better-auth

Issues somebody may already be working on are listed last. List everything by date

• cimd: default originBoundFields rejects a cross-origin client_uri, which the CIMD draft forbids

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 72/100

  better-auth/better-auth#12458 · 1 reaction · Opened Nov 12, 2026

  Maintainers usually reply within 1 day

• Supported way to enforce “latest password-reset link only” with Drizzle/MariaDB?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  better-auth/better-auth#12454 · 1 reaction · Opened Nov 11, 2026

  Maintainers usually reply within 1 day

• api-key: expired-key cleanup on the key routes is not awaited and skips runInBackground

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  better-auth/better-auth#12452 · 1 reaction · Opened Nov 11, 2026

  Maintainers usually reply within 1 day

• Client: no logger option for console output from plugin clients

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 55/100

  better-auth/better-auth#12410 · 1 reaction · Opened Nov 11, 2026

  Maintainers usually reply within 1 day

• cimd: expose metadata-only resolution for request-scoped database contexts

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 18/100

  better-auth/better-auth#12358 · 1 reaction · Opened Nov 9, 2026

  Maintainers usually reply within 1 day

• Option to limit active sessions per user

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 22/100

  better-auth/better-auth#12342 · 1 reaction · Opened Nov 9, 2026

  Maintainers usually reply within 1 day

• [documentation] “Expose the well-known metadata” shows a Next.js-only snippet without labeling it or giving non-Next.js examples

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 1/5 1-3 hours Newbie friendliness 73/100

  better-auth/better-auth#12300 · 1 reaction · Opened Nov 7, 2026

  Maintainers usually reply within 1 day

• Unexpected build error logged for nextjs github

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 55/100

  better-auth/better-auth#12248 · 1 comment · 1 reaction · Opened Nov 4, 2026

  Maintainers usually reply within 1 day

• organization: run beforeAcceptInvitation inside the transaction that creates the member

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 Half a day Newbie friendliness 45/100

  better-auth/better-auth#12195 · 1 reaction · Opened Nov 3, 2026

  Maintainers usually reply within 1 day

• Feature request: an `advanced.clock` option for session times

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 48/100

  better-auth/better-auth#12193 · 1 reaction · Opened Nov 3, 2026

  Maintainers usually reply within 1 day

• Include agent skills in the published Better Auth packages

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 20/100

  better-auth/better-auth#12191 · 1 reaction · Opened Nov 3, 2026

  Maintainers usually reply within 1 day

• Reauthenticate the current session through magic link and SSO without creating a new session

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 8/100

  better-auth/better-auth#12184 · 2 reactions · Opened Nov 2, 2026

  Maintainers usually reply within 1 day

• oauth-provider: run a refresh_token grant's independent reads in parallel, and add an onRefreshTokenReuse hook

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 22/100

  better-auth/better-auth#12168 · 1 reaction · Opened Nov 1, 2026

  Maintainers usually reply within 1 day

• SSO: allow a custom client assertion for private_key_jwt (Entra needs x5t#S256)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 45/100

  better-auth/better-auth#12141 · 1 reaction · Opened Oct 30, 2026

  Maintainers usually reply within 1 day

• First-party multi-tenancy: tenant from host or path, tenant-bound sessions, per-tenant identity and policy

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  better-auth/better-auth#12129 · 1 reaction · Opened Oct 29, 2026

  Maintainers usually reply within 1 day

• Feature Request: Support Token-based (Non-Cookie) challenge fallback for 2FA / TOTP verification in decoupled architectures

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  better-auth/better-auth#12104 · 2 reactions · Opened Oct 29, 2026

  Maintainers usually reply within 1 day

• emailOTP: a wrong guess racing a resend deletes the new code and restores the old one

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  better-auth/better-auth#12091 · 2 reactions · Opened Oct 28, 2026

  Maintainers usually reply within 1 day

• Amazon Aurora DSQL support: interest in an officially tested integration

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  better-auth/better-auth#12088 · 7 comments · 2 reactions · Opened Oct 28, 2026

