@delmaredigital/payload-better-auth 0.6.7 → 0.6.9
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/plugin/index.js +3 -1
- package/package.json +1 -1
package/dist/plugin/index.js
CHANGED
|
@@ -638,7 +638,9 @@ let apiKeyPermissionsConfig = undefined;
|
|
|
638
638
|
}
|
|
639