v1.7.11 - Multiple bug fixes across auth packages
Patch release addressing multiple stability issues including PostgreSQL migration diffs, rate limiting header values, OAuth provider schema validation, and social account linking with ID tokens across better-auth packages.
better-auth
Bug Fixes
- Fixed repeated PostgreSQL migration diffs for
int8columns. (#10719) - Fixed database-backed rate limiting returning an excessively large
X-Retry-Aftervalue. (#11521)
For detailed changes, see CHANGELOG
@better-auth/core
Bug Fixes
- Fixed plugin
initreturns withoptions: undefinedfailing type checks underexactOptionalPropertyTypes. (#11907) - Fixed ID token signature and claim validation for Twitch and Paybin sign-in. Custom Paybin issuers must publish RS256 signing keys at
<issuer>/.well-known/jwks.json. (#11884) - Reduced installation size while preserving OpenTelemetry instrumentation attributes. (#11623)
For detailed changes, see CHANGELOG
@better-auth/oauth-provider
Bug Fixes
- Fixed OpenAPI schemas for
/oauth2/consentand/oauth2/continueto match their redirect responses. (#10881) - Fixed CIMD metadata refreshes overwriting concurrent administrator changes to discovered clients. (#11830)
For detailed changes, see CHANGELOG
@better-auth/expo
Bug Fixes
- Fixed Expo social account linking with ID tokens when a session cookie is present. (#10207)
For detailed changes, see CHANGELOG
Contributors
Thanks to everyone who contributed to this release:
@aryan1306, @bytaesu, @cpojer, @gustavovalverde, @noobnooc, @rendermani, @sahiljagtap08
Full changelog: v1.7.10...v1.7.11
Source: original entry ↗
More from Better Auth
Follow Better Auth to get its new changes in your feed and email digest.
v1.8.0-beta.1 Release
Better Auth v1.8.0-beta.1 includes a browser account chooser for Google sign-in using FedCM, fixes for preserving required fields in Drizzle adapter v2 schemas, and support for client_credentials scopes in OAuth provider client registration.
v1.8.0-beta.0 Release
Major update to Better Auth with significant breaking changes to device-code approval flows, OAuth token handling, and consent recording. Includes new CIBA support, OAuth token exchange, and improved polling behavior for concurrent requests.
v1.7.10 – Bug fixes and improvements across auth packages
Multiple bug fixes across better-auth, oauth-provider, core, and mongo-adapter packages. Fixes include Google One Tap sign-in issues, OAuth client handling, PKCE verification, MongoDB pagination, and JWKS endpoint reliability improvements.