Commit Graph

6705 Commits

Author SHA1 Message Date
Taesu
db26161113 fix: compare account cookie by provider accountId instead of internal id (#8786) 2026-03-30 05:25:05 +00:00
Maxwell
6f30fd65a4 fix(email-otp): trigger sessionSignal on req-email-change (#8816) 2026-03-30 05:17:26 +00:00
David Frankel
e9f49bd7c8 chore: fix type inference for future TS compatibility (#8820) 2026-03-30 05:00:05 +00:00
Taesu
03d2df6603 fix(stripe): return correct priceId for annual subscriptions in list (#8810)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-03-29 06:10:40 +10:00
Gustavo Valverde
8afe2a7cea fix(oauth-provider): return JSON redirects from post-login OAuth continuation (#8815) 2026-03-28 19:05:29 +00:00
Dipan Chakraborty
c25eb2f39b docs: fix incorrect cookie method names in hooks documentation (#8813) 2026-03-28 15:28:46 +00:00
Gustavo Valverde
5dc004a177 fix(oauth-provider): let customIdTokenClaims override acr and auth_time (#8633) 2026-03-28 09:36:47 +00:00
Alex Yang
221103bce7 fix(oauth-provider): handle dynamic baseURL config in init (#8649)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-03-27 20:33:35 +00:00
Maxwell
00246a473c docs(fastify): use better-auth utils for header conversions (#8804) 2026-03-27 17:53:04 +00:00
Taesu
5b7a5811e1 fix(kysely-adapter): remove deprecated numUpdatedOrDeletedRows from D1 dialect (#8798)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-03-27 16:35:00 +00:00
Maxwell
5e655cf81b docs: fix enterprise contact form (#8800) 2026-03-27 09:32:06 +00:00
Maxwell
9ced335922 docs: ai tooling page (#8795) 2026-03-27 08:29:50 +00:00
Taesu
efae37dc61 docs(agent-auth): remove duplicate warning callout (#8797) 2026-03-27 03:38:30 +00:00
Taesu
3d5dfd2089 ci: pin action SHAs and bump sticky-pull-request-comment to v3 (#8793) 2026-03-26 23:12:24 +00:00
Taesu
9234711532 ci: add semantic pull request title validation (#8791) 2026-03-27 06:40:29 +09:00
Taesu
afcdd91817 Revert "chore: expand CODEOWNERS with domain-based team ownership"
This reverts commit 4a055a18b2.
2026-03-27 05:49:53 +09:00
Taesu
183be977f0 Revert "fix(oauth-provider): only require storeSessionInDatabase when secondaryStorage is configured"
This reverts commit cd835f6a58.
2026-03-27 05:49:35 +09:00
Gustavo Valverde
4a055a18b2 chore: expand CODEOWNERS with domain-based team ownership
Replace the single global rule with granular path-based ownership using
GitHub teams nested under the `better-auth` parent team. Six domain
teams (core-infra, data, identity, plugins, platform, docs) map to the
4-layer architecture, so adding or removing contributors only requires
updating team membership rather than editing this file.
2026-03-26 20:08:17 +00:00
Gustavo Valverde
cd835f6a58 fix(oauth-provider): only require storeSessionInDatabase when secondaryStorage is configured
The init guard checked for `session` options broadly, which caused a
false error when users set any session config (e.g., `expiresIn`) without
secondaryStorage. Without secondaryStorage, sessions always persist to
the database, making the constraint irrelevant.
