better-release[bot]
700d298e1e
chore: version packages ( #9052 )
2026-04-09 15:19:07 +01:00
Gustavo Valverde
4c829bf289
fix(oauth-provider): preserve multi-valued query params through prompt redirects ( #9060 )
2026-04-09 13:13:39 +00:00
Gustavo Valverde
b20fa424c3
fix(next-js): replace cookie probe with header-based RSC detection in nextCookies ( #9059 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-09 12:41:10 +00:00
Gustavo Valverde
608d8c3082
fix(sso): include RelayState in signed SAML AuthnRequests ( #9058 )
2026-04-09 12:05:02 +00:00
Dylan Vanmali
c6922dce8e
refactor(oauth-provider): reject skip_consent at schema level in DCR ( #8998 )
2026-04-09 11:56:29 +00:00
Rayan Salhab
5e5d3f62fc
fix(sso): normalize SAMLResponse whitespace at request boundary ( #8968 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-04-09 11:04:10 +00:00
Jaydeep pipaliya
2cbcb9baac
fix(oauth2): prevent cross-provider account collision in link-social callback ( #8983 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-04-09 10:17:42 +00:00
Maxwell
9deb7936ab
fix: cookie store strategy should verify oauth state ( #8949 )
...
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-04-09 09:26:36 +00:00
armful
84098432ad
feat(two-factor): include enabled 2fa methods in sign-in redirect response ( #8772 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-04-09 09:25:49 +00:00
armful
e78a7b120d
fix(two-factor): prevent unverified TOTP enrollment from gating sign-in ( #8711 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-04-09 08:48:10 +00:00
better-release[bot]
85bb710edc
chore: version packages ( #9018 )
...
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-04-08 19:22:59 +00:00
Taesu
7495830659
fix(api): restore getSession accessibility in generic Auth<O> context ( #9017 )
2026-04-08 17:34:12 +00:00
Jonathan Samines
2e537df5f7
fix: endpoint instrumentation to always use route template ( #9023 )
2026-04-08 08:41:31 +10:00
Maxwell
f61ad1cab7
fix: use INVALID_PASSWORD for all checkPassword failures ( #8902 )
2026-04-07 18:17:10 +00:00
Gustavo Valverde
8737dbf3f6
chore: remove pending pr-8927 changeset ( #8993 )
2026-04-06 16:03:44 +00:00
Gustavo Valverde
d9b16d2551
chore: sync main to next
...
chore: sync main to next
2026-04-06 16:47:42 +01:00
Gustavo Valverde
535655bc0d
chore: fix release-blocking Changesets null versions on next ( #8992 )
2026-04-06 15:31:00 +00:00
Taesu
141781d6fc
fix: generate session id when using secondary storage without database ( #8927 )
2026-04-06 14:43:47 +00:00
better-release[bot]
d666a03372
chore: exit pre-release mode for v1.6.0
2026-04-06 14:41:56 +00:00
Gustavo Valverde
29d197e688
chore: sync main to next ( #8976 )
...
chore: sync main to next
2026-04-06 15:31:29 +01:00
Gustavo Valverde
e5091ee1e6
fix(oauth-provider): scope loss on PAR, loopback redirect matching, DCR skip_consent ( #8632 )
2026-04-06 14:14:39 +00:00
Gustavo Valverde
bd9bd58f87
fix(security): enforce authorization on SCIM management endpoints and normalize passkey ownership ( #8843 )
2026-04-06 13:47:24 +00:00
Gustavo Valverde
ee8b40d502
fix(deps): patch Dependabot security issues ( #8838 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-04-06 13:16:45 +00:00
Taesu
560230f751
fix(types): prevent any from collapsing base type and client inference ( #8981 )
2026-04-06 12:18:58 +00:00
Gustavo Valverde
dd537cbdeb
chore(oidc-provider): deprecate plugin in favor of @better-auth/oauth-provider ( #8985 )
2026-04-06 12:13:35 +00:00
Taesu
469eee6d84
fix(oauth): prevent double-hashing of state when storeIdentifier is hashed ( #8980 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-04-06 11:14:55 +00:00
better-auth-releases[bot]
73beda26f9
chore: version packages (beta) ( #8945 )
...
