{"collection":{"slug":"auth-identity","name":"Auth & Identity"},"digest":{"id":"cwd_U83QDB8bEMpFQLnvTMatn","weekStart":"2026-10-26","title":"Auth platforms turn to protecting accounts, not just creating them","intro":"Auth0 opened Universal Portals so end users and org admins can manage their own accounts without custom UI, while Clerk shipped passkeys as a second factor, per-domain sign-up limits, and a private beta for authenticating AI agents.","body":"### Self-service moves into the platform\n\nThe week's biggest shift came from Auth0, which launched [Universal Portals in Developer Preview](/release/rel_SNyok9EzYBbp2mS0tF00j-auth0-launches-universal-portals-in-developer-preview-for-self-service-account). Instead of hand-building account settings screens, tenants get hosted portals assembled from pre-built components on a URL on their own domain: consumer portals for profile updates, MFA factor and passkey enrollment, and security settings, and business portals where organization admins edit org details and verify domains. It's the kind of surface almost every team ends up rebuilding badly, so moving it into the platform is a meaningful reduction in custom code.\n\nClerk pushed in the same direction at the organization level. Across its shared, UI, and core JS packages, it [decoupled Directory Sync from the SSO flag](/release/rel_zPUOPRj8etXg9cRe5QTys-clerk-js-sdk-6-41-0-adds-per-organization-directory-sync-setting), so self-serve Directory Sync is now controlled per organization rather than following self-serve SSO — and the OrganizationProfile Security page now appears for Directory Sync-only orgs while SSO-only orgs stop seeing the section. The Mosaic component set got the same behavior in its own pass.\n\n### Stronger factors, fewer fake signups\n\nClerk made [passkeys a second factor for MFA](/release/rel_cWWIJg1ObYSJoy8cxTsqI-clerk-adds-passkeys-as-a-second-factor-for-multi-factor-authentication): users who sign in with a password, social connection, or reset code can now satisfy the second step with a passkey instead of SMS or an authenticator app, including during reverification, and custom flows can list `passkey` in `supportedSecondFactors`. It requires recent clerk-js and UI versions and dashboard opt-in for older apps.\n\nClerk Protect gained two [sign-up limits that work across IPs](/release/rel_QPmuHl8mm2GJZegCOb3qb-clerk-protect-adds-sign-up-limits-per-email-domain-and-shared-infrastructure): an hourly cap per email domain and a cap on bursts that appear to come from shared infrastructure, both on the Business plan, complementing the existing per-IP limit. On the client side, sign-in and sign-up now [wait up to 10 seconds for Device Intelligence](/release/rel_PnJ4fWUH7y7AHAiIr7A5T-clerk-javascript-sdk-shared-4-43-1-extends-device-intelligence-wait-to-10) instead of 5, so slow connections are less likely to get blocked — and a late-arriving result is now kept for the next attempt rather than discarded.