🚀 Features
- List organization memebrs with pagination and filter queries - by @Bekacru in #3581 (e8b3d)
- Return false from
generateIdcallback to imply database-generated ID - by @aleclarson in #3723 (b2722) - Support multiple aud for apple oauth - by @Kinfe123 in #3710 (c7267)
- Allow
getUserInfoto return number type - by @himself65 in #3816 (84b5d) - Remove revoked session from active sessions list - by @himself65 in #3820 (a54da)
- Add telemetry - by @frectonz, @Kinfe123 and @himself65 in #3822 (1e673)
- cli:
- oidc-provider:
- Add
clientto getAdditionalUserInfoClaim callback - by @grant0417 in #3790 (b2ac8) - Allow passing oauth consent code via query params - by @grant0417 in #3845 (18f72)
- Add
- organization:
- passkey:
- stripe:
🐞 Bug Fixes
- Shouldn't refresh a token if access token expires is undefined or null - by @Bekacru in #3577 (4d767)
- Ensure session is added to context when reading from cookie cache - by @gaganref in #3578 (01814)
- Make sveltekit plugin ALS-agnostic - by @Kinfe123 in #3533 (b5a4c)
- Use same expires at date for cookie session data payload and signature - by @PacifismPostMortem in #3283 (a9c19)
- Resolve notion oauth user info extraction - by @Kinfe123 in #3567 (7f508)
- Cast dates from db to Date when using date methods - by @erquhart in #3611 (5bfab)
- Twitter refresh token requires basic authentication - by @bytechase in #3652 (e4af2)
- Pass
loginHintto Microsoft oauth URL - by @widavies in #3663 (29c0d) - Cast dates from session to Date when using date methods - by @erquhart in #3704 (14213)
- Incorrect initialization of remaining value within API key - by @eaoliver in #3648 (4833a)
- Add missing team reference in teamMember schema - by @Kinfe123 in #3801 (69d52)
- Await
ctxin middleware - by @himself65 in #3783 (1bbdc) - Plugins options type compatibility issue with
exactOptionalPropertyTypesenabled in ts-config - by @Kinfe123 in #3769 (24540) - Client secret should be optional in configuring the generic oauth plugin - by @frectonz and @Bekacru in #3824 (07ce7)
- Ensure zod v4 type annotations work with core types - by @Kinfe123 in #3834 (ae803)
- Remove deep array merge when merging hooks context - by @Adityakk9031 in #3160 (cf65b)
- Allow returning response object to skip after hooks - by @Bekacru in #3914 (eee0f)
- Handle inconsistent user update error in phone number plugin - by @Kinfe123 in #3925 (1ab4e)
- admin:
- cli:
- deps:
- expo:
- generic-oauth:
- Set account id from mapped user fields when creating account - by @charlietlamb in #3649 (41146)
- jwt:
- Ensure alg is added to the jwks when generating via /token endpoint - by @elliottminns in #3601 (f9930)
- Expose jwt options to plugins - by @grant0417 in #3726 (60c92)
- magic-link:
- mcp:
- Redirect returns json instead of 302 - by @ping-maxwell in #3838 (53260)
- mssql:
- "text" datatype is not working with mssql - by @ludoblues in #3144 (1b614)
- org:
- organization:
- organizaton:
- plugins:
- reddit:
- stripe:
- tiktok:
- Client id is not used for TikTok social provider - by @himself65 in #3846 (dabc5)
- username:
isUsernameAvailableshould validate usernames - by @ping-maxwell in #3680 (e60f7)isUsernameAvailableshould validate usernames " - by @Bekacru in #3680 and #3730 (4d85d)- Remove normalize transform for displayUsername - by @oskar-gmerek in #3912 (fa4c6)