Gustavo Valverde 2b04ffb809 fix(oauth-provider): never hold discovered clients for approval
A client ID metadata document identifies client software that every
user and organization running it shares. Approving such a client made
the first organization to consent its owner, which let that
organization's members change its redirect URIs or delete it for
everyone. Only open dynamic registration now creates pending clients.

A metadata refresh still keeps a scope ceiling or a disable committed
while it runs.
2026-10-15 16:04:53 +01:00
2026-09-29 19:41:35 +00:00
…
…
…
…

Better Auth

Better Auth is a framework-agnostic authentication (and authorization) framework for TypeScript. It provides a comprehensive set of features out of the box and includes a plugin ecosystem that simplifies adding advanced functionalities with minimal code in a short amount of time. Whether you need 2FA, multi-tenant support, or other complex features, it lets you focus on building your actual application instead of reinventing the wheel.

Why Better Auth

Authentication in the TypeScript ecosystem is a half-solved problem. Other open-source libraries often require a lot of additional code for anything beyond basic authentication. Rather than just pushing third-party services as the solution, I believe we can do better as a community—hence, Better Auth.

Contribution

Better Auth is a free and open source project licensed under the MIT License. You are free to do whatever you want with it.

You could help continuing its development by:

Security

If you discover a security vulnerability within Better Auth, please report it via GitHub Security Advisories.

All reports will be promptly addressed, and you'll be credited accordingly.

S
Description
No description provided
Readme
281 MiB
Latest
2026-04-16 05:05:30 -05:00
Languages
TypeScript 99.4%
CSS 0.3%
MDX 0.2%