\n\nAuth0 hardened its network edge for Enterprise tenants with [RFC 9421 HTTP Message Signatures in Tenant Network ACLs](/release/rel_kp6ETU4osGTK0EGVWuz2V-auth0-adds-rfc-9421-http-message-signatures-to-tenant-network-acls), verifying at the Auth0 boundary that requests came from an authorized proxy or gateway and dropping direct traffic, with multiple active keys for zero-downtime rotation. It also added [SMS fraud protection with exponential backoff](/release/rel_IZZVs3IbeMiTU8fEj7CsE-auth0-adds-exponential-backoff-to-phone-mfa-sms-delivery-on-enterprise-plans) for Phone MFA, replacing static send limits with compounding cooldowns that scale to 32 minutes against toll fraud.\n\n### Agents, logs, and mobile\n\nClerk opened a [private beta for Agent Auth](/release/rel_P-xahGbKEbIY-10V8wAc9-clerk-for-agent-auth-enters-private-beta-for-securing-agent-access), built on OAuth standards and the Personal Agent Protocol, letting agents discover an app and be authenticated by Clerk. Its [Application Logs endpoint became public](/release/rel_RqERyVlySfWMzq3QYqQpY-clerk-makes-get-v1-logs-public-for-reading-application-logs-via-backend-api) as GET /v1/logs, so you can query events from code or an agent, subject to rate limits. The iOS SDK added [enterprise SSO connection selection](/release/rel_x3kR11bueUIro9Y3gNmIs-clerk-ios-sdk-1-6-2-adds-enterprise-sso-connection-selection-and-fixes-email) and fixed email-link sign-ins dropping the session's organization, while also redacting tokens from verbose logs.\n\nBetter Auth's week was mostly fixes: a [prototype pollution error affecting org and API key metadata](/release/rel_LtubMlJiTVS4gUQjtJdY0-better-auth-v1-7-15-fixes-prototype-pollution-error-and-stripe-redirect), plus tightened Stripe redirect validation; [SAML ACS callbackUrl sign-in and stateless OAuth token retrieval](/release/rel_4d7WkQuqu0_6vz4gr7fCJ-better-auth-v1-6-34-fixes-saml-acs-callbackurl-sign-in-and-stateless-oauth-token); and [imported Base32 TOTP secrets](/release/rel_CgR-3i9Vd8rk6TAat0siA-better-auth-v1-7-14-fixes-imported-base32-totp-secrets-and-kakao-loginhint) now accepted alongside a Kakao loginHint fix. Its beta line is reworking [Paybin, Spotify, and Twitch profile mapping](/release/rel_GSqvafvlsSNj3b-51uZ4d-better-auth-v1-8-0-beta-4-reworks-paybin-spotify-and-twitch-profile-mapping), with an action item for custom ID-token sign-ins. And a [security release is scheduled for November 3](/release/rel_orklMCPhrcZ1KgRfBsjyA-better-auth-schedules-security-release-for-november-3-2026) — worth calendaring.","releaseIds":["rel_SNyok9EzYBbp2mS0tF00j","rel_zPUOPRj8etXg9cRe5QTys","rel_cWWIJg1ObYSJoy8cxTsqI","rel_QPmuHl8mm2GJZegCOb3qb","rel_PnJ4fWUH7y7AHAiIr7A5T","rel_kp6ETU4osGTK0EGVWuz2V","rel_IZZVs3IbeMiTU8fEj7CsE","rel_P-xahGbKEbIY-10V8wAc9","rel_RqERyVlySfWMzq3QYqQpY","rel_x3kR11bueUIro9Y3gNmIs","rel_LtubMlJiTVS4gUQjtJdY0","rel_4d7WkQuqu0_6vz4gr7fCJ","rel_CgR-3i9Vd8rk6TAat0siA","rel_GSqvafvlsSNj3b-51uZ4d","rel_orklMCPhrcZ1KgRfBsjyA"],"releaseCount":66,"generatedAt":"2026-11-02T06:18:14.960Z","releases":[{"id":"rel_SNyok9EzYBbp2mS0tF00j","title":"Auth0 launches Universal Portals in Developer Preview for self-service account management","path":"/release/rel_SNyok9EzYBbp2mS0tF00j-universal-portals-bring-self-service-account-management","url":"https://auth0.com/changelog#4KAJcZF0wcFnG8Yln9SugQ","org":{"slug":"auth0","name":"Auth0","avatarUrl":"https://media.releases.sh/orgs/auth0.png","githubHandle":"auth0"},"product":null,"importance":4,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-27T00:00:00.000Z"},{"id":"rel_zPUOPRj8etXg9cRe5QTys","title":"Clerk