[PR #9073] [MERGED] chore: release v1.7.0-beta.0 #25319

New Issue

GiteaMirror · 2026-04-15T22:49:54-05:00

GiteaMirror commented

2026-04-15 22:49:54 -05:00

📋 Pull Request Information

Original PR: https://github.com/better-auth/better-auth/pull/9073
Author: @better-release[bot]
Created: 4/9/2026
Status: ✅ Merged
Merged: 4/10/2026
Merged by: @gustavovalverde

Base: next ← Head: changeset-release/next

📝 Commits (1)

2914da7 chore: release (beta)

📊 Changes

41 files changed (+260 additions, -21 deletions)

View changed files

📝 .changeset/pre.json (+11 -1)
📝 packages/api-key/CHANGELOG.md (+8 -0)
📝 packages/api-key/package.json (+1 -1)
📝 packages/better-auth/CHANGELOG.md (+42 -0)
📝 packages/better-auth/package.json (+1 -1)
📝 packages/cli/CHANGELOG.md (+11 -0)
📝 packages/cli/package.json (+1 -1)
📝 packages/core/CHANGELOG.md (+6 -0)
📝 packages/core/package.json (+1 -1)
📝 packages/drizzle-adapter/CHANGELOG.md (+7 -0)
📝 packages/drizzle-adapter/package.json (+1 -1)
📝 packages/electron/CHANGELOG.md (+8 -0)
📝 packages/electron/package.json (+1 -1)
📝 packages/expo/CHANGELOG.md (+8 -0)
📝 packages/expo/package.json (+1 -1)
📝 packages/i18n/CHANGELOG.md (+8 -0)
📝 packages/i18n/package.json (+1 -1)
📝 packages/kysely-adapter/CHANGELOG.md (+7 -0)
📝 packages/kysely-adapter/package.json (+1 -1)
📝 packages/memory-adapter/CHANGELOG.md (+7 -0)

...and 21 more files

📄 Description

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to next, this PR will be updated.

⚠️⚠️⚠️⚠️⚠️⚠️

next is currently in pre mode so this branch has prereleases rather than normal releases. If you want to exit prereleases, run changeset pre exit on next.

⚠️⚠️⚠️⚠️⚠️⚠️

Releases

better-auth@1.7.0-beta.0

Minor Changes

#8836 93d3871 Thanks @gustavovalverde! - Add private_key_jwt (RFC 7523) client authentication across the stack. Servers verify JWT client assertions signed with asymmetric keys; clients sign them for authorization code, refresh, and client credentials flows.
#9057 544f1c6 Thanks @gustavovalverde! - feat(two-factor)!: add OTP-only enablement and remove skipVerificationOnEnable

enableTwoFactor now accepts a method parameter ("otp" | "totp", default "totp") and returns a discriminated response with a method field.

method: "otp"
- Sets twoFactorEnabled: true immediately.
- Returns { method: "otp" }.
- Requires otpOptions.sendOTP to be configured on the server; rejects with OTP_NOT_CONFIGURED otherwise.
method: "totp" (default)
- Returns { method: "totp", totpURI, backupCodes }.
- Rejects with TOTP_NOT_CONFIGURED if totpOptions.disable is set.
Breaking changes
- Removed skipVerificationOnEnable: use method: "otp" for immediate activation, or the standard TOTP verification flow.
- Response shape changed: enableTwoFactor includes a method field in the response ("otp" or "totp").

Patch Changes

#9072 6ce30cf Thanks @ramonclaudio! - fix(api): align top-level operationId on requestPasswordResetCallback with the OpenAPI resetPasswordCallback
#8389 f6428d0 Thanks @Oluwatobi-Mustapha! - fix(open-api): correct get-session nullable schema for OAS 3.1
#8926 c5066fe Thanks @bytaesu! - omit quantity for metered prices in checkout and upgrades
#9084 5f84335 Thanks @bytaesu! - support Stripe SDK v21 and v22
Updated dependencies [93d3871]:
- @better-auth/core@1.7.0-beta.0
- @better-auth/drizzle-adapter@1.7.0-beta.0
- @better-auth/kysely-adapter@1.7.0-beta.0
- @better-auth/memory-adapter@1.7.0-beta.0
- @better-auth/mongo-adapter@1.7.0-beta.0
- @better-auth/prisma-adapter@1.7.0-beta.0
- @better-auth/telemetry@1.7.0-beta.0

@better-auth/core@1.7.0-beta.0

Minor Changes

#8836 93d3871 Thanks @gustavovalverde! - Add private_key_jwt (RFC 7523) client authentication across the stack. Servers verify JWT client assertions signed with asymmetric keys; clients sign them for authorization code, refresh, and client credentials flows.

@better-auth/oauth-provider@1.7.0-beta.0

Minor Changes

#8836 93d3871 Thanks @gustavovalverde! - Add private_key_jwt (RFC 7523) client authentication across the stack. Servers verify JWT client assertions signed with asymmetric keys; clients sign them for authorization code, refresh, and client credentials flows.

