megachangelog
Fix1.6.25

v1.6.25

This release fixes Apple OAuth PKCE code challenge not being sent during authorization, Google One Tap incorrectly creating users when sign-up was disabled, Solid client missing $fetch and $store exposure, and internal adapter queries being routed to wrong tables when model names were remapped.

better-auth

Bug Fixes

  • Fixed Apple OAuth not sending the PKCE code challenge during authorization, causing token exchange failures (#10294)
  • Fixed Google One Tap creating new users when sign-up was disabled on the Google provider (#10479)
  • Fixed $fetch and $store not being exposed on the Solid client (#10444)
  • Fixed internal adapter queries being routed to the wrong table when a built-in table's modelName was set to another table's schema key (e.g. user.modelName = "account").

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@birkskyum, @jsj, @krish-vachhani

Full changelog: v1.6.24...v1.6.25

oauthbug-fixesauthsolid

Source: original entry ↗

More from Better Auth

Follow Better Auth to get its new changes in your feed and email digest.

Fix1.7.11

v1.7.11 - Multiple bug fixes across auth packages

Patch release addressing multiple stability issues including PostgreSQL migration diffs, rate limiting header values, OAuth provider schema validation, and social account linking with ID tokens across better-auth packages.

authbugfixoauthdatabasestability
Announcement1.8.0-beta.1

v1.8.0-beta.1 Release

Better Auth v1.8.0-beta.1 includes a browser account chooser for Google sign-in using FedCM, fixes for preserving required fields in Drizzle adapter v2 schemas, and support for client_credentials scopes in OAuth provider client registration.

authoauthgoogledrizzlefedcm
Breaking1.8.0-beta.0

v1.8.0-beta.0 Release

Major update to Better Auth with significant breaking changes to device-code approval flows, OAuth token handling, and consent recording. Includes new CIBA support, OAuth token exchange, and improved polling behavior for concurrent requests.

oauthbreakingdevice-authcibasecurity
See all Better Auth changes →