megachangelog
Fix1.7.0-rc.6

v1.7.0-rc.6 Release

Bug fix release addressing TypeScript compatibility issues, session handling, OAuth provider token validation, logout flows, and PostgreSQL schema exports across multiple packages in the Better Auth ecosystem.

better-auth

Bug Fixes

  • Restored client plugin declaration compatibility for downstream TypeScript consumers. (#10794)
  • Fixed duplicate session requests during transient Suspense remounts while ensuring incomplete refreshes are revalidated. (#10769)

For detailed changes, see CHANGELOG

@better-auth/oauth-provider

Bug Fixes

  • Fixed private_key_jwt client assertions to accept the issuer URL as a valid aud claim (string or array) on token, introspection, and revocation requests. (#10811)
  • Completed the RP-Initiated Logout flow with form-encoded POST support, explicit confirmation pages, and strict post_logout_redirect_uri validation. (#10812)
  • Fixed handling of voluntary and essential ACR requests in authorization flows. (#10790)
  • Fixed claims requests to require the openid scope. (#10791)

For detailed changes, see CHANGELOG

@better-auth/drizzle-adapter

Bug Fixes

  • Fixed missing pgSchema export so drizzle-kit can emit CREATE SCHEMA for custom PostgreSQL namespaces. (#10770)

For detailed changes, see CHANGELOG

@better-auth/electron

Bug Fixes

  • Restored declaration compatibility for downstream TypeScript consumers. (#10794)

For detailed changes, see CHANGELOG

@better-auth/expo

Bug Fixes

  • Restored declaration compatibility for downstream TypeScript consumers. (#10794)

For detailed changes, see CHANGELOG

auth

Bug Fixes

  • Fixed missing pgSchema export so drizzle-kit can emit CREATE SCHEMA for custom PostgreSQL namespaces. (#10770)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@bytaesu, @gustavovalverde, @ping-maxwell

Full changelog: v1.7.0-rc.5...v1.7.0-rc.6

authoauthtypescriptpostgresqlbugfix

Source: original entry ↗

More from Better Auth

Follow Better Auth to get its new changes in your feed and email digest.

Security1.7.7

Magic Link upgrade and critical security fixes

Better Auth v1.7.7 addresses a critical Magic Link account-takeover vulnerability and multiple security issues including OAuth/SAML sign-in bugs and missing JSON headers in error responses. Magic Link requires a server upgrade with verification storage coordination, but no database migration is needed.

securityauthmagic-linkoauthbug-fix
Improvement1.7.6

v1.7.6

Better Auth v1.7.6 adds support for customizable banned user messages and Vercel BotID captcha provider for authentication. This release fixes critical bugs including React hydration mismatches, password length validation, overlapping auth query requests, model identity issues across multiple adapters, and OAuth social account linking.

authcaptchasecurityadaptersbug-fixes
Improvement1.7.5

v1.7.5 Release

This release adds database schema name support for direct PostgreSQL connections and includes multiple bug fixes across better-auth packages, including improvements to server-side logging, database migrations, index validation, and adapter initialization.

postgresqldatabasebug-fixesadapterslogging
See all Better Auth changes →