chore(deps): update dependency better-auth to v1.2.7

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
better-auth (source)	1.2.5 -> 1.2.7

---

Release Notes

better-auth/better-auth (better-auth)

v1.2.7

Compare Source

   🚀 Features

• Error code support for haveibeenpwned  -  by @​Kinfe123 (2ee92)
• plugin: Error code support for haveibeenpwned plugin  -  by @​Kinfe123 (86e81)

   🐞 Bug Fixes

• Added c.authentication to refresh token  -  by @​CodeWithAlexander (48d62)
• Authentication type missing on refershToken options  -  by @​Kinfe123 (01d1b)
• Prevent a user from created on haveibeenpwned  -  by @​Kinfe123 (7dff5)
• adapter:
  • Improve field lookup logic in createAdapter  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2245 (53c71)
• cli:
  • Schema gen with Drizzle for PG to generate text instead of uuid  -  by @​ping-maxwell in https://github.com/better-auth/better-auth/issues/2248 (c6eb1)
• drizzle-adapter:
  • Correct count retrieval in the update function  -  by @​okxiaoliang4 in https://github.com/better-auth/better-auth/issues/2244 (f5b86)
• haveIBeenPwned:
  • Add proper error code  -  by @​JE4GLE in https://github.com/better-auth/better-auth/issues/2255 (adecf)
• organization:
  • Checking if User is intended recipient of Invite is casesensetive  -  by @​SNRSE in https://github.com/better-auth/better-auth/issues/2251 (5689d)
• plugin:
  • Prevent user from being created on compromised password  -  by @​Kinfe123 (e777b)
• stripe:
  • Force post method for subscription restore  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2259 (ffde0)
  • Adding ability to restore cancelled trialing subscriptions  -  by @​Konixy in https://github.com/better-auth/better-auth/issues/2262 (d341f)

    View changes on GitHub

v1.2.6

Compare Source

   🚀 Features

• MapProfileToUser in vk social-provider  -  by @​MagicFun1241 in https://github.com/better-auth/better-auth/issues/1944 (8d357)
• One-time token plugin  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2151 (155d9)
• createAdapter and useNumberId  -  by @​ping-maxwell in https://github.com/better-auth/better-auth/issues/1926 (98661)
• Support user data mapping in id token social sign-in  -  by @​Bekacru (a4267)
• Update hover style for light mode in community page  -  by @​sudoskys (8955d)
• Zoom social provider  -  by @​nktnet1 in https://github.com/better-auth/better-auth/issues/1671 (4590b)
• (captcha plugin) adding support for Google ReCAPTCHA v3 and hCaptcha  -  by @​0scrm in https://github.com/better-auth/better-auth/issues/1836 (bf281)
• Openapi spec update  -  by @​solarsoft0 in https://github.com/better-auth/better-auth/issues/1699 (27b40)
• Have-i-been-pwned plugin  -  by @​moshetanzer in https://github.com/better-auth/better-auth/issues/1978 (99ffa)
• Support custom issuer totp  -  by @​Siumauricio in https://github.com/better-auth/better-auth/issues/2113 (b2660)
• Delete token expiry configuration  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2138 (3b659)
• Add option to disable session refresh on use  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2126 (9e951)
• admin:
  • Add support for passing multiple roles as array  -  by @​Netrifier in https://github.com/better-auth/better-auth/issues/1907 (df727)
• email-otp:
  • Support attempt numbers for email-otp  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2146 (880a5)
• facebook:
  • Add support for business login using config ids  -  by @​arlyon in https://github.com/better-auth/better-auth/issues/1990 (6b22e)
• generic-oauth:
  • Added field discoveryHeaders to GenericOAuthConfig  -  by @​RyanWSweeney in https://github.com/better-auth/better-auth/issues/2205 (c6d59)
• jwt:
  • Add sub claim and getSubject  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2194 (04937)
• oauth2:
  • Override user info on provider sign-in  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2148 (f9b96)
• organization:
  • Add invitation limit  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2014 (81e45)
  • Support multiple permissions check  -  by @​rxri in https://github.com/better-auth/better-auth/issues/2227 (cb900)
• phone-number:
  • Add attempts check  -  by @​Bekacru (1369d)
  • Add number of attempts configuration  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2046 (5591e)
  • Add phone number verification requirement before sign-in  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/1984 (e24a6)
• provider:
  • Twitter email support  -  by @​Kinfe123 in https://github.com/better-auth/better-auth/issues/2176 (48efd)
• react-start:
  • Add react-start integration for cookie handling  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2119 (06ddd)
• socialLink:
  • Add support for custom scopes in social account linking  -  by @​leoleducq in https://github.com/better-auth/better-auth/issues/2074 (c14f1)
• stripe:
  • Restore subscription  -  by @​JNLei in https://github.com/better-auth/better-auth/issues/1705 (82633)
• two-factor:
  • Refactor two-factor authentication with better error handling, configurable otp limits and verification  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2234 (de91c)
• username:
  • Export the correct error codes for the plugin  -  by @​Bekacru (e09ce)

