Taesu
dd6528f45b
docs(guides): move dynamic base url from concepts to guides and options ( #9145 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-14 11:36:59 +00:00
better-release[bot]
6f17bb3ebd
chore: release v1.6.3 ( #9081 )
@better-auth/core@1.6.3
@better-auth/drizzle-adapter@1.6.3
@better-auth/electron@1.6.3
@better-auth/expo@1.6.3
@better-auth/i18n@1.6.3
@better-auth/kysely-adapter@1.6.3
@better-auth/memory-adapter@1.6.3
@better-auth/mongo-adapter@1.6.3
@better-auth/oauth-provider@1.6.3
@better-auth/passkey@1.6.3
@better-auth/prisma-adapter@1.6.3
@better-auth/redis-storage@1.6.3
@better-auth/scim@1.6.3
@better-auth/sso@1.6.3
@better-auth/stripe@1.6.3
@better-auth/telemetry@1.6.3
@better-auth/test-utils@1.6.3
auth@1.6.3
better-auth@1.6.3
@better-auth/api-key@1.6.3
v1.6.3
2026-04-14 12:04:31 +01:00
Maxwell
9a6d4759cd
fix(client): prevent isMounted race condition causing many rps ( #9078 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-04-14 09:36:59 +00:00
Gustavo Valverde
390a03190c
fix(stripe): prevent prototype pollution via user-supplied metadata ( #9164 )
2026-04-14 08:05:31 +00:00
Gustavo Valverde
5142e9cec5
fix(auth): harden dynamic baseURL resolution ( #9131 )
2026-04-14 08:01:13 +00:00
Gustavo Valverde
92256a2d0d
chore: minor review followups on recent main commits ( #9163 )
2026-04-14 07:22:10 +00:00
Taesu
513dabb132
fix: resolve dynamic baseURL for direct auth.api calls ( #9113 )
2026-04-14 06:16:53 +00:00
Jaden Stanton
2514c3d970
docs: correct wording for invocable endpoints in integration guides ( #9160 )
2026-04-14 05:59:29 +00:00
Sean Filimon
a1f619969d
docs: update Convex Labs link in documentation ( #9161 )
2026-04-14 05:55:27 +00:00
Taesu
8dcb98873e
docs: update not-found page ( #9158 )
2026-04-13 19:54:32 +00:00
Taesu
6c946a3e0c
docs(sso): extract inline fields to named exports ( #9144 )
2026-04-13 03:01:29 +00:00
Taesu
daf7ab7aaa
docs: fix fk references in schema tables to match actual plugin schemas ( #9143 )
2026-04-13 02:37:17 +00:00
Taesu
a6f31972ca
docs(landing): polish sentinel section ( #9142 )
2026-04-13 01:19:15 +00:00
dependabot[bot]
ed2c18df31
chore(deps): bump next from 16.2.2 to 16.2.3 in /docs ( #9112 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-04-12 08:47:53 +00:00
Taesu
a6e9b94318
docs: improve enterprise contact form ( #9128 )
2026-04-12 08:30:35 +00:00
dependabot[bot]
504ea253ac
chore(deps-dev): bump @sveltejs/kit from 2.53.3 to 2.57.1 ( #9109 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-12 08:24:12 +00:00
Gustavo Valverde
e2e25a4954
fix(oauth-provider): graceful DCR override for unauthenticated confidential clients ( #9123 )
2026-04-11 15:25:06 +00:00
Byte-Biscuit
f8758975ae
fix(two-factor): updated backup codes respect storeBackupCodes option ( #7231 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-04-11 13:19:46 +00:00
Gustavo Valverde
484ce6a262
fix(two-factor): enforce 2FA on all sign-in paths ( #9122 )
2026-04-11 12:33:58 +00:00
Gustavo Valverde
314e06f0fd
feat(oauth-provider): add customTokenResponseFields and harden authorization code validation ( #9118 )
2026-04-11 09:54:48 +00:00
Gustavo Valverde
9fd0192d0e
fix(ci): fix grep -c fallback producing invalid integer in release validation
...
grep -coP outputs "0" to stdout on no matches but exits 1, causing
the || echo 0 fallback to append a second "0". The resulting "0\n0"
value fails the -lt integer comparison. Use || true instead since
grep -c already outputs the correct count.
2026-04-11 07:53:07 +01:00
Taesu
f32099449e
chore: fix typecheck command in CLAUDE.md ( #9110 )
2026-04-10 19:43:07 +00:00
Taesu
4673c6d83c
fix(cli): handle extends and mid-path wildcards in tsconfig paths ( #9032 )
2026-04-10 16:26:53 +00:00
Gustavo Valverde
52c47517a2
fix(sso): unify SAML response processing and fix bugs ( #9097 )
2026-04-10 15:00:26 +00:00
Gustavo Valverde
7fb4a55b65
fix(ci): rename release PR with actual version ( #9066 )
2026-04-10 14:58:56 +00:00
Taesu
c5066fe5d6
fix(stripe): omit quantity for metered prices in checkout and upgrades ( #8926 )
...
