better-auth 1.7.20

v1.7.20

on Node.js NPM

@better-auth/oauth-provider

Bug Fixes

• Fixed POST /oauth2/public-client-prelogin with allowPublicClientPrelogin to return a client only when its client_id matches the signed oauth_query, otherwise responding with 401 invalid_client (#12237)
• Fixed oauthProviderResourceClient(auth) defaults to accept issued access tokens when baseURL is only an origin, by including the auth path in the default issuer, JWKS, and introspection URLs (#12234)
• fix(oauth-provider): support http deployments on private networks (#11904)

For detailed changes, see CHANGELOG

@better-auth/prisma-adapter

Bug Fixes

• Fixed Prisma adapter incrementOne and update calls using mode: "insensitive" filters to match case-insensitively on PostgreSQL and MongoDB (#11809)
• Fixed Prisma adapter queries with eq null on MongoDB to also match records where the optional field was never set (#11806)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

• fix(oauth-provider): support http deployments on private networks (#11904)

For detailed changes, see CHANGELOG

@better-auth/memory-adapter

Bug Fixes

• Fixed ne null where clauses in the memory adapter to no longer match records where the field was never set (#11806)

For detailed changes, see CHANGELOG

@better-auth/sso

Bug Fixes

• Fixed SAML assertion validation to apply the default 5-minute saml.clockSkew to the NotBefore and NotOnOrAfter checks in samlify (#12309)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@ArjunCodess, @gustavovalverde

Full changelog: v1.7.19...v1.7.20