Right now, if an invalid trusted origin is passed, it becomes very hard to debug and find the cause of a given endpoint failing.
As far as I've seen, there error can be as undescriptive as:
dev: # SERVER_ERROR: TypeError: Cannot read properties of undefined (reading 'includes')
dev: at Array.some (<anonymous>)
dev: POST /api/auth/sign-up/email 500 in 915ms
This will throw an error stating that a valid trusted origins list is required.
* fix: Fix the issue where the callbackURL parameter is missing when emailVerified is false using the idToken method for social login
* fix: Fixed the issue where the callbackURL was missing in the verification email after logging in with the genericOAuth and SSO plugins
* update: `getActions` from client plugins to include `clientOptions` in get user client config
* update: rename `clientOptions` to `options`
* chore: lint
* update(api-key): Custom hashing function for api-keys
Useful if the user wants to use a custom hashing algorithm, or if they want to disable hashing, they can just return the key itself.
* add: security warnings
* refactor: Change from customizaing hashing to disableHashing
* update: remove utils & update jsdoc
* chore: lint
* update: jsdoc & fix docs
ctx wasn’t passed down before, so in config.databaseHooks.verification.create.before = async (verification, ctx) => {} the ctx argument was undefined in some cases. Now we forward ctx so the hook can receive it as expected.
* update(create-adapter): Allow providing `id` in create method
Allow providing `id` in the data of a create method if `forceAllowId` is provided as `true` in the create method call.
* chore: cleanup
* fix(api-key): pass real rateLimitvalue from ctx.body
* test(api-key): add assertions for rate limit properties in api-key tests
* fix(api-key): use nullish coalescing for rateLimitEnabled default value
* test(api-key): add test for rateLimit configuration from plugin options
* feat: add getAccessToken api for oauth accounts
* fix: remove returning refresh token and refactor
* add docs
* chore: move both access and refresh token to account
* chore: refactor to account.ts
* chore: mention refresh on getAcessToken
---------
Co-authored-by: Bereket Engida <bekacru@gmail.com>
* feat(stripe): Adding priceId in db
* fix(stripe): reactivate subcrition filtering to only active or trialing subscription
* Revert "feat(stripe): Adding priceId in db"
This reverts commit 39e0224771.
* fix: mapProfileToUser getting called twice during idToken login
* fix(admin): handle redirecting the user properly on social and callback based sign in
* chore: fix type
Rahul MishraandGitHub
Bereket EngidaandGitHub
MaxwellandGitHub
SvendandGitHub
KinfeMichael TarikuandGitHub
ArmanandGitHub
Vinayak KulkarniandGitHub
AlexandGitHub
Philipp LampertandGitHub
Muntasir MahmudandGitHub
cwstraandGitHub
FredrikandGitHub
Mauricio SiuandGitHub
Anatole DufourandGitHub