Patch Changes

Updated dependencies [6ce30cf, f6428d0, c5066fe, 5f84335, 93d3871, 544f1c6]:
- better-auth@1.7.0-beta.0
- @better-auth/core@1.7.0-beta.0

@better-auth/sso@1.7.0-beta.0

Minor Changes

#8836 93d3871 Thanks @gustavovalverde! - Add private_key_jwt (RFC 7523) client authentication across the stack. Servers verify JWT client assertions signed with asymmetric keys; clients sign them for authorization code, refresh, and client credentials flows.
#9055 b790144 Thanks @gustavovalverde! - fix(sso)!: harden SAML response validation (InResponseTo, Audience, SessionIndex)

Breaking Changes
- allowIdpInitiated now defaults to false — IdP-initiated SSO (unsolicited SAML responses) is disabled by default. Set saml.allowIdpInitiated: true to restore the previous behavior. This aligns with the SAML2Int interoperability profile which recommends against IdP-initiated SSO due to its susceptibility to injection attacks.
Bug Fixes
- InResponseTo validation was completely non-functional — The code read extract.inResponseTo (always undefined) instead of samlify's actual path extract.response.inResponseTo. SP-initiated InResponseTo validation now works as intended in both ACS handlers.
- Audience Restriction was never validated — SAML assertions issued for a different service provider were accepted without checking the <AudienceRestriction> element. Audience is now validated against the configured samlConfig.audience value per SAML 2.0 Core §2.5.1.
- SessionIndex stored as object instead of string — samlify returns sessionIndex from login responses as { authnInstant, sessionNotOnOrAfter, sessionIndex }, but the code stored the whole object. SLO session-index comparisons always failed silently. The correct inner sessionIndex string is now extracted.
Improvements
- Extracted shared validateInResponseTo() and validateAudience() into packages/sso/src/saml/response-validation.ts, eliminating ~160 lines of duplicated validation logic between the two ACS handlers.
- Fixed SAMLAssertionExtract type to match samlify's actual extractor output shape.

Patch Changes

#9097 52c4751 Thanks @gustavovalverde! - fix(sso): unify SAML response processing and fix provider/config bugs

Bug fixes:
- Fix SP metadata endpoint using internal row ID instead of providerId in ACS URL
- Fix acsEndpoint skipping DB provider lookup when defaultSSO is configured
- Fix acsEndpoint missing encryption fields (isAssertionEncrypted, encPrivateKey), which caused silent decryption failures
- Fix defaultSSO config parsing in callback path (safeJsonParse on already-parsed objects)
- Fix createSP missing callbackUrl fallback to auto-generated ACS URL
- Complete createSP/createIdP helpers with all encryption and signing fields
Behavioral changes:
- ACS error redirect query parameters now use uppercase error codes (e.g. error=SAML_MULTIPLE_ASSERTIONS instead of error=multiple_assertions). If your application parses these error codes from the redirect URL, update the expected values.
- SAML provider registration now rejects configs with no usable IdP entry point (no valid entryPoint URL, no idpMetadata.metadata, and no idpMetadata.singleSignOnService). Previously these would register successfully but fail at sign-in.
- entryPoint validation tightened from startsWith("http") to new URL() parsing, rejecting malformed URLs like http:evil or http//missing-colon.
Refactoring (no API changes):
- Extract shared processSAMLResponse pipeline to eliminate ~500 lines of duplicated logic between callbackSSOSAML and acsEndpoint
- Move validateSAMLTimestamp to saml/timestamp.ts (re-exported from original location for compatibility)
Updated dependencies [6ce30cf, f6428d0, c5066fe, 5f84335, 93d3871, 544f1c6]:
- better-auth@1.7.0-beta.0
- @better-auth/core@1.7.0-beta.0

@better-auth/api-key@1.7.0-beta.0

Patch Changes

Updated dependencies [6ce30cf, f6428d0, c5066fe, 5f84335, 93d3871, 544f1c6]:
- better-auth@1.7.0-beta.0
- @better-auth/core@1.7.0-beta.0

auth@1.7.0-beta.0

Patch Changes

#9032 4673c6d Thanks @bytaesu! - fix tsconfig path alias resolution for extended configs and mid-path wildcards
Updated dependencies [6ce30cf, f6428d0, c5066fe, 5f84335, 93d3871, 544f1c6]:
- better-auth@1.7.0-beta.0
- @better-auth/core@1.7.0-beta.0
- @better-auth/telemetry@1.7.0-beta.0

@better-auth/drizzle-adapter@1.7.0-beta.0

Patch Changes

Updated dependencies [93d3871]:
- @better-auth/core@1.7.0-beta.0

@better-auth/electron@1.7.0-beta.0

Patch Changes

Updated dependencies [6ce30cf, f6428d0, c5066fe, 5f84335, 93d3871, 544f1c6]:
- better-auth@1.7.0-beta.0
- @better-auth/core@1.7.0-beta.0

@better-auth/expo@1.7.0-beta.0

Patch Changes

Updated dependencies [6ce30cf, f6428d0, c5066fe, 5f84335, 93d3871, 544f1c6]:
- better-auth@1.7.0-beta.0
- @better-auth/core@1.7.0-beta.0

