from 1.19.11 to 1.19.14 (#9306)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
2026-04-22 12:00:49 +00:00
TaesuandGitHub 7fc966942c docs: fix arrow indicator persisting on inactive legal nav item (#9307) 2026-04-22 11:42:42 +00:00
better-release[bot]andGitHub f8076d141a chore: release v1.6.7 (#9289) @better-auth/api-key@1.6.7 @better-auth/core@1.6.7 @better-auth/drizzle-adapter@1.6.7 @better-auth/expo@1.6.7 @better-auth/i18n@1.6.7 @better-auth/kysely-adapter@1.6.7 @better-auth/memory-adapter@1.6.7 @better-auth/mongo-adapter@1.6.7 @better-auth/oauth-provider@1.6.7 @better-auth/passkey@1.6.7 @better-auth/prisma-adapter@1.6.7 @better-auth/redis-storage@1.6.7 @better-auth/scim@1.6.7 @better-auth/stripe@1.6.7 @better-auth/telemetry@1.6.7 auth@1.6.7 better-auth@1.6.7 v1.6.7 @better-auth/sso@1.6.7 @better-auth/electron@1.6.7 @better-auth/test-utils@1.6.7 2026-04-22 12:36:30 +01:00
Gustavo ValverdeandGitHub 19a3dfa63a chore(deps): add pnpm overrides for vulnerable transitive dependencies (#9167) 2026-04-22 11:06:37 +00:00
TaesuandGitHub 3d39e63cd2 test: remove dead stripe option from fixture (#9303) 2026-04-22 10:30:50 +00:00