[PR #6967] [MERGED] feat(sso): add provider list and detail endpoints #32598

Closed
opened 2026-04-17 23:22:17 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/better-auth/better-auth/pull/6967
Author: @Paola3stefania
Created: 12/23/2025
Status: Merged
Merged: 1/22/2026
Merged by: @himself65

Base: canaryHead: feat/sso-provider-read-endpoints


📝 Commits (10+)

📊 Changes

9 files changed (+2043 additions, -21 deletions)

View changed files

📝 packages/scim/src/routes.ts (+1 -5)
📝 packages/sso/src/client.ts (+4 -0)
📝 packages/sso/src/index.ts (+19 -6)
📝 packages/sso/src/linking/org-assignment.ts (+2 -10)
packages/sso/src/providers.test.ts (+1326 -0)
packages/sso/src/routes/providers.ts (+562 -0)
packages/sso/src/routes/schemas.ts (+95 -0)
📝 packages/sso/src/types.ts (+7 -0)
📝 packages/sso/src/utils.ts (+27 -0)

📄 Description

Closes https://github.com/better-auth/better-auth/issues/6291


Summary by cubic

Adds SSO provider list, detail, update, and delete endpoints with sanitized OIDC/SAML data and org-aware access.

  • New Features
    • Endpoints: GET /sso/providers and GET/PATCH/DELETE /sso/providers/:providerId return sanitized OIDC/SAML data (masked clientId, no clientSecret, parsed cert metadata, spMetadataUrl) and enforce access for org admins/owners or provider owners.
    • Context: Added hasPlugin to check enabled plugins (used in SSO and SCIM); partial updates validate schemas/algorithms and reset domainVerified on domain changes.

Written for commit b6be50d955. Summary will update on new commits.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/better-auth/better-auth/pull/6967 **Author:** [@Paola3stefania](https://github.com/Paola3stefania) **Created:** 12/23/2025 **Status:** ✅ Merged **Merged:** 1/22/2026 **Merged by:** [@himself65](https://github.com/himself65) **Base:** `canary` ← **Head:** `feat/sso-provider-read-endpoints` --- ### 📝 Commits (10+) - [`e162e93`](https://github.com/better-auth/better-auth/commit/e162e935057eab7acd5269482ab60cf4e0fe73fa) feat: has plugin - [`dc65786`](https://github.com/better-auth/better-auth/commit/dc65786598dd6561dae7bfc0113dee7d8a306e01) sanp - [`d7d11de`](https://github.com/better-auth/better-auth/commit/d7d11de85cd3ad5c478e0df7ea23ffaeb4b30dec) feat: parse certificate - [`018b588`](https://github.com/better-auth/better-auth/commit/018b588d3f4f70880690b8e69f77ab56467ec2f1) feat: provider endpoint - [`289c8aa`](https://github.com/better-auth/better-auth/commit/289c8aa7174676d20d1dc208a23512eb336c8d88) feat: tests - [`401d847`](https://github.com/better-auth/better-auth/commit/401d84782e16e11f6353621b3f17dab9b7254a04) make lint happy - [`d15673a`](https://github.com/better-auth/better-auth/commit/d15673a2946dae1b9cad705d149a722efcffc163) feat: hasPlugin - [`ca6de29`](https://github.com/better-auth/better-auth/commit/ca6de2939c21fec71bb71217d13631c7aee7719e) fix: tests - [`2730db2`](https://github.com/better-auth/better-auth/commit/2730db28eab788a29a0d761e560e55156575dca3) fix: bad rebase - [`8fd2fe9`](https://github.com/better-auth/better-auth/commit/8fd2fe92b7e946324c201c1d779a08aa3d01c102) refactor ### 📊 Changes **9 files changed** (+2043 additions, -21 deletions) <details> <summary>View changed files</summary> 📝 `packages/scim/src/routes.ts` (+1 -5) 📝 `packages/sso/src/client.ts` (+4 -0) 📝 `packages/sso/src/index.ts` (+19 -6) 📝 `packages/sso/src/linking/org-assignment.ts` (+2 -10) ➕ `packages/sso/src/providers.test.ts` (+1326 -0) ➕ `packages/sso/src/routes/providers.ts` (+562 -0) ➕ `packages/sso/src/routes/schemas.ts` (+95 -0) 📝 `packages/sso/src/types.ts` (+7 -0) 📝 `packages/sso/src/utils.ts` (+27 -0) </details> ### 📄 Description Closes https://github.com/better-auth/better-auth/issues/6291 <!-- This is an auto-generated description by cubic. --> --- ## Summary by cubic Adds SSO provider list, detail, update, and delete endpoints with sanitized OIDC/SAML data and org-aware access. - **New Features** - Endpoints: GET /sso/providers and GET/PATCH/DELETE /sso/providers/:providerId return sanitized OIDC/SAML data (masked clientId, no clientSecret, parsed cert metadata, spMetadataUrl) and enforce access for org admins/owners or provider owners. - Context: Added hasPlugin to check enabled plugins (used in SSO and SCIM); partial updates validate schemas/algorithms and reset domainVerified on domain changes. <sup>Written for commit b6be50d955cacaf95be1e5c272743e7cc9e867f6. Summary will update on new commits.</sup> <!-- End of auto-generated description by cubic. --> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-17 23:22:17 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/better-auth#32598