@better-auth/i18n@1.7.0-beta.0

Patch Changes

Updated dependencies [6ce30cf, f6428d0, c5066fe, 5f84335, 93d3871, 544f1c6]:
- better-auth@1.7.0-beta.0
- @better-auth/core@1.7.0-beta.0

@better-auth/kysely-adapter@1.7.0-beta.0

Patch Changes

Updated dependencies [93d3871]:
- @better-auth/core@1.7.0-beta.0

@better-auth/memory-adapter@1.7.0-beta.0

Patch Changes

Updated dependencies [93d3871]:
- @better-auth/core@1.7.0-beta.0

@better-auth/mongo-adapter@1.7.0-beta.0

Patch Changes

Updated dependencies [93d3871]:
- @better-auth/core@1.7.0-beta.0

@better-auth/passkey@1.7.0-beta.0

Patch Changes

Updated dependencies [6ce30cf, f6428d0, c5066fe, 5f84335, 93d3871, 544f1c6]:
- better-auth@1.7.0-beta.0
- @better-auth/core@1.7.0-beta.0

@better-auth/prisma-adapter@1.7.0-beta.0

Patch Changes

Updated dependencies [93d3871]:
- @better-auth/core@1.7.0-beta.0

@better-auth/redis-storage@1.7.0-beta.0

Patch Changes

Updated dependencies [93d3871]:
- @better-auth/core@1.7.0-beta.0

@better-auth/scim@1.7.0-beta.0

Patch Changes

Updated dependencies [6ce30cf, f6428d0, c5066fe, 5f84335, 93d3871, 544f1c6]:
- better-auth@1.7.0-beta.0
- @better-auth/core@1.7.0-beta.0

@better-auth/stripe@1.7.0-beta.0

Patch Changes

Updated dependencies [6ce30cf, f6428d0, c5066fe, 5f84335, 93d3871, 544f1c6]:
- better-auth@1.7.0-beta.0
- @better-auth/core@1.7.0-beta.0

@better-auth/telemetry@1.7.0-beta.0

Patch Changes

Updated dependencies [93d3871]:
- @better-auth/core@1.7.0-beta.0

@better-auth/test-utils@1.7.0-beta.0

Patch Changes

Updated dependencies [6ce30cf, f6428d0, c5066fe, 5f84335, 93d3871, 544f1c6]:
- better-auth@1.7.0-beta.0
- @better-auth/core@1.7.0-beta.0

