v1.4.8-beta.1

   🚀 Features

• Add additionalFields option in verification table schema  -  by @noctarius in https://github.com/better-auth/better-auth/issues/6747 <samp>(eab5b)</samp>
• Add patreon social provider  -  by @Spuffynism, benkingcode and Kinfe123 in https://github.com/better-auth/better-auth/issues/6245 <samp>(07cdd)</samp>
• one-time-token:
  • Support setting session cookie on ott verify  -  by @Bekacru in https://github.com/better-auth/better-auth/issues/3659 <samp>(08e05)</samp>
• phone-number:
  • Add password length validation for reset functionality  -  by @Bekacru in https://github.com/better-auth/better-auth/issues/6674 <samp>(4cdf8)</samp>
• saml:
  • Validate SAML crypto algorithms during initial phase  -  by @Paola3stefania in https://github.com/better-auth/better-auth/issues/6785 <samp>(b56d7)</samp>
  • Enforce one-time use of SAML assertions  -  by @Paola3stefania in https://github.com/better-auth/better-auth/issues/6719 <samp>(2053f)</samp>
• sso:
  • Add URL normalization and validation to all discovery URLs  -  by @jonathansamines, Paola Estefanía de Campos, @Paola3stefania and @Bekacru in https://github.com/better-auth/better-auth/issues/6503 <samp>(17ff1)</samp>

   🐞 Bug Fixes

• Prevent stateless refresh with database configured  -  by @Bekacru in https://github.com/better-auth/better-auth/issues/6700 <samp>(a5e7c)</samp>
• Revert token masking in listSessions route  -  by @bytaesu in https://github.com/better-auth/better-auth/issues/6749 <samp>(f659c)</samp>
• Compatible with openapi 3.1  -  by @himself65 and Copilot in https://github.com/better-auth/better-auth/issues/6705 <samp>(81eec)</samp>
• Properly merge updated data in account cookie  -  by @jslno in https://github.com/better-auth/better-auth/issues/6758 <samp>(5d303)</samp>
• Preserve = padding in parsed cookies  -  by @Shridhad in https://github.com/better-auth/better-auth/issues/6789 <samp>(47884)</samp>
• Unify SSO/OAuth account linking and add domain-based org assignment to all sign-in flows  -  by @Paola3stefania in https://github.com/better-auth/better-auth/issues/6652 <samp>(dd8a5)</samp>
• Respect BETTER_AUTH_TRUSTED_ORIGINS env variable  -  by @Paola3stefania in https://github.com/better-auth/better-auth/issues/6809 <samp>(47682)</samp>
• Delete verifications with hooks  -  by @jonathansamines in https://github.com/better-auth/better-auth/issues/6803 <samp>(059b5)</samp>
• Respect IP headers in dev/test environments  -  by @bytaesu in https://github.com/better-auth/better-auth/issues/6854 <samp>(d3ebf)</samp>
• api-key:
  • Check metadata is enabled for api key update endpoint  -  by @Bekacru in https://github.com/better-auth/better-auth/issues/6632 <samp>(b2af3)</samp>
  • Prevent id update error with MongoDB adapter  -  by @balbuzar in https://github.com/better-auth/better-auth/issues/6752 <samp>(c5731)</samp>
• line:
  • Enforce nonce  -  by @Bekacru in https://github.com/better-auth/better-auth/issues/6631 <samp>(12a97)</samp>
• organization:
  • Validate role existence in inviteMember endpoint  -  by @GautamBytes and Gautam Manchandani in https://github.com/better-auth/better-auth/issues/6774 <samp>(c0c94)</samp>
  • Allow internal organization creation when disabled for client  -  by @GautamBytes and Gautam Manchandani in https://github.com/better-auth/better-auth/issues/6857 <samp>(4b092)</samp>
• prisma-adapter:
  • Extract id to root level for delete operations  -  by @ping-maxwell in https://github.com/better-auth/better-auth/issues/6425 <samp>(c3eda)</samp>

    View changes on GitHub