Co-authored-by: better-release[bot] <273320539+better-release[bot]@users.noreply.github.com>
2026-04-10 12:55:44 +00:00
SAI YASWANTH
684154d3d1
chore: replace z.union with z.xor for permission schemas in admin plugin ( #8982 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-04-10 12:47:23 +00:00
Taesu
5f84335815
feat(stripe): support Stripe SDK v21 and v22 ( #9084 )
...
Co-authored-by: leonardo2204 <1509421+leonardo2204@users.noreply.github.com >
Co-authored-by: better-release[bot] <273320539+better-release[bot]@users.noreply.github.com>
2026-04-10 06:19:34 +00:00
Tony
d141a3b190
docs: fix PostgreSQL Prisma native type typo ( #9090 )
2026-04-10 05:21:45 +00:00
Taesu
099ee48c41
chore(docs): format markdown including mdx files ( #9085 )
2026-04-10 05:09:33 +00:00
Oluwatobi Mustapha
f6428d02fc
fix(open-api): correct get-session nullable schema for OAS 3.1 ( #8389 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com >
2026-04-09 20:44:35 +00:00
Ray
6ce30cf138
fix: incorrect operationId in password reset callback endpoint ( #9072 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-09 20:13:06 +00:00
Ahmed Said
41679fa817
docs: add database table names ( #9062 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-09 19:17:40 +00:00
Gustavo Valverde
a2fbe079f8
refactor(ci): simplify release notes to one-line entries ( #9067 )
2026-04-09 18:24:25 +00:00
Gustavo Valverde
83ed1fe360
fix(ci): prevent label explosion on PRs targeting the next branch ( #9071 )
2026-04-09 18:15:14 +00:00
better-release[bot]
700d298e1e
chore: version packages ( #9052 )
@better-auth/api-key@1.6.2
@better-auth/core@1.6.2
@better-auth/drizzle-adapter@1.6.2
@better-auth/electron@1.6.2
@better-auth/expo@1.6.2
@better-auth/i18n@1.6.2
@better-auth/kysely-adapter@1.6.2
@better-auth/memory-adapter@1.6.2
@better-auth/mongo-adapter@1.6.2
@better-auth/oauth-provider@1.6.2
@better-auth/passkey@1.6.2
@better-auth/prisma-adapter@1.6.2
@better-auth/redis-storage@1.6.2
@better-auth/scim@1.6.2
@better-auth/sso@1.6.2
@better-auth/stripe@1.6.2
@better-auth/telemetry@1.6.2
@better-auth/test-utils@1.6.2
auth@1.6.2
better-auth@1.6.2
v1.6.2
2026-04-09 15:19:07 +01:00
Gustavo Valverde
ef7cd5ba79
ci: restructure release notes to group by npm package ( #9011 )
2026-04-09 15:15:58 +01:00
Dipan Chakraborty
7ac092ec52
docs: fix missing secret param in getSignedCookie example ( #8827 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-09 13:57:45 +00:00
Doug Webb
809da03968
docs: add paragraph specifying need for cookie passage for server methods ( #6546 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-09 13:26:13 +00:00
Idris Gadi
31fd092896
docs: clarify that the redirectURI must include providerId parameter in generic oauth ( #6021 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-09 13:23:33 +00:00
Gautam Manchandani
cf25761bc1
docs: clarify credential account requirement for phone number plugin ( #6401 )
...
Signed-off-by: GautamBytes <manchandanigautam@gmail.com >
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-09 13:19:50 +00:00
Ejiro Asiuwhu
b834782e2b
docs: add 'better-auth-audit-logs' plugin to community table ( #9051 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-09 13:14:25 +00:00
Gustavo Valverde
4c829bf289
fix(oauth-provider): preserve multi-valued query params through prompt redirects ( #9060 )
2026-04-09 13:13:39 +00:00
Gustavo Valverde
b20fa424c3
fix(next-js): replace cookie probe with header-based RSC detection in nextCookies ( #9059 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-09 12:41:10 +00:00
Gustavo Valverde
608d8c3082
fix(sso): include RelayState in signed SAML AuthnRequests ( #9058 )
2026-04-09 12:05:02 +00:00
Dylan Vanmali
c6922dce8e
refactor(oauth-provider): reject skip_consent at schema level in DCR ( #8998 )
2026-04-09 11:56:29 +00:00
Rayan Salhab
5e5d3f62fc
fix(sso): normalize SAMLResponse whitespace at request boundary ( #8968 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-04-09 11:04:10 +00:00
Jaydeep pipaliya
2cbcb9baac
fix(oauth2): prevent cross-provider account collision in link-social callback ( #8983 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-04-09 10:17:42 +00:00
Maxwell
9deb7936ab
fix: cookie store strategy should verify oauth state ( #8949 )
...
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-04-09 09:26:36 +00:00
armful
84098432ad
feat(two-factor): include enabled 2fa methods in sign-in redirect response ( #8772 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-04-09 09:25:49 +00:00