4974 Commits
Author SHA1 Message Date
better-release[bot]andGitHub 5f4cc5c110 chore: release v1.7.8 (#11513) 2026-10-14 18:47:06 +01:00
Gustavo ValverdeandGitHub 133765b48e ci(release): keep PR titles for every changeset a PR adds (#11759) 2026-10-14 18:24:04 +01:00
e78f15aa31 fix(core): allow 30s of clock skew when verifying ID tokens (#11749)
Co-authored-by: Lohith <ssvlohith@gmail.com>
2026-10-14 17:06:19 +01:00
60525e08fd fix(core): verify microsoft entra id tokens when jwks keys omit alg (#11663)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-14 17:04:35 +01:00
e9d9921217 fix(generic-oauth): retry discovery for providers skipped at startup (#11750)
Co-authored-by: mangomac <mangomac@users.noreply.github.com>
2026-10-14 16:53:53 +01:00
916ef5c530 fix(mongo-adapter): retry a transaction aborted with a transient error (#11515)
Co-authored-by: Maxwell Afamefuna Nzekwe <70326615+maxnze1@users.noreply.github.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-14 16:30:50 +01:00
aaf0d7da3e fix(oauth-provider): keep auth working when startup resource seeding fails (#11726)
Co-authored-by: Panagiotis Plytas <34184381+pplytas@users.noreply.github.com>
Co-authored-by: Arjun Vijay Prakash <137415649+ArjunCodess@users.noreply.github.com>
Co-authored-by: Tushar <192458782+Tushar-Khandelwal-2004@users.noreply.github.com>
Co-authored-by: zoom-dustin-moriarty <221604897+zoom-dustin-moriarty@users.noreply.github.com>
2026-10-14 12:33:21 +01:00
f0ce580fbd fix(phone-number): use custom verifyOTP when resetting the password (#10698)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-14 11:37:54 +01:00
Gustavo ValverdeandGitHub adbdc06e33 fix(sso): stop treating the SAML post-login redirect as an identity field (#11743) 2026-10-14 09:33:05 +00:00
c3f11cc1a1 docs(sso): clarify SAML callbackUrl vs ACS endpoint in 1.7 (#11703)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-14 10:18:24 +01:00
182e92bd8a fix(sso): allow rotating SAML IdP signing certificate with linked accounts (#11687)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-14 10:16:38 +01:00
a878f9ab47 fix(sso): support array of emails in OIDC claim resolution (#11640)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-14 10:16:10 +01:00
0cfe07dccd fix(drizzle-adapter): support dates in string columns (#11731)
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com>
2026-10-14 08:50:41 +01:00
ea85d133d6 fix(mongo-adapter): abort a transaction whose commit did not complete (#11602)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-13 20:47:45 +01:00
1d95ebf3fe fix(session): fall back to database for bulk session lookups (#11718)
Co-authored-by: choksi2212 <choksi2212@users.noreply.github.com>
2026-10-13 03:15:11 +00:00
876ee038ec test(organization): create shared fixtures in beforeAll (#11709)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
2026-10-13 01:26:34 +00:00
766cfb3f42 fix(magic-link): stop double-decoding callback URLs on verify (#11174)
Co-authored-by: Taesu <bytaesu@gmail.com>
2026-10-12 21:32:53 +00:00
TaesuandGitHub 9725f1b361 fix(core): prevent stalled AsyncLocalStorage initialization (#11711) 2026-10-12 21:19:17 +00:00
TaesuandGitHub c46d2a6ac4 fix(core): resolve pure AsyncLocalStorage on first use (#11712) 2026-10-12 21:19:10 +00:00
6c89bb18f1 fix(sso): accept partial mappings when updating a provider (#11378)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-12 13:36:49 +00:00
Gustavo ValverdeandGitHub 847acd02bb feat(oauth-provider): pass client ID to privilege checks (#11658) 2026-10-11 18:29:52 +00:00
Gustavo ValverdeandGitHub 38f3bb34af feat(oauth-provider): link resources during managed client registration (#11655) 2026-10-11 18:29:51 +00:00
Gustavo ValverdeandGitHub 1a9be41d18 feat(oauth-provider): allow client disable through admin update (#11654) 2026-10-10 14:52:35 +01:00
Gustavo ValverdeandGitHub 8409fb250d fix(scim): return 409 when concurrent updates claim the same unique key (#11669) 2026-10-10 11:38:31 +00:00