JS SDK 6.41.0 adds per-organization directory sync setting","path":"/release/rel_zPUOPRj8etXg9cRe5QTys-directory-sync-gated-per-org-session-deadline-special-case-removed","url":"https://github.com/clerk/javascript/releases/tag/%40clerk/clerk-js%406.41.0","org":{"slug":"clerk","name":"Clerk","avatarUrl":"https://media.releases.sh/orgs/clerk.png","githubHandle":"clerk"},"product":null,"importance":3,"composition":{"bugs":1,"features":0,"enhancements":1},"publishedAt":"2026-10-26T18:39:58.000Z"},{"id":"rel_cWWIJg1ObYSJoy8cxTsqI","title":"Clerk adds passkeys as a second factor for multi-factor authentication","path":"/release/rel_cWWIJg1ObYSJoy8cxTsqI-passkeys-now-work-as-mfa-second-factor","url":"https://clerk.com/changelog/2026-10-29-passkey-second-factor","org":{"slug":"clerk","name":"Clerk","avatarUrl":"https://media.releases.sh/orgs/clerk.png","githubHandle":"clerk"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-29T00:00:00.000Z"},{"id":"rel_QPmuHl8mm2GJZegCOb3qb","title":"Clerk Protect adds sign-up limits per email domain and shared infrastructure","path":"/release/rel_QPmuHl8mm2GJZegCOb3qb-sign-up-limits-per-email-domain-shared-infrastructure","url":"https://clerk.com/changelog/2026-10-30-protect-sign-up-limits","org":{"slug":"clerk","name":"Clerk","avatarUrl":"https://media.releases.sh/orgs/clerk.png","githubHandle":"clerk"},"product":null,"importance":3,"composition":{"bugs":0,"features":2,"enhancements":0},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_PnJ4fWUH7y7AHAiIr7A5T","title":"Clerk JavaScript SDK shared 4.43.1 extends Device Intelligence wait to 10 seconds","path":"/release/rel_PnJ4fWUH7y7AHAiIr7A5T-device-intelligence-wait-raised-to-10s-clock-change-hang-bounded","url":"https://github.com/clerk/javascript/releases/tag/%40clerk/shared%404.43.1","org":{"slug":"clerk","name":"Clerk","avatarUrl":"https://media.releases.sh/orgs/clerk.png","githubHandle":"clerk"},"product":null,"importance":2,"composition":{"bugs":0,"features":0,"enhancements":2},"publishedAt":"2026-10-30T20:42:43.000Z"},{"id":"rel_kp6ETU4osGTK0EGVWuz2V","title":"Auth0 adds RFC 9421 HTTP Message Signatures to Tenant Network ACLs","path":"/release/rel_kp6ETU4osGTK0EGVWuz2V-tenant-network-acls-verify-signed-requests-at-network-boundary","url":"https://auth0.com/changelog#IjtX2rgnCrMxBcfYhTuuL","org":{"slug":"auth0","name":"Auth0","avatarUrl":"https://media.releases.sh/orgs/auth0.png","githubHandle":"auth0"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-29T00:00:00.000Z"},{"id":"rel_IZZVs3IbeMiTU8fEj7CsE","title":"Auth0 adds exponential backoff to Phone MFA SMS delivery on Enterprise plans","path":"/release/rel_IZZVs3IbeMiTU8fEj7CsE-phone-mfa-sms-delivery-gains-exponential-backoff","url":"https://auth0.com/changelog#25z5IDDY8h57bTw1soVdUe","org":{"slug":"auth0","name":"Auth0","avatarUrl":"https://media.releases.sh/orgs/auth0.png","githubHandle":"auth0"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_P-xahGbKEbIY-10V8wAc9","title":"Clerk for Agent Auth enters private beta for securing agent access","path":"/release/rel_P-xahGbKEbIY-10V8wAc9-agent-auth-private-beta-verifies-agent-identities","url":"https://clerk.com/changelog/2026-10-30-clerk-for-agent-auth","org":{"slug":"clerk","name":"Clerk","avatarUrl":"https://media.releases.sh/orgs/clerk.png","githubHandle":"clerk"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_RqERyVlySfWMzq3QYqQpY","title":"Clerk