mirror of
https://github.com/better-auth/better-auth.git
synced 2026-07-28 06:47:20 -05:00
- packages/oauth-provider/src/types/zod.ts: make `state` optional in `verificationValueSchema`. Main's PR #9118 hardened authorization code validation with a required `state`, but CIMD (next, PR #9159) doesn't send state in test flows. Per OAuth 2.0 §4.1.1 state is RECOMMENDED, not REQUIRED. Fixes CIMD token exchange (`401 !== 200`) in ci test and smoke. - docs/content/docs/plugins/sso.mdx: replace remaining `/sso/saml2/callback/` references with `/sso/saml2/sp/acs/` to match the endpoint rename from next's PR #9117. The merge took main verbatim here, regressing docs that next had already updated.