  Maintainers usually reply within 1 day

• LinkedIn: overlapping callbacks with different authorization codes but the same state cause state_mismatch

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 1-2 days Newbie friendliness 43/100

  better-auth/better-auth#12085 · 2 reactions · Opened Oct 28, 2026

  Maintainers usually reply within 1 day

• SCIM: support Groups with more than 1000 members

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 12/100

  better-auth/better-auth#12067 · 1 reaction · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• two-factor: option to require the second factor after a social sign-in

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 25/100

  better-auth/better-auth#12062 · 2 comments · 1 reaction · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• Sliding expiry for stateless (cookie-only) sessions

  May be free again @shehjaddev claimed this 15 days ago, and no pull request is open. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 53/100

  better-auth/better-auth#12058 · 1 comment · 1 reaction · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• oauth-provider: option to turn DPoP off (no advertisement, no binding) for bearer-only resource servers

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  better-auth/better-auth#12030 · 1 reaction · Opened Oct 25, 2026

  Maintainers usually reply within 1 day

• Kysely adapter: support a Bun.SQL instance with a small Kysely dialect (follow-up to #11266, with benchmarks)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 57/100

  better-auth/better-auth#12020 · 1 reaction · Opened Oct 25, 2026

  Maintainers usually reply within 1 day

• Support URL-based account selection with independent sessions per tab (follow-up to #4059)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  better-auth/better-auth#11987 · 1 reaction · Opened Oct 22, 2026

  Maintainers usually reply within 1 day

• oauth-provider: allow a CIMD client's cross-origin jwks_uri without widening trustedOrigins

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 54/100

  better-auth/better-auth#11916 · 1 comment · Opened Oct 19, 2026

  Maintainers usually reply within 1 day

• Next.js basePath: stripped Route Handler URL causes 404 with public auth prefix (1.7.7)

  May be free again @AmineBenzaazaa claimed this 23 days ago, and no pull request is open. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  needs: discussion

  Difficulty 4/5 3-5 days Newbie friendliness 38/100

  better-auth/better-auth#11910 · 5 comments · 1 reaction · Opened Oct 19, 2026

  Maintainers usually reply within 1 day

• Tidy up `BASE_ERROR_CODES`

  May be free again A pull request for this issue was closed without being merged. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  better-auth/better-auth#11908 · 3 comments · 1 reaction · Opened Oct 19, 2026

  Maintainers usually reply within 1 day

• Feature proposal: Headless Application Access Governance / IGA plugin

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  better-auth/better-auth#11893 · 1 reaction · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• cimd: serve persisted, previously validated client metadata on transient refresh failures

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  better-auth/better-auth#11875 · 1 comment · 1 reaction · Opened Oct 16, 2026

  Maintainers usually reply within 1 day

• Official admin plugin extension point for custom authorization adapters (e.g., Cerbos)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 15/100

  better-auth/better-auth#11739 · 1 reaction · Opened Oct 14, 2026

  Maintainers usually reply within 1 day

• FedCM identity provider support in the OAuth provider plugin

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  better-auth/better-auth#11682 · 1 reaction · Opened Oct 11, 2026

  Maintainers usually reply within 1 day

• getAccessToken / refreshToken drop the cause of refresh failures

  Possibly taken @elisiopinheiro claimed this today. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 25/100

  better-auth/better-auth#12453 · 1 reaction · Opened Nov 11, 2026

  Maintainers usually reply within 1 day

• oAuthProxy drops additional user fields from `mapProfileToUser` on proxied sign-in

  Possibly taken @umeraamir69 claimed this today. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 70/100

  better-auth/better-auth#12429 · 1 reaction · Opened Nov 11, 2026

  Maintainers usually reply within 1 day

• Workers: verification consume and api-key reference locks hang when the holding request ends

  Possibly taken A pull request linked to this issue is open or already merged. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  core target: patch

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  better-auth/better-auth#12397 · 1 reaction · Opened Nov 10, 2026

  Maintainers usually reply within 1 day

• oauth-provider: skip unchanged CIMD metadata writes during revalidation

  Possibly taken @ghazy2001 claimed this 1 day ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  better-auth/better-auth#12359 · 1 reaction · Opened Nov 9, 2026

