Better Auth

Join the Better Auth server to ask questions!

Join

Better Auth

Join the community to ask questions about Better Auth and get answers from other members.

Join

bug-reports

help

Ravi

8/28/2025

Mismatch in units for Refill Interval (API Plugin)

Hello, I've come across this bug in verify-api-key.ts: https://github.com/better-auth/better-auth/blob/canary/packages/better-auth/src/plugins/api-key/routes/verify-api-key.ts In the documentation for the API Plugin, the refillInterval should be in miliseconds. However, refillInterval is treated like it is in days in this file. I've attached the screenshot to show where that happens. I've also attached a screenshot of the API key schema from the docs. If this is indeed a bug I'd love to create a PR to fix, it could be my first open-source contribution 🙂...

zakisb97

8/28/2025

APP KEEP LOGIN OUT IN PRODUCTION VALUE SECURE STORE IS TOO BIG.

I KEEP GETTING THIS WARNING IN MY EXPO APP

Value being stored in SecureStore is larger than 2048 bytes and it may not be stored successfully. In a future SDK version, this call may throw an error.

Value being stored in SecureStore is larger than 2048 bytes and it may not be stored successfully. In a future SDK version, this call may throw an error.

IN PRODUCTION MY APP KEEPS LOGING OUT non stop. how do i erase this warning ?...

Sean

8/25/2025

Stripe api.auth. Functions not exists

Hey, When I try to use the Stripe plugin I get a TypeScript error because auth.api.listActiveSubscriptions does not exist on the type. All Stripe Function doesnt exists. I think in the documentation is the right way: const subscriptions = await auth.api.listActiveSubscriptions({...

Hakai

8/23/2025

authClient.organization.getFullOrganization() has some issues when using the membersLimit query

1. What's the issue? authClient.organization.getFullOrganization() currently has some issues when we try to use the membersLimit query parameter. authClient.organization.getFullOrganization() works completely fine as is. In my use case I do not want to retrieve the member's list so I use the query option in getFullOrganization() as such: ``` await authClient.organization.getFullOrganization({...

Uberzeek

8/20/2025

1.3.7 twoFactor plugin - bad user type

Hi, I just upgraded to 1.3.7 and this started showing, im expecting the the user object to hold all the user propertiers but it only contains twoFactorEnabled

Guti

8/20/2025

NestJS Better Auth routes

Anyone else having Problems Calling the Better Auth routes in NestJS since yesterday. I get 404 Not Found. But i know the ressource exists and is correctly mapped in the Initialization

Solution:

https://github.com/ThallesP/nestjs-better-auth/issues/20 Issue here. Fix Pull Request has been created...

varundeva

8/19/2025

Without login i can able to call/use sendOtp api for phone verification

I forgot to restrict /profile page in my application while doing development. i can abel to see phone number edit box. i just entered my phone number and clicked send otp button. button trigged sendOtp method from client side one and the api returned success message, ...

Blizzy

8/15/2025

Unclear method for default boolean values in additional fields

When setting the default value for a required additional field both of the following will fail and try to insert as null (tested drizzle adapter pg provider): ``` additionalFields: { onboardingComplete: { type: "boolean",...

Scootz

8/14/2025

Error while better-auth is attempting to renew? accessToken with Twitch

I understand that after the accessToken expires, better-auth automatically attempts to refresh the token in the background. For me at least, it fails to get a valid access token. Not sure how to track down what is happening but this image shows the error message(s) I get. I can initiate a sign in just fine and get another accesstoken but i'd rather have it renew the accesstoken like it should in the background. I'm using Nuxt 4.0.3/nitro 2.12.4, better-auth 1.3.6....

heneftees

8/14/2025

getSession does not work when baseURL is set

This baseURL in the context is now needed because of a breaking change that I updated into https://github.com/better-auth/better-auth/blob/a066293b35221aafd5b1ce5c814805bc9d816aa0/packages/better-auth/src/plugins/magic-link/index.ts#L192 Do mind that im doing a server-only approach for better-auth...

Risatoga

8/12/2025

Better Auth Bug Report: Email Verification Not Creating Database Records

message.txt

8/12/2025

ExactoptionalPropertyTypes bug wasn’t fixed as stated in 1.3.5 release notes

Hey, I upgraded to 1.3.5 and got the same error mentioned in this GH issue. Could someone from the team please take a look? https://github.com/better-auth/better-auth/issues/3570...

Solution:

should be fixed in 1.3.6

Ali Nasir

8/12/2025

BETTER AUTH 1.3.5 CRASHES ON NEXTJS

ok, so I have updated to 1.3.5 and now getting these errors related to "fs". have attached the logs.

message.txt

Kwae (GK)

8/12/2025

Vue BetterAuth Client - twoFactor.verifyOtp missing redirect/callback URL param

The client created using import { createAuthClient } from "better-auth/vue" and with the plugin twoFactorClient() is missing a callback URL/redirect when calling twoFactor.verifyOtp(). It is references through the documentation here: https://www.better-auth.com/docs/plugins/2fa#verifying-otp...

Sean

8/10/2025

Updated username normalization removed the ability to unnormalized displayUsernames specifically

in commit Commit 41fb4d1, a usernameNormlization funcation was implemented. Specifically in username/schema.ts the normalizer was hardcoded into the displayUsername so I no longer can have unnormalized display usernames in my application.

Solution:

https://github.com/better-auth/better-auth/pull/3911

Sören

8/9/2025

authClient.subscription.list does a POST request which results in a 404

https://github.com/better-auth/better-auth/blob/0a596beb3a1d39d97e17b085c581ffd119404a58/packages/stripe/src/index.ts#L888C14-L888C17 I am using sveltekit with better auth 1.3.4 and if i look at the code it seems like it should be a GET request. If i rewrite the request to GET it also works....

rinshad

8/8/2025

YOU_CAN_ONLY_SEND_A_VERIFICATION_EMAIL_TO_AN_UNVERIFIED_EMAIL

I have a custom signup logic , when a user try to login i am sending a verification email from front end using this code

await authClient.sendVerificationEmail({
    email: "user@email.com",
    callbackURL: "/" // The redirect URL after verification
})

await authClient.sendVerificationEmail({
    email: "user@email.com",
    callbackURL: "/" // The redirect URL after verification
})

...

Duki

8/8/2025

Not all sessions are revoked when deleting a user

So when I have the same user logged-in in 2 different browser and delete them in one browser, the other browser still has a valid session.

Pukima

8/8/2025

[Stripe Plugin] Restoring Subscription throws a 400 error

When cancelling a subscription and trying to do authClient.subscription.restore, I get the following error: ``` [Better Auth]: Error restoring subscription 41 | * Specifically for errors returned from Stripe's REST API. 42 | */ 43 | export class StripeError extends Error {...

aemon7327

8/7/2025

adminRoles Not Working

I am using the admin plugin with better-auth@1.3.4. I have the following configuration: admin({ adminRoles: ['SUPER_ADMIN'] }). However, when peforming admin actions, e.g. auth.api.listUsers() a user who has an active session with role: 'SUPER_ADMIN' will get the error message [Error [APIError]: You are not allowed to list users]. However, if I change the users role to admin they can then call listUsers(). It seems like the adminRoles configuration is being ignored.

Gaming

Programming

Better Auth

Join the Better Auth server to ask questions!

Better Auth

Join the community to ask questions about Better Auth and get answers from other members.