Commit Graph

6584 Commits

Author SHA1 Message Date
Bereket Engida
794f14688b Fix: Handle escaped $user in Supabase PostgreSQL search_path (#8051) 2026-02-18 11:16:50 -08:00
Taesu
2468a2d918 fix(expo): support wildcard trusted origins in deep link cookie injection (#8013) 2026-02-18 12:06:15 +00:00
dependabot[bot]
67b53e61b6 chore(deps): bump fast-xml-parser from 5.3.3 to 5.3.6 (#8034)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-18 11:14:15 +00:00
Alex Yang
425ec38f84 fix(sso): import cjs dep (#8041) 2026-02-18 10:44:43 +00:00
Joél Solano
62ed645354 fix(admin): optional chain user in hooks (#8026) 2026-02-18 10:06:20 +00:00
Rosano
b633d0745d docs: fix account linking example (#8035) 2026-02-18 01:41:19 -08:00
Bereket Engida
e5683a7a64 chore: bump all packages to v1.5.0-beta.16 (#8037)
Co-authored-by: Ghost <ghost@better-github.app>
v1.5.0-beta.16
2026-02-18 00:49:17 -08:00
Taesu
9f79147bdb fix(oauth-provider): return "invalid_client" on encrypted secret verification failure (#8030) 2026-02-18 00:21:05 -08:00
Mauricio Siu
07d216dc29 feat: support accepting callback for trusted providers function (#7904)
Co-authored-by: Paola Estefanía de Campos <84341268+Paola3stefania@users.noreply.github.com>
2026-02-17 23:24:59 -08:00
Taesu
76d9ba140c fix(stripe): use correct stripeCustomerId on /subscription/cancel/callback endpoint (#8032) 2026-02-18 02:47:41 +00:00
Raphaël Balet
b6744552f3 docs(admin.mdx): export const ac (#8000) 2026-02-17 16:08:50 -08:00
Joél Solano
b7de9e7b2d chore(electron): fix race condition (#8025) 2026-02-17 15:54:29 -08:00
Dylan Vanmali
30d17fc989 fix(oauth-provider): add missing oauthClient createdAt/updatedAt values (#7851) 2026-02-17 15:39:02 -08:00
Taesu
0dbff0ee56 test(oauth-provider): update remaining consent response assertions from uri to url (#8029) 2026-02-17 22:40:03 +00:00
Taesu
88e1e995b1 fix(oauth-provider): return url instead of uri in continue and consent endpoints (#7811) 2026-02-17 09:23:51 -08:00
Joél Solano
d241f4ccac fix(phone-number): reset password should create credential account (#6862)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2026-02-16 23:10:12 -08:00
Joél Solano
7306c5af05 feat(electron): allow manual token exchange & add sanitizeUser option (#7976) 2026-02-16 23:10:02 -08:00
Joél Solano
1e18da7620 feat(electron): fetch user image securely regardless of csp (#7844) 2026-02-16 16:57:02 -08:00
Joél Solano
cec49694e9 fix(db): infer default value for required attr properly (#7996) 2026-02-16 16:56:50 -08:00
Paola Estefanía de Campos
bcf76b8b74 fix: add error handling for id token verification in Apple and Google providers (#8011) 2026-02-16 16:29:54 -08:00
starslingdev[bot]
0d24f3f8b5 chore(ci): add Docker Compose healthchecks for faster CI service readiness (#8010)
Co-authored-by: starslingdev[bot] <248995740+starslingdev[bot]@users.noreply.github.com>
2026-02-16 15:57:12 -08:00
Bereket Engida
fae56a1b5c chore: release v1.5.0-beta.15 v1.5.0-beta.15 2026-02-16 15:23:33 -08:00
Joél Solano
99efdafb36 fix(cookie): relax cookie retrieval for getSessionCookie (#8008) 2026-02-16 15:14:16 -08:00
Paola Estefanía de Campos
a2f6fbce5a fix: encode callbackURL in delete-user verification email (#8007) 2026-02-16 14:26:07 -08:00
Paola Estefanía de Campos