makes GET /v1/logs public for reading Application Logs via Backend API","path":"/release/rel_RqERyVlySfWMzq3QYqQpY-application-logs-now-readable-via-public-backend-api","url":"https://clerk.com/changelog/2026-10-30-application-logs-backend-api","org":{"slug":"clerk","name":"Clerk","avatarUrl":"https://media.releases.sh/orgs/clerk.png","githubHandle":"clerk"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_x3kR11bueUIro9Y3gNmIs","title":"Clerk iOS SDK 1.6.2 adds enterprise SSO connection selection and fixes email-link session org","path":"/release/rel_x3kR11bueUIro9Y3gNmIs-enterprise-sso-picks-a-connection-email-link-keeps-session-org","url":"https://github.com/clerk/clerk-ios/releases/tag/1.6.2","org":{"slug":"clerk","name":"Clerk","avatarUrl":"https://media.releases.sh/orgs/clerk.png","githubHandle":"clerk"},"product":null,"importance":2,"composition":{"bugs":26,"features":3,"enhancements":4},"publishedAt":"2026-10-27T16:20:06.000Z"},{"id":"rel_LtubMlJiTVS4gUQjtJdY0","title":"better-auth v1.7.15 fixes prototype pollution error and Stripe redirect validation","path":"/release/rel_LtubMlJiTVS4gUQjtJdY0-prototype-pollution-error-fixed-stripe-callbackurl-validated","url":"https://github.com/better-auth/better-auth/releases/tag/v1.7.15","org":{"slug":"better-auth","name":"Better Auth","avatarUrl":"https://media.releases.sh/orgs/better-auth.png","githubHandle":"better-auth"},"product":null,"importance":3,"composition":{"bugs":16,"features":0,"enhancements":0},"publishedAt":"2026-11-01T09:12:13.000Z"},{"id":"rel_4d7WkQuqu0_6vz4gr7fCJ","title":"better-auth v1.6.34 fixes SAML ACS callbackUrl sign-in and stateless OAuth token retrieval","path":"/release/rel_4d7WkQuqu0_6vz4gr7fCJ-saml-acs-callbackurl-sign-in-restored-stateless-oauth-token-lookup-fixed","url":"https://github.com/better-auth/better-auth/releases/tag/v1.6.34","org":{"slug":"better-auth","name":"Better Auth","avatarUrl":"https://media.releases.sh/orgs/better-auth.png","githubHandle":"better-auth"},"product":null,"importance":2,"composition":{"bugs":2,"features":0,"enhancements":0},"publishedAt":"2026-11-01T09:18:53.000Z"},{"id":"rel_CgR-3i9Vd8rk6TAat0siA","title":"better-auth v1.7.14 fixes imported Base32 TOTP secrets and Kakao loginHint","path":"/release/rel_CgR-3i9Vd8rk6TAat0siA-imported-base32-totp-secrets-now-work-kakao-prefills-id","url":"https://github.com/better-auth/better-auth/releases/tag/v1.7.14","org":{"slug":"better-auth","name":"Better Auth","avatarUrl":"https://media.releases.sh/orgs/better-auth.png","githubHandle":"better-auth"},"product":null,"importance":2,"composition":{"bugs":2,"features":0,"enhancements":0},"publishedAt":"2026-10-26T20:50:39.000Z"},{"id":"rel_GSqvafvlsSNj3b-51uZ4d","title":"better-auth v1.8.0-beta.4 reworks Paybin, Spotify, and Twitch profile mapping","path":"/release/rel_GSqvafvlsSNj3b-51uZ4d-paybin-spotify-twitch-profiles-now-fetched-fresh-mappings-must-adapt","url":"https://github.com/better-auth/better-auth/releases/tag/v1.8.0-beta.4","org":{"slug":"better-auth","name":"Better