github-starred/better-auth
2
0
Fork 0
mirror of https://github.com/better-auth/better-auth.git synced 2026-05-13 16:32:26 -05:00
Code Issues 2.5k Packages Projects Releases 112 Wiki Activity

[PR #4675] [MERGED] v1.3.10 #22422

New Issue
Closed
opened 2026-04-15 21:02:08 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-04-15 21:02:08 -05:00
Owner
Copy Link

📋 Pull Request Information

Original PR: https://github.com/better-auth/better-auth/pull/4675
Author: @himself65
Created: 9/15/2025
Status: ✅ Merged
Merged: 9/15/2025
Merged by: @himself65

Base: main ← Head: v1.3.10-staging

📝 Commits (10+)

  • cff7583 chore: release v1.3.9
  • 71aeb40 fix(tiktok): remove client_secrect from authorizationUrl (#4511)
  • 6353e3d e2e: integration test for solid-js (#4469)
  • bf264d5 chore(deps): update dorny/paths-filter action to v3.0.2 (#4506)
  • 8eb64f4 fix(multi-session): multi-session cookie name preface preventing multiple accounts signed in (#4505)
  • e2a959e fix: ignore cookiecache on auth sensitive functions (#4530)
  • 79051b1 docs: fix typos and improve grammar across multiple pages (#4519)
  • b531dbb fix(stripe): properly resolve plans by lookup keys (#4499)
  • 7d6d4da feat: add search functionality to mobile navigation (#4487)
  • f2c9df4 feat(sqlite): remove autoincrement for SQLite (#4466)

📊 Changes

217 files changed (+6411 additions, -3696 deletions)

View changed files

📝 .github/workflows/branch-rules.yml (+1 -1)
📝 .github/workflows/ci.yml (+2 -2)
📝 .github/workflows/e2e.yml (+3 -2)
📝 .github/workflows/preview.yml (+1 -1)
📝 .github/workflows/release.yml (+2 -2)
📝 .gitignore (+2 -0)
📝 .npmrc (+0 -1)
📝 biome.json (+3 -2)
📝 demo/nextjs/components/sign-in.tsx (+4 -1)
📝 demo/nextjs/lib/auth-client.ts (+2 -0)
📝 demo/nextjs/package.json (+2 -5)
📝 docs/content/docs/adapters/mongo.mdx (+4 -1)
📝 docs/content/docs/basic-usage.mdx (+2 -2)
📝 docs/content/docs/concepts/api.mdx (+6 -6)
📝 docs/content/docs/concepts/cli.mdx (+7 -7)
📝 docs/content/docs/concepts/client.mdx (+4 -4)
📝 docs/content/docs/concepts/cookies.mdx (+6 -5)
📝 docs/content/docs/guides/create-a-db-adapter.mdx (+10 -0)
📝 docs/content/docs/plugins/last-login-method.mdx (+10 -0)
📝 docs/content/docs/plugins/oidc-provider.mdx (+1 -3)

...and 80 more files

📄 Description

Summary by cubic

Release v1.3.10 adds transaction support across adapters, strengthens session security (cookie cache + sensitive endpoints), and expands test coverage with a Solid Start/Vinxi E2E app. It also fixes endpoint conflict detection, OAuth clientId handling, and several client and Stripe issues.

  • New Features

    • Database transactions in Prisma, Drizzle, Kysely, MongoDB, and Memory adapters (configurable; MongoDB can enable via client).
    • Sensitive session middleware that bypasses cookie cache for actions like password changes.
    • Cookie cache honors “remember me” (don’t set max-age when not remembered).
    • New logger option: disableColors.
    • Organization API: getActiveMemberRole, plus client hooks useActiveMember/useActiveMemberRole.
    • E2E: add Solid Start/Vinxi app and shared test-utils; migrations use jsonb on Postgres and no autoincrement for SQLite number IDs.

