4079 Commits
Author SHA1 Message Date
Alex Yang 8e1ddc3f81 chore: release v1.5.3 2026-03-04 16:49:55 +09:00
Nathan ColosimoandAlex Yang efcc2384b4 fix(account): use accountId instead of id in accountInfo endpoint (#8346)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-03-04 16:48:59 +09:00
Alex Yang e3bc6a2e5c fix(sso): use internalAdapter for verification operations (#8353) 2026-03-04 16:48:59 +09:00
Alex Yang 318f827ad7 chore: move adapter packages from deps to optional peer deps (#8303) 2026-03-04 16:48:59 +09:00
Alex Yang 54c84939ff chore: release v1.5.2 2026-03-03 18:29:46 +09:00
Gustavo ValverdeandAlex Yang 7425f725c5 fix(oauth-provider): customIdTokenClaims should override standard claims (#7865) 2026-03-03 18:28:54 +09:00
Alex Yang e3ff2b36af fix(prisma-adapter): use deleteMany when deleting by non-unique field (#8314) 2026-03-03 18:28:54 +09:00
Oluwatobi MustaphaandAlex Yang 55dd06e3e8 fix: prevent double encoded cookie (#8133)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-03-03 18:28:54 +09:00
YevheniiKotyrloandAlex Yang 5d7dd9ea22 fix: access control indexing type (#8155)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-03-03 18:28:54 +09:00
TaesuandAlex Yang 8959cb917a fix(cookies): use lookahead heuristic for splitting Set-Cookie headers (#8301) 2026-03-03 18:28:54 +09:00
SicariusandAlex Yang 4b9741289b fix(oauth-provider): allow localhost subdomains in isLocalhost function (#8286)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-03-03 18:28:54 +09:00
Alex YangandCopilot f88bcd7460 fix(sso): prefer UserInfo endpoint over ID token and map sub claim correctly (#8276)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-03-03 18:28:54 +09:00
Alex Yang 37151374c5 chore: release v1.5.1 2026-03-02 13:15:21 +09:00
MaxwellandBereket Engida bd4b2e7e19 docs: fix mono font & CI (#8270) 2026-03-01 16:43:57 -08:00
927fb0a769 docs: infrastructure docs (#8086)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-03-01 13:50:09 -08:00
Alex Yang 63bb7706fd fix(client): use direct imports to fix bundler re-export type resolution (#8261) 2026-03-02 02:02:32 +09:00
Alex Yang 977bfa602f fix(expo): avoid shim require (#8253) 2026-03-02 00:44:07 +09:00
Alex Yang 04e4ccd25c chore: bump expo deps (#8250) 2026-03-02 00:40:22 +09:00
Alex Yang 56db73be27 fix(core): revive date strings in safeJSONParse for pre-parsed objects (#8248) 2026-03-01 23:13:54 +09:00
Alex Yang 8a0475ffd9 fix(db): support verification operations with secondary storage (#8247) 2026-03-01 23:13:50 +09:00
Alex Yang 01ae4a7238 chore: improve cli bundler (#8239) 2026-03-01 23:13:46 +09:00
Alex Yang 58940f7f66 fix(generic-oauth): use discovery userinfo endpoint instead of hardcoded URLs (#8223) 2026-03-01 23:13:40 +09:00
Bereket Engida d567e1dee4 feat(blog): add draft support for blog posts and update image URLs 2026-02-28 17:33:14 -08:00
Alex Yang 0ff021d0a4 chore: release v1.5.0 2026-03-01 10:24:12 +09:00
Gautam ManchandaniandGitHub d727caf2bf feat(client): add fallback support for VERCEL_URL and NEXTAUTH_URL (#6421) 2026-02-28 16:18:36 -08:00
Bereket Engida 859367a813 chore: lint 2026-02-28 15:55:57 -08:00
Bereket Engida 63d7e78d83 chore: fix build 2026-02-28 15:52:05 -08:00
Cody PetersandGitHub 4eec4df7fb feat(email-otp): add change email flow with OTP (#7968) 2026-02-28 15:46:17 -08:00
fefbde28fe fix(expo): skip cookie/expo-origin headers for ID token requests (#7069)
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2026-02-28 15:44:05 -08:00
55100bfcb9 fix(kysely): edge case aliased joined table names (#7171)
Co-authored-by: Bereket Engida <Bekacru@gmail.com>
2026-02-28 15:40:14 -08:00
AndyandGitHub a63d31eefb fix(last-login-method): correctly handle multiple Set-Cookie headers (#7133) 2026-02-28 15:38:50 -08:00
MaxwellGitHubcubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>Bereket Engida
3485e5e96c feat(cli): generate schema from adapter CLI flag (#7316)
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2026-02-28 15:38:12 -08:00
John ZilaandGitHub 07b839088a feat: support non-destructive key rotation for BETTER_AUTH_SECRET (#7738) 2026-02-28 15:36:52 -08:00
MaxwellandGitHub e2e560c97f fix: session listing endpoints returning empty arrays when >100 inactive sessions exist (#7166) 2026-02-28 15:33:57 -08:00
Bereket Engida 33094f0367 Revert "fix(oauth-proxy): add generic OAuth support to proxy (#8082)"
This reverts commit 0deaaa4e67.
2026-02-28 15:33:04 -08:00
3fc0dd7399 fix(organization): update path matching for active member signals (#7732)
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2026-02-28 15:24:58 -08:00
81d83bbf82 fix: preserve refresh token when provider omits it on refresh (#8001)
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com>
2026-02-28 15:11:18 -08:00
Alex YangandGitHub af9e010e36 fix: updateAge should extend session_token cookie on stateless mode (#7995) 2026-02-28 14:19:53 -08:00
ad1ec912cf fix(organization): merge DB permissions with built-in roles in dynamic access control (#7863)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-02-28 14:15:17 -08:00
Alexis WilliamsandGitHub 1dc9627400 fix(drizzle-adapter): resolve db.query key mismatch when config.schema keys differ from schema exports (#8117) 2026-02-28 14:13:31 -08:00
TaesuandGitHub 8c94b233ed fix(expo): use default scheme for callbackURL and document native navigation (#7867) 2026-02-28 14:12:25 -08:00
2f46817b94 fix(last-login-method): tracks magic-link auth by default (#8135)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-02-28 14:06:40 -08:00
TaesuandGitHub fbdc049a37 fix(bearer): support case-insensitive scheme and handle token URL encoding (#7745) 2026-02-28 14:06:16 -08:00
nphlpandGitHub c9f6ea9cf3 fix: prevent email enumeration on /change-email, add customSyntheticUser (#8097) 2026-02-28 13:59:12 -08:00
Cyrus HoandGitHub 293c6b6953 fix(sso): ensure consistent OIDC discovery across APIs (#8118) 2026-02-28 13:46:48 -08:00
alexstrnikandGitHub f3c33e556f fix(core): avoid throwing on required session fields when collecting defaults (#8146) 2026-02-28 13:42:30 -08:00
Joél SolanoandGitHub 4f1326ef18 refactor(admin): allow flexible admin impersonation (#8045) 2026-02-28 13:15:34 -08:00
0deaaa4e67 fix(oauth-proxy): add generic OAuth support to proxy (#8082)
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-28 13:08:02 -08:00
Alex YangandGitHub 3b502f25df fix(expo): support Expo SDK 55 new versioning scheme (#8213) 2026-02-28 09:44:12 +00:00
Gautam ManchandaniandGitHub d3f3e63260 fix: persist refreshed idToken in getAccessToken (#8211) 2026-02-28 06:52:09 +00:00