  
|
f4260a95cd
|
chore: release v1.7.12 (#11922)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
|
2026-10-20 11:51:50 +00:00 |
|
 TaesuandGitHub
|
226fb9d5b2
|
ci(release-tooling): name affected users in release note actions (#11938)
|
2026-10-20 20:45:15 +09:00 |
|
|
TaesuandGitHub
|
626422efc4
|
ci(release-tooling): collect release note actions and share entry rules (#11937)
|
2026-10-20 20:37:59 +09:00 |
|
|
TaesuandGitHub
|
94436b3ec6
|
ci(release-tooling): update release note models and prompts (#11936)
|
2026-10-20 19:54:42 +09:00 |
|
|
TaesuandGitHub
|
f5ea731e6d
|
fix(sso): verify OIDC ID tokens with the shared step (#11935)
|
2026-10-20 09:38:37 +00:00 |
|
|
TaesuandGitHub
|
2a576f39dc
|
fix(mcp): accept only OAuth access tokens in requireMcpAuth (#11934)
|
2026-10-20 09:38:21 +00:00 |
|
|
TaesuandGitHub
|
4bc78baa83
|
fix(core): reject ID tokens when the provider has no client ID (#11931)
|
2026-10-20 01:46:32 +00:00 |
|
|
TaesuandGitHub
|
b18e3b8fdf
|
fix(oauth-proxy): run the standard callback checks on proxied callbacks (#11930)
|
2026-10-20 10:07:35 +09:00 |
|
|
TaesuandGitHub
|
fb48619083
|
fix(jwt): verify tokens with the stored key's algorithm (#11925)
|
2026-10-19 22:53:26 +00:00 |
|
|
TaesuandGitHub
|
681aa5c443
|
fix(session): keep the cause of session lookup failures (#11924)
|
2026-10-19 22:46:02 +00:00 |
|
 Alpcan AydınandGitHub
|
083a74329b
|
fix(core): accept undefined fields from mapProfileToUser under exactOptionalPropertyTypes (#11918)
|
2026-10-19 21:20:58 +00:00 |
|
|
TaesuandGitHub
|
876608da86
|
fix(core): verify id_tokens with one shared policy (#11919)
|
2026-10-19 21:06:58 +00:00 |
|
|
TaesuandGitHub
|
492134aeba
|
fix(oauth): restore Twitch and Paybin ID token handling (#11920)
|
2026-10-19 20:24:43 +00:00 |
|
|
|
52ab801cc6
|
chore: release v1.7.11 (#11827)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
|
2026-10-19 00:32:42 +00:00 |
|
|
TaesuandGitHub
|
2f6ca3f370
|
fix(core): accept undefined plugin init options under exactOptionalPropertyTypes (#11907)
|
2026-10-18 23:37:45 +00:00 |
|
|
TaesuandGitHub
|
dfd8dd287a
|
fix(oauth): verify Twitch and Paybin ID tokens (#11884)
|
2026-10-18 23:04:24 +00:00 |
|
|
TaesuandGitHub
|
da28c189a4
|
refactor(expo): narrow native scheme in request hooks (#11889)
|
2026-10-17 17:11:06 +09:00 |
|
 
|
ce965696d1
|
perf(core): inline OpenTelemetry attribute constants (#11623)
Co-authored-by: Taesu <bytaesu@gmail.com>
|
2026-10-17 06:35:12 +00:00 |
|
|
5d3d5c4c70
|
fix(expo): send origin for id token link social (#10207)
Co-authored-by: Taesu <bytaesu@gmail.com>
|
2026-10-17 07:41:40 +09:00 |
|
 Gustavo ValverdeandGitHub
|
a1f6f0bf19
|
fix(oauth-provider): keep admin changes made during a CIMD refresh (#11830)
|
2026-10-15 16:40:19 +00:00 |
|
|
37debaa8a1
|
fix(oauth-provider): correct consent and continue OpenAPI response schemas (#10881)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
|
2026-10-15 15:39:50 +00:00 |
|
|
37a75c95d1
|
fix(rate-limit): convert a string lastRequest before computing X-Retry-After (#11521)
Co-authored-by: Taesu <bytaesu@gmail.com>
|
2026-10-15 15:02:04 +00:00 |
|
|
bd65db02c1
|
fix(db): recognize postgres int8 as a number type in migration diffs (#10719)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
|
2026-10-15 14:22:32 +00:00 |
|
|
better-release[bot]andGitHub
|
b734a418bf
|
chore: release v1.7.10 (#11795)
|
2026-10-15 14:22:54 +01:00 |
|
  
