Gustavo Valverde
eb3cd10d50
chore: resolve main-to-next sync conflicts
...
- keep next package versions at 1.7.0-beta.1
- keep both changelog streams by inserting the stable 1.6.5, 1.6.6, and 1.6.7 sections below the 1.7.0-beta entries
- keep the cimd and dash deps on demo/nextjs (next-only); regenerate pnpm-lock.yaml
- resolve TODO(sync-from-main-9226) in oauth-provider authorize.ts: findRegisteredRedirectUri now uses isLoopbackIP from @better-auth/core/utils/host to cover the full 127.0.0.0/8 range per RFC 8252 §7.3
- drop the unused saml import that main's #9262 added to sso/src/routes/sso.ts; next already migrated to saml-pipeline
2026-04-22 14:54:27 +01:00
4677601429
fix(expo): read cached session data from SecureStore on app startup ( #8953 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-04-21 06:49:49 +00:00
Gustavo Valverde and GitHub
c7d22539ec
refactor(generic-oauth)!: rewrite as first-class social provider with RFC compliance ( #9069 )
2026-04-13 12:02:16 +00:00
Jonathan Samines and GitHub
cd01a42e60
feat: expose plugin version ( #8750 )
2026-03-31 16:08:21 +00:00
44ee8b45ad
fix(expo): handle origin override across mutable and immutable requests ( #8405 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-03-05 23:18:42 +00:00
Bereket Engida
859367a813
chore: lint
2026-02-28 15:55:57 -08:00
Bereket Engida
63d7e78d83
chore: fix build
2026-02-28 15:52:05 -08:00
fefbde28fe
fix(expo): skip cookie/expo-origin headers for ID token requests ( #7069 )
...
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
2026-02-28 15:44:05 -08:00
Taesu and GitHub
8c94b233ed
fix(expo): use default scheme for callbackURL and document native navigation ( #7867 )
2026-02-28 14:12:25 -08:00
5fc0936400
fix(expo): expo-web-browser is not installed as a dependency ( #7752 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2026-02-24 08:30:10 +00:00
Taesu and GitHub
6f545cad26
fix(expo): delete expired cookies instead of storing empty values ( #8090 )
2026-02-21 19:55:44 +00:00
Taesu and GitHub
2468a2d918
fix(expo): support wildcard trusted origins in deep link cookie injection ( #8013 )
2026-02-18 12:06:15 +00:00
Laurin and GitHub
a2b64cd990
fix(expo): avoid a leading “; ” when constructing the first cookie ( #7821 )
2026-02-06 07:35:18 -08:00
Taesu and GitHub
ecbd1e0b2a
fix(expo): construct the new Request to avoid immutable headers error on Cloudflare Workers ( #7774 )
2026-02-03 17:27:25 +00:00
a7f159b8c6
fix(2fa): server-side trust device expiration and configurable maxAge ( #7644 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2026-01-28 01:36:05 +00:00
Alex Yang and GitHub
b0a6fb89c4
chore: bump version ( #7626 )
2026-01-27 21:05:02 +00:00
a5e40aaa8a
fix(expo): prevent duplicate listener notifications in FocusManager and OnlineManager ( #7552 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2026-01-22 22:35:35 +00:00
Alex Yang and GitHub
50de0a1d48
refactor: generic in BetterAuthPluginRegistry ( #7514 )
2026-01-22 20:33:12 +00:00
72069b4a9e
fix: centralize cookie parsing and handle Expires dates correctly ( #7556 )
...
Co-authored-by: Cursor Agent <cursoragent@cursor.com >
Co-authored-by: taesu <taesu@better-auth.com >
Co-authored-by: Alex Yang <himself65@outlook.com >
2026-01-22 20:26:26 +00:00
Taesu and GitHub
cf6c029f6b
fix(expo): prevent null cookie key when redirect URL has no cookie param ( #7555 )
2026-01-22 19:51:33 +00:00
b9cac0d0af
chore: remove unnecessary type castings ( #7471 )
...
Co-authored-by: Cursor Agent <cursoragent@cursor.com >
Co-authored-by: taesu <taesu@better-auth.com >
2026-01-20 01:33:36 +00:00
c8cf9f3fd9
fix(expo): fix cookie-based OAuth state with expo-authorization-proxy ( #6933 )
...
