What’s New

Better Auth v1.6.22

v1.6.22
Added 1
  • Account-level verification lockout for two-factor authentication
Fixed 4
  • Unproven credentials are now revoked during magic link and email OTP sign-in
  • Server-side OAuth requests now refuse redirect responses instead of following them
  • SCIM write-path operations are now properly scoped and correctly honor the active attribute
  • Organization subscription actions (cancel, upgrade, restore, and the billing portal) no longer act on the wrong organization
better-auth
Bug Fixes
  • Fixed unproven credentials not being revoked during magic link and email OTP sign-in (#10239)
  • Fixed server-side OAuth requests to refuse redirect responses instead of following them (#10241)

For detailed changes, see CHANGELOG

@better-auth/scim
Bug Fixes
  • Fixed SCIM write-path operations to be properly scoped and to correctly honor the active attribute (#10242)

For detailed changes, see CHANGELOG

@better-auth/stripe
Bug Fixes
  • Fixed organization subscription actions (cancel, upgrade, restore, and the billing portal) that could act on the wrong organization.

For detailed changes, see CHANGELOG

auth
Bug Fixes
  • Added account-level verification lockout for two-factor authentication (#10240)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@gustavovalverde

Full changelog: v1.6.21...v1.6.22

View original

Discussion