better-auth/packages/api-key/CHANGELOG.md

@better-auth/api-key

1.7.10

1.7.9

1.7.8

Patch Changes

• #11512 4175b34 Thanks @bytaesu! - Align the installed @better-auth/utils version with better-call while accepting ^0.4.2 || ^0.5.0 across official package peers.

1.7.7

1.7.6

1.7.5

1.7.4

1.7.3

1.7.2

1.7.1

1.7.0

1.7.0-rc.6

1.7.0-rc.5

1.7.0-rc.4

1.7.0-rc.3

1.7.0-rc.2

1.7.0-rc.1

1.7.0-rc.0

1.7.0-beta.10

1.7.0-beta.9

Patch Changes

• Updated dependencies []:
  • better-auth@1.7.0-beta.9
  • @better-auth/core@1.7.0-beta.9

1.7.0-beta.8

Patch Changes

• Updated dependencies [7c7313c, 06daf70, a83152e, 97903c9, 3a79aff]:
  • better-auth@1.7.0-beta.8
  • @better-auth/core@1.7.0-beta.8

1.7.0-beta.7

Patch Changes

• Updated dependencies [3d04fab, de8394d]:
  • better-auth@1.7.0-beta.7
  • @better-auth/core@1.7.0-beta.7

1.7.0-beta.6

Patch Changes

• Updated dependencies [b36c38f, 73541c1, bf39cbf, e53582c, aedcb97, 2196ea6, d2a79ba, 34558bc, 652fa53, 6fe9faa, ad35ead]:
  • better-auth@1.7.0-beta.6
  • @better-auth/core@1.7.0-beta.6

1.7.0-beta.5

Patch Changes

• Updated dependencies [0cbaf81, e014029, ec8a38c, 7fe0e2b, 4f53b61, e0d2b9e, 91f235f, 76a3342, 41cca60]:
  • better-auth@1.7.0-beta.5
  • @better-auth/core@1.7.0-beta.5

1.7.0-beta.4

1.6.30

Patch Changes

• Updated dependencies [07c1718]:
  • @better-auth/core@1.6.30
  • better-auth@1.6.30

1.6.29

Patch Changes

• Updated dependencies [e6e1b4e]:
  • better-auth@1.6.29
  • @better-auth/core@1.6.29

1.6.28

Patch Changes

• Updated dependencies [773de54, 2ad2928]:
  • better-auth@1.6.28
  • @better-auth/core@1.6.28

1.6.27

Patch Changes

• Updated dependencies [2ae491e, 90b5093]:
  • @better-auth/core@1.6.27
  • better-auth@1.6.27

1.6.26

Patch Changes

• Updated dependencies [9ede805, 5a811f1, d8327f1, e2c73fb, af50c45, 701cd43, a30e274, e7b0eba, 2b4a14f, 7552a3b, ea38fca, a03e4c1]:
  • better-auth@1.6.26
  • @better-auth/core@1.6.26

1.6.25

Patch Changes

• Updated dependencies [5124c34, 0ffd1fb, 7439359]:
  • better-auth@1.6.25
  • @better-auth/core@1.6.25

1.6.24

Patch Changes

• Updated dependencies [03dc5a0, 7508940, bae7198, ef4d273, 6758231, 99dbdd7, 086ca91, 8f2dedd, 4e685ee, 3bf0e49, f59a0ee, 54fab08, 0f2cc1b, ae78109, 46d2bf0, 29a373e, f6d18fa, f23ce50, c4d1dda]:
  • better-auth@1.6.24
  • @better-auth/core@1.6.24

1.6.23

Patch Changes

• Updated dependencies [8581f97]:
  • better-auth@1.6.23
  • @better-auth/core@1.6.23

1.6.22

Patch Changes

• Updated dependencies [c06a56d, 8bd43d9, 3a035e9]:
  • better-auth@1.6.22
  • @better-auth/core@1.6.22

1.6.21

Patch Changes

• #10203 5953157 Thanks @bytaesu! - Rate limiting no longer trusts multi-hop X-Forwarded-For chains, preventing a client behind an appending proxy from spoofing the leftmost hop to bypass the per-IP rate limit. Single-value IP headers continue to work. To key the real client behind a proxy chain, set advanced.ipAddress.trustedProxies to your reverse-proxy IPs or CIDR ranges (the chain is walked right to left, skipping trusted hops), or point advanced.ipAddress.ipAddressHeaders at a single trusted client-IP header.