2026-03-26 16:13:55 +00:00
Taesu
76ff49a934 chore: disable enableGlobalVirtualStore (#8787) 2026-03-26 14:53:38 +00:00
Alex Yang
4be065c505 fix(magic-link): return additional fields in /magic-link/verify (#7223)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-03-26 18:33:06 +10:00
Taesu
14347d2627 chore: centralize to use catalog and bump @better-auth/utils, better-call (#8684) 2026-03-26 04:09:49 +00:00
Taesu
163d76fb4a chore(demo): remove 'type': 'module' from nextjs demo (#8776) 2026-03-25 21:06:19 +00:00
Taesu
a0b435e17a chore: update CLAUDE.md branch references from canary to main (#8773) 2026-03-25 15:56:01 +00:00
Taesu
b2bbeb9568 docs(landing): improve main routes style (#8749)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-03-25 15:41:55 +00:00
Maxwell
ffaeb9f29c docs: apple social login requires JWT client-secret (#8771) 2026-03-25 21:46:22 +10:00
Maxwell
f785113c5e chore: add warning on agent auth docs (#8766)
Co-authored-by: Bereket Engida <Bekacru@gmail.com>
2026-03-25 05:13:53 +00:00
Gustavo Valverde
2d56c6af68 fix(oauth-provider): normalize auth_time timestamps (#8761) 2026-03-24 15:22:35 -07:00
Terry Henrard
e0c8d853bf docs: update Upstash Redis TTL example to use redis.set (#8764) 2026-03-24 21:52:02 +00:00
Maxwell
ed269e93a6 fix(test-utils): remove using keyword (#8756) 2026-03-24 14:36:55 +00:00
Taesu
573d32d763 test: use fake timers in JWT max age expiry test case to prevent flaky failure (#8755) 2026-03-24 13:37:19 +00:00
Maxwell
a399653e88 fix(username): dont set other username prop in updateUser (#7570)
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
2026-03-24 13:34:15 +00:00
armful
4bc1d1634b fix(username): enforce username uniqueness in updateUser (#8731)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-03-24 08:05:41 +00:00
armful
888f7440ac docs: include query in authClient accountInfo api (#8745) 2026-03-23 17:30:57 -07:00
Taesu
d0b62a0cd8 feat(cli): migrate MCP server URL to mcp.better-auth.com (#8747)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-03-23 17:30:04 -07:00
Harry Yep
24a6a20d2f fix(passkey): use message (#8751) 2026-03-23 17:29:39 -07:00
Dave
33de2e2a3a docs: fix formatting in Polar integration content (#8748) 2026-03-23 21:05:54 +00:00
Jonathan Samines
a1b0fdcd70 feat(db): add case insensitive queries support (#8556) 2026-03-23 13:09:29 -07:00
Bereket Engida
841410031a chore: release v1.5.7-beta.1 v1.5.7-beta.1 2026-03-22 21:09:52 -07:00
Bereket Engida
c527d4e4cc chore: release v1.5.1-beta.4 v1.5.1-beta.4 2026-03-22 21:04:04 -07:00
armful
df9abae0bc feat(haveibeenpwned): add enable option (#8728)
Co-authored-by: Taesu <bytaesu@gmail.com>
2026-03-22 22:30:56 +00:00
Taesu
b647ef3488 fix(sso): skip state cookie check for SAML ACS cross-site POST (#8735) 2026-03-22 14:27:55 -07:00
Bereket Engida
3901a921ed chore: update privacy policy 2026-03-21 12:09:52 -07:00
Alex Yang
c2cbb9d566 fix(one-tap): opt into FedCM to suppress Google GSI deprecation warnings (#8720) 2026-03-21 00:48:38 +00:00
Alex Yang
c8617fd445 fix: set stateless cookieCache maxAge to match session expiresIn (#8648) 2026-03-20 23:18:09 +00:00
dependabot[bot]
5c7bc4b434 chore(deps): bump fast-xml-parser from 5.5.6 to 5.5.7 (#8698)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-20 22:26:50 +00:00
Gustavo Valverde
8b5481758f ci: add dist declaration typecheck to CI (#8702) 2026-03-20 22:26:38 +00:00
Ollie
8682b7aebc fix(adapters): use IS NULL / IS NOT NULL for null value comparisons (#8660) 2026-03-20 22:24:38 +00:00
Taesu
faffbd6206 feat(oauth-proxy): add dedicated secret option to reduce shared key exposure surface (#8699) 2026-03-20 22:18:42 +00:00
Andreas Osberghaus
d198a82736 fix(last-login-method): normalize missing resolver path (#8589) 2026-03-20 22:18:24 +00:00