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-04-04 15:52:24 +00:00
Gustavo Valverde
9b4ccb1f11
fix: restore original changeset bump types now that peer dep patch is in place
2026-04-04 15:52:24 +00:00
Gustavo Valverde
64c2978516
fix: prevent major version escalation in changeset peer dep resolution
2026-04-04 15:52:24 +00:00
Gustavo Valverde
5dd9e44c04
chore: enter beta pre-release mode with changesets for 1.6.0
2026-04-04 15:52:24 +00:00
Gustavo Valverde
dea55f0385
chore: add all packages to changesets fixed group ( #8944 )
2026-04-03 23:35:04 +00:00
Gustavo Valverde
0afc6a1e78
ci: replace bumpp with changesets release automation ( #8903 )
2026-04-03 21:43:23 +00:00
Bereket Engida
95c7ee3e44
chore: remove changeset
2025-08-11 14:45:50 -07:00
dogus
422aa488b7
feat(stripe): create billing portal session ( #3625 )
...
* feat(stripe) : add billing portal session endpoint
* create billing portal session
* update docs
* chore: changeset
* chore: fix stripe
* chore: remove comment
* chore: update docs
---------
Co-authored-by: Bereket Engida <Bekacru@gmail.com >
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
2025-08-06 16:38:50 -07:00
KinfeMichael Tariku
0eef0abc3b
fix(org): use correct slug lookup when setting active org
2025-08-06 16:38:40 -07:00
Bereket Engida
ee63084a2e
chore: remove changeset ci
2025-08-04 10:51:59 -07:00
Bereket Engida
b71e8a7ec0
Merge branch 'main' into canary
2025-08-04 10:43:02 -07:00
Alex Yang
d313d0093e
fix: await ctx in middleware ( #3783 )
...
* fix: await ctx in middleware
* fix: lint
* Create tidy-impalas-fail.md
2025-08-04 10:27:55 -07:00
Bereket Engida
af239b7879
chore: remove changeset and add contributing code of conduct
2025-08-02 13:01:02 -07:00
Alex Yang
5124b40283
chore: upgrade TypeScript version ( #3748 )
...
* chore: fix TypeScript to a correct version
* fixup! chore: fix TypeScript to a correct version
* chore: fix typecheck
---------
Co-authored-by: Bereket Engida <Bekacru@gmail.com >
2025-08-02 10:18:55 -07:00
Jumpei Ogawa
2d8d05330d
fix(cli): --yes option does not work on @better-auth/cli generate ( #3749 )
...
* fix: do not prompt before overwriting schema on `@better-auth/cli generate --yes ...`
* chore: changeset
---------
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
2025-08-02 08:58:44 -07:00
Andrew Patton
91cae8aa1e
docs: fix wrong cancelUrl and returnUrl descriptions ( #3647 )
...
* docs: fix wrong cancelUrl and returnUrl descriptions
* chore: changeset
* chore: update changeset
---------
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
2025-08-01 09:43:48 -07:00
Marti
e5f3f31311
feat(passkey): allow custom passkey name during registration ( #3587 )
...
* feat(passkey): allow custom passkey name during registration
* lint
* docs: specify name prop in passkey docs
* chore: add changeset
* chore: changeset
* chore: update changeset
* remove changest
---------
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
2025-08-01 09:43:35 -07:00
Timur
7fa90f8d4d
fix(organization): updated types for the user argument in allowUserToCreateOrganization to support custom fields ( #3600 )
...
* fix: organization allowUserToCreateOrganization user argument typing
* chore: changeset
---------
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
2025-08-01 08:45:14 -07:00
KinfeMichael Tariku
c726753e69
feat: support multiple aud for apple oauth ( #3710 )
...
* support multiple aud
* update
* update
* changeset
2025-08-01 08:10:57 -07:00
Earl Oliver
4833a4b395
fix: incorrect initialization of remaining value within API key ( #3648 )
...
* Fixes #3640 - Resolves issue related to incorrect initialization of remaining value within API key.
* Adding test cases for fix of #3640 .
* chore: update changeset
---------
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
2025-08-01 00:22:15 -07:00
Bereket Engida
4d85d8709d
revert "fix(username): isUsernameAvailable should validate usernames ( #3680 )" ( #3730 )
...
This reverts commit e60f780f28 .
2025-07-31 23:53:32 -07:00
Maxwell
e60f780f28
fix(username): isUsernameAvailable should validate usernames ( #3680 )
2025-07-31 23:50:22 -07:00
Shawn Erquhart
142136076a
fix: cast dates from session to Date when using date methods ( #3704 )
...
* fix: cast dates from session to Date when using date methods
* add changeset
2025-07-31 23:15:19 -07:00
Grant G
60c92fab0b
fix(jwt): expose jwt options to plugins ( #3726 )
2025-07-31 22:27:26 -07:00