59 Commits
Author SHA1 Message Date
TaesuandGitHub 2220ee7269 revert: drop the issuer column and resolve accounts by provider id (#11153) 2026-09-05 23:03:14 +00:00
TaesuandGitHub c0444dc979 fix: align OpenAPI required fields with Zod 4.5 (#11066) 2026-08-30 18:51:24 +00:00
Gustavo ValverdeandGitHub 8b96573d78 fix(scim): create filtered PATCH values when no target matches (#10682) 2026-08-04 20:01:07 -04:00
Gustavo ValverdeandGitHub 8bc28daf42 fix(core): preserve issuer-scoped account identities (#10668) 2026-08-04 13:47:09 -04:00
Gustavo ValverdeandGitHub 26b194960f feat(scim): add managed connection catalog and runtime connection resolution (#10592) 2026-08-03 13:15:13 -04:00
Gustavo ValverdeandGitHub b7683b82be feat(scim): add enterprise user attributes and interop conformance (#10620) 2026-08-03 07:15:59 -04:00
Gustavo ValverdeandGitHub dec763ef2c feat(scim): expose active provisioned user links (#10474) 2026-07-22 07:07:34 -04:00
Gustavo ValverdeandGitHub 0de88f5e61 feat(scim)!: decouple provisioning from the organization plugin (#10390) 2026-07-16 11:17:06 +01:00
Gustavo ValverdeandGitHub dfecb481fa feat(scim)!: isolate provider connections by organization (#10249) 2026-06-26 22:38:00 +01:00
Gustavo Valverde 010bd65811 chore: resolve 10246 main-to-next sync conflicts 2026-06-26 13:54:08 +01:00
Gustavo ValverdeandGitHub 7c126dcd1a fix(scim): scope write-path operations and honor the active attribute (#10242) 2026-06-26 12:29:00 +00:00
Gustavo Valverde cc1aed88d3 fix: address sync review feedback 2026-06-26 07:42:55 +01:00
Gustavo Valverde 4bcda56649 chore: resolve 10178 main-to-next sync conflicts
Merges origin/main into origin/next for the replacement sync PR and records the hand-resolved package metadata, changelog, OAuth/social provider, admin, SIWE, SCIM, SSO, username, rate-limiter, and next-owned MCP/OIDC provider conflicts.
2026-06-26 06:33:24 +01:00
7a7a7b311a fix(sso): delete linked account rows when an SSO provider is deleted (#10224)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-06-26 03:07:21 +00:00
TaesuandGitHub e7c8066cf1 docs: refine warning guidance across plugin docs (#10185) 2026-06-21 22:39:30 -07:00
Gustavo Valverde 849f6e8aca chore: sync main to next 2026-06-15 18:30:49 -07:00
TaesuandGitHub f3e1a405cd chore(scim): remove filter values from list users log (#10087) 2026-06-15 18:36:44 +00:00
445b0343ec feat(scim): add durable group resources (#10018)
Co-authored-by: Gautam Manchandani <manchandanigautam@gmail.com>
2026-06-12 15:37:16 +00:00
Gustavo Valverde 7a55ae4f52 Merge remote-tracking branch 'origin/next' into chore/sync-main-to-next-20260611
# Conflicts:
#	.changeset/accept-invitation-team-capacity.md
#	.changeset/adapters-native-increment-one.md
#	.changeset/api-key-atomic-quota.md
#	.changeset/delete-account-token-single-use.md
#	.changeset/device-code-single-use.md
#	.changeset/electron-code-single-use.md
#	.changeset/email-otp-attempts-atomic.md
#	.changeset/increment-one-primitive.md
#	.changeset/memory-adapter-transaction-isolation.md
#	.changeset/one-time-token-single-use.md
#	.changeset/passkey-ceremony-binding.md
#	.changeset/password-reset-token-single-use.md
#	.changeset/phone-otp-attempts-atomic.md
#	.changeset/rate-limit-atomic-consume.md
#	.changeset/redis-increment.md
#	.changeset/reserve-verification-value.md
#	.changeset/saml-replay-reserve.md
#	.changeset/siwe-nonce-single-use.md
#	.changeset/two-factor-challenge-single-use.md
#	.changeset/twofactor-otp-attempts-atomic.md
#	packages/api-key/src/adapter.ts
#	packages/api-key/src/api-key.test.ts
#	packages/better-auth/src/api/rate-limiter/index.ts
#	packages/better-auth/src/api/rate-limiter/rate-limiter.test.ts
#	packages/better-auth/src/db/internal-adapter.ts
#	packages/better-auth/src/plugins/device-authorization/routes.ts
#	packages/better-auth/src/plugins/organization/adapter.ts
#	packages/better-auth/src/plugins/organization/routes/crud-invites.ts
#	packages/better-auth/src/plugins/organization/routes/crud-members.ts
#	packages/better-auth/src/plugins/organization/routes/crud-team.ts
#	packages/better-auth/src/plugins/organization/team.test.ts
#	packages/better-auth/src/plugins/phone-number/routes.ts
#	packages/better-auth/src/plugins/two-factor/two-factor.security.test.ts
#	packages/core/src/db/adapter/factory.ts
#	packages/core/src/db/adapter/index.ts
#	packages/core/src/db/type.ts
#	packages/core/src/types/context.ts
#	packages/core/src/types/init-options.ts
#	packages/drizzle-adapter/src/drizzle-adapter.test.ts
#	packages/drizzle-adapter/src/drizzle-adapter.ts
#	packages/electron/test/electron.test.ts
#	packages/kysely-adapter/src/kysely-adapter.ts
#	packages/memory-adapter/src/memory-adapter.ts
#	packages/mongo-adapter/src/mongodb-adapter.test.ts
#	packages/mongo-adapter/src/mongodb-adapter.ts
#	packages/passkey/src/routes.ts
#	packages/prisma-adapter/src/prisma-adapter.ts
#	packages/redis-storage/src/redis-storage.ts
#	packages/redis-storage/test/redis-storage.test.ts
#	packages/sso/src/saml.test.ts
2026-06-11 18:45:17 -07:00
