Session info isn't available fast enough on manual page reload, server sign in api needs reload
Authentication Flow Issue: Email Verification Not Syncing Across Sign-In Methods
'/forget-password' rate limit is not working after latest update
callbackURL not supported in v1.2.5
Latest update broke `emailAndPassword: {autoSignIn: true}`
autoSignIn: true
is broken on my side. Currently the project is setup with requireEmailVerification: true
as well. I understand that the default behavior is set to true but even explicitly setting it wont fix it.
I'm using Sveltekit.
When reverting to a previous version it's magically fixed....BetterAuth+Prisma given Too many Connections error
``
Invalid
db[getModelName(model)].findFirst()` invocation in
/Users/mac/Documents/workspace/business-copilot/business-copilot-webapp/node_modules/better-auth/dist/adapters/prisma-adapter/index.cjs:168:52
...[breaking] mapProfileToUser gets called twice when logging in via ID Tokens, breaking authentication
mapProfileToUser
seems to be getting called twice when logging in via Social Provider ID Tokens.
By putting a logger.info();
in the provider mapProfileToUser
, you can see that it logs two values, the first being the actual response from the provider, the second one being the Better Auth user object. This leads to the UNABLE_TO_CREATE_USER
error due to the fact that the second response does not contain provider-native arguments such as profile.given_name
...advanced.generateId: false is ignored in 1.2.6 with drizzleAdapter
advanced.database.generateId
to false
New Prisma generate and init
npx @better-auth/cli generate
with a new version of Prisma.
cookie gets cleared after redirect in prod
Google oauth not redirecting
https://accounts.google.com/o/oauth2/auth?response_type=code
https://accounts.google.com/o/oauth2/auth?response_type=code
disableDefaultFetchPlugins
when you init the auth client?Google Oauth error on 1.2.6
HaveIBeenPwned creates user anyway
{code: "THE_PASSWORD_YOU_ENTERED_HAS_BEEN_COMPROMISED_PLEASE_CHOOSE_A_DIFFERENT_PASSWORD", message: "The password you entered has been compromised. Please choose a different password.", status: 400, statusText: "Bad Request"}
1. code = message? (I think it's good to customize the code in addition to the message for localization purposes)...npm i https://pkg.pr.new/better-auth/better-auth@2253
Invalid Callback URL on expo IOS when doing Google oauth
business-copilot:///
as a trusted origin in your auth configGoogle Sign-In throws Error in Production
error = "please_restart_the_process"
error = "please_restart_the_process"
Spotify redirect url
Reference naming doesn't fit all use-cases

Stripe: `onSubscriptionUpdate` passes old subscription data
onSubscriptionUpdate
callback is fired, it passes the subscription
data grabbed from the DB. However, this is the data before the updated properties are applied.
For example, if a user switches from one plan to another, the passed subscription
object contains the old plan, not the new one.
Relevant code:...Custom schema model name in organization plugin does not correctly change FK drizzle adapter

Generic oauth failing on missing email
email_is_missing
.
Seeing how both Twitter and Tiktok allow for null emails, I would expect similar behavior in the generic oauth plugin as well. Or, alternatively, a way (a la Auth.js) to write and use custom providers.
mapProfileToUser
has no affect on the above as this method is being invoked after the email check fails. One must use a custom getUserInfo
method to get around this restriction. See here: https://github.com/better-auth/better-auth/blob/6a0898fa88d1a49163b711fdbfa05489e0301a2c/packages/better-auth/src/plugins/generic-oauth/index.ts#L606