better-auth/better-auth v1.5.0-beta.3

on GitHub

   🚀 Features

• Add auth.api.verifyPassword  -  by @SaviruFr and @himself65 in #6934 (9dae1)
• anonymous: Delete anonymous user endpoint  -  by @ping-maxwell in #6377 (1a846)
• generic-oauth: Add Gumroad login support  -  by @ptaberg and @himself65 in #7100 (fd5af)
• saml: Reject SAML responses containing multiple assertions  -  by @Paola3stefania and Alexander Asomba in #6836 (7c71d)
• stripe: Enhance stripe plugin with organization customer support  -  by @bytaesu and Cmion in #7142 (94a95)

   🐞 Bug Fixes

• Filter null values from dynamic trusted origins  -  by @bytaesu and @himself65 in #7080 (63633)
• Call hooks on change-email-verification flow  -  by @bytaesu in #7160 (502a6)
• Clean up expired rate-limit entries on memory storage  -  by @ping-maxwell in #7161 (c56c5)
• Set Location header on redirected responses  -  by @GautamBytes and @ping-maxwell in #6232 (064ee)
• Use accountId instead of id when looking up accounts  -  by @bytaesu in #7216 (f869c)
• anonymous:
  • Prevent Convex cleanup from deleting fresh sessions  -  by @RodrigoRafaelSantos7 and @ping-maxwell in #5825 (bdd30)
• api-key:
  • Remove strict length pre-check in verifyApiKey  -  by @GautamBytes and @ping-maxwell in #6259 (76a41)
• core:
  • Detect dual module error  -  by @himself65 in #7097 (7c98f)
• docs:
  • Correct tos and policy types in oauth-provider  -  by @GautamBytes, Gautam Manchandani and @ping-maxwell in #7194 (a9e53)
• email-otp:
  • Call afterEmailVerification hook on verification  -  by @GautamBytes and Gautam Manchandani in #7121 (8f115)
• email-verification:
  • Sending email verification of another user fails with EMAIL_ALREADY_VERIFIED  -  by @ping-maxwell in #7215 (d3c5d)
• mcp:
  • Restore ctx.query from cookie in OAuth flow  -  by @bytaesu in #6974 (2221b)
• oauth:
  • Handle unencrypted tokens when encryptOAuthTokens is enabled  -  by @Paola3stefania in #7210 (a0f4f)
  • Set account cookie on re-login when updateAccountOnSignIn is false  -  by @bytaesu in #7217 (cd2ea)
• oauth-provider:
  • Properly handle metadata field in client registration  -  by @Paola3stefania in #7232 (d2a7a)
• one-tap:
  • Respect user dismiss actions in prompt retry logic  -  by @bytaesu in #7211 (ca9df)
• open-api:
  • Correctly infer type for ZodDefault fields  -  by @MuzzaiyyanHussain and Taesu in #7150 (d727c)
• organization:
  • Use opts pattern to enable hook injection  -  by @bytaesu in #7130 (dd9c1)
• passkey:
  • Add error logs during client verification error  -  by @ping-maxwell in #7193 (d7621)
• prisma-adapter:
  • Lift eq AND conditions to root so update detects unique where field  -  by @ping-maxwell in #7096 (61284)
  • Do not throw when deleting no records  -  by @ping-maxwell in #7143 (8e529)
• stripe:
  • Improve error handling and subscriptionSuccess route  -  by @bytaesu in #7087 (a4200)
  • Pass metadata to subscription object in upgrade method  -  by @bytaesu in #7090 (6e482)
  • Prevent duplicate subscription creation when a subscription already exists  -  by @bytaesu in #7104 (abf97)

    View changes on GitHub