All of the changes made will be available here.

Better Auth is comprehensive authentication library for TypeScript that provides a wide range of features to make authentication easier and more secure.

DocumentationGitHubCommunity

BETTER-AUTH.

v1.1.19

🚀 Features

  • cli: Add support for auth.server.ts – @ardasoyturk
  • mongodb-adapter: Support custom ID generation in MongoDB adapter – @Bekacru
  • one-tap: Improve Google One Tap integration with JWT verification and improved prompt handling – @Bekacru
  • two-factor: Activate two factor with email OTP to avoid Insecure skipVerificationOnEnable – @GregorWedlich

🐞 Bug Fixes

  • admin:
    • Impersonate user session expiration  -  by @Kinfe123 in https://github.com/better-auth/better-auth/issues/1471 <samp>(072c5)</samp>
    • Unban should reset expiration date and reason  -  by @Kinfe123 in https://github.com/better-auth/better-auth/issues/1469 <samp>(954b1)</samp>
  • api:
    • Config in getSessionFromCtx overrides query param  -  by @Kinfe123 in https://github.com/better-auth/better-auth/issues/1496 <samp>(261fe)</samp>
  • auth:
    • Use options.baseURL instead of ctx.baseURL on trusted origins  -  by @Bekacru <samp>(5dfb7)</samp>
  • db:
  • email-otp:
    • Don’t save email address as user name  -  by @benkingcode and benkingcode in https://github.com/better-auth/better-auth/issues/1519 <samp>(5f6cb)</samp>
  • generic-oauth:
    • Support allowDifferentEmails on Generic OAuth Plugin  -  by @alessandrojean in https://github.com/better-auth/better-auth/issues/1481 <samp>(9c3b5)</samp>
  • jwt-plugin:
  • oauth:
    • Set tokens on oauth account created during link  -  by @thiagofelix in https://github.com/better-auth/better-auth/issues/1462 <samp>(e5133)</samp>
  • oidc-plugin:
    • User info endpoint casing to match OIDC spec  -  by @stephenlacy in https://github.com/better-auth/better-auth/issues/1446 <samp>(2ecd3)</samp>
    • DeleteVerificationValue call by id  -  by @runreal-warman <samp>(c0bd4)</samp>
    • Store and handle nonce value  -  by @runreal-warman <samp>(c39e1)</samp>
    • Sub is required /userinfo response  -  by @runreal-warman in https://github.com/better-auth/better-auth/issues/1504 <samp>(8ac1f)</samp>
  • open-api:
    • Convert path parameters to OpenAPI format  -  by @Phanuwat-Pao in https://github.com/better-auth/better-auth/issues/1437 <samp>(da2fd)</samp>
    • Add missing id field in generated OpenAPI for each schema (Models)  -  by @astahmer in https://github.com/better-auth/better-auth/issues/1491 <samp>(add38)</samp>
  • passkey:
    • Remove client export from the server plugin  -  by @Bekacru in https://github.com/better-auth/better-auth/issues/1511 <samp>(bf47a)</samp>
    View changes on GitHub

v1.1.18

🚀 Features

  • Custom generate token function for magic links – @t3duk
  • Support function for trusted origins configuration – @ping-maxwell @Bekacru
  • admin: Set user password – @Bekacru
  • generic-oauth: OAuth2 link account – @Bekacru
  • organization: Leave organization – @Bekacru
  • username: Add default validation and options for validating username – @Bekacru

🐞 Bug Fixes

  • Remove zod type export from clients – @Bekacru
  • Log error in handleOAuthUserInfo – @Bekacru
  • Use Partial for body and query in InferRoute type – @Bekacru
  • Database hooks should use Partial types to avoid overwriting previous hooks returns – @Bekacru
  • cli: Add on delete cascade constraint to drizzle references – @gregtjack
  • expo: Headers should be retrieved from APIError in OAuth hook – @Bekacru
  • phone-number: Ensure callbackOnVerification is called after user verification – @Bekacru
  • rate-limit: Use the passed model name for rate limiter storage – @Bekacru
    View changes on GitHub

v1.1.17

🐞 Bug Fixes

  • Update user should use id as a reference – @Bekacru
  • Update session cache on email verification – @Bekacru
  • SocialProvider return null if undefined – @baptisteArno
  • Allow partial returns from update hooks – @Bekacru
  • auth: Update cookie handling in anonymous and multi-session plugins – @Bekacru
  • cli: Wrong kysely schema filename – @alfanjauhari
  • drizzle: Drizzle with mysql update breaks on anything other than update by id – @Kinfe123 @Bekacru
  • username: Return email not verified instead of invalid email and password – @Bekacru
    View changes on GitHub

v1.1.16

🚀 Features

  • Add cookie helper for middlewares – @Bekacru
  • Add refetch function for all client hooks – @Bekacru

🐞 Bug Fixes

  • Trigger session update on delete user – @Bekacru
  • Handle converting date on session parsing from cookie cache – @Bekacru
  • Google IdToken auth issuer mismatch – @abegehr
  • Make session table optional when secondary storage is provided – @Bekacru
  • anonymous:
  • drizzle:
    • Incorrect call to getModelName  -  by @chrnorm in https://github.com/better-auth/better-auth/issues/1329 <samp>(9a3e2)</samp>
    • Drizzle adapter failing to return data on create and update when using mysql  -  by @Kinfe123 in https://github.com/better-auth/better-auth/issues/1358 <samp>(4748b)</samp>
  • oidc:
    • Missing content type header on openId configuration endpoint  -  by @Bekacru <samp>(cb91d)</samp>
  • passkey:
  • security:
    View changes on GitHub