COMMITS
June 1, 2026
T
fix: accept null for optional fields in generated schema (#9841)
Taesu committed
T
docs(organization): document clearing logo with null (#9858)
Taesu committed
T
chore: add postmortem for RSC header detection (#9857)
Taesu committed
T
May 31, 2026
G
fix(core): make redirect-uri validation runtime-safe and reject fragments (#9845)
Gustavo Valverde committed
B
chore: release v1.6.13 (#9804)
better-release[bot] committed
G
fix(oauth-provider): enforce clientPrivileges on dynamic client registration (#9837)
Gustavo Valverde committed
T
fix(organization): allow null logo on create and update (#9842)
Taesu committed
G
fix(oauth): validate redirect_uri schemes in oidc-provider and mcp (#9838)
Gustavo Valverde committed
T
docs: align db adapter guide with adapter contract (#9830)
Taesu committed
May 30, 2026
G
fix(sso): update samlify to 2.13.1 for signed-assertion XML injection (#9821)
Gustavo Valverde committed
G
docs(two-factor): mark `viewBackupCodes` as server-only in its API comment (#9822)
Gustavo Valverde committed
G
fix(deps): force patched transitive versions via pnpm overrides (#9820)
Gustavo Valverde committed
G
docs(oauth-provider): align metadata routing guidance (#9768)
Gustavo Valverde committed
G
fix(account): scope OAuth account identity and fix buggy internalAdapter helpers (#9818)
Gustavo Valverde committed
G
fix(expo): persist large account cookies by chunking device storage (#9815)
Gustavo Valverde committed
G
feat(account): support server-side `accountInfo` calls without session headers (#9813)
Gustavo Valverde committed
V
fix(account): default `storeStateStrategy` to "database" when using `secondaryStorage` (#9591)
Vishesh Verma committed
G
fix(ci): use GitHub-hosted runners for fork pull requests (#9809)
Gustavo Valverde committed
May 29, 2026
B
chore: release v1.6.12 (#9590)
better-release[bot] committed
G
fix(generic-oauth): add `accessTokenExpiresIn` for providers that omit `expires_in` (#9799)
Gustavo Valverde committed
M
fix(oauth-proxy): missing state-cookie skip for oauth-proxy (#9385)
Maxwell committed
G
fix: URL-encode callbackURL in verify-email links (#9792)
Gustavo Valverde committed
D
docs(oauth): added Roblox provider and alphabetized "providers without email" table (#9786)
DedicatedRAM committed
May 28, 2026
T
T
chore: bump `@better-auth/utils` (#9791)
Taesu committed
G
fix(oauth): honor per-flow errorCallbackURL when state validation fails (#9789)
Gustavo Valverde committed