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-01-13 17:12:14 -08:00
Alex Yang and GitHub
91331a9607
chore(core): add BetterAuthPluginRegistry for type system ( #7146 )
2026-01-07 14:51:28 +08:00
76d944f8dd
feat(expo): add webBrowserOptions to openAuthSessionAsync ( #7054 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-12-30 14:37:32 +08:00
Taesu and GitHub
1b329f79e8
fix(expo): improve parseSetCookieHeader ( #6990 )
2025-12-26 14:45:09 +08:00
Taesu and GitHub
ec38c22938
fix(expo): add missing matcher paths ( #6939 )
2025-12-23 11:06:53 +08:00
Joél Solano and GitHub
c8039f075f
chore: pass options to plugin configurations ( #6858 )
2025-12-19 12:16:05 +08:00
Alex Yang and GitHub
63b961a5a9
chore: use Awaitable type ( #6790 )
2025-12-16 16:46:28 +08:00
Bereket Engida and GitHub
4cdf869c67
feat(phone-number): add password length validation for reset functionality ( #6674 )
2025-12-13 15:51:03 -08:00
744f30d665
chore: add support for scoped endpoints ( #6275 )
...
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
2025-12-11 12:22:12 -08:00
Jonathan Samines and GitHub
9233783428
chore: remove unused variables ( #6647 )
2025-12-09 13:51:35 -08:00
381f25fb5c
feat(expo): last-login-method client plugin ( #6413 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2025-12-08 16:24:56 -08:00
868504f2c2
chore: hoist endpoint schemas ( #6283 )
...
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
2025-12-04 12:48:10 -08:00
Gautam Manchandani and GitHub
3a13366201
fix(expo): dismiss auth session on android to prevent invalid state error ( #6388 )
2025-11-29 21:55:52 -08:00
Maxwell and GitHub
f4c43a1365
feat(client): introduce disableSignal client option ( #6108 )
2025-11-21 20:01:18 +00:00
Alex Yang and GitHub
f528506820
feat(expo): support multiple cookie prefixes for better-auth detection ( #6080 )
2025-11-18 22:07:50 +00:00
Alex Yang and GitHub
3c9fcd30ea
fix(expo): enhance cookie detection for better-auth cookies ( #6074 )
2025-11-18 19:07:25 +00:00
Alex Yang and GitHub
c666c12841
refactor(client): revalidate logic ( #5691 )
2025-11-18 18:07:32 +00:00
3715eb7073
chore: improve zod imports tree shaking ( #5995 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2025-11-15 21:06:01 +00:00
Alex and GitHub
12db1cb091
fix(expo): account linking flow on mobile ( #5836 )
2025-11-07 21:45:00 +00:00
Bereket Engida
956eb5b015
Revert "fix(cookie): sameSite to "none" for oauth state ( #5748 )"
...
This reverts commit 324a2ed343
2025-11-04 00:17:22 -08:00
Alex Yang and GitHub
324a2ed343
fix(cookie): sameSite to "none" for oauth state ( #5748 )
2025-11-04 05:13:24 +00:00
Alex Yang and GitHub
b6d405f75a
fix: add undefined type for optional property types ( #5654 )
2025-10-28 23:26:03 +00:00
Alex Yang and GitHub
938c2a7c31
chore: lint enable organize import ( #5556 )
2025-10-24 19:05:09 +00:00
Bereket Engida and GitHub
e0382419dd
fix(expo): origin check failing due to null origin in expo ( #5545 )
2025-10-24 15:29:12 +00:00
Alex Yang and GitHub
30cb4293d2
chore(expo): decouple from better-auth deps ( #5504 )
2025-10-22 22:18:32 +00:00
Maxwell and GitHub
2cf7d0229d
fix(expo): store normalized cookie name in storage ( #5432 )
2025-10-20 22:14:02 +00:00
Alex Yang and GitHub
2737fd3b62
fix(expo): set-header retrigger $sessionSignal ( #5393 )
2025-10-19 01:28:20 +00:00
Alex Yang and GitHub
89475422ba
fix: correct type HookEndpointContext and InternalContext ( #5359 )
2025-10-16 19:27:59 +00:00
Alex Yang and GitHub
59653925b8
refactor: move BetterAuthOptions, BetterAuthPlugin, AuthContext types to core ( #5176 )
2025-10-09 07:05:20 +00:00
Gustavo Valverde
Jonathan SaminesandGitHub
Bereket Engida
LaurinandGitHub
Joél SolanoandGitHub
Gautam ManchandaniandGitHub
MaxwellandGitHub
AlexandGitHub