|
eebd47a0e7
|
fix(last-login-method): record Google One Tap sign-ins (#11393)
Co-authored-by: arjunpkulkarni <arjunpkulkarni@gmail.com>
Co-authored-by: breken-ai <312387581+breken-ai@users.noreply.github.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-15 14:15:38 +01:00 |
|
|
eaecb7229e
|
fix(one-tap): apply the Google provider's mapProfileToUser and getUserInfo (#11819)
Co-authored-by: kaiizer777 <kanekigaming786@gmail.com>
|
2026-10-15 13:02:59 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
414e845f12
|
fix(better-auth): keep package subpaths in sync with build entries (#11822)
|
2026-10-15 14:08:25 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
88c9a37856
|
fix(one-tap): apply plugin-level autoSelect and cancelOnTapOutside (#11820)
|
2026-10-15 13:02:01 +00:00 |
|
|
09d07e6fea
|
fix(one-tap): stop calling prompt moment methods unsupported under FedCM (#11821)
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com>
|
2026-10-15 12:58:29 +00:00 |
|
|
0cf1f7c6bc
|
fix(one-tap): add the better-auth/plugins/one-tap subpath export (#11696)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-15 13:45:41 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
61c913da73
|
fix(oauth-provider): report an unknown client in a client assertion as not found (#11811)
|
2026-10-15 13:11:39 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
bb5edcf9f8
|
fix(core): use a newer cached key set before joining a pending JWKS fetch (#11810)
|
2026-10-15 13:11:09 +01:00 |
|
|
|
4d7da0bef8
|
fix(oauth-provider): return 400 invalid_grant on PKCE verifier mismatch (#11724)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-15 13:07:53 +01:00 |
|
|
8f3da46ae5
|
fix(oauth-provider): return invalid_client for an unknown client at the token endpoint (#11176)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-15 13:02:05 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
44f14bbf82
|
fix(oauth-provider): keep approved resources refreshable after a narrowed device poll (#11815)
|
2026-10-15 12:48:52 +01:00 |
|
 
|
fedd05586c
|
fix(oauth2): report an unreachable JWKS as an error, not an invalid token (#11612)
Co-authored-by: vhinayindia <281186805+vhinayindia@users.noreply.github.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-15 12:35:36 +01:00 |
|
|
963b7f9417
|
fix(oauth-provider): treat unverifiable JWT access tokens as invalid (#11596)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-10-15 12:13:07 +01:00 |
|
|
906c32f4b5
|
fix(oauth-provider): keep the supported grants from a dynamic registration (#11797)
Co-authored-by: Bereket Engida <Bekacru@gmail.com>
|
2026-10-15 12:02:00 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
bbd0a19c30
|
fix(core): limit JWKS refetches for unknown key IDs (#11805)
|
2026-10-15 11:54:17 +01:00 |
|
|
|
99cdfe7c2e
|
fix(oauth-provider): keep consent separate per reference (#11801)
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
|
2026-10-15 11:11:01 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
2832dbda06
|
fix(oauth-provider): accept key-rotation assertions when baseURL ends in a slash (#11804)
|
2026-10-15 10:59:35 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
f42c0c220d
|
fix(oauth-provider): report an unknown client_id as not found (#11799)
|
2026-10-15 09:18:07 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
2fa7e2f8bb
|
fix(oauth-provider): infer native for http loopback redirect URIs (#11798)
|
2026-10-15 09:11:34 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
cdd491b9d0
|
fix(oauth-provider): build DPoP htu from the request path (#11786)
|
2026-10-15 08:35:46 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
cdf413695c
|
test(oauth-provider): force both orderings of the revoke vs rotate race (#11793)
|
2026-10-15 08:20:00 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
fe550a9c57
|
feat(oauth-provider): let private_key_jwt clients rotate their own keys (#11695)
|
2026-10-15 08:08:25 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
e34b828274
|
fix(oauth-provider): refuse trusted-client changes with 400, not 500 (#11781)
|
2026-10-15 08:08:25 +00:00 |
|
|
better-release[bot]andGitHub
|
d2a5f83e92
|
chore: release v1.7.9 (#11761)
|
2026-10-15 04:48:47 +01:00 |
|
|
TaesuandGitHub
|
dbca31145c
|
test: fix test names in bearer and organization (#11768)
|
2026-10-15 06:20:29 +09:00 |
|
|
TaesuandGitHub
|
c03ced528a
|
chore: bump @biomejs/biome (#11760)
|
2026-10-14 21:01:10 +00:00 |
|