Auth","avatarUrl":"https://media.releases.sh/orgs/better-auth.png","githubHandle":"better-auth"},"product":null,"importance":3,"composition":{"bugs":0,"features":0,"enhancements":3},"publishedAt":"2026-11-01T11:19:03.000Z"},{"id":"rel_orklMCPhrcZ1KgRfBsjyA","title":"Better Auth schedules security release for November 3, 2026","path":"/release/rel_orklMCPhrcZ1KgRfBsjyA-security-release-set-for-november-3","url":"https://better-auth.com/blog/security-release-2026-11-03","org":{"slug":"better-auth","name":"Better Auth","avatarUrl":"https://media.releases.sh/orgs/better-auth.png","githubHandle":"better-auth"},"product":null,"importance":2,"composition":null,"publishedAt":"2026-10-30T00:00:00.000Z"}],"sections":[{"heading":"Self-service moves into the platform","anchor":"self-service-moves-into-the-platform","lede":"The week's biggest shift came from Auth0, which launched Universal Portals in Developer Preview.","releaseIds":["rel_SNyok9EzYBbp2mS0tF00j","rel_zPUOPRj8etXg9cRe5QTys"],"releases":[{"id":"rel_SNyok9EzYBbp2mS0tF00j","title":"Auth0 launches Universal Portals in Developer Preview for self-service account management","path":"/release/rel_SNyok9EzYBbp2mS0tF00j-universal-portals-bring-self-service-account-management","url":"https://auth0.com/changelog#4KAJcZF0wcFnG8Yln9SugQ","org":{"slug":"auth0","name":"Auth0","avatarUrl":"https://media.releases.sh/orgs/auth0.png","githubHandle":"auth0"},"product":null,"importance":4,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-27T00:00:00.000Z"},{"id":"rel_zPUOPRj8etXg9cRe5QTys","title":"Clerk JS SDK 6.41.0 adds per-organization directory sync setting","path":"/release/rel_zPUOPRj8etXg9cRe5QTys-directory-sync-gated-per-org-session-deadline-special-case-removed","url":"https://github.com/clerk/javascript/releases/tag/%40clerk/clerk-js%406.41.0","org":{"slug":"clerk","name":"Clerk","avatarUrl":"https://media.releases.sh/orgs/clerk.png","githubHandle":"clerk"},"product":null,"importance":3,"composition":{"bugs":1,"features":0,"enhancements":1},"publishedAt":"2026-10-26T18:39:58.000Z"}]},{"heading":"Stronger factors, fewer fake signups","anchor":"stronger-factors-fewer-fake-signups","lede":"Clerk made passkeys a second factor for MFA: users who sign in with a password, social connection, or reset code can now satisfy the second step with a passkey instead of SMS or an authenticator app, including during reverification, and custom flows can list passkey in supportedSecondFactors.","releaseIds":["rel_cWWIJg1ObYSJoy8cxTsqI","rel_QPmuHl8mm2GJZegCOb3qb","rel_PnJ4fWUH7y7AHAiIr7A5T","rel_kp6ETU4osGTK0EGVWuz2V","rel_IZZVs3IbeMiTU8fEj7CsE"],"releases":[{"id":"rel_cWWIJg1ObYSJoy8cxTsqI","title":"Clerk adds passkeys as a second factor for multi-factor authentication","path":"/release/rel_cWWIJg1ObYSJoy8cxTsqI-passkeys-now-work-as-mfa-second-factor","url":"https://clerk.com/changelog/2026-10-29-passkey-second-factor","org":{"slug":"clerk","name":"Clerk","avatarUrl":"https://media.releases.sh/orgs/clerk.png","githubHandle":"clerk"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-29T00:00:00.000Z"},{"id":"rel_QPmuHl8mm2GJZegCOb3qb","title":"Clerk Protect adds sign-up limits per email domain and shared