All of the changes made will be available here.

Sep 4, 2025

v1.3.8

Sep 4, 2025

🚀 Features

---

• Support to infer error types from endpoint –
• Support node:sqlite –
• Remote sign a jwt payload –
• Support device authorization –
• Support custom schema merging in SIWE plugin –
• Add figma provider –
• Enhance Microsoft Entra ID type definitions –
• Add onUpdate field on db schema generation –
• Add onInvitationAccepted callback for org invitations –
• Add query parameter to useSession().refetch() for cache control consistency –
• Add last login method plugin –
• Check endpoint conflits –
• Add json field type –
• Add @default and @updatedAt for prisma generator –
• Use defaultNow() for drizzle timestamp fields –
• admin:
  • Get user –
  • /admin/update-user role as array –
• atlassian:
  • Add atlassian social provider –
• cli:
  • Add info script –
• cognito:
  • Add amazon cognito provider –
• demo:
  • Improve sign-up component –
• jwt:
  • Add disableSettingJwtHeader flag to prevent issuance of signed jwt –
  • Jwks remote url –
• mcp:
  • Add protected-resource metadata endpoint –
• microsoft:
  • Add support for setting authority –
• openapi:
  • Support Scalar Theme –
• org:
  • Dynamic Access Control –
• organization:
  • Organization life cycle hooks –
• paypal:
  • Add paypal OAuth2 provider –
• salesforce:
  • Add salesforce provider –
• social:
  • Add Line provider –
  • Add Kakao, Naver provider –
• stripe:
  • Add locale to stripe billing portal options –

🐞 Bug Fixes

---

• Constant time compare –
• Secondary storage should allow returning both string and parsed json –
• Telemetry should be opt in not opt out –
• Show error stack in debug mode –
• Move stack check into inner function –
• Check x-api-key for all auth endpoint –
• Avoid general oauth flow duplicate user –
• Small dx for device login –
• Invalid pages on docs throw a 500 server error instead of 404 –
• Make zod as dependency –
• Device authorization interval –
• Schema onUpdate not working –
• Member not exist on org –
• Never type still requires setting clientId to never –
• Team id zod schema meta property for array type –
• Resolve field naming inconsistency in account listing endpoint –
• Changelogs incorrect mentions –
• Leave error from fetch API as-is –
• Update organization requiring all additional fields for update payload –
• Prevent build error for node:sqlite –
• Prevent undefined from passed to adapter in username plugin –
• Add missing defaultValue on core schema –
• Strict social provider type –
• apple:
  • Ensures name is always present in profile for mapProfileToUser –
  • Allow audience to be `string
• cli:
  • Check for undefined defaultValue instead of truthy value when generating drizzle schema –
  • generate throws error with default export –
  • Incorrect drizzle schema gen –
  • Simplify and correct comma insertion logic in plugin array –
• client:
  • Prevent proxy promise-like behavior –
  • Prevent proxy promise-like behavior –
  • Avoid atom to be proxy –
• custom-session:
  • Also mutate multi-session response –
• db:
  • Special case schema generation ID –
• expo:
  • Fix the inability to dynamically import a dependency –
  • Fix signout clobbering store session properties –
• oauth2:
  • Correct basic auth header construction for refresh token –
• oidc:
  • Allow custom schemas –
  • Specify foreign key references in the schema –
• oidc-provider:
  • Handle string timestamps in user profile claims –
• organization:
  • Was possible to remove sole org owner –
• stripe:
  • Fix unset values on session completed with trial –
  • Allow sync function to get plans –

    View changes on GitHub

Aug 17, 2025

v1.3.7

Aug 17, 2025

🚀 Features

---

• Add disableRedirect to linkSocial –
• admin:
  • Add control to prevent admin users from deleting themselves –
• cli:
  • Resolves tsconfig references for path aliases –
  • Support sveltekit $ imports in CLI generate cmd –
• email-otp:
  • Add check verification otp endpoint –
• jwt:
  • Sign with jwt for artbitrary payload –
• vk:
  • Add user name mapping by default –