   🐞 Bug Fixes

• Import orders and alias to avoid conflict in ac code examples  -  by @​AmagiDDmxh (e0b34)
• Fallback to checking main db on session retrieval when storeSessionInDatabase is enabled  -  by @​Bekacru (f0e8f)
• Export oAuth types  -  by @​hyoban in https://github.com/better-auth/better-auth/issues/2028 (0b6a2)
• Og image compat  -  by @​Kinfe123 (e2d6b)
• Og image compatibility on multiple link previews  -  by @​Kinfe123 (a2174)
• Tooltip arrow  -  by @​Kinfe123 (1c605)
• Tooltip arrow pointer  -  by @​Kinfe123 (e62ea)
• Forget password flow failing because of id conversion  -  by @​sosweetham in https://github.com/better-auth/better-auth/issues/2083 (75faf)
• Dep issue  -  by @​Kinfe123 (4ff81)
• Deployment compat issue  -  by @​Kinfe123 (3b6d8)
• Verify github email when profile has an email  -  by @​erquhart in https://github.com/better-auth/better-auth/issues/2078 (fcb43)
• Docs syntax spacing  -  by @​Kinfe123 (11166)
• GenericOAuth default redirectURI for account linking  -  by @​dbworku in https://github.com/better-auth/better-auth/issues/2147 (d2453)
• Missing disableRefresh type in server side getSession  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2141 (fb431)
• Redirect to defaultErrorURL if errorURL doens't exist  -  by @​Bekacru (6a089)
• Plugin middleware docs  -  by @​Kinfe123 (bfdb2)
• Improve header value retrieval for IP address extraction  -  by @​ozgurozalp in https://github.com/better-auth/better-auth/issues/1865 (cbbd6)
• Prisma client docs  -  by @​Kinfe123 (f4a38)
• Community page interaction  -  by @​Kinfe123 (ea465)
• Community page interaction  -  by @​Kinfe123 (171fa)
• Hover style for light mode in community page  -  by @​Kinfe123 (06d65)
• IpAddress and userAgent missing on server authentication  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2121 (a9274)
• Missing export one time token plugin  -  by @​wadefletch in https://github.com/better-auth/better-auth/issues/2222 (b7c72)
• Delete from session table when stopImpersonate called  -  by @​Kinfe123 in https://github.com/better-auth/better-auth/issues/2230 (3f4af)
• Filter out fields with returned: false from session cookie cache  -  by @​Kinfe123 in https://github.com/better-auth/better-auth/issues/2232 (78f18)
• Rethrow error from db hooks if it is APIError instances  -  by @​Bekacru (45f43)
• admin:
  • Pass where clause to adapter.count to fix total value on listUser  -  by @​Netrifier in https://github.com/better-auth/better-auth/issues/2109 (38128)
  • DefaultRoles, adminRoles + others not applying user config  -  by @​ping-maxwell in https://github.com/better-auth/better-auth/issues/2128 (4dcb9)
  • 'dontRememberMe' cookie handling during impersonation  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2236 (2249f)
• api-key:
  • Return value of permissions should be object, not string  -  by @​ping-maxwell in https://github.com/better-auth/better-auth/issues/1757 (f633d)
  • Update rateLimitEnabled default to consider options  -  by @​ismael-iskauskas in https://github.com/better-auth/better-auth/issues/1887 (b2def)
• apple:
  • Update responseType to include code and id_token  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2091 (c0f15)
• custom-session:
  • Custom session failing to set cookies  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2124 (61dc4)
• generic-oauth:
  • Should check for email after mapProfileToUser  -  by @​Bekacru (0b5c1)
• oauth:
  • Encode clientId and clientSecret in authorization header  -  by @​xinyao27 in https://github.com/better-auth/better-auth/issues/2120 (ffa24)
• oauth-proxy:
  • Extend callback and sign-in path matchers to include /oauth2/callback and /sign-in/oauth2  -  by @​Bekacru (7987d)
• oidc-provider:
  • Add cookie options for path and sameSite in authorize  -  by @​Bekacru (dbe66)
• open-api:
  • Hide disabled paths  -  by @​CrutchTheClutch in https://github.com/better-auth/better-auth/issues/2144 (f257f)
• organization:
  • Update default invitation expiration time to use seconds  -  by @​Bekacru (834e3)
  • Fix conditional teamId inference  -  by @​Netrifier in https://github.com/better-auth/better-auth/issues/2133 (a6860)
  • UpdateMemberRole failing if issuer has multiple roles  -  by @​dustin-we in https://github.com/better-auth/better-auth/issues/2104 (72631)
• stripe:
  • Allow customizing subscription schema  -  by @​ping-maxwell in https://github.com/better-auth/better-auth/issues/2105 (10893)
  • Throw err if passed referenceId when no subscription authorizeReference` is defined  -  by @​ping-maxwell in https://github.com/better-auth/better-auth/issues/2129 (9efcd)
  • Update referenceId in checkout session to use client_reference_id instead of metadata  -  by @​Bekacru (08130)
• two-factor:
  • 2fa error codes failing to infer  -  by @​ping-maxwell in https://github.com/better-auth/better-auth/issues/2102 (f7199)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.