better-auth

mirror of https://github.com/better-auth/better-auth.git synced 2026-10-19 11:24:57 -05:00

Files

T

Gustavo Valverde 3390792bbe feat(oauth-provider): let private_key_jwt clients rotate their own keys

A confidential client with inline `jwks` can now replace its keys at
`POST /oauth2/client/rotate-keys` without a user session. The request
carries the complete new JWK Set and a client assertion signed by a
current key, addressed to the rotation endpoint itself, so an assertion
minted for the token endpoint or the issuer cannot be redirected here.
Enabled with `allowClientKeyRotation`.

Keys left out of the new set stop verifying at once. A client rolls a
key in two steps, the way a jwks_uri client does: it sends the old and
new keys together, then drops the old key once every instance signs with
the new one. Only current keys can authorize a rotation, matching
RFC 7592, node-oidc-provider, Ory Hydra, and Keycloak, where only the
current management credential can change a client.

The write is guarded on the exact key set the assertion was verified
against, so a concurrent rotation fails with 409 instead of overwriting.
No schema change is needed.

2026-10-12 14:15:06 +01:00

app

docs: update enterprise pricing details (#11369 )

2026-09-28 14:03:25 -06:00

assets

docs: cut homepage weight on slow connections (logos, avatars, fonts, poster) (#11430 )

2026-09-27 07:16:27 +00:00

components

docs(integrations): add Effect integration guide (#11566 )

2026-10-09 09:41:45 +00:00

content

feat(oauth-provider): let private_key_jwt clients rotate their own keys

2026-10-12 14:15:06 +01:00

hooks

…

lib

docs: add @octopi-ai/better-enrollment to community plugins (#11653 )

2026-10-10 17:06:56 +09:00

public

docs: cut homepage weight on slow connections (logos, avatars, fonts, poster) (#11430 )

2026-09-27 07:16:27 +00:00

scripts

docs(integrations): add Effect integration guide (#11566 )

2026-10-09 09:41:45 +00:00

types

…

.env.example

…

.gitignore

docs: add versioned documentation (#11041 )

2026-08-29 07:10:36 +09:00

.remarkrc.mjs

…

CHANGELOG.md

…

components.json

…

next.config.js

docs: consolidate dash plugin docs (#11036 )

2026-08-29 21:18:00 +00:00

package.json

docs: cut homepage weight on slow connections (logos, avatars, fonts, poster) (#11430 )

2026-09-27 07:16:27 +00:00

postcss.config.mjs

…

proxy.ts

docs: add canonical Markdown routes (#11042 )

2026-08-29 07:15:52 +09:00

README.md

…

source.config.ts

docs: share API method rendering (#11043 )

2026-08-29 07:17:55 +09:00

tsconfig.json

docs: add versioned documentation (#11041 )

2026-08-29 07:10:36 +09:00

vitest.config.ts

docs: add versioned documentation (#11041 )

2026-08-29 07:10:36 +09:00

README.md

Website & Docs

The main website and documentation for better-auth.com

Quick Start

# install
pnpm install

# develop
pnpm dev

Open localhost:3000 to preview.

Stack

Framework: Next.js 16 (App Router, Turbopack)
Styling: Tailwind CSS 4
Animation: Framer Motion
Docs: Fumadocs
Icons: Lucide React
Fonts: Geist Sans & Geist Mono

Structure

├─ app/
│  ├─ page.tsx              # Home — hero + sign-in demo
│  ├─ products/             # Products page
│  ├─ blog/                 # Blog posts
│  └─ docs/[[...slug]]/     # Documentation (MDX)
│
├─ components/
│  ├─ landing/              # Marketing components
│  ├─ docs/                 # Documentation components
│  ├─ ui/                   # Shared primitives
│  └─ icons/                # Brand icons & logo
│
├─ content/                 # MDX documentation files
│
├─ lib/
│  ├─ source.ts             # Fumadocs content source
│  └─ utils.ts              # Utilities
│
└─ public/
   └─ branding/             # Logo assets (SVG + PNG)

Scripts

pnpm dev          # Start dev server (Turbopack)
pnpm build        # Production build
pnpm start        # Serve production build
pnpm lint:fix     # Lint & auto-fix with Biome