github-starred/better-auth
2
0
Fork 0
mirror of https://github.com/better-auth/better-auth.git synced 2026-05-23 07:18:56 -05:00
Code Issues 2.5k Packages Projects Releases 112 Wiki Activity

[PR #6667] [CLOSED] feat(auth): add verifyPassword endpoint and documentation #23713

New Issue
Closed
opened 2026-04-15 21:55:50 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-04-15 21:55:50 -05:00
Owner
Copy Link

📋 Pull Request Information

Original PR: https://github.com/better-auth/better-auth/pull/6667
Author: @SaviruFr
Created: 12/10/2025
Status: ❌ Closed

Base: canary ← Head: feat/password

📝 Commits (10+)

  • 7a9a951 feat(auth): add verifyPassword endpoint
  • b1e2ec2 docs: add documentation for verifyPassword function
  • 70006ce Merge branch 'canary' into feat/password
  • acd731d chore(refactor): use existing validatePassword utility in verifyPassword endpoint
  • 81cf3de Merge branch 'canary' into feat/password
  • 8a2008f Merge branch 'canary' into feat/password
  • 5c7feb6 Merge branch 'canary' into feat/password
  • b816696 chore: migrate verifyPassword endpoint to new scope metadata
  • 32e09ae Merge branch 'canary' into feat/password
  • e8b4f7f Merge branch 'canary' into feat/password

📊 Changes

59 files changed (+1192 additions, -684 deletions)

View changed files

📝 .cspell.jsonc (+3 -0)
📝 .github/workflows/e2e.yml (+1 -1)
➕ demo/nextjs/app/(auth)/reset-password/loading.tsx (+13 -0)
📝 demo/nextjs/package.json (+2 -3)
📝 demo/oidc-client/package.json (+2 -2)
📝 demo/stateless/package.json (+2 -2)
📝 docs/content/docs/concepts/users-accounts.mdx (+15 -0)
📝 docs/content/docs/plugins/api-key.mdx (+53 -0)
📝 docs/content/docs/plugins/organization.mdx (+1 -1)
📝 docs/content/docs/plugins/username.mdx (+1 -1)
📝 docs/package.json (+3 -3)
➕ e2e/smoke/test/types.spec.ts (+17 -0)
📝 packages/better-auth/package.json (+1 -1)
📝 packages/better-auth/src/adapters/mongodb-adapter/mongodb-adapter.ts (+1 -1)
📝 packages/better-auth/src/api/index.ts (+2 -0)
📝 packages/better-auth/src/api/routes/email-verification.ts (+36 -26)
📝 packages/better-auth/src/api/routes/index.ts (+1 -1)
📝 packages/better-auth/src/api/routes/password.test.ts (+75 -0)
📝 packages/better-auth/src/api/routes/password.ts (+65 -6)
📝 packages/better-auth/src/api/routes/sign-in.ts (+9 -7)

...and 39 more files

📄 Description

Adds a server only verifyPassword endpoint for checking a user's current password. Fixes #6657

Summary by cubic

Adds a server-only verifyPassword API endpoint to confirm a user's current password before sensitive actions. Updates docs with usage and guidance for OAuth-only accounts.

  • New Features
    • Added POST /verify-password endpoint (server-only) to auth.api.
    • Requires session headers; uses sensitiveSessionMiddleware.
    • Uses validatePassword to check the current password; returns { status: true } or BAD_REQUEST on invalid password.
    • Exported in API index; docs include usage example and an OAuth caveat.

