Commit Graph
4400 Commits
Author SHA1 Message Date
Бат-ОршихandGitHub 151362b167 fix(swie): remove max chainId validation (#8123) 2026-02-23 23:49:26 -08:00
Lucas Herzinger SouzaandGitHub 1129a3061d fix: use invalid_grant instead of invalid_request for refresh token errors (#8103) 2026-02-23 18:06:19 +00:00
Alex Yang 714e5433a3 chore: release v1.5.0-beta.18 2026-02-24 01:36:14 +08:00
MaxwellGitHubcubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2e1c17754d fix: drizzle transform input crashes dates (#8105)
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2026-02-23 15:40:04 +00:00
Alex Yang 0ce6c7ed7a chore: release v1.5.0-beta.17 2026-02-23 22:29:34 +08:00
f2124a8f48 feat: add /update-session (#8084)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-02-23 04:42:31 +00:00
MaxwellandGitHub 7565c75eb4 fix: force drizzle-adapter to return dates correctly (#8104) 2026-02-22 17:25:44 -08:00
TaesuandGitHub e802eaebac fix(stripe): use CHECKOUT_SESSION_ID for success_url and remove cancel callback (#8095) 2026-02-22 09:15:50 -08:00
Oluwatobi MustaphaandGitHub 664c1d7a9a fix(security): prevent OTP reuse via race condition (#8067) 2026-02-21 23:31:17 -08:00
TaesuandGitHub cbd86131d5 fix(db): handle camelCase postgres metadata keys in migration schema detection (#8092) 2026-02-22 04:01:51 +00:00
TaesuandGitHub 3ec7d41a91 feat: limit enumeration on sign-up when email verification is required (#8091) 2026-02-21 15:51:08 -08:00
TaesuandGitHub 6f545cad26 fix(expo): delete expired cookies instead of storing empty values (#8090) 2026-02-21 19:55:44 +00:00
TaesuandGitHub b894280a46 fix(bearer): use semicolon separator when merging cookie headers (#8089) 2026-02-21 14:49:16 +00:00
Paola Estefanía de CamposandGitHub 9fed16b6c2 feat(mcp): add framework-agnostic remote MCP auth client (#8087) 2026-02-20 21:29:29 -08:00
Paola Estefanía de CamposandGitHub 197792318f feat(auth): support dynamic baseURL with allowedHosts (#8009) 2026-02-20 19:58:29 +00:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
27b6f555be chore(deps-dev): bump @sveltejs/kit from 2.50.1 to 2.52.2 (#8075)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-20 13:21:07 +00:00
07e7b5a18f chore(cli): use beta url for pre-release and resolve open import (#7997)
Co-authored-by: Ghost <ghost@better-github.app>
2026-02-20 05:02:12 -08:00
Bereket Engida d79c0db73b Revert "feat(cli): use vite to load auth config when we detect a vite project"
This reverts commit 22d238b4bf.