infrastructure","path":"/release/rel_QPmuHl8mm2GJZegCOb3qb-sign-up-limits-per-email-domain-shared-infrastructure","url":"https://clerk.com/changelog/2026-10-30-protect-sign-up-limits","org":{"slug":"clerk","name":"Clerk","avatarUrl":"https://media.releases.sh/orgs/clerk.png","githubHandle":"clerk"},"product":null,"importance":3,"composition":{"bugs":0,"features":2,"enhancements":0},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_PnJ4fWUH7y7AHAiIr7A5T","title":"Clerk JavaScript SDK shared 4.43.1 extends Device Intelligence wait to 10 seconds","path":"/release/rel_PnJ4fWUH7y7AHAiIr7A5T-device-intelligence-wait-raised-to-10s-clock-change-hang-bounded","url":"https://github.com/clerk/javascript/releases/tag/%40clerk/shared%404.43.1","org":{"slug":"clerk","name":"Clerk","avatarUrl":"https://media.releases.sh/orgs/clerk.png","githubHandle":"clerk"},"product":null,"importance":2,"composition":{"bugs":0,"features":0,"enhancements":2},"publishedAt":"2026-10-30T20:42:43.000Z"},{"id":"rel_kp6ETU4osGTK0EGVWuz2V","title":"Auth0 adds RFC 9421 HTTP Message Signatures to Tenant Network ACLs","path":"/release/rel_kp6ETU4osGTK0EGVWuz2V-tenant-network-acls-verify-signed-requests-at-network-boundary","url":"https://auth0.com/changelog#IjtX2rgnCrMxBcfYhTuuL","org":{"slug":"auth0","name":"Auth0","avatarUrl":"https://media.releases.sh/orgs/auth0.png","githubHandle":"auth0"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-29T00:00:00.000Z"},{"id":"rel_IZZVs3IbeMiTU8fEj7CsE","title":"Auth0 adds exponential backoff to Phone MFA SMS delivery on Enterprise plans","path":"/release/rel_IZZVs3IbeMiTU8fEj7CsE-phone-mfa-sms-delivery-gains-exponential-backoff","url":"https://auth0.com/changelog#25z5IDDY8h57bTw1soVdUe","org":{"slug":"auth0","name":"Auth0","avatarUrl":"https://media.releases.sh/orgs/auth0.png","githubHandle":"auth0"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-30T00:00:00.000Z"}]},{"heading":"Agents, logs, and mobile","anchor":"agents-logs-and-mobile","lede":"Clerk opened a private beta for Agent Auth, built on OAuth standards and the Personal Agent Protocol, letting agents discover an app and be authenticated by Clerk.","releaseIds":["rel_P-xahGbKEbIY-10V8wAc9","rel_RqERyVlySfWMzq3QYqQpY","rel_x3kR11bueUIro9Y3gNmIs","rel_LtubMlJiTVS4gUQjtJdY0","rel_4d7WkQuqu0_6vz4gr7fCJ","rel_CgR-3i9Vd8rk6TAat0siA","rel_GSqvafvlsSNj3b-51uZ4d","rel_orklMCPhrcZ1KgRfBsjyA"],"releases":[{"id":"rel_P-xahGbKEbIY-10V8wAc9","title":"Clerk for Agent Auth enters private beta for securing agent access","path":"/release/rel_P-xahGbKEbIY-10V8wAc9-agent-auth-private-beta-verifies-agent-identities","url":"https://clerk.com/changelog/2026-10-30-clerk-for-agent-auth","org":{"slug":"clerk","name":"Clerk","avatarUrl":"https://media.releases.sh/orgs/clerk.png","githubHandle":"clerk"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_RqERyVlySfWMzq3QYqQpY","title":"Clerk makes GET /v1/logs public for reading Application Logs via Backend API","path":"/release/rel_RqERyVlySfWMzq3QYqQpY-application-logs-now-readable-via-public-backend-api","url":"https://clerk.com/changelog/2026-10-30-application-logs-backend-api","org":{"slug":"clerk","name":"Clerk","avatarUrl":"https://media.releases.sh/orgs/clerk.png","githubHandle":"clerk"},"product":null,"importance":3,"composition":{"bugs":0,"features":1,"enhancements":0},"publishedAt":"2026-10-30T00:00:00.000Z"},{"id":"rel_x3kR11bueUIro9Y3gNmIs","title":"Clerk iOS SDK 