Gustavo Valverde 381fc6cfaf chore: sync main to next 2026-06-11 18:18:13 -07:00
Gustavo ValverdeandGitHub 86ccb5de91 feat(auth)!: harden atomic state transitions (#10000) 2026-06-12 00:46:44 +00:00
Gustavo ValverdeandGitHub ed7b6c9ac0 fix: enforce team capacity, constant-time SCIM tokens, and org-admin SSO domain verification (#10002) 2026-06-11 19:21:34 +00:00
7343284149 fix: jwks caching, oauth id mapping, team invitations, account cookie, and scim deprovision bugs (#9987)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-06-11 08:25:19 -07:00
Gustavo Valverde bf7f2c5b4e chore: sync main to next 2026-06-10 11:30:38 -07:00
Bereket EngidaandGitHub cb1cbfa4cc fix: address bug findings across packages (#9974) 2026-06-09 19:46:12 -07:00
41cca606d1 feat(auth): add user.validateUserInfo provisioning gate (#9864)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-06-07 14:34:48 -07:00
Gustavo ValverdeandGitHub a8ea86e25e fix(scim)!: always bind personal SCIM connections to their creator (#9840) 2026-05-31 12:53:18 +00:00
43c08a2bc7 fix(account): scope OAuth account identity and fix buggy internalAdapter helpers (#9818)
Co-authored-by: Krish Garg <kgarg@chapman.edu>
2026-05-30 20:48:10 +00:00
Gustavo ValverdeandGitHub 2f5d91c5bb fix(scim): reject built-in provider id collisions on SCIM token issuance (#9579) 2026-05-12 12:44:41 +00:00
a26333b5fb fix: cleanup sessions when deleting users (#9162)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-05-11 19:14:18 +00:00
Gustavo ValverdeandGitHub bd9bd58f87 fix(security): enforce authorization on SCIM management endpoints and normalize passkey ownership (#8843) 2026-04-06 13:47:24 +00:00
Jonathan SaminesandGitHub cd01a42e60 feat: expose plugin version (#8750) 2026-03-31 16:08:21 +00:00
John ZilaandGitHub 07b839088a feat: support non-destructive key rotation for BETTER_AUTH_SECRET (#7738) 2026-02-28 15:36:52 -08:00
Alex YangandGitHub cd4d1c6362 test(scim): split scim.test.ts to fix CI flaky timeout (#8208) 2026-02-28 04:13:10 +00:00
ad3fc4cca5 feat(api-key): Organization support in API-Keys & Multiple config support (#4210)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-02-24 08:25:00 +00:00
Jonathan SaminesandGitHub 10aa14d406 feat(scim): introduce ownership model for SCIM (#7931) 2026-02-12 06:54:19 +00:00
Jonathan SaminesandGitHub 4595d12cfd feat(scim): add SCIM connection management endpoints (#7898) 2026-02-11 12:34:19 +00:00
Alex YangandGitHub 5bd49694a0 chore: bump better-call (#7906) 2026-02-11 09:31:04 +00:00
Alex YangandGitHub c5803173fe test: use vitest best practice (#7888) 2026-02-10 06:32:03 +00:00
Jonathan SaminesandGitHub 5a8e1c0a0f chore(scim): fix empty IN queries in user list endpoint (#7808) 2026-02-05 18:49:56 +00:00
Alex Yang 00c95728f1 Revert "feat: make name field optional (#7617)"
This reverts commit e0df7c9e38.
2026-02-02 10:52:19 -08:00
TaesuandGitHub e0df7c9e38 feat: make name field optional (#7617) 2026-01-29 23:42:52 +00:00
Alex YangandGitHub 1251787f72 feat: remove deprecated API (#7623) 2026-01-28 01:49:50 +00:00
Alex YangandGitHub b0a6fb89c4 chore: bump version (#7626) 2026-01-27 21:05:02 +00:00
dedb4255de fix(session): skip invalid sessions in list (#7182)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-01-26 23:44:40 +00:00
6a1ff9bea9 docs: use type-only import for BetterAuthClientPlugin (#7565)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-01-23 19:34:53 +00:00
4f5c7c812f feat(sso): add provider list and detail endpoints (#6967)
Co-authored-by: Alex Yang <himself65@outlook.com>
2026-01-22 22:42:30 +00:00
Alex YangandGitHub 50de0a1d48 refactor: generic in BetterAuthPluginRegistry (#7514) 2026-01-22 20:33:12 +00:00
Bereket Engida ab5c2e7d64 chore(demo): hide admin dashboard for non-admin users 2026-01-17 22:18:42 -08:00
Alex YangandGitHub 531b9d56a5 chore: add lint rule useConst (#7369) 2026-01-14 14:18:18 -08:00