mirror of
https://github.com/better-auth/better-auth.git
synced 2026-07-27 16:53:02 -05:00
- Add empty string fallback before .toLowerCase() to prevent TypeError when both mapped email attribute and extract.nameID are falsy - Use validated samlRedirectUrl instead of raw callbackUrl in error redirect to maintain open-redirect and loop-protection guarantees