@better-auth/infra 0.3.2 → 0.3.4

package/CHANGELOG.md

@@ -5,6 +5,30 @@ All notable changes to `@better-auth/infra` are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.4] - 2026-06-26
+
+### Fixed
+
+- **SCIM directory sync types** — `SCIMPlugin` uses a type-only import so `@better-auth/scim` typedefs are not bundled into published output.
+
+## [0.3.3] - 2026-06-26
+
+### Added
+
+- **`dashCompleteInvitationHandoff`** — New `GET /dash/complete-invitation-handoff` endpoint completes invitations on the auth server after the platform validates credentials via a one-time handoff, so session cookies reach the invitee's browser.
+
+### Changed
+
+- **Invitation accept workflows** — Password and social completion endpoints enforce auth mode rules: `direct_redirect` invitations cannot use platform completion; `create_no_session` omits session cookies and revokes sessions after social completion; `create_with_session` allows passwordless user creation.
+- **SSO domain verification** — `mark-domain-verified` no longer accepts `verified: true`; domains can only be verified through DNS (`verify-domain`) or have verification cleared.
+- **User list pagination** — `getUsers` clamps `limit` (max 100) and `offset` to prevent expensive unbounded queries.
+- **Email validation** — Validation always uses the configured policy strictness; the optional MX bypass has been removed.
+
+### Security
+
+- **Trusted redirect URLs** — Invitation redirects, impersonation targets, and email callback URLs are resolved against the auth base URL and `trustedOrigins`; untrusted origins fall back or are rejected.
+- **SCIM directory sync** — Creating a directory provider with an existing `providerId` in the same organization is rejected.
+
 ## [0.3.2] - 2026-06-22
 
 ### Fixed
@@ -91,6 +115,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Fixed impossible travel security challenges.
 
+[0.3.4]: https://github.com/better-auth/infrastructure/compare/infra@v0.3.3...infra@v0.3.4
+[0.3.3]: https://github.com/better-auth/infrastructure/compare/infra@v0.3.2...infra@v0.3.3
+[0.3.2]: https://github.com/better-auth/infrastructure/compare/infra@v0.3.1...infra@v0.3.2
 [0.3.1]: https://github.com/better-auth/infrastructure/compare/infra@v0.3.0...infra@v0.3.1
 [0.3.0]: https://github.com/better-auth/infrastructure/compare/infra@v0.2.14...infra@v0.3.0
 [0.2.14]: https://github.com/better-auth/better-auth-infra/compare/@better-auth/infra@0.2.13...@better-auth/infra@0.2.14

package/dist/client.mjs

@@ -1,5 +1,5 @@
-import { n as hash, o as createKV } from "./crypto-B1NYwfFV.mjs";
-import { a as resolveSentinelClientIdentifyUrl, c as dashClient, i as solvePoWChallenge, n as decodePoWChallenge, o as generateRequestId, r as encodePoWSolution, s as identify, t as createPowRetryTimeout } from "./pow-retry-BfzBUq0O.mjs";
+import { n as hash, o as createKV } from "./crypto-BlYEkWgT.mjs";
+import { a as resolveSentinelClientIdentifyUrl, c as dashClient, i as solvePoWChallenge, n as decodePoWChallenge, o as generateRequestId, r as encodePoWSolution, s as identify, t as createPowRetryTimeout } from "./pow-retry-BN8NVM3m.mjs";
 import { env } from "@better-auth/core/env";
 //#region src/sentinel/fingerprint.ts
 function murmurhash3(str, seed = 0) {

package/dist/{constants-9UwOSy9A.mjs → constants-D81vWTXm.mjs}

@@ -1,7 +1,7 @@
 import { env } from "@better-auth/core/env";
 //#endregion
 //#region src/version.ts
-const PLUGIN_VERSION = "0.3.2";
+const PLUGIN_VERSION = "0.3.4";
 //#endregion
 //#region src/constants.ts
 /**

package/dist/{crypto-B1NYwfFV.mjs → crypto-BlYEkWgT.mjs}

@@ -1,4 +1,4 @@
-import { i as INFRA_USER_AGENT } from "./constants-9UwOSy9A.mjs";
+import { i as INFRA_USER_AGENT } from "./constants-D81vWTXm.mjs";
 import { createFetch } from "@better-fetch/fetch";
 //#region src/fetch.ts
 function createAPI(options, fetchOptions) {

package/dist/email.mjs

@@ -1,4 +1,4 @@
-import { i as INFRA_USER_AGENT, n as INFRA_API_URL } from "./constants-9UwOSy9A.mjs";
+import { i as INFRA_USER_AGENT, n as INFRA_API_URL } from "./constants-D81vWTXm.mjs";
 import { logger } from "better-auth";
 import { env } from "@better-auth/core/env";
 import { createFetch } from "@better-fetch/fetch";