github-starred/better-auth
2
0
Fork 0
mirror of https://github.com/better-auth/better-auth.git synced 2026-05-24 08:01:56 -05:00
Code Issues 2.5k Packages Projects Releases 112 Wiki Activity

[GH-ISSUE #598] Cors issues with fasitfy #25656

New Issue
Closed
opened 2026-04-17 15:54:24 -05:00 by GiteaMirror · 1 comment
GiteaMirror commented 2026-04-17 15:54:24 -05:00
Owner
Copy Link

Originally created by @lindesvard on GitHub (Nov 19, 2024).
Original GitHub issue: https://github.com/better-auth/better-auth/issues/598

Describe the bug
So when I access /auth/ok directly from the browser I get { ok: true } but when using it with fetch from my site I get cors issues. This only occurs from the /auth/* routes.

To Reproduce

// packages/auth/index.ts
export const auth = betterAuth({
  database: prismaAdapter(db, {
    provider: 'postgresql',
  }),
  baseURL: `http://localhost:3333/auth`,
  trustedOrigins: [
    'http://localhost:3000', // website
    'http://localhost:3333', // api
  ],
  emailAndPassword: {
    enabled: true,
  },
});


// apps/api/index.ts
fastify.register(cors, {
  origin: 'http://localhost:3000',
  credentials: true,
});
fastify.all('/auth/*', (req, res) => {
  return toNodeHandler(auth)(req.raw, res.raw);
});

Expected behavior
I except the cors to be respected. Feels like they are overwritten by the lib?

Screenshots
image
image
image

Desktop (please complete the following information):

  • OS: Mac
  • Browser Chrome
Originally created by @lindesvard on GitHub (Nov 19, 2024). Original GitHub issue: https://github.com/better-auth/better-auth/issues/598 **Describe the bug** So when I access `/auth/ok` directly from the browser I get `{ ok: true }` but when using it with fetch from my site I get cors issues. This only occurs from the `/auth/*` routes. **To Reproduce** ``` // packages/auth/index.ts export const auth = betterAuth({ database: prismaAdapter(db, { provider: 'postgresql', }), baseURL: `http://localhost:3333/auth`, trustedOrigins: [ 'http://localhost:3000', // website 'http://localhost:3333', // api ], emailAndPassword: { enabled: true, }, }); // apps/api/index.ts fastify.register(cors, { origin: 'http://localhost:3000', credentials: true, }); fastify.all('/auth/*', (req, res) => { return toNodeHandler(auth)(req.raw, res.raw); }); ``` **Expected behavior** I except the cors to be respected. Feels like they are overwritten by the lib? **Screenshots** ![image](https://github.com/user-attachments/assets/4a1999e9-5c80-4afa-a60a-3b752058debf) ![image](https://github.com/user-attachments/assets/4f9940ef-25cf-460d-91ae-2761fe3fd082) ![image](https://github.com/user-attachments/assets/489e1db5-b3da-48ec-91f7-462dcaca013b) **Desktop (please complete the following information):** - OS: Mac - Browser Chrome
GiteaMirror added the locked label 2026-04-17 15:54:24 -05:00
GiteaMirror commented 2026-04-17 15:54:25 -05:00
Author
Owner
Copy Link

@lindesvard commented on GitHub (Nov 19, 2024):

Solved ...

image

<!-- gh-comment-id:2486907370 --> @lindesvard commented on GitHub (Nov 19, 2024): Solved ... ![image](https://github.com/user-attachments/assets/ba74d388-b53e-474d-be88-88795a20b5bb)
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
adapter
astro
awaiting external contributor
blocked
breaking
breaking change
bug
c-devops
core
credentials
database
dependencies
devops
devtools
docs
documentation
duplicate
elysia
enhancement
enterprise
expo
express
fastify
good first issue
help wanted
hono
identity
infra
integration
invalid
javascript
locked
maintenance
need-more-information
needs: info
needs: repro
nextjs
nuxt
oauth
organization
P0
payments
perf
platform
plugin
pull-request
Mirrored from GitHub Pull Request
 question
ready
regression
remix
security
social-provider
solid
stale
svelte
tanstack-start
tracking
version-bump
vue
wontfix
No Label locked
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/better-auth#25656
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?