better-release[bot]
f41514ef07
chore: release v1.6.11 ( #9532 )
2026-05-12 17:30:34 +01:00
Gustavo Valverde
c6918ecc9e
Merge commit from fork
...
The `authorization_code`-grant rotation in `createRefreshToken` and the explicit `revokeRefreshToken` path both updated the parent `oauthRefreshToken` row using an `id`-only predicate, so two concurrent rotations (or a rotation racing a revoke) both pass the `revoked` check and last-write-wins. Each surviving request mints a fresh refresh token, producing a forked family from one parent.
Both call sites now perform a compare-and-swap (`UPDATE ... WHERE id = ? AND revoked IS NULL`) and short-circuit with `invalid_grant` when the row was already consumed. The parent stays marked revoked, so any subsequent replay trips the existing family-invalidation guard in `handleRefreshTokenGrant`. The shared family-delete is centralized in `invalidateRefreshFamily`, which clears child access tokens before refresh rows to honor the schema's foreign-key direction; the `oauthRefreshToken.token` column also gains a `unique` constraint for parity with `oauthAccessToken.token`. Strict family invalidation on contested rotations (RFC 9700 §4.14) is tracked in a FIXME for a follow-up minor that opts into transactional rotation in the adapter contract.
Closes GHSA-392p-2q2v-4372.
Co-authored-by: chdanielmueller <4051999+chdanielmueller@users.noreply.github.com >
2026-05-12 16:36:32 +01:00
Gustavo Valverde
0cbddb8fa4
refactor(db): rename claimOne adapter primitive to consumeOne ( #9568 )
2026-05-12 07:44:07 +00:00
Gustavo Valverde
a2c0c9346e
feat(db): add atomic claimOne adapter primitive ( #9560 )
2026-05-11 20:10:29 +00:00
better-release[bot]
cbb5014cdf
chore: release v1.6.10 ( #9350 )
...
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-05-09 14:31:47 +00:00
better-release[bot]
f484269228
chore: release v1.6.9 ( #9341 )
2026-04-24 06:25:08 +01:00
better-release[bot]
b289ac6c4b
chore: release v1.6.8 ( #9316 )
2026-04-23 11:31:03 +01:00
better-release[bot]
f8076d141a
chore: release v1.6.7 ( #9289 )
2026-04-22 12:36:30 +01:00
better-release[bot]
0290077760
chore: release v1.6.6 ( #9222 )
2026-04-21 17:42:18 +01:00
better-release[bot]
c8a91f4167
chore: release v1.6.5 ( #9209 )
2026-04-16 11:05:30 +01:00
better-release[bot]
9ec849ff71
chore: release v1.6.4 ( #9175 )
2026-04-15 13:00:42 +01:00
better-release[bot]
6f17bb3ebd
chore: release v1.6.3 ( #9081 )
2026-04-14 12:04:31 +01:00
better-release[bot]
700d298e1e
chore: version packages ( #9052 )
2026-04-09 15:19:07 +01:00
better-release[bot]
85bb710edc
chore: version packages ( #9018 )
...
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-04-08 19:22:59 +00:00
better-release[bot]
d666a03372
chore: exit pre-release mode for v1.6.0
2026-04-06 14:41:56 +00:00
better-auth-releases[bot]
73beda26f9
chore: version packages (beta) ( #8945 )
...
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-04-04 15:52:24 +00:00
Gustavo Valverde
1eec2e8090
chore: use caret ranges for internal peerDependencies ( #8937 )
2026-04-03 19:05:37 +00:00
Gustavo Valverde
77ead28455
chore: reset package versions to 1.5.6 ( #8930 )
2026-04-03 10:57:28 +00:00
Gustavo Valverde
e80cc38b0d
fix: turbo caching, enforce lockfile integrity, expand pre-commit hooks ( #8892 )
2026-04-02 07:35:24 +00:00
Gustavo Valverde
04e91d1643
perf(build): reduce published package sizes ( #8884 )
2026-04-01 15:55:03 +00:00
Taesu
14347d2627
chore: centralize to use catalog and bump @better-auth/utils, better-call ( #8684 )
2026-03-26 04:09:49 +00:00
Jonathan Samines
a1b0fdcd70
feat(db): add case insensitive queries support ( #8556 )
2026-03-23 13:09:29 -07:00
Bereket Engida
841410031a
chore: release v1.5.7-beta.1
2026-03-22 21:09:52 -07:00
Bereket Engida
c527d4e4cc
chore: release v1.5.1-beta.4
2026-03-22 21:04:04 -07:00
Alex Yang
ab6b14cb19
chore: release v1.5.1-beta.3
2026-03-03 12:14:56 +09:00
Alex Yang
3ee808a48c
chore: release v1.5.1-beta.2
2026-03-03 06:49:28 +09:00
Alex Yang
425c6abf6e
chore: release v1.5.1-beta.1
2026-03-02 02:05:39 +09:00
Alex Yang
2fd1ef38e7
chore: release v1.5.0-beta.20
2026-02-28 02:20:43 +09:00
Bereket Engida
554f0ef7e1
chore: release v1.5.0-beta.19
2026-02-25 16:21:37 -08:00
Alex Yang
66446bf418
chore: align package.json fields and add missing README.md files ( #8131 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-24 20:58:06 +00:00
Alex Yang
714e5433a3
chore: release v1.5.0-beta.18
2026-02-24 01:36:14 +08:00
Alex Yang
0ce6c7ed7a
chore: release v1.5.0-beta.17
2026-02-23 22:29:34 +08:00
Bereket Engida
e5683a7a64
chore: bump all packages to v1.5.0-beta.16 ( #8037 )
...
Co-authored-by: Ghost <ghost@better-github.app >
2026-02-18 00:49:17 -08:00
Bereket Engida
fae56a1b5c
chore: release v1.5.0-beta.15
2026-02-16 15:23:33 -08:00
Bereket Engida
a8686cf552
chore: release v1.5.0-beta.14
2026-02-16 13:40:28 -08:00
Alex Yang
c5803173fe
test: use vitest best practice ( #7888 )
2026-02-10 06:32:03 +00:00
Alex Yang
4163102121
chore: release v1.5.0-beta.13
2026-02-07 09:36:29 -08:00
Alex Yang
dd6dc4601f
chore: release v1.5.0-beta.12
2026-02-06 17:25:17 -08:00
Alex Yang
f82960b984
chore: release v1.5.0-beta.11
2026-01-30 16:44:59 -08:00
Joél Solano
20d08ede10
feat(adapter): improve select support ( #7667 )
2026-01-30 00:02:39 +00:00
Alex Yang
9780a773fe
chore: release v1.5.0-beta.10
2026-01-27 17:57:35 -08:00
Alex Yang
1251787f72
feat: remove deprecated API ( #7623 )
2026-01-28 01:49:50 +00:00
Alex Yang
c1f046f588
chore: bump version ( #7646 )
2026-01-27 23:12:31 +00:00
Alex Yang
6b03411662
chore: enable sourcemap for packages ( #7622 )
2026-01-26 22:37:58 +00:00
Alex Yang
6295dfcd34
chore: release v1.5.0-beta.9
2026-01-20 19:38:14 -08:00
Alex Yang
1f500d3246
chore: fix repository URLs
2026-01-20 19:38:04 -08:00
Alex Yang
4bf407d161
refactor: separate adapters into different packages ( #7439 )
2026-01-20 06:25:17 +00:00