1.6.2 adds enterprise SSO connection selection and fixes email-link session org","path":"/release/rel_x3kR11bueUIro9Y3gNmIs-enterprise-sso-picks-a-connection-email-link-keeps-session-org","url":"https://github.com/clerk/clerk-ios/releases/tag/1.6.2","org":{"slug":"clerk","name":"Clerk","avatarUrl":"https://media.releases.sh/orgs/clerk.png","githubHandle":"clerk"},"product":null,"importance":2,"composition":{"bugs":26,"features":3,"enhancements":4},"publishedAt":"2026-10-27T16:20:06.000Z"},{"id":"rel_LtubMlJiTVS4gUQjtJdY0","title":"better-auth v1.7.15 fixes prototype pollution error and Stripe redirect validation","path":"/release/rel_LtubMlJiTVS4gUQjtJdY0-prototype-pollution-error-fixed-stripe-callbackurl-validated","url":"https://github.com/better-auth/better-auth/releases/tag/v1.7.15","org":{"slug":"better-auth","name":"Better Auth","avatarUrl":"https://media.releases.sh/orgs/better-auth.png","githubHandle":"better-auth"},"product":null,"importance":3,"composition":{"bugs":16,"features":0,"enhancements":0},"publishedAt":"2026-11-01T09:12:13.000Z"},{"id":"rel_4d7WkQuqu0_6vz4gr7fCJ","title":"better-auth v1.6.34 fixes SAML ACS callbackUrl sign-in and stateless OAuth token retrieval","path":"/release/rel_4d7WkQuqu0_6vz4gr7fCJ-saml-acs-callbackurl-sign-in-restored-stateless-oauth-token-lookup-fixed","url":"https://github.com/better-auth/better-auth/releases/tag/v1.6.34","org":{"slug":"better-auth","name":"Better Auth","avatarUrl":"https://media.releases.sh/orgs/better-auth.png","githubHandle":"better-auth"},"product":null,"importance":2,"composition":{"bugs":2,"features":0,"enhancements":0},"publishedAt":"2026-11-01T09:18:53.000Z"},{"id":"rel_CgR-3i9Vd8rk6TAat0siA","title":"better-auth v1.7.14 fixes imported Base32 TOTP secrets and Kakao loginHint","path":"/release/rel_CgR-3i9Vd8rk6TAat0siA-imported-base32-totp-secrets-now-work-kakao-prefills-id","url":"https://github.com/better-auth/better-auth/releases/tag/v1.7.14","org":{"slug":"better-auth","name":"Better Auth","avatarUrl":"https://media.releases.sh/orgs/better-auth.png","githubHandle":"better-auth"},"product":null,"importance":2,"composition":{"bugs":2,"features":0,"enhancements":0},"publishedAt":"2026-10-26T20:50:39.000Z"},{"id":"rel_GSqvafvlsSNj3b-51uZ4d","title":"better-auth v1.8.0-beta.4 reworks Paybin, Spotify, and Twitch profile mapping","path":"/release/rel_GSqvafvlsSNj3b-51uZ4d-paybin-spotify-twitch-profiles-now-fetched-fresh-mappings-must-adapt","url":"https://github.com/better-auth/better-auth/releases/tag/v1.8.0-beta.4","org":{"slug":"better-auth","name":"Better Auth","avatarUrl":"https://media.releases.sh/orgs/better-auth.png","githubHandle":"better-auth"},"product":null,"importance":3,"composition":{"bugs":0,"features":0,"enhancements":3},"publishedAt":"2026-11-01T11:19:03.000Z"},{"id":"rel_orklMCPhrcZ1KgRfBsjyA","title":"Better Auth schedules security release for November 3, 2026","path":"/release/rel_orklMCPhrcZ1KgRfBsjyA-security-release-set-for-november-3","url":"https://better-auth.com/blog/security-release-2026-11-03","org":{"slug":"better-auth","name":"Better Auth","avatarUrl":"https://media.releases.sh/orgs/better-auth.png","githubHandle":"better-auth"},"product":null,"importance":2,"composition":null,"publishedAt":"2026-10-30T00:00:00.000Z"}]}]}}