6166 Commits
Author SHA1 Message Date
Alex Yang 1892ca3b00 chore: release v1.4.19 v1.4.19 2026-02-23 23:41:20 +08:00
Thomas PeklakandAlex Yang 0f035e33e2 fix(custom-session): use getSetCookie() to preserve individual Set-Cookie headers (#7879) 2026-02-23 23:33:17 +08:00
3f254979e9 fix(organization): remove unreachable null check in acceptInvitation (#7825)
Co-authored-by: Taesu <bytaesu@gmail.com>
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-02-23 23:33:17 +08:00
Paola Estefanía de CamposandAlex Yang a6d8de4880 fix(sso): harden SAML ACS error redirects and add regression test for #7777 (#7815) 2026-02-23 23:33:17 +08:00
Paola Estefanía de CamposandAlex Yang 3cd159589f fix(sso): validate aud claim in OpenID Connect ID tokens (#7816) 2026-02-23 23:33:17 +08:00
Rob BaylissandAlex Yang 68b6b5d1a2 fix(sso): fix broken relay state redirect on SAML ACS route (#7781) 2026-02-23 23:33:17 +08:00
69ea7fcfe0 fix(sso): correct IdentityProvider configuration in signInSSO (#7708)
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-23 23:33:17 +08:00
TaesuandAlex Yang 80120ae67f fix(microsoft): add verifyIdToken support for Microsoft Entra ID provider (#7795) 2026-02-23 23:33:17 +08:00
TaesuandAlex Yang 6efdc3832c fix(passkey): use deleteVerificationByIdentifier for secondary-storage cleanup (#7790) 2026-02-23 23:33:17 +08:00
TaesuandAlex Yang 763fdedb4d fix(passkey): compute expirationTime per-request instead of at init (#7731) 2026-02-23 23:33:17 +08:00
TaesuandAlex Yang 911300458c fix(stripe): clarify error when authorizeReference is missing (#7741) 2026-02-23 23:33:17 +08:00
Ghost 9c78e5cb18 docs: add getUser endpoint documentation for the admin plugin (#8072) 2026-02-20 05:27:08 +00:00
Angelica RaborarandGhost b5df5feaf8 docs: clarify wording in Admin Roles plugin section (#7522) 2026-02-20 04:25:58 +00:00
Bereket Engida 07d80082fc chore: fix lockfile 2026-02-18 12:37:56 -08:00
Bereket EngidaandBereket Engida a09c44c927 chore: update infra version (#8052) 2026-02-18 12:28:51 -08:00
TaesuandBereket Engida 329cb18797 docs: improve TanStack Start integration guide (#7742) 2026-02-18 12:24:25 -08:00
TaesuandAlex Yang 7153e1b6d0 fix(expo): support wildcard trusted origins in deep link cookie injection (#8013)
(cherry picked from commit 2468a2d918)
2026-02-18 22:31:37 +08:00
Joél SolanoandAlex Yang 17407ba327 fix(admin): optional chain user in hooks (#8026)
(cherry picked from commit 62ed645354)
2026-02-18 22:31:37 +08:00
TaesuandAlex Yang 358a8e3805 fix(oauth-provider): return "invalid_client" on encrypted secret verification failure (#8030)
(cherry picked from commit 9f79147bdb)
2026-02-18 22:31:37 +08:00
TaesuandAlex Yang 155194992e fix(stripe): use correct stripeCustomerId on /subscription/cancel/callback endpoint (#8032)
(cherry picked from commit 76d9ba140c)
2026-02-18 22:31:37 +08:00
Dylan VanmaliandAlex Yang 16b11058be fix(oauth-provider): add missing oauthClient createdAt/updatedAt values (#7851)
(cherry picked from commit 30d17fc989)
2026-02-18 22:31:37 +08:00
TaesuandAlex Yang fb56f87260 fix(oauth-provider): return url instead of uri in continue and consent endpoints (#7811)
(cherry picked from commit 88e1e995b1)
2026-02-18 22:31:37 +08:00
Joél SolanoandAlex Yang c44a84ddc2 fix(db): infer default value for required attr properly (#7996)
(cherry picked from commit cec49694e9)
2026-02-18 22:31:37 +08:00
Paola Estefanía de CamposandAlex Yang 90ffd2cffe fix: add error handling for id token verification in Apple and Google providers (#8011)
(cherry picked from commit bcf76b8b74)
2026-02-18 22:31:37 +08:00
Joél SolanoandAlex Yang 81f507a92f fix(cookie): relax cookie retrieval for getSessionCookie (#8008)
(cherry picked from commit 99efdafb36)
2026-02-18 22:31:37 +08:00
Paola Estefanía de CamposandAlex Yang fab61af713 fix: encode callbackURL in delete-user verification email (#8007)
(cherry picked from commit a2f6fbce5a)
2026-02-18 22:31:37 +08:00
Alex Yang c682ac8605 fix(generic-oauth): emit duplicate id warning (#7779)
(cherry picked from commit 9f40c35ee4)
(cherry picked from commit d69802ec6a7a1c1b38d946fd090c579cc1e8b203)
2026-02-18 22:31:37 +08:00
sakamoto-wkandAlex Yang 327ee71411 fix(adapter): use getCurrentAdapter for user lookup to avoid transaction deadlock (#7758)
(cherry picked from commit 7db4e60952)
(cherry picked from commit ae14b2ebda4745d04ae3d8babe6911381ea9a7c8)
