better-auth 1.7.0-beta.7

v1.7.0-beta.7

on Node.js NPM

better-auth

Features

• Added refreshTokenParams config to forward extra parameters to the token endpoint during token refresh (#9948)

Bug Fixes

• Fixed ID token nonce binding in the generic OAuth redirect flow (#10095)

For detailed changes, see CHANGELOG

@better-auth/core

Features

• Added refreshTokenParams config to forward extra parameters to the token endpoint during token refresh (#9948)

Bug Fixes

• Fixed SSRF protection for client_id host validation by routing checks through the shared host classifier, blocking additional non-public address forms (#10126)

For detailed changes, see CHANGELOG

@better-auth/oauth-provider

Features

• Added sessionId to ID token claim contributors, accessible via input.sessionId in claims.idToken and claims.accessToken contributors (#10113)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@gustavovalverde, @yordis

Full changelog: v1.7.0-beta.6...v1.7.0-beta.7