better-auth 1.2.6

v1.2.6

on Node.js NPM

   🚀 Features

• MapProfileToUser in vk social-provider  -  by @MagicFun1241 in #1944 (8d357)
• One-time token plugin  -  by @Bekacru in #2151 (155d9)
• createAdapter and useNumberId  -  by @ping-maxwell in #1926 (98661)
• Support user data mapping in id token social sign-in  -  by @Bekacru (a4267)
• Update hover style for light mode in community page  -  by @sudoskys (8955d)
• Zoom social provider  -  by @nktnet1 in #1671 (4590b)
• (captcha plugin) adding support for Google ReCAPTCHA v3 and hCaptcha  -  by @0scrm in #1836 (bf281)
• Openapi spec update  -  by @solarsoft0 in #1699 (27b40)
• Have-i-been-pwned plugin  -  by @moshetanzer in #1978 (99ffa)
• Support custom issuer totp  -  by @Siumauricio in #2113 (b2660)
• Delete token expiry configuration  -  by @Bekacru in #2138 (3b659)
• Add option to disable session refresh on use  -  by @Bekacru in #2126 (9e951)
• admin:
  • Add support for passing multiple roles as array  -  by @Netrifier in #1907 (df727)
• email-otp:
  • Support attempt numbers for email-otp  -  by @Bekacru in #2146 (880a5)
• facebook:
  • Add support for business login using config ids  -  by @arlyon in #1990 (6b22e)
• generic-oauth:
  • Added field discoveryHeaders to GenericOAuthConfig  -  by @RyanWSweeney in #2205 (c6d59)
• jwt:
  • Add sub claim and getSubject  -  by @Bekacru in #2194 (04937)
• oauth2:
  • Override user info on provider sign-in  -  by @Bekacru in #2148 (f9b96)
• organization:
  • Add invitation limit  -  by @Bekacru in #2014 (81e45)
  • Support multiple permissions check  -  by @rxri in #2227 (cb900)
• phone-number:
  • Add attempts check  -  by @Bekacru (1369d)
  • Add number of attempts configuration  -  by @Bekacru in #2046 (5591e)
  • Add phone number verification requirement before sign-in  -  by @Bekacru in #1984 (e24a6)
• provider:
  • Twitter email support  -  by @Kinfe123 in #2176 (48efd)
• react-start:
  • Add react-start integration for cookie handling  -  by @Bekacru in #2119 (06ddd)
• socialLink:
  • Add support for custom scopes in social account linking  -  by @leoleducq in #2074 (c14f1)
• stripe:
  • Restore subscription  -  by @JNLei in #1705 (82633)
• two-factor:
  • Refactor two-factor authentication with better error handling, configurable otp limits and verification  -  by @Bekacru in #2234 (de91c)
• username:
  • Export the correct error codes for the plugin  -  by @Bekacru (e09ce)

   🐞 Bug Fixes

• Import orders and alias to avoid conflict in ac code examples  -  by @AmagiDDmxh (e0b34)
• Fallback to checking main db on session retrieval when storeSessionInDatabase is enabled  -  by @Bekacru (f0e8f)
• Export oAuth types  -  by @hyoban in #2028 (0b6a2)
• Og image compat  -  by @Kinfe123 (e2d6b)
• Og image compatibility on multiple link previews  -  by @Kinfe123 (a2174)
• Tooltip arrow  -  by @Kinfe123 (1c605)
• Tooltip arrow pointer  -  by @Kinfe123 (e62ea)
• Forget password flow failing because of id conversion  -  by @sosweetham in #2083 (75faf)
• Dep issue  -  by @Kinfe123 (4ff81)
• Deployment compat issue  -  by @Kinfe123 (3b6d8)
• Verify github email when profile has an email  -  by @erquhart in #2078 (fcb43)
• Docs syntax spacing  -  by @Kinfe123 (11166)
• GenericOAuth default redirectURI for account linking  -  by @dbworku in #2147 (d2453)
• Missing disableRefresh type in server side getSession  -  by @Bekacru in #2141 (fb431)
• Redirect to defaultErrorURL if errorURL doens't exist  -  by @Bekacru (6a089)
• Plugin middleware docs  -  by @Kinfe123 (bfdb2)
• Improve header value retrieval for IP address extraction  -  by @ozgurozalp in #1865 (cbbd6)
• Prisma client docs  -  by @Kinfe123 (f4a38)
• Community page interaction  -  by @Kinfe123 (ea465)
• Community page interaction  -  by @Kinfe123 (171fa)
• Hover style for light mode in community page  -  by @Kinfe123 (06d65)
• IpAddress and userAgent missing on server authentication  -  by @Bekacru in #2121 (a9274)
• Missing export one time token plugin  -  by @wadefletch in #2222 (b7c72)
• Delete from session table when stopImpersonate called  -  by @Kinfe123 in #2230 (3f4af)
• Filter out fields with returned: false from session cookie cache  -  by @Kinfe123 in #2232 (78f18)
• Rethrow error from db hooks if it is APIError instances  -  by @Bekacru (45f43)
• admin:
  • Pass where clause to adapter.count to fix total value on listUser  -  by @Netrifier in #2109 (38128)
  • DefaultRoles, adminRoles + others not applying user config  -  by @ping-maxwell in #2128 (4dcb9)
  • 'dontRememberMe' cookie handling during impersonation  -  by @Bekacru in #2236 (2249f)
• api-key:
  • Return value of permissions should be object, not string  -  by @ping-maxwell in #1757 (f633d)
  • Update rateLimitEnabled default to consider options  -  by @ismael-iskauskas in #1887 (b2def)
• apple:
  • Update responseType to include code and id_token  -  by @Bekacru in #2091 (c0f15)
• custom-session:
  • Custom session failing to set cookies  -  by @Bekacru in #2124 (61dc4)
• generic-oauth:
  • Should check for email after mapProfileToUser  -  by @Bekacru (0b5c1)
• oauth:
  • Encode clientId and clientSecret in authorization header  -  by @xinyao27 in #2120 (ffa24)
• oauth-proxy:
  • Extend callback and sign-in path matchers to include /oauth2/callback and /sign-in/oauth2  -  by @Bekacru (7987d)
• oidc-provider:
  • Add cookie options for path and sameSite in authorize  -  by @Bekacru (dbe66)
• open-api:
  • Hide disabled paths  -  by @CrutchTheClutch in #2144 (f257f)
• organization:
  • Update default invitation expiration time to use seconds  -  by @Bekacru (834e3)
  • Fix conditional teamId inference  -  by @Netrifier in #2133 (a6860)
  • UpdateMemberRole failing if issuer has multiple roles  -  by @dustin-we in #2104 (72631)
• stripe:
  • Allow customizing subscription schema  -  by @ping-maxwell in #2105 (10893)
  • Throw err if passed referenceId when no subscription authorizeReference` is defined  -  by @ping-maxwell in #2129 (9efcd)
  • Update referenceId in checkout session to use client_reference_id instead of metadata  -  by @Bekacru (08130)
• two-factor:
  • 2fa error codes failing to infer  -  by @ping-maxwell in #2102 (f7199)

    View changes on GitHub