2026-02-18 22:31:37 +08:00
TaesuandAlex Yang 61cc2a5251 fix: correct error redirect URL construction (#7799)
(cherry picked from commit 4fe3731847)
(cherry picked from commit 758d36a829887b9bffbf661c4e2e2f98365fd1c5)
2026-02-18 22:31:37 +08:00
TaesuandAlex Yang 1b4543b72b chore: add regression test instruction for Claude (#7809)
(cherry picked from commit 72fbffa0ce)
(cherry picked from commit 940d470bff9b3dfb8e43e70c9973875773d5edb9)
2026-02-18 22:31:37 +08:00
Alex Yang e804ef1a6e fix(cli): add .env.local to dotenv (#7831)
(cherry picked from commit 3b2b9834c5)
(cherry picked from commit 42a3bbaa5cb1bb7c50480b379357d0a10156b931)
2026-02-18 22:31:37 +08:00
LaurinandAlex Yang 3f5c1a2c1a fix(expo): avoid a leading “; ” when constructing the first cookie (#7821)
(cherry picked from commit a2b64cd990)
(cherry picked from commit 4b49627d7d1e5a9f1b1680fa636dede2ddb05549)
2026-02-18 22:31:37 +08:00
Shyam VermaandAlex Yang 5f61124417 fix(admin): apply listUsers filter when filterValue is defined (#7827)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
(cherry picked from commit 2d59c928d5)
(cherry picked from commit 495844493cc730b17f640840fd946aa145e03ef7)
2026-02-18 22:31:37 +08:00
Paola Estefanía de CamposandAlex Yang 87093e7258 fix(sso): resolve TXT record at verification subdomain instead of root domain (#7935)
(cherry picked from commit cc80515644)
(cherry picked from commit a23a921e83ec79d1f5b81ab0b4cbb8155be17dc6)
2026-02-18 22:31:37 +08:00
Alex Yang f7074a3401 fix: safely coerce date values from DB in OAuth provider plugin (#7937)
(cherry picked from commit 09adc74d80)
(cherry picked from commit 3579836b5025849e86fcd569517064092c4be9e6)
2026-02-18 22:31:37 +08:00
KaruppusamyandAlex Yang 987f4549dc fix(oauth): support case-insensitive email matching for social account linking (#7812)
(cherry picked from commit af0c885a6c)
(cherry picked from commit d1031aa424c34d3be20fce2c5add945e5bd0451f)
2026-02-18 22:31:37 +08:00
Paola Estefanía de CamposandAlex Yang ec7685d62d docs: add trustedProxyHeaders section to security reference (#7835)
(cherry picked from commit bb49394036)
2026-02-18 22:31:37 +08:00
TaesuandAlex Yang bb47c4e752 docs: add idToken Google Sign-in example to Expo integration (#7838)
(cherry picked from commit 3566e7eea7)
2026-02-18 22:31:37 +08:00
TaesuandAlex Yang 4d5fdad864 docs: add description disableDefaultFetchPlugins to Client concept (#7813)
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Taesu <bytaesu@users.noreply.github.com>
(cherry picked from commit 07162c66b1)
2026-02-18 22:31:37 +08:00
MaxwellandAlex Yang b87ee95f90 docs: update comparisons page (#7875)
(cherry picked from commit 3048c99a94)
2026-02-18 22:31:37 +08:00
MaxwellandAlex Yang 8f36e05860 docs: improve community plugins table (#7874)
(cherry picked from commit b97ba4e5f2)
2026-02-18 22:31:37 +08:00
LovelessCodesandAlex Yang 5d8985f3ee docs: update TanStack icon (#7841)
Co-authored-by: Taesu <bytaesu@gmail.com>
(cherry picked from commit fc79753e0f)
2026-02-18 22:31:37 +08:00
Joél SolanoandAlex Yang 8048899bb6 docs: fix typo & unresolved imports (#7954)
(cherry picked from commit fe3b4ec3b5)
2026-02-18 22:31:37 +08:00
RosanoandAlex Yang ea15826764 docs: fix typo (#7942)
(cherry picked from commit 15479c763e)
2026-02-18 22:31:37 +08:00
Raphaël BaletandAlex Yang d114b4a62e docs(admin.mdx): export const ac (#8000)
(cherry picked from commit b6744552f3)
2026-02-18 22:31:37 +08:00
Ryan CavanaughandAlex Yang a3e0460cbf chore: remove deprecated downlevelIteration option (#7780)
(cherry picked from commit 1301a7355c)
2026-02-18 22:31:37 +08:00
TaesuandAlex Yang 1dc6a7fe28 fix: improve Headers detection with instanceof check and cross-realm fallback (#7651)
(cherry picked from commit bb45c2dc14)
2026-02-18 22:31:37 +08:00
TaesuandAlex Yang 8d98bcc0f0 fix(organization): prevent deletion of roles assigned to members (#7736)
(cherry picked from commit 3308ecef65)
2026-02-18 22:31:37 +08:00
TaesuandAlex Yang 5e83ebc2f9 fix(expo): construct the new Request to avoid immutable headers error on Cloudflare Workers (#7774)
(cherry picked from commit ecbd1e0b2a)
2026-02-18 22:31:37 +08:00
Muzzaiyyan HussainandAlex Yang 2803e1e8fa fix(sso): allow custom organization roles in provisioning types (#7722)
(cherry picked from commit a605e70f4e)
2026-02-18 22:31:37 +08:00