Files
better-auth/packages
Gustavo Valverde cfad76ba64 refactor(oauth-provider): resolve signing key once, add runtime alg validation
- Replace resolveSigningAlgorithm with resolveSigningKey: resolves the
  full key once and passes it to signJWT, eliminating redundant DB lookup
  and key rotation race between alg resolution and signing
- Add ResolvedSigningKey type for the resolved key contract
- Validate signed ID token header alg against declared alg when using
  custom jwt.sign callbacks (OIDC Core 3.1.3.6)
- Remove stale @ts-expect-error directives
2026-04-11 10:07:11 +01:00
..
2026-04-09 15:19:07 +01:00
2026-04-09 15:19:07 +01:00
2026-04-09 15:19:07 +01:00
2026-04-09 15:19:07 +01:00
2026-04-09 15:19:07 +01:00
2026-04-09 15:19:07 +01:00
2026-04-09 15:19:07 +01:00
2026-04-09 15:19:07 +01:00