Files
better-auth/packages
Gustavo Valverde fe62de2b3b fix(oauth-provider): refuse trusted-client changes with 400, not 500
Updating, deleting, or rotating the secret of a client configured in code through `cachedTrustedClients` is a deliberate refusal, but the three management endpoints reported it as a 500 server failure. They now share one guard with client key rotation and return 400 `invalid_client`.
2026-10-12 14:17:21 +01:00
..
2026-09-30 22:25:23 +01:00
2026-09-30 22:25:23 +01:00
2026-09-30 22:25:23 +01:00