  • Bug Fixes

    • Endpoint conflict check now considers HTTP methods (same path allowed with different methods).
    • Vue client uses the correct baseURL for get-session; client config exposes baseURL getter.
    • OAuth: use the first clientId when an array is provided; fix Basic auth header.
    • Email verification preserves encoded query params in redirects.
    • Stripe: prevent multiple free trials per user; fix plan lookup and billing-portal method.
    • Memory adapter respects where connectors; cookie cache respected on sign-in with dontRememberMe.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/better-auth/better-auth/pull/4675 **Author:** [@himself65](https://github.com/himself65) **Created:** 9/15/2025 **Status:** ✅ Merged **Merged:** 9/15/2025 **Merged by:** [@himself65](https://github.com/himself65) **Base:** `main` ← **Head:** `v1.3.10-staging` --- ### 📝 Commits (10+) - [`cff7583`](https://github.com/better-auth/better-auth/commit/cff7583864c453d0e7ef8c6c9413271dcac11a0c) chore: release v1.3.9 - [`71aeb40`](https://github.com/better-auth/better-auth/commit/71aeb402036de36bf62ca9270759ac7be93cacb6) fix(tiktok): remove `client_secrect` from authorizationUrl (#4511) - [`6353e3d`](https://github.com/better-auth/better-auth/commit/6353e3da0217024bb361263614164f46d90e0957) e2e: integration test for solid-js (#4469) - [`bf264d5`](https://github.com/better-auth/better-auth/commit/bf264d5ebb91e35c19cc9356be21d5cd73ecb089) chore(deps): update dorny/paths-filter action to v3.0.2 (#4506) - [`8eb64f4`](https://github.com/better-auth/better-auth/commit/8eb64f45674c51e9bf0c6970719f823704a7ccd1) fix(multi-session): multi-session cookie name preface preventing multiple accounts signed in (#4505) - [`e2a959e`](https://github.com/better-auth/better-auth/commit/e2a959eefe4af026e781a33861b313e480fd4ccb) fix: ignore cookiecache on auth sensitive functions (#4530) - [`79051b1`](https://github.com/better-auth/better-auth/commit/79051b1aa1e273332286e555869f950185be321b) docs: fix typos and improve grammar across multiple pages (#4519) - [`b531dbb`](https://github.com/better-auth/better-auth/commit/b531dbb272b83a067e74a494748c42181e7a2273) fix(stripe): properly resolve plans by lookup keys (#4499) - [`7d6d4da`](https://github.com/better-auth/better-auth/commit/7d6d4da92be02b7f298ad10c07934e55ffdfedb2) feat: add search functionality to mobile navigation (#4487) - [`f2c9df4`](https://github.com/better-auth/better-auth/commit/f2c9df48111e5ce1659cc171bea23892782fc8c6) feat(sqlite): remove autoincrement for SQLite (#4466) ### 📊 Changes **217 files changed** (+6411 additions, -3696 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/branch-rules.yml` (+1 -1) 📝 `.github/workflows/ci.yml` (+2 -2) 📝 `.github/workflows/e2e.yml` (+3 -2) 📝 `.github/workflows/preview.yml` (+1 -1) 📝 `.github/workflows/release.yml` (+2 -2) 📝 `.gitignore` (+2 -0) 📝 `.npmrc` (+0 -1) 📝 `biome.json` (+3 -2) 📝 `demo/nextjs/components/sign-in.tsx` (+4 -1) 📝 `demo/nextjs/lib/auth-client.ts` (+2 -0) 📝 `demo/nextjs/package.json` (+2 -5) 📝 `docs/content/docs/adapters/mongo.mdx` (+4 -1) 📝 `docs/content/docs/basic-usage.mdx` (+2 -2) 📝 `docs/content/docs/concepts/api.mdx` (+6 -6) 📝 `docs/content/docs/concepts/cli.mdx` (+7 -7) 📝 `docs/content/docs/concepts/client.mdx` (+4 -4) 📝 `docs/content/docs/concepts/cookies.mdx` (+6 -5) 📝 `docs/content/docs/guides/create-a-db-adapter.mdx` (+10 -0) 📝 `docs/content/docs/plugins/last-login-method.mdx` (+10 -0) 📝 `docs/content/docs/plugins/oidc-provider.mdx` (+1 -3) _...and 80 more files_ </details> ### 📄 Description <!-- This is an auto-generated description by cubic. --> ## Summary by cubic Release v1.3.10 adds transaction support across adapters, strengthens session security (cookie cache + sensitive endpoints), and expands test coverage with a Solid Start/Vinxi E2E app. It also fixes endpoint conflict detection, OAuth clientId handling, and several client and Stripe issues. - New Features - Database transactions in Prisma, Drizzle, Kysely, MongoDB, and Memory adapters (configurable; MongoDB can enable via client). - Sensitive session middleware that bypasses cookie cache for actions like password changes. - Cookie cache honors “remember me” (don’t set max-age when not remembered). - New logger option: disableColors. - Organization API: getActiveMemberRole, plus client hooks useActiveMember/useActiveMemberRole. - E2E: add Solid Start/Vinxi app and shared test-utils; migrations use jsonb on Postgres and no autoincrement for SQLite number IDs. - Bug Fixes - Endpoint conflict check now considers HTTP methods (same path allowed with different methods). - Vue client uses the correct baseURL for get-session; client config exposes baseURL getter. - OAuth: use the first clientId when an array is provided; fix Basic auth header. - Email verification preserves encoded query params in redirects. - Stripe: prevent multiple free trials per user; fix plan lookup and billing-portal method. - Memory adapter respects where connectors; cookie cache respected on sign-in with dontRememberMe. <!-- End of auto-generated description by cubic. --> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-15 21:02:08 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
adapter
astro
awaiting external contributor
blocked
breaking
breaking change
bug
c-devops
core
credentials
database
dependencies
devops
devtools
docs
documentation
duplicate
elysia
enhancement
enterprise
expo
express
fastify
good first issue
help wanted
hono
identity
infra
integration
invalid
javascript
locked
maintenance
need-more-information
needs: info
needs: repro
nextjs
nuxt
oauth
organization
P0
payments
perf
platform
plugin
pull-request
Mirrored from GitHub Pull Request
 question
ready
regression
remix
security
social-provider
solid
stale
svelte
tanstack-start
tracking
version-bump
vue
wontfix
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/better-auth#22422
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?