6 replies

SSO sign-in throws "TypeError: Invalid URL" with input 'undefined' despite correct configuration

Environment:
better-auth: 1.3.34
@better-auth/sso: 1.3.34
Database: PostgreSQL with Drizzle ORM
Provider: Microsoft Entra (Azure AD) OIDC
Description:
When attempting to initiate SSO sign-in using the @better-auth/sso plugin, the request fails with a TypeError indicating an invalid URL with 'undefined' as input.

// lib/auth.ts
export const auth = betterAuth({
  baseURL: process.env.NEXT_PUBLIC_BASE_URL
  database: drizzleAdapter(db, { provider: "pg", schema: schema }),
  plugins: [
    sso({
      organizationProvisioning: {
        disabled: false,
        defaultRole: "member",
      },
 ...
});

// lib/auth.ts
export const auth = betterAuth({
  baseURL: process.env.NEXT_PUBLIC_BASE_URL
  database: drizzleAdapter(db, { provider: "pg", schema: schema }),
  plugins: [
    sso({
      organizationProvisioning: {
        disabled: false,
        defaultRole: "member",
      },
 ...
});

The provider is successfully registered in the database with verified data

When Attempting to run the signIn API with sso in both cases client or server side returns the same error

// Client-side
const response = await authClient.signIn.sso({
  providerId: "microsoft-entra",
  callbackURL: "/dashboard",
});

// Server-side
const response = await auth.api.signInSso({
  body: {
    providerId: "microsoft-entra",
    callbackURL: "/dashboard",
  },
});

// Client-side
const response = await authClient.signIn.sso({
  providerId: "microsoft-entra",
  callbackURL: "/dashboard",
});

// Server-side
const response = await auth.api.signInSso({
  body: {
    providerId: "microsoft-entra",
    callbackURL: "/dashboard",
  },
});

The error:

TypeError: Invalid URL
  code: 'ERR_INVALID_URL',
  input: 'undefined'

TypeError: Invalid URL
  code: 'ERR_INVALID_URL',
  input: 'undefined'

Server logs confirm:
Auth baseURL is correctly set: http://localhost:3000
Request origin: http://localhost:3000
Request body contains: { providerId: 'microsoft-entra', callbackURL: '/dashboard' }
All environment variables are properly set
The discovery endpoint (https://login.microsoftonline.com/{tenant-id}/v2.0/.well-known/openid-configuration) is accessible and returns valid data

A manual implementation outside of Better Auth successfully

- Retrieves the provider from the database
- Fetches the discovery document
- Constructs the authorization URL
- Redirects to Microsoft Entra successfully

I am not sure what else to check and I just can't seem to find what is the missing piece, would really appreciate the help

SSO sign-in throws "TypeError: Invalid URL" with input 'undefined' despite correct configuration

// lib/auth.ts
export const auth = betterAuth({
  baseURL: process.env.NEXT_PUBLIC_BASE_URL
  database: drizzleAdapter(db, { provider: "pg", schema: schema }),
  plugins: [
    sso({
      organizationProvisioning: {
        disabled: false,
        defaultRole: "member",
      },
 ...
});

// lib/auth.ts
export const auth = betterAuth({
  baseURL: process.env.NEXT_PUBLIC_BASE_URL
  database: drizzleAdapter(db, { provider: "pg", schema: schema }),
  plugins: [
    sso({
      organizationProvisioning: {
        disabled: false,
        defaultRole: "member",
      },
 ...
});

The provider is successfully registered in the database with verified data

When Attempting to run the signIn API with sso in both cases client or server side returns the same error

// Client-side
const response = await authClient.signIn.sso({
  providerId: "microsoft-entra",
  callbackURL: "/dashboard",
});

// Server-side
const response = await auth.api.signInSso({
  body: {
    providerId: "microsoft-entra",
    callbackURL: "/dashboard",
  },
});

// Client-side
const response = await authClient.signIn.sso({
  providerId: "microsoft-entra",
  callbackURL: "/dashboard",
});

// Server-side
const response = await auth.api.signInSso({
  body: {
    providerId: "microsoft-entra",
    callbackURL: "/dashboard",
  },
});

The error:

TypeError: Invalid URL
  code: 'ERR_INVALID_URL',
  input: 'undefined'

TypeError: Invalid URL
  code: 'ERR_INVALID_URL',
  input: 'undefined'

SSO sign-in throws "TypeError: Invalid URL" with input 'undefined' despite correct configuration

Similar Threads

SSO sign-in throws "TypeError: Invalid URL" with input 'undefined' despite correct configuration

Similar Threads

Similar Threads

Similar Threads