• Updated dependencies [e0762a1, 882cf9e, f52e1ab, 90d509e, b5bec19, 816d7f9, 239bcc8, 1bc370a, 570267c, 461ca6f, 88409b0, 5953157, b046f9e, ae647b4]:

  • better-auth@1.6.21
  • @better-auth/core@1.6.21

1.6.20

Patch Changes

• Updated dependencies [21448b1, 8ecf238, 930f534]:
  • better-auth@1.6.20
  • @better-auth/core@1.6.20

1.6.19

Patch Changes

• Updated dependencies [de4aa52, b4b0266, 5bd5e1c, 581f827, 8407885, c1a8a64, 635f190, a787e0b, c2f718f, 7d18175]:
  • better-auth@1.6.19
  • @better-auth/core@1.6.19

1.6.18

Patch Changes

• Updated dependencies [9ef7240, b21a5f7]:
  • better-auth@1.6.18
  • @better-auth/core@1.6.18

1.6.17

Patch Changes

• #9993 baeaa00 Thanks @gustavovalverde! - Verifying the same API key from several requests at once can no longer drive its remaining-uses count below zero or let it exceed its rate limit. Secondary-storage-only deployments (without fallbackToDatabase) remain best-effort for these counters.

• #9991 0c3856f Thanks @gustavovalverde! - Updating an API key now fails when the caller's session has been revoked server-side, instead of succeeding within the cookie-cache window.

• Updated dependencies [baeaa00, 3e99e6c, 96c78c3, baeaa00, baeaa00, 0c3856f, baeaa00, baeaa00, ed7b6c9, e0a768c, 7343284, 0c3856f, baeaa00, baeaa00, 7343284, 7343284, 0c3856f, fdef997, 0c3856f, d9c526b, 0c3856f, fdef997, baeaa00, baeaa00, baeaa00, baeaa00, fdef997, 7343284, baeaa00, 8960f5f, baeaa00, 5c289b5, 1dbf5bb, baeaa00, baeaa00, 59e0ccb, b803c61, fdef997]:

  • better-auth@1.6.17
  • @better-auth/core@1.6.17

1.6.16

Patch Changes

• #9974 cb1cbfa Thanks @Bekacru! - Resolve the session from the authoritative store when creating an API key, rather than the signed cookie-cache snapshot. /api-key/create now fetches the session with disableCookieCache: true, so a session that was revoked — including the session deletion performed when a user is banned — is no longer accepted within the cookie-cache window. Server-side calls that pass userId in the body are unaffected.

• #9974 cb1cbfa Thanks @Bekacru! - Fix API key verification overwriting concurrent changes with stale state. Verification now persists only the fields it mutates (rate-limit counters, remaining count, refill and request timestamps) instead of writing back the entire record it read, so a concurrent disable, permission change, or expiry update can no longer be reverted by an in-flight verification. In secondary-storage mode, the record is re-read and merged before writing, so a key deleted mid-verification is no longer recreated.

• Updated dependencies [cb1cbfa, cb1cbfa, cb1cbfa, cb1cbfa, cb1cbfa, cb1cbfa, 87e7aa5, cb1cbfa, cb1cbfa, cb1cbfa, 893cf6c, cb1cbfa, cb1cbfa, 5e49c56, cb1cbfa]:

  • better-auth@1.6.16
  • @better-auth/core@1.6.16

1.6.15

Patch Changes

• Updated dependencies [1012b69, ad60333, 0933c05, b0ddfd3]:
  • better-auth@1.6.15
  • @better-auth/core@1.6.15

1.6.14

Patch Changes

• Updated dependencies [2d9781a, 5a2d642, 13abc79, 9d3450a]:
  • better-auth@1.6.14
  • @better-auth/core@1.6.14

1.6.13

Patch Changes

• Updated dependencies [e7eb45b, 03e6c94, 1e5b808, 13abc79]:
  • better-auth@1.7.0-beta.4
  • @better-auth/core@1.7.0-beta.4

1.7.0-beta.3

Patch Changes

• Updated dependencies [4e8e4c7, 523f95c, 729c00d]:
  • better-auth@1.7.0-beta.3
  • @better-auth/core@1.7.0-beta.3