9904b29ece fix(kysely-adapter): allow concurrent queries on the D1 dialect (#11490)
Co-authored-by: Taesu <bytaesu@gmail.com>
2026-10-10 07:59:43 +00:00
e15625ff38 fix(better-auth): allow SvelteKit 3 as a peer dependency (#11488)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-09 16:33:41 +00:00
62146108c7 fix(oauth-provider): accept host-bearing custom-scheme native redirects (#10956)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-10-09 08:59:37 +01:00
07a09389ef fix(password): consume the reset token inside the reset transaction (#11646)
Co-authored-by: edenbuilds <279970382+edenbuilds@users.noreply.github.com>
Co-authored-by: omkar1work <omkar1work@gmail.com>
2026-10-09 06:44:53 +00:00
Gustavo ValverdeandGitHub 67743ed6e8 fix(password): revoke sessions and write the new password atomically (#11626) 2026-10-09 06:44:52 +00:00
Gustavo ValverdeandGitHub 92dfceaa14 fix(session): defer secondary-storage writes only when the database holds the session (#11643) 2026-10-09 06:44:52 +00:00
Gustavo ValverdeandGitHub a9f455d586 fix(core): run after-commit hooks when the transaction fallback rolls nothing back (#11645) 2026-10-09 06:44:51 +00:00
Gustavo ValverdeandGitHub f556970135 fix(scim): match attribute names case-insensitively (#11644) 2026-10-08 19:25:50 +01:00
39f09800b7 fix(scim): treat JSON null as unassigned in SCIM requests (#11638)
Co-authored-by: Jonathan Samines <jn.samines@gmail.com>
Co-authored-by: sufiyan733 <kanekigaming786@gmail.com>
2026-10-08 18:33:14 +01:00
666e1def97 chore(scim): ensure inactive SCIM user resources can be reactivated (#11167)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-08 16:59:55 +00:00
61f64f46ad fix(sso): reject mismatched OIDC issuers (#11438)
Co-authored-by: Taesu <bytaesu@gmail.com>
2026-10-08 16:25:31 +00:00
TaesuandGitHub b1cfc1ec1e fix(db): omit non-returned fields from output schema types (#11565) 2026-10-08 15:58:31 +00:00
DrewandGitHub 435645e5eb fix(core): name Atlassian in user info error log (#11592) 2026-10-09 00:09:41 +09:00
369176e7f6 fix(db): keep derived replay-marker ids under uuid and serial ids (#11625)
Co-authored-by: Chandan P <95340276+NoiceHax@users.noreply.github.com>
Co-authored-by: onmax <22072217+onmax@users.noreply.github.com>
2026-10-08 14:31:59 +00:00
Gustavo ValverdeandGitHub 2627237fae fix(organization): published types fail with skipLibCheck: false (#11637) 2026-10-08 14:30:44 +00:00
Gustavo ValverdeandGitHub a5d582aaff fix(mcp): keep McpOptions assignable to OAuthOptions under exactOptionalPropertyTypes (#11635) 2026-10-08 15:21:14 +01:00
TaesuandGitHub 0e1a9c8413 refactor(db): remove unnecessary any from toZodSchema (#11552) 2026-10-03 12:02:27 +09:00
193efff3d2 fix(custom-session): forward session cookie cleanup when session is null (#10591)
Co-authored-by: Taesu <bytaesu@gmail.com>
2026-10-03 02:33:45 +00:00
3d1f008ae3 fix(db): use static zod lookup in toZodSchema so locales tree-shake (#10866)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
2026-10-03 02:33:10 +00:00
352d04c8eb fix(custom-session): propagate session lookup errors (#11391)
Co-authored-by: arjunpkulkarni <arjunpkulkarni@gmail.com>
Co-authored-by: breken-ai <312387581+breken-ai@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
2026-10-03 01:11:33 +00:00
TaesuandGitHub 1bd5c37884 fix(last-login-method): keep defaults for undefined options (#11549) 2026-10-03 00:50:42 +00:00
TaesuandGitHub 678c555beb chore: bump better-call (#11540) 2026-10-03 08:38:30 +09:00
TaesuandGitHub 031ec9846c chore: bump tanstack start devDeps (#11539) 2026-10-02 22:23:42 +00:00
813326536c fix(mongodb-adapter): don't abort a transaction after commit was attempted (#11014)
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
2026-10-03 05:53:10 +09:00
72a6394e30 fix(stripe): bail out of checkout.session.completed for non-subscription modes (#9684)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
2026-10-01 18:15:28 +00:00
TaesuandGitHub 4175b34a8f fix(deps): align @better-auth/utils with better-call (#11512) 2026-10-01 15:14:19 +00:00