Written for commit ceed1edcba. Summary will update automatically on new commits.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/better-auth/better-auth/pull/6667 **Author:** [@SaviruFr](https://github.com/SaviruFr) **Created:** 12/10/2025 **Status:** ❌ Closed **Base:** `canary` ← **Head:** `feat/password` --- ### 📝 Commits (10+) - [`7a9a951`](https://github.com/better-auth/better-auth/commit/7a9a9516a03a072179acb4f7623c1c7d555e02af) feat(auth): add verifyPassword endpoint - [`b1e2ec2`](https://github.com/better-auth/better-auth/commit/b1e2ec2034ee7772c7afdf818bce3c8e789bbc80) docs: add documentation for verifyPassword function - [`70006ce`](https://github.com/better-auth/better-auth/commit/70006ce0fbac22809c772d3ef7761cf87287de51) Merge branch 'canary' into feat/password - [`acd731d`](https://github.com/better-auth/better-auth/commit/acd731dd4525ce3f7a63b76662b82099e0b55201) chore(refactor): use existing validatePassword utility in verifyPassword endpoint - [`81cf3de`](https://github.com/better-auth/better-auth/commit/81cf3de8985003ce931f480f6d82f7bfe995c026) Merge branch 'canary' into feat/password - [`8a2008f`](https://github.com/better-auth/better-auth/commit/8a2008f8063cb25dcf000ddf2db676411f70351b) Merge branch 'canary' into feat/password - [`5c7feb6`](https://github.com/better-auth/better-auth/commit/5c7feb613bd59cc233277112c339afd8cb4d9485) Merge branch 'canary' into feat/password - [`b816696`](https://github.com/better-auth/better-auth/commit/b8166969e9b203e329381e143e2dd7df0ea253e0) chore: migrate verifyPassword endpoint to new scope metadata - [`32e09ae`](https://github.com/better-auth/better-auth/commit/32e09ae7c3cf7e8b47f254a1d3d4d3d4bff01ec4) Merge branch 'canary' into feat/password - [`e8b4f7f`](https://github.com/better-auth/better-auth/commit/e8b4f7f52004c8f629648bd518ada0681fb17aae) Merge branch 'canary' into feat/password ### 📊 Changes **59 files changed** (+1192 additions, -684 deletions) <details> <summary>View changed files</summary> 📝 `.cspell.jsonc` (+3 -0) 📝 `.github/workflows/e2e.yml` (+1 -1) ➕ `demo/nextjs/app/(auth)/reset-password/loading.tsx` (+13 -0) 📝 `demo/nextjs/package.json` (+2 -3) 📝 `demo/oidc-client/package.json` (+2 -2) 📝 `demo/stateless/package.json` (+2 -2) 📝 `docs/content/docs/concepts/users-accounts.mdx` (+15 -0) 📝 `docs/content/docs/plugins/api-key.mdx` (+53 -0) 📝 `docs/content/docs/plugins/organization.mdx` (+1 -1) 📝 `docs/content/docs/plugins/username.mdx` (+1 -1) 📝 `docs/package.json` (+3 -3) ➕ `e2e/smoke/test/types.spec.ts` (+17 -0) 📝 `packages/better-auth/package.json` (+1 -1) 📝 `packages/better-auth/src/adapters/mongodb-adapter/mongodb-adapter.ts` (+1 -1) 📝 `packages/better-auth/src/api/index.ts` (+2 -0) 📝 `packages/better-auth/src/api/routes/email-verification.ts` (+36 -26) 📝 `packages/better-auth/src/api/routes/index.ts` (+1 -1) 📝 `packages/better-auth/src/api/routes/password.test.ts` (+75 -0) 📝 `packages/better-auth/src/api/routes/password.ts` (+65 -6) 📝 `packages/better-auth/src/api/routes/sign-in.ts` (+9 -7) _...and 39 more files_ </details> ### 📄 Description Adds a server only verifyPassword endpoint for checking a user's current password. Fixes #6657 <!-- This is an auto-generated description by cubic. --> --- ## Summary by cubic Adds a server-only verifyPassword API endpoint to confirm a user's current password before sensitive actions. Updates docs with usage and guidance for OAuth-only accounts. - **New Features** - Added POST /verify-password endpoint (server-only) to auth.api. - Requires session headers; uses sensitiveSessionMiddleware. - Uses validatePassword to check the current password; returns { status: true } or BAD_REQUEST on invalid password. - Exported in API index; docs include usage example and an OAuth caveat. <sup>Written for commit ceed1edcba15218b496cb841b1537e81a8235198. Summary will update automatically on new commits.</sup> <!-- End of auto-generated description by cubic. --> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-15 21:55:50 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
adapter
astro
awaiting external contributor
blocked
breaking
breaking change
bug
c-devops
core
credentials
database
dependencies
devops
devtools
docs
documentation
duplicate
elysia
enhancement
enterprise
expo
express
fastify
good first issue
help wanted
hono
identity
infra
integration
invalid
javascript
locked
maintenance
need-more-information
needs: info
needs: repro
nextjs
nuxt
oauth
organization
P0
payments
perf
platform
plugin
pull-request
Mirrored from GitHub Pull Request
 question
ready
regression
remix
security
social-provider
solid
stale
svelte
tanstack-start
tracking
version-bump
vue
wontfix
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/better-auth#23713
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?