1.7.0-beta.2

Patch Changes

• Updated dependencies [9aed910, acbd6ef, 954b664, 39d6af2]:
  • better-auth@1.7.0-beta.2
  • @better-auth/core@1.7.0-beta.2

1.7.0-beta.1

Patch Changes

• Updated dependencies [5142e9c, 484ce6a, f875897, c7d2253, 9a6d475, 513dabb, 6f2948e]:
  • better-auth@1.7.0-beta.1
  • @better-auth/core@1.7.0-beta.1

1.7.0-beta.0

Patch Changes

• Updated dependencies [6ce30cf, f6428d0, c5066fe, 5f84335, 93d3871, 544f1c6]:
  • better-auth@1.7.0-beta.0
  • @better-auth/core@1.7.0-beta.0

1.6.10

Patch Changes

• #9393 62c4050 Thanks @IcanDivideBy0! - api.verifyApiKey now validate the key configId is matching the one in the body

• Updated dependencies [1e0f26d, 8c1e917, b2d655c, 09f1327, 906b7b3, e9c978e, e71aad3, 80a655d, 15ff28a, 88a7c67, 9a7b51d, 1b25902, cf59136, a597ee0, fc02ced, 9f1ef1f, 36ef808, c1336c5, 3a9a2c3, fde0432, 2220a6d]:

  • better-auth@1.6.10
  • @better-auth/core@1.6.10

1.6.9

Patch Changes

• Updated dependencies [815ecf6]:
  • @better-auth/core@1.6.9
  • better-auth@1.6.9

1.6.8

Patch Changes

• Updated dependencies [856ab24, 9aa8e63]:
  • better-auth@1.6.8
  • @better-auth/core@1.6.8

1.6.7

Patch Changes

• Updated dependencies [307196a, 4a180f0, 4f373ee, e1b1cfc, d053a45]:
  • better-auth@1.6.7
  • @better-auth/core@1.6.7

1.6.6

Patch Changes

• #9187 3728518 Thanks @ping-maxwell! - fix(api-key): run secondary-storage api-key executions in parallel

• Updated dependencies [b5742f9, 4debfb6, 9ea7eb1, a844c7d, ab4c10f, a61083e, e64ff72]:

  • @better-auth/core@1.6.6
  • better-auth@1.6.6

1.6.5

Patch Changes

• Updated dependencies [938dd80, 0538627]:
  • better-auth@1.6.5
  • @better-auth/core@1.6.5

1.6.4

Patch Changes

• Updated dependencies [9aed910, acbd6ef, 39d6af2]:
  • better-auth@1.6.4
  • @better-auth/core@1.6.4

1.6.3

Patch Changes

• Updated dependencies [5142e9c, 484ce6a, f875897, 6ce30cf, f6428d0, 9a6d475, 513dabb, c5066fe, 5f84335]:
  • better-auth@1.6.3
  • @better-auth/core@1.6.3

1.6.2

Patch Changes

• Updated dependencies [9deb793, 2cbcb9b, b20fa42, 608d8c3, 8409843, e78a7b1]:
  • better-auth@1.6.2
  • @better-auth/core@1.6.2

1.6.1

Patch Changes

• Updated dependencies [2e537df, f61ad1c, 7495830]:
  • better-auth@1.6.1
  • @better-auth/core@1.6.1

1.6.0

Minor Changes

• #8836 5dd9e44 Thanks @gustavovalverde! - Add optional version field to the plugin interface and expose version from all built-in plugins

Patch Changes

• Updated dependencies [dd537cb, bd9bd58, 5dd9e44, 5dd9e44, 5dd9e44, 5dd9e44, 5dd9e44, 5dd9e44, 5dd9e44, 5dd9e44, 5dd9e44, 5dd9e44, 5dd9e44, 5dd9e44, 5dd9e44, 469eee6, 560230f]:
  • better-auth@1.6.0
  • @better-auth/core@1.6.0

1.6.0-beta.0

Minor Changes

• 28b1291 Thanks @gustavovalverde! - Add optional version field to the plugin interface and expose version from all built-in plugins

Patch Changes

• Updated dependencies [28b1291, 28b1291, 28b1291, 28b1291, 28b1291, 28b1291, 28b1291, 28b1291, 28b1291, 28b1291, 28b1291, 28b1291, 28b1291]:
  • better-auth@1.6.0-beta.0
  • @better-auth/core@1.6.0-beta.0