v1.7.9
Bug fixes for onAPIError handlers to complete before sending responses, added isContinuation to postLogin.shouldRedirect for multi-organization authorization flows, and fixed DPoP validation for token requests behind proxies.
better-auth
Bug Fixes
- Fixed
onAPIError.onErrorhandlers to finish before responses are sent and log failures without interrupting requests (#11766)
For detailed changes, see CHANGELOG
@better-auth/oauth-provider
Bug Fixes
- Added
isContinuationtopostLogin.shouldRedirectso users can complete authorization after selecting an organization (#11185) - Fixed DPoP validation for token and UserInfo requests behind proxies that rewrite request URLs (#10799)
For detailed changes, see CHANGELOG
Contributors
Thanks to everyone who contributed to this release:
Full changelog: v1.7.8...v1.7.9
Source: original entry ↗
More from Better Auth
Follow Better Auth to get its new changes in your feed and email digest.
v1.7.11 - Multiple bug fixes across auth packages
Patch release addressing multiple stability issues including PostgreSQL migration diffs, rate limiting header values, OAuth provider schema validation, and social account linking with ID tokens across better-auth packages.
v1.8.0-beta.1 Release
Better Auth v1.8.0-beta.1 includes a browser account chooser for Google sign-in using FedCM, fixes for preserving required fields in Drizzle adapter v2 schemas, and support for client_credentials scopes in OAuth provider client registration.
v1.8.0-beta.0 Release
Major update to Better Auth with significant breaking changes to device-code approval flows, OAuth token handling, and consent recording. Includes new CIBA support, OAuth token exchange, and improved polling behavior for concurrent requests.