2026-02-19 23:41:28 -08:00
Bereket Engida 22d238b4bf feat(cli): use vite to load auth config when we detect a vite project 2026-02-19 23:18:09 -08:00
TaesuandGitHub 96dc13a404 feat(stripe): track subscription schedule ID for pending plan changes (#8070) 2026-02-20 00:19:35 +00:00
TaesuandGitHub 5eebbe96a9 fix(stripe): inject metadata to schedules on update, not on create (#8069) 2026-02-19 16:03:11 +00:00
TaesuandGitHub 9ca0fa32a7 fix(stripe): handle line item price replacement on plan upgrade (#8066) 2026-02-19 15:26:50 +00:00
TaesuandGitHub 5180893ae6 feat(stripe): add scheduleAtPeriodEnd option to defer plan changes (#8064) 2026-02-19 14:34:17 +00:00
Joél SolanoandGitHub 8fe651400a fix(phone-number): call callback on password reset (#8046) 2026-02-18 21:19:45 -08:00
Joél SolanoandGitHub 830bfd251a fix: merge trusted origins function from plugin init (#8056) 2026-02-18 18:35:40 -08:00
Bereket EngidaandGitHub 794f14688b Fix: Handle escaped $user in Supabase PostgreSQL search_path (#8051) 2026-02-18 11:16:50 -08:00
TaesuandGitHub 2468a2d918 fix(expo): support wildcard trusted origins in deep link cookie injection (#8013) 2026-02-18 12:06:15 +00:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
67b53e61b6 chore(deps): bump fast-xml-parser from 5.3.3 to 5.3.6 (#8034)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-18 11:14:15 +00:00
Alex YangandGitHub 425ec38f84 fix(sso): import cjs dep (#8041) 2026-02-18 10:44:43 +00:00
Joél SolanoandGitHub 62ed645354 fix(admin): optional chain user in hooks (#8026) 2026-02-18 10:06:20 +00:00
e5683a7a64 chore: bump all packages to v1.5.0-beta.16 (#8037)
Co-authored-by: Ghost <ghost@better-github.app>
2026-02-18 00:49:17 -08:00
TaesuandGitHub 9f79147bdb fix(oauth-provider): return "invalid_client" on encrypted secret verification failure (#8030) 2026-02-18 00:21:05 -08:00
07d216dc29 feat: support accepting callback for trusted providers function (#7904)
Co-authored-by: Paola Estefanía de Campos <84341268+Paola3stefania@users.noreply.github.com>
2026-02-17 23:24:59 -08:00
TaesuandGitHub 76d9ba140c fix(stripe): use correct stripeCustomerId on /subscription/cancel/callback endpoint (#8032) 2026-02-18 02:47:41 +00:00
Joél SolanoandGitHub b7de9e7b2d chore(electron): fix race condition (#8025) 2026-02-17 15:54:29 -08:00
Dylan VanmaliandGitHub 30d17fc989 fix(oauth-provider): add missing oauthClient createdAt/updatedAt values (#7851) 2026-02-17 15:39:02 -08:00
TaesuandGitHub 0dbff0ee56 test(oauth-provider): update remaining consent response assertions from uri to url (#8029) 2026-02-17 22:40:03 +00:00
TaesuandGitHub 88e1e995b1 fix(oauth-provider): return url instead of uri in continue and consent endpoints (#7811) 2026-02-17 09:23:51 -08:00
d241f4ccac fix(phone-number): reset password should create credential account (#6862)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2026-02-16 23:10:12 -08:00
Joél SolanoandGitHub 7306c5af05 feat(electron): allow manual token exchange & add sanitizeUser option (#7976) 2026-02-16 23:10:02 -08:00
Joél SolanoandGitHub 1e18da7620 feat(electron): fetch user image securely regardless of csp (#7844) 2026-02-16 16:57:02 -08:00
Joél SolanoandGitHub cec49694e9 fix(db): infer default value for required attr properly (#7996) 2026-02-16 16:56:50 -08:00
Paola Estefanía de CamposandGitHub bcf76b8b74 fix: add error handling for id token verification in Apple and Google providers (#8011) 2026-02-16 16:29:54 -08:00
Bereket Engida fae56a1b5c chore: release v1.5.0-beta.15 2026-02-16 15:23:33 -08:00
Joél SolanoandGitHub 99efdafb36 fix(cookie): relax cookie retrieval for getSessionCookie (#8008) 2026-02-16 15:14:16 -08:00
Paola Estefanía de CamposandGitHub a2f6fbce5a fix: encode callbackURL in delete-user verification email (#8007) 2026-02-16 14:26:07 -08:00
Paola Estefanía de CamposandGitHub d9b7f7ec42 fix(rate-limit): harden default rules and fix phone-number window (#8006) 2026-02-16 14:25:19 -08:00
Bereket Engida a8686cf552 chore: release v1.5.0-beta.14 2026-02-16 13:40:28 -08:00
Carlos Eduardo MedimandGitHub cc65d9085e feat(providers): add Railway OAuth provider (#7730) 2026-02-16 12:49:02 -08:00
Paola Estefanía de CamposandGitHub a2e1d5fef8 feat(sso): add shared redirectURI option for OIDC providers (#7818) 2026-02-16 12:43:37 -08:00