  Maintainers usually reply within 1 day

• oauth-provider: CIMD registration collision recovery misses Drizzle-wrapped unique violations

  Possibly taken @ghazy2001 claimed this 1 day ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 Half a day Newbie friendliness 45/100

  better-auth/better-auth#12357 · 1 comment · 1 reaction · Opened Nov 9, 2026

  Maintainers usually reply within 1 day

• expo: `?error=` from `errorCallbackURL` is lost on iOS after social sign-in

  Possibly taken @umeraamir69 claimed this 2 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 Half a day Newbie friendliness 22/100

  better-auth/better-auth#12349 · 1 comment · 1 reaction · Opened Nov 9, 2026

  Maintainers usually reply within 1 day

• Admin `banUser`: accept an absolute expiry date

  Possibly taken @falakahuja claimed this 1 day ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 Half a day Newbie friendliness 52/100

  better-auth/better-auth#12344 · 1 comment · 1 reaction · Opened Nov 9, 2026

  Maintainers usually reply within 1 day

• `internalAdapter.listSessions` type leaves out plugin session fields

  Possibly taken @aliamanatali claimed this 2 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 18/100

  better-auth/better-auth#12343 · 1 reaction · Opened Nov 9, 2026

  Maintainers usually reply within 1 day

• device-authorization: code-collision retry never fires with the Drizzle adapter (unique violation is on error.cause)

  Possibly taken @drewsephski claimed this 3 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 75/100

  better-auth/better-auth#12314 · 1 comment · 1 reaction · Opened Nov 8, 2026

  Maintainers usually reply within 1 day

• revokeSession / deleteSession report success when the session was not deleted

  Possibly taken @aliamanatali claimed this 2 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 57/100

  better-auth/better-auth#12301 · 2 comments · 1 reaction · Opened Nov 7, 2026

  Maintainers usually reply within 1 day

• sign-up/email: on MongoDB the real and synthetic (existing email) users still have different keys

  Possibly taken @ItzSudhan claimed this 4 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 25/100

  better-auth/better-auth#12297 · 1 reaction · Opened Nov 7, 2026

  Maintainers usually reply within 1 day

• Support PKCE in the Kakao provider

  Possibly taken @honuuk claimed this 3 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 25/100

  better-auth/better-auth#12294 · 1 reaction · Opened Nov 7, 2026

  Maintainers usually reply within 1 day

• Support OIDC ID tokens in the Kakao provider

  Possibly taken @honuuk claimed this 3 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 52/100

  better-auth/better-auth#12293 · 1 reaction · Opened Nov 7, 2026

  Maintainers usually reply within 1 day

• Document Kakao provider setup and common errors

  Possibly taken @khangb2306668 claimed this 3 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 82/100

  better-auth/better-auth#12292 · 1 comment · 2 reactions · Opened Nov 7, 2026

  Maintainers usually reply within 1 day

• [organization] acceptInvitation does not re-check that the inviter is still a member (getInvitation does)

  Possibly taken @umeraamir69 claimed this 5 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 25/100

  better-auth/better-auth#12278 · 1 comment · 1 reaction · Opened Nov 6, 2026

  Maintainers usually reply within 1 day

• generic-oauth: a running app refuses every ID token after the provider changes its signing algorithm

  Possibly taken @1AbdullahButt claimed this 5 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  better-auth/better-auth#12277 · 1 comment · 1 reaction · Opened Nov 6, 2026

  Maintainers usually reply within 1 day

• oauth-provider: offline_access refresh tokens survive password reset and revoke-sessions

  Possibly taken @vjymisal0 claimed this 2 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 56/100

  better-auth/better-auth#12276 · 1 reaction · Opened Nov 6, 2026

  Maintainers usually reply within 1 day

• oauth-provider: option to require the openid scope on authorize requests

  Possibly taken @officialasishkumar claimed this today. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 68/100

  better-auth/better-auth#12257 · 1 reaction · Opened Nov 5, 2026

  Maintainers usually reply within 1 day