d9b7f7ec42 fix(rate-limit): harden default rules and fix phone-number window (#8006) 2026-02-16 14:25:19 -08:00
Bereket Engida
5466cf758a chore: release workflow should run on github (#8004) 2026-02-16 13:59:41 -08:00
Bereket Engida
a8686cf552 chore: release v1.5.0-beta.14 v1.5.0-beta.14 2026-02-16 13:40:28 -08:00
Carlos Eduardo Medim
cc65d9085e feat(providers): add Railway OAuth provider (#7730) 2026-02-16 12:49:02 -08:00
Paola Estefanía de Campos
a2e1d5fef8 feat(sso): add shared redirectURI option for OIDC providers (#7818) 2026-02-16 12:43:37 -08:00
Jonathan Samines
7f29f4b668 chore(sso): add missing option types to sso plugin types (#8002) 2026-02-16 12:35:35 -08:00
Oscar Cornish
1e30369b2c feat(oauth): add support for legacy OAuth clients that don't use PKCE (#7609)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Paola Estefanía de Campos <84341268+Paola3stefania@users.noreply.github.com>
2026-02-16 12:35:18 -08:00
Alex Yang
6c52e5f6a9 fix(captcha): include error codes in middleware responses (#7991) 2026-02-16 10:04:03 +00:00
Taesu
7c52f359b1 fix(organization): refetch activeMember and activeMemberRole when active organization changes (#7989) 2026-02-16 06:21:53 +00:00
Gautam Manchandani
dce7bf1c00 fix(core): exclude tsconfig.json from published package (#7967)
Co-authored-by: Gautam Manchandani <gautammanch@Gautams-MacBook-Air.local>
2026-02-16 05:59:57 +00:00
Taesu
b857d03426 fix(client): infer additional fields for top-level user and session responses (#7986) 2026-02-16 04:45:46 +00:00
Taesu
b7400754fc docs: use Fumadocs default search engine powered by Orama (#7984) 2026-02-15 13:09:40 -08:00
Jan Hesters
7da833258f docs: add test-utils plugin to sidebar navigation (#7958) 2026-02-15 11:06:35 +00:00
Maxwell
e33d07383b docs: document Safari ITP blocks third-party cookies (#7980) 2026-02-15 10:10:07 +00:00
Alex Yang
62d51d00c7 test: check client output (#7979) 2026-02-15 09:29:23 +00:00
Maxwell
ad111866cd fix(mongo-adapter): updating a FK id should store as ObjectID (#7977) 2026-02-15 01:05:35 -08:00
Joél Solano
cf8322707c feat: auth cli (#7964) 2026-02-15 07:44:50 +00:00
Taesu
74e06e426c fix(stripe): fall back to customers.list when customers.search API is unavailable (#7965) 2026-02-15 07:44:16 +00:00
Joshua Nussbaum
b313e4f5ba docs: updated incorrect import (#7978) 2026-02-14 22:28:14 -08:00
Bereket Engida
5685ecd175 Revert "chore: should keep singleton of ctx (#7654)"
This reverts commit d1b26b1a14.
2026-02-14 21:57:10 -08:00
Joél Solano
639b20fce5 chore(i18n): re-export types (#7974) 2026-02-14 21:38:34 -08:00
Bereket Engida
6846aec6ed Revert "Revert "fix(custom-session): use getSetCookie() to preserve individual Set-Cookie headers (#7879)""
This reverts commit ae30da5de3.
2026-02-14 20:58:46 -08:00
Bereket Engida
ae30da5de3 Revert "fix(custom-session): use getSetCookie() to preserve individual Set-Cookie headers (#7879)"
This reverts commit 64bb8b4d28.
2026-02-14 20:40:47 -08:00
Alex Yang
d1b26b1a14 chore: should keep singleton of ctx (#7654) 2026-02-14 20:40:42 -08:00
Gustavo Valverde
5b2604b0bd fix(oauth-provider): support scope narrowing at consent submission (#7873) 2026-02-14 20:25:01 -08:00
Thomas Peklak
64bb8b4d28 fix(custom-session): use getSetCookie() to preserve individual Set-Cookie headers (#7879) 2026-02-14 20:19:44 -08:00