🐞 Bug Fixes

---

• Throw proper error if session is null when deleting organization –
• Prevent file system access when telemetry is disabled –
• Memory leak in custom session plugin –
• Use wider types for database hooks payloads –
• admin:
  • ImpersonatedBy not appearing in client (type fix) –
• cli:
  • Clean up unused pg and mysql import in drizzle schema generator –
  • Add FK onDelete cascade and CURRENT_TIMESTAMP defaults on generation –
  • Clean up unused pg and mysql import in drizzle schema generator –
• organization:
  • Prevent fk constraint violation when creating invitation without teams –
  • Resend invitation should reuse existing invitation instead of creating duplicate –
• sso:
  • [⚠︎Security] - membership check should be required before allowing users to create sso for an organization –
• stripe:
  • Prevent undefined assignment to optional properties –
• sveltekit:
  • Use permissive typing for RequestEvent params –
• telemetry:
  • process referenced on non-nodejs runtime –

    View changes on GitHub

Aug 11, 2025

v1.3.5

Aug 11, 2025

🚀 Features

---

• List organization memebrs with pagination and filter queries –
• Return false from generateId callback to imply database-generated ID –
• Support multiple aud for apple oauth –
• Allow getUserInfo to return number type –
• Remove revoked session from active sessions list –
• Add telemetry –
• cli:
  • Added --yes for generate/migrate, deprecated --y –
• oidc-provider:
  • Add client to getAdditionalUserInfoClaim callback –
  • Allow passing oauth consent code via query params –
• organization:
  • Additional fields support separate client-server projects –
  • Add membersLimit param to allow to fetch more or less members than the membership limit –
  • Add option for requiring email verificaiton –
• passkey:
  • Allow custom passkey name during registration –
• stripe:
  • Create billing portal session –

🐞 Bug Fixes

---

• Shouldn't refresh a token if access token expires is undefined or null –
• Ensure session is added to context when reading from cookie cache –
• Make sveltekit plugin ALS-agnostic –
• Use same expires at date for cookie session data payload and signature –
• Resolve notion oauth user info extraction –
• Cast dates from db to Date when using date methods –
• Twitter refresh token requires basic authentication –
• Pass loginHint to Microsoft oauth URL –
• Cast dates from session to Date when using date methods –
• Incorrect initialization of remaining value within API key –
• Add missing team reference in teamMember schema –
• Await ctx in middleware –
• Plugins options type compatibility issue with exactOptionalPropertyTypes enabled in ts-config –
• Client secret should be optional in configuring the generic oauth plugin –
• Ensure zod v4 type annotations work with core types –
• Remove deep array merge when merging hooks context –
• Allow returning response object to skip after hooks –
• Handle inconsistent user update error in phone number plugin –
• admin:
  • Export type definitions from the admin plugin –
• cli:
  • --yes option does not work on @better-auth/cli generate –
  • Prisma schema generate mismatch on custom plugin table names –
  • Only show the overwrite message when the schema file exists and the code has changed –
• deps:
  • Update better-auth dependencies
• expo:
  • Improve cookie expiration handling –
• generic-oauth:
  • Set account id from mapped user fields when creating account –
• jwt:
  • Ensure alg is added to the jwks when generating via /token endpoint –
  • Expose jwt options to plugins –
• magic-link:
  • Magic link URL construction –
• mcp:
  • Redirect returns json instead of 302 –
• mssql:
  • "text" datatype is not working with mssql –
• org:
  • Use correct slug lookup when setting active org –
• organization:
  • Updated types for the user argument in allowUserToCreateOrganization to support custom fields –
  • Team members should be cleaned up on delete team –
  • Convert emails to lower case for invitation lookups –
• organizaton:
  • Avoid cross organization member role updates –
• plugins:
  • Export siwe plugin –
• reddit:
  • Refresh access token should use basic auth –
• stripe:
  • Prevent duplicate trials when switching plans –
  • Update customer id should also trigger secondary storage update –
  • Fallback to subscription id instead of picking the first sub if id is provided –
• tiktok:
  • Client id is not used for TikTok social provider –
• username:
  • isUsernameAvailable should validate usernames –
  • isUsernameAvailable should validate usernames " –
  • Remove normalize transform for displayUsername –

    View changes on GitHub

Jul 26, 2025

better-auth@1.3.4

Jul 26, 2025

Patch Changes

---

• Added listMembers API with pagination, sorting, and filtering.
• Added membersLimit param to getFullOrganization.
• Improved client inference for additional fields in organization schemas.
• Fixed date handling by casting DB values to Date objects before using date methods.
• Fixed Notion OAuth to extract user info correctly.
• Ensured session is set in context when reading from cookie cach

Jul 26, 2025

@better-auth/stripe@1.3.4

Jul 26, 2025

Patch Changes

---

• ac6baba: chore: fix typo on freeTrial
• c2fb1aa: Fix duplicate trials when switching plans