Files
better-auth/docs/content
Gustavo Valverde b7850f90a4 fix: address merge follow-ups from PR #9172 review
- packages/oauth-provider/src/types/zod.ts: make `state` optional in
  `verificationValueSchema`. Main's PR #9118 hardened authorization code
  validation with a required `state`, but CIMD (next, PR #9159) doesn't send
  state in test flows. Per OAuth 2.0 §4.1.1 state is RECOMMENDED, not
  REQUIRED. Fixes CIMD token exchange (`401 !== 200`) in ci test and smoke.

- docs/content/docs/plugins/sso.mdx: replace remaining `/sso/saml2/callback/`
  references with `/sso/saml2/sp/acs/` to match the endpoint rename from
  next's PR #9117. The merge took main verbatim here, regressing docs that
  next had already updated.
2026-04-14 11:54:29 +01:00
..