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/better-auth/better-auth/pull/9073 **Author:** [@better-release[bot]](https://github.com/apps/better-release) **Created:** 4/9/2026 **Status:** ✅ Merged **Merged:** 4/10/2026 **Merged by:** [@gustavovalverde](https://github.com/gustavovalverde) **Base:** `next` ← **Head:** `changeset-release/next` --- ### 📝 Commits (1) - [`2914da7`](https://github.com/better-auth/better-auth/commit/2914da7a0fea6023bc906dbeee162601cf541d50) chore: release (beta) ### 📊 Changes **41 files changed** (+260 additions, -21 deletions) <details> <summary>View changed files</summary> 📝 `.changeset/pre.json` (+11 -1) 📝 `packages/api-key/CHANGELOG.md` (+8 -0) 📝 `packages/api-key/package.json` (+1 -1) 📝 `packages/better-auth/CHANGELOG.md` (+42 -0) 📝 `packages/better-auth/package.json` (+1 -1) 📝 `packages/cli/CHANGELOG.md` (+11 -0) 📝 `packages/cli/package.json` (+1 -1) 📝 `packages/core/CHANGELOG.md` (+6 -0) 📝 `packages/core/package.json` (+1 -1) 📝 `packages/drizzle-adapter/CHANGELOG.md` (+7 -0) 📝 `packages/drizzle-adapter/package.json` (+1 -1) 📝 `packages/electron/CHANGELOG.md` (+8 -0) 📝 `packages/electron/package.json` (+1 -1) 📝 `packages/expo/CHANGELOG.md` (+8 -0) 📝 `packages/expo/package.json` (+1 -1) 📝 `packages/i18n/CHANGELOG.md` (+8 -0) 📝 `packages/i18n/package.json` (+1 -1) 📝 `packages/kysely-adapter/CHANGELOG.md` (+7 -0) 📝 `packages/kysely-adapter/package.json` (+1 -1) 📝 `packages/memory-adapter/CHANGELOG.md` (+7 -0) _...and 21 more files_ </details> ### 📄 Description This PR was opened by the [Changesets release](https://github.com/changesets/action) GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to next, this PR will be updated. ⚠️⚠️⚠️⚠️⚠️⚠️ `next` is currently in **pre mode** so this branch has prereleases rather than normal releases. If you want to exit prereleases, run `changeset pre exit` on `next`. ⚠️⚠️⚠️⚠️⚠️⚠️ # Releases ## better-auth@1.7.0-beta.0 ### Minor Changes - [#8836](https://github.com/better-auth/better-auth/pull/8836) [`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - Add `private_key_jwt` (RFC 7523) client authentication across the stack. Servers verify JWT client assertions signed with asymmetric keys; clients sign them for authorization code, refresh, and client credentials flows. - [#9057](https://github.com/better-auth/better-auth/pull/9057) [`544f1c6`](https://github.com/better-auth/better-auth/commit/544f1c63c9826831d96a126fbe568d8a8a8fde68) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - feat(two-factor)!: add OTP-only enablement and remove `skipVerificationOnEnable` `enableTwoFactor` now accepts a `method` parameter (`"otp" | "totp"`, default `"totp"`) and returns a discriminated response with a `method` field. ### `method: "otp"` - Sets `twoFactorEnabled: true` immediately. - Returns `{ method: "otp" }`. - Requires `otpOptions.sendOTP` to be configured on the server; rejects with `OTP_NOT_CONFIGURED` otherwise. ### `method: "totp"` (default) - Returns `{ method: "totp", totpURI, backupCodes }`. - Rejects with `TOTP_NOT_CONFIGURED` if `totpOptions.disable` is set. ### Breaking changes - **Removed `skipVerificationOnEnable`**: use `method: "otp"` for immediate activation, or the standard TOTP verification flow. - **Response shape changed**: `enableTwoFactor` includes a `method` field in the response (`"otp"` or `"totp"`). ### Patch Changes - [#9072](https://github.com/better-auth/better-auth/pull/9072) [`6ce30cf`](https://github.com/better-auth/better-auth/commit/6ce30cf13853619b9022e93bd6ecb956bc32482d) Thanks [@ramonclaudio](https://github.com/ramonclaudio)! - fix(api): align top-level `operationId` on `requestPasswordResetCallback` with the OpenAPI `resetPasswordCallback` - [#8389](https://github.com/better-auth/better-auth/pull/8389) [`f6428d0`](https://github.com/better-auth/better-auth/commit/f6428d02fcabc2e628f39b0e402f1a6eb0602649) Thanks [@Oluwatobi-Mustapha](https://github.com/Oluwatobi-Mustapha)! - fix(open-api): correct get-session nullable schema for OAS 3.1 - [#8926](https://github.com/better-auth/better-auth/pull/8926) [`c5066fe`](https://github.com/better-auth/better-auth/commit/c5066fe5d68babf2376cfc63d813de5542eca463) Thanks [@bytaesu](https://github.com/bytaesu)! - omit quantity for metered prices in checkout and upgrades - [#9084](https://github.com/better-auth/better-auth/pull/9084) [`5f84335`](https://github.com/better-auth/better-auth/commit/5f84335815d75410320bdfa665a6712d3416b04f) Thanks [@bytaesu](https://github.com/bytaesu)! - support Stripe SDK v21 and v22 - Updated dependencies \[[`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656)]: - @better-auth/core@1.7.0-beta.0 - @better-auth/drizzle-adapter@1.7.0-beta.0 - @better-auth/kysely-adapter@1.7.0-beta.0 - @better-auth/memory-adapter@1.7.0-beta.0 - @better-auth/mongo-adapter@1.7.0-beta.0 - @better-auth/prisma-adapter@1.7.0-beta.0 - @better-auth/telemetry@1.7.0-beta.0 ## @better-auth/core@1.7.0-beta.0 ### Minor Changes - [#8836](https://github.com/better-auth/better-auth/pull/8836) [`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - Add `private_key_jwt` (RFC 7523) client authentication across the stack. Servers verify JWT client assertions signed with asymmetric keys; clients sign them for authorization code, refresh, and client credentials flows. ## @better-auth/oauth-provider@1.7.0-beta.0 ### Minor Changes - [#8836](https://github.com/better-auth/better-auth/pull/8836) [`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - Add `private_key_jwt` (RFC 7523) client authentication across the stack. Servers verify JWT client assertions signed with asymmetric keys; clients sign them for authorization code, refresh, and client credentials flows. ### Patch Changes - Updated dependencies \[[`6ce30cf`](https://github.com/better-auth/better-auth/commit/6ce30cf13853619b9022e93bd6ecb956bc32482d), [`f6428d0`](https://github.com/better-auth/better-auth/commit/f6428d02fcabc2e628f39b0e402f1a6eb0602649), [`c5066fe`](https://github.com/better-auth/better-auth/commit/c5066fe5d68babf2376cfc63d813de5542eca463), [`5f84335`](https://github.com/better-auth/better-auth/commit/5f84335815d75410320bdfa665a6712d3416b04f), [`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656), [`544f1c6`](https://github.com/better-auth/better-auth/commit/544f1c63c9826831d96a126fbe568d8a8a8fde68)]: - better-auth@1.7.0-beta.0 - @better-auth/core@1.7.0-beta.0 ## @better-auth/sso@1.7.0-beta.0 ### Minor Changes - [#8836](https://github.com/better-auth/better-auth/pull/8836) [`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - Add `private_key_jwt` (RFC 7523) client authentication across the stack. Servers verify JWT client assertions signed with asymmetric keys; clients sign them for authorization code, refresh, and client credentials flows. - [#9055](https://github.com/better-auth/better-auth/pull/9055) [`b790144`](https://github.com/better-auth/better-auth/commit/b790144a2e969f1f423c1226147edfb4e69664d1) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - fix(sso)!: harden SAML response validation (InResponseTo, Audience, SessionIndex) ### Breaking Changes - **`allowIdpInitiated` now defaults to `false`** — IdP-initiated SSO (unsolicited SAML responses) is disabled by default. Set `saml.allowIdpInitiated: true` to restore the previous behavior. This aligns with the SAML2Int interoperability profile which recommends against IdP-initiated SSO due to its susceptibility to injection attacks. ### Bug Fixes - **InResponseTo validation was completely non-functional** — The code read `extract.inResponseTo` (always `undefined`) instead of samlify's actual path `extract.response.inResponseTo`. SP-initiated InResponseTo validation now works as intended in both ACS handlers. - **Audience Restriction was never validated** — SAML assertions issued for a different service provider were accepted without checking the `<AudienceRestriction>` element. Audience is now validated against the configured `samlConfig.audience` value per SAML 2.0 Core §2.5.1. - **SessionIndex stored as object instead of string** — samlify returns `sessionIndex` from login responses as `{ authnInstant, sessionNotOnOrAfter, sessionIndex }`, but the code stored the whole object. SLO session-index comparisons always failed silently. The correct inner `sessionIndex` string is now extracted. ### Improvements - Extracted shared `validateInResponseTo()` and `validateAudience()` into `packages/sso/src/saml/response-validation.ts`, eliminating ~160 lines of duplicated validation logic between the two ACS handlers. - Fixed `SAMLAssertionExtract` type to match samlify's actual extractor output shape. ### Patch Changes - [#9097](https://github.com/better-auth/better-auth/pull/9097) [`52c4751`](https://github.com/better-auth/better-auth/commit/52c47517a21600d40a3e82c427409083b4a0a9ec) Thanks [@gustavovalverde](https://github.com/gustavovalverde)! - fix(sso): unify SAML response processing and fix provider/config bugs **Bug fixes:** - Fix SP metadata endpoint using internal row ID instead of `providerId` in ACS URL - Fix `acsEndpoint` skipping DB provider lookup when `defaultSSO` is configured - Fix `acsEndpoint` missing encryption fields (`isAssertionEncrypted`, `encPrivateKey`), which caused silent decryption failures - Fix `defaultSSO` config parsing in callback path (`safeJsonParse` on already-parsed objects) - Fix `createSP` missing `callbackUrl` fallback to auto-generated ACS URL - Complete `createSP`/`createIdP` helpers with all encryption and signing fields **Behavioral changes:** - ACS error redirect query parameters now use uppercase error codes (e.g. `error=SAML_MULTIPLE_ASSERTIONS` instead of `error=multiple_assertions`). If your application parses these error codes from the redirect URL, update the expected values. - SAML provider registration now rejects configs with no usable IdP entry point (no valid `entryPoint` URL, no `idpMetadata.metadata`, and no `idpMetadata.singleSignOnService`). Previously these would register successfully but fail at sign-in. - `entryPoint` validation tightened from `startsWith("http")` to `new URL()` parsing, rejecting malformed URLs like `http:evil` or `http//missing-colon`. **Refactoring (no API changes):** - Extract shared `processSAMLResponse` pipeline to eliminate ~500 lines of duplicated logic between `callbackSSOSAML` and `acsEndpoint` - Move `validateSAMLTimestamp` to `saml/timestamp.ts` (re-exported from original location for compatibility) - Updated dependencies \[[`6ce30cf`](https://github.com/better-auth/better-auth/commit/6ce30cf13853619b9022e93bd6ecb956bc32482d), [`f6428d0`](https://github.com/better-auth/better-auth/commit/f6428d02fcabc2e628f39b0e402f1a6eb0602649), [`c5066fe`](https://github.com/better-auth/better-auth/commit/c5066fe5d68babf2376cfc63d813de5542eca463), [`5f84335`](https://github.com/better-auth/better-auth/commit/5f84335815d75410320bdfa665a6712d3416b04f), [`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656), [`544f1c6`](https://github.com/better-auth/better-auth/commit/544f1c63c9826831d96a126fbe568d8a8a8fde68)]: - better-auth@1.7.0-beta.0 - @better-auth/core@1.7.0-beta.0 ## @better-auth/api-key@1.7.0-beta.0 ### Patch Changes - Updated dependencies \[[`6ce30cf`](https://github.com/better-auth/better-auth/commit/6ce30cf13853619b9022e93bd6ecb956bc32482d), [`f6428d0`](https://github.com/better-auth/better-auth/commit/f6428d02fcabc2e628f39b0e402f1a6eb0602649), [`c5066fe`](https://github.com/better-auth/better-auth/commit/c5066fe5d68babf2376cfc63d813de5542eca463), [`5f84335`](https://github.com/better-auth/better-auth/commit/5f84335815d75410320bdfa665a6712d3416b04f), [`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656), [`544f1c6`](https://github.com/better-auth/better-auth/commit/544f1c63c9826831d96a126fbe568d8a8a8fde68)]: - better-auth@1.7.0-beta.0 - @better-auth/core@1.7.0-beta.0 ## auth@1.7.0-beta.0 ### Patch Changes - [#9032](https://github.com/better-auth/better-auth/pull/9032) [`4673c6d`](https://github.com/better-auth/better-auth/commit/4673c6d83ce0710e8875e81539b376ee408e28b3) Thanks [@bytaesu](https://github.com/bytaesu)! - fix tsconfig path alias resolution for extended configs and mid-path wildcards - Updated dependencies \[[`6ce30cf`](https://github.com/better-auth/better-auth/commit/6ce30cf13853619b9022e93bd6ecb956bc32482d), [`f6428d0`](https://github.com/better-auth/better-auth/commit/f6428d02fcabc2e628f39b0e402f1a6eb0602649), [`c5066fe`](https://github.com/better-auth/better-auth/commit/c5066fe5d68babf2376cfc63d813de5542eca463), [`5f84335`](https://github.com/better-auth/better-auth/commit/5f84335815d75410320bdfa665a6712d3416b04f), [`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656), [`544f1c6`](https://github.com/better-auth/better-auth/commit/544f1c63c9826831d96a126fbe568d8a8a8fde68)]: - better-auth@1.7.0-beta.0 - @better-auth/core@1.7.0-beta.0 - @better-auth/telemetry@1.7.0-beta.0 ## @better-auth/drizzle-adapter@1.7.0-beta.0 ### Patch Changes - Updated dependencies \[[`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656)]: - @better-auth/core@1.7.0-beta.0 ## @better-auth/electron@1.7.0-beta.0 ### Patch Changes - Updated dependencies \[[`6ce30cf`](https://github.com/better-auth/better-auth/commit/6ce30cf13853619b9022e93bd6ecb956bc32482d), [`f6428d0`](https://github.com/better-auth/better-auth/commit/f6428d02fcabc2e628f39b0e402f1a6eb0602649), [`c5066fe`](https://github.com/better-auth/better-auth/commit/c5066fe5d68babf2376cfc63d813de5542eca463), [`5f84335`](https://github.com/better-auth/better-auth/commit/5f84335815d75410320bdfa665a6712d3416b04f), [`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656), [`544f1c6`](https://github.com/better-auth/better-auth/commit/544f1c63c9826831d96a126fbe568d8a8a8fde68)]: - better-auth@1.7.0-beta.0 - @better-auth/core@1.7.0-beta.0 ## @better-auth/expo@1.7.0-beta.0 ### Patch Changes - Updated dependencies \[[`6ce30cf`](https://github.com/better-auth/better-auth/commit/6ce30cf13853619b9022e93bd6ecb956bc32482d), [`f6428d0`](https://github.com/better-auth/better-auth/commit/f6428d02fcabc2e628f39b0e402f1a6eb0602649), [`c5066fe`](https://github.com/better-auth/better-auth/commit/c5066fe5d68babf2376cfc63d813de5542eca463), [`5f84335`](https://github.com/better-auth/better-auth/commit/5f84335815d75410320bdfa665a6712d3416b04f), [`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656), [`544f1c6`](https://github.com/better-auth/better-auth/commit/544f1c63c9826831d96a126fbe568d8a8a8fde68)]: - better-auth@1.7.0-beta.0 - @better-auth/core@1.7.0-beta.0 ## @better-auth/i18n@1.7.0-beta.0 ### Patch Changes - Updated dependencies \[[`6ce30cf`](https://github.com/better-auth/better-auth/commit/6ce30cf13853619b9022e93bd6ecb956bc32482d), [`f6428d0`](https://github.com/better-auth/better-auth/commit/f6428d02fcabc2e628f39b0e402f1a6eb0602649), [`c5066fe`](https://github.com/better-auth/better-auth/commit/c5066fe5d68babf2376cfc63d813de5542eca463), [`5f84335`](https://github.com/better-auth/better-auth/commit/5f84335815d75410320bdfa665a6712d3416b04f), [`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656), [`544f1c6`](https://github.com/better-auth/better-auth/commit/544f1c63c9826831d96a126fbe568d8a8a8fde68)]: - better-auth@1.7.0-beta.0 - @better-auth/core@1.7.0-beta.0 ## @better-auth/kysely-adapter@1.7.0-beta.0 ### Patch Changes - Updated dependencies \[[`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656)]: - @better-auth/core@1.7.0-beta.0 ## @better-auth/memory-adapter@1.7.0-beta.0 ### Patch Changes - Updated dependencies \[[`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656)]: - @better-auth/core@1.7.0-beta.0 ## @better-auth/mongo-adapter@1.7.0-beta.0 ### Patch Changes - Updated dependencies \[[`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656)]: - @better-auth/core@1.7.0-beta.0 ## @better-auth/passkey@1.7.0-beta.0 ### Patch Changes - Updated dependencies \[[`6ce30cf`](https://github.com/better-auth/better-auth/commit/6ce30cf13853619b9022e93bd6ecb956bc32482d), [`f6428d0`](https://github.com/better-auth/better-auth/commit/f6428d02fcabc2e628f39b0e402f1a6eb0602649), [`c5066fe`](https://github.com/better-auth/better-auth/commit/c5066fe5d68babf2376cfc63d813de5542eca463), [`5f84335`](https://github.com/better-auth/better-auth/commit/5f84335815d75410320bdfa665a6712d3416b04f), [`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656), [`544f1c6`](https://github.com/better-auth/better-auth/commit/544f1c63c9826831d96a126fbe568d8a8a8fde68)]: - better-auth@1.7.0-beta.0 - @better-auth/core@1.7.0-beta.0 ## @better-auth/prisma-adapter@1.7.0-beta.0 ### Patch Changes - Updated dependencies \[[`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656)]: - @better-auth/core@1.7.0-beta.0 ## @better-auth/redis-storage@1.7.0-beta.0 ### Patch Changes - Updated dependencies \[[`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656)]: - @better-auth/core@1.7.0-beta.0 ## @better-auth/scim@1.7.0-beta.0 ### Patch Changes - Updated dependencies \[[`6ce30cf`](https://github.com/better-auth/better-auth/commit/6ce30cf13853619b9022e93bd6ecb956bc32482d), [`f6428d0`](https://github.com/better-auth/better-auth/commit/f6428d02fcabc2e628f39b0e402f1a6eb0602649), [`c5066fe`](https://github.com/better-auth/better-auth/commit/c5066fe5d68babf2376cfc63d813de5542eca463), [`5f84335`](https://github.com/better-auth/better-auth/commit/5f84335815d75410320bdfa665a6712d3416b04f), [`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656), [`544f1c6`](https://github.com/better-auth/better-auth/commit/544f1c63c9826831d96a126fbe568d8a8a8fde68)]: - better-auth@1.7.0-beta.0 - @better-auth/core@1.7.0-beta.0 ## @better-auth/stripe@1.7.0-beta.0 ### Patch Changes - Updated dependencies \[[`6ce30cf`](https://github.com/better-auth/better-auth/commit/6ce30cf13853619b9022e93bd6ecb956bc32482d), [`f6428d0`](https://github.com/better-auth/better-auth/commit/f6428d02fcabc2e628f39b0e402f1a6eb0602649), [`c5066fe`](https://github.com/better-auth/better-auth/commit/c5066fe5d68babf2376cfc63d813de5542eca463), [`5f84335`](https://github.com/better-auth/better-auth/commit/5f84335815d75410320bdfa665a6712d3416b04f), [`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656), [`544f1c6`](https://github.com/better-auth/better-auth/commit/544f1c63c9826831d96a126fbe568d8a8a8fde68)]: - better-auth@1.7.0-beta.0 - @better-auth/core@1.7.0-beta.0 ## @better-auth/telemetry@1.7.0-beta.0 ### Patch Changes - Updated dependencies \[[`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656)]: - @better-auth/core@1.7.0-beta.0 ## @better-auth/test-utils@1.7.0-beta.0 ### Patch Changes - Updated dependencies \[[`6ce30cf`](https://github.com/better-auth/better-auth/commit/6ce30cf13853619b9022e93bd6ecb956bc32482d), [`f6428d0`](https://github.com/better-auth/better-auth/commit/f6428d02fcabc2e628f39b0e402f1a6eb0602649), [`c5066fe`](https://github.com/better-auth/better-auth/commit/c5066fe5d68babf2376cfc63d813de5542eca463), [`5f84335`](https://github.com/better-auth/better-auth/commit/5f84335815d75410320bdfa665a6712d3416b04f), [`93d3871`](https://github.com/better-auth/better-auth/commit/93d3871bd2f7c2fdd423c4c88a22a50b6333e656), [`544f1c6`](https://github.com/better-auth/better-auth/commit/544f1c63c9826831d96a126fbe568d8a8a8fde68)]: - better-auth@1.7.0-beta.0 - @better-auth/core@1.7.0-beta.0 --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

GiteaMirror added the pull-request label 2026-04-15 22:49:54 -05:00

GiteaMirror closed this issue

2026-04-15 22:49:55 -05:00

Sign in to join this conversation.

Branches Tags

2026-05-22/chore/adopt-agents-md

2026-05-22/refactor/string-case-utils

dependabot/npm_and_yarn/uuid-14.0.0

dependabot/npm_and_yarn/turbo-2.9.14

changeset-release/main

main

2026-05-14/fix/passkey-verify-error-and-claim

dependabot/npm_and_yarn/samlify-2.13.0

dependabot/npm_and_yarn/ws-8.20.1

changeset-release/next

dependabot/npm_and_yarn/demo/electron/demo-minor-patch-519ef7475f

dependabot/github_actions/github-actions-98f3470200

client-assertions-main

2026-05-15/ci/fix-sqlite-abi-mismatch

2026-05-15/fix/organization-team-add-cascade

2026-05-15/fix/parse-set-cookie-value-validation

2026-05-13/feat/captcha-wildcard-endpoints

2026-05-13/ci/stabilize-docker-startup

fix/i18n-before-hook-translation

fix/disable-migration-generate

2026-05-07/fix/admin-set-password-upsert

2026-05-10/fix/cookie-drain-order

2026-05-10/feat/hooks-finally

2026-05-09/fix/cookie-drain-order

2026-05-09/feat/hooks-finally

2026-05-08/feat/register-before-send

fix/stripe/subscription-data-merge

2026-05-01/chore/pnpm-v11-harden

chore/pnpm-v11

2026-04-29/feat/google-include-granted-scopes

2026-04-29/fix/oauth-account-scope-semantics

2026-04-27/fix/nextcookies-idempotent-writes

2026-04-26/fix/harden-proxy-host-validation

2026-04-26/refactor/stripe-callback-signature-cleanup

2026-04-26/fix/stripe-subscription-callback-timing

2026-04-11/fix/sveltekit-app-modules

feat/open-api-zod-contract

feat/oauth-provider-backchannel-logout-next

feat/oauth-idp-initiated-bounce

refactor/sign-in-challenges

2026-04-21/fix/oauth-rfc-input-validation

fix/release-notes-new-packages

fix/two-factor-identity-guard

fix/resource

feat/emailpassword-authorize

2026-04-12/security/dynamic-baseurl-proxy-trust-default

feat/oauth-provider-at-hash-v2

fix/release-grep-fallback

claude/address-review-comments-JhFLr

claude/slack-update-stripe-docs-consistency-8Sc0w

feat/async-auth

fix/two-factor-totp-verified-enrollment

feat/plugin-ui

codex/blog-1-6-release-post

2026-04-06/fix/type-any-guards

2026-04-05/chore/downgrade-better-call

2026-04-04/ci/skip-vercel-fork-prs

2026-03-28/ci/add-autofix-ci

chore/release-preview-script

himself65/2026/02/19/role

2026-03-24/fix/update-user-info-on-link

2026-03-20/docs/improve-website

2026-03-20/fix/anonymous-onlinkaccount-expo

2026-02-17/fix/anonymous-link-state

fix/8607-saml-inresponseto

fix/8549-scim-patch-noop

v1.4.x

refactor/migration-snapshot-tests

worktree-magic-link-additional-data

chore/migrate-build-to-rollup

worktree-fix-dynamic-baseurl-8447

2026-03-06/chore/public-api-check

fix/close-8156-regression-test

fix/secondary-storage-json-error-handling

himself65/verification-namespace

cursor/issue-8307-validation-79a3

himself65/2026/01/30/error-mdx

v1.4.x-staging

fix/email-otp-user

fix/restrict-full-organization-access-roles

himself65/2026/02/12/count

himself65/2026/02/04/define-plugin

2026-02-04/feat/add-pluralize

cursor/better-auth-js-integration-ec21

cursor/expo-state-mismatch-394c

2026-02-01/fix/org-update-role-sync-members

cursor/issue-7607-investigation-e146

cursor/email-generation-helper-0ff6

himself65/2026/01/21/avoid-spread-operator

himself65/2026/01/14/cli

claude/slack-add-docs-pr-NMvgO

claude/slack-add-advanced-useplural-WHKYL

feat/hooks-pos

feat/2fa-phone

feat/2fa

fix/rotation

fix/username-check

v1.3.x

refactor/organization

feat/multiple-client-ids-social-providers

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/better-auth#25319

[PR #9073] [MERGED] chore: release v1.7.0-beta.0 #25319

📋 Pull Request Information

📝 Commits (1)

📊 Changes

📄 Description

Releases

better-auth@1.7.0-beta.0

Minor Changes

method: "otp"

method: "totp" (default)

Breaking changes

Patch Changes

@better-auth/core@1.7.0-beta.0

Minor Changes

@better-auth/oauth-provider@1.7.0-beta.0

Minor Changes

Patch Changes

@better-auth/sso@1.7.0-beta.0

Minor Changes

Breaking Changes

Bug Fixes

Improvements

Patch Changes

@better-auth/api-key@1.7.0-beta.0

Patch Changes

auth@1.7.0-beta.0

Patch Changes

@better-auth/drizzle-adapter@1.7.0-beta.0

Patch Changes

@better-auth/electron@1.7.0-beta.0

Patch Changes

@better-auth/expo@1.7.0-beta.0

Patch Changes

@better-auth/i18n@1.7.0-beta.0

Patch Changes

@better-auth/kysely-adapter@1.7.0-beta.0

Patch Changes

@better-auth/memory-adapter@1.7.0-beta.0

Patch Changes

@better-auth/mongo-adapter@1.7.0-beta.0

Patch Changes

@better-auth/passkey@1.7.0-beta.0

Patch Changes

@better-auth/prisma-adapter@1.7.0-beta.0

Patch Changes

@better-auth/redis-storage@1.7.0-beta.0

Patch Changes

@better-auth/scim@1.7.0-beta.0

Patch Changes

@better-auth/stripe@1.7.0-beta.0

Patch Changes

@better-auth/telemetry@1.7.0-beta.0

Patch Changes

@better-auth/test-utils@1.7.0-beta.0

Patch Changes

`method: "otp"`

`method: "totp"` (default)