github-starred/better-auth
2
0
Fork 0
mirror of https://github.com/better-auth/better-auth.git synced 2026-05-23 07:18:56 -05:00
Code Issues 2.5k Packages Projects Releases 112 Wiki Activity

[GH-ISSUE #8447] BaseURL seems to be empty when using dynamic baseURL #19724

New Issue
Closed
opened 2026-04-15 19:03:06 -05:00 by GiteaMirror · 1 comment
GiteaMirror commented 2026-04-15 19:03:06 -05:00
Owner
Copy Link

Originally created by @JE4GLE on GitHub (Mar 6, 2026).
Original GitHub issue: https://github.com/better-auth/better-auth/issues/8447

Originally assigned to: @himself65 on GitHub.

To Reproduce

  1. Create Better-Auth Backend
  2. Try to integrated oauth authentication provider
  3. Open the .well-known/openid-configuration endpoint

Current vs. Expected behavior

baseURL is currently empty, while it should be set to {domain}/{basePath}.
This causes OAuth consumers to fail, because the URL is not complete.

What version of Better Auth are you using?

1.5.4

System info

{
  "system": {
    "platform": "darwin",
    "arch": "arm64",
    "version": "Darwin Kernel Version 25.3.0: Wed Jan 28 20:54:55 PST 2026; root:xnu-12377.91.3~2/RELEASE_ARM64_T6031",
    "release": "25.3.0",
    "cpuCount": 16,
    "cpuModel": "Apple M3 Max",
    "totalMemory": "64.00 GB",
    "freeMemory": "4.03 GB"
  },
  "node": {
    "version": "v25.2.1",
    "env": "development"
  },
  "packageManager": {
    "name": "npm",
    "version": "11.6.2"
  },
  "frameworks": null,
  "databases": null,
  "betterAuth": {
    "version": "Unknown",
    "config": null,
    "error": "ENOENT: no such file or directory, open 'package.json'"
  }
}

Which area(s) are affected? (Select all that apply)

Backend, Package

Auth config (if applicable)

import { betterAuth } from "better-auth"
export const auth = betterAuth({
  baseURL: {
    allowedHosts: [
      'localhost:*',
    ]
    fallback: 'http://localhost:5173',
  }
});

Additional context

BaseURL empty is in this line (and probably other ones):
184cf31e76/packages/oauth-provider/src/metadata.ts (L23-L27)

The baseURL is set here to an empty string:
184cf31e76/packages/better-auth/src/context/create-context.ts (L253-L255)

Because it is set to undefined here:
184cf31e76/packages/better-auth/src/context/create-context.ts (L129-L134)

Originally created by @JE4GLE on GitHub (Mar 6, 2026). Original GitHub issue: https://github.com/better-auth/better-auth/issues/8447 Originally assigned to: @himself65 on GitHub. ### To Reproduce 1. Create Better-Auth Backend 2. Try to integrated oauth authentication provider 3. Open the .well-known/openid-configuration endpoint ### Current vs. Expected behavior `baseURL` is currently empty, while it should be set to `{domain}/{basePath}`. This causes OAuth consumers to fail, because the URL is not complete. ### What version of Better Auth are you using? 1.5.4 ### System info ```json { "system": { "platform": "darwin", "arch": "arm64", "version": "Darwin Kernel Version 25.3.0: Wed Jan 28 20:54:55 PST 2026; root:xnu-12377.91.3~2/RELEASE_ARM64_T6031", "release": "25.3.0", "cpuCount": 16, "cpuModel": "Apple M3 Max", "totalMemory": "64.00 GB", "freeMemory": "4.03 GB" }, "node": { "version": "v25.2.1", "env": "development" }, "packageManager": { "name": "npm", "version": "11.6.2" }, "frameworks": null, "databases": null, "betterAuth": { "version": "Unknown", "config": null, "error": "ENOENT: no such file or directory, open 'package.json'" } } ``` ### Which area(s) are affected? (Select all that apply) Backend, Package ### Auth config (if applicable) ```typescript import { betterAuth } from "better-auth" export const auth = betterAuth({ baseURL: { allowedHosts: [ 'localhost:*', ] fallback: 'http://localhost:5173', } }); ``` ### Additional context BaseURL empty is in this line (and probably other ones): https://github.com/better-auth/better-auth/blob/184cf31e765bbacbc3f6180c5455c29803c7d5d9/packages/oauth-provider/src/metadata.ts#L23-L27 The baseURL is set here to an empty string: https://github.com/better-auth/better-auth/blob/184cf31e765bbacbc3f6180c5455c29803c7d5d9/packages/better-auth/src/context/create-context.ts#L253-L255 Because it is set to undefined here: https://github.com/better-auth/better-auth/blob/184cf31e765bbacbc3f6180c5455c29803c7d5d9/packages/better-auth/src/context/create-context.ts#L129-L134
GiteaMirror added the identitybug labels 2026-04-15 19:03:06 -05:00
GiteaMirror commented 2026-04-15 19:03:10 -05:00
Author
Owner
Copy Link

@j-fdion commented on GitHub (Mar 12, 2026):

@himself65 Wil your fix work for local dev work? If I have an app running on :3000 and another running :3001, will the latter still be able to use oauth Properly even if the fallback does not the match the app's address?

<!-- gh-comment-id:4046926945 --> @j-fdion commented on GitHub (Mar 12, 2026): @himself65 Wil your fix work for local dev work? If I have an app running on :3000 and another running :3001, will the latter still be able to use oauth Properly even if the fallback does not the match the app's address?
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
adapter
astro
awaiting external contributor
blocked
breaking
breaking change
bug
c-devops
core
credentials
database
dependencies
devops
devtools
docs
documentation
duplicate
elysia
enhancement
enterprise
expo
express
fastify
good first issue
help wanted
hono
identity
infra
integration
invalid
javascript
locked
maintenance
need-more-information
needs: info
needs: repro
nextjs
nuxt
oauth
organization
P0
payments
perf
platform
plugin
pull-request
Mirrored from GitHub Pull Request
 question
ready
regression
remix
security
social-provider
solid
stale
svelte
tanstack-start
tracking
version-bump
vue
wontfix
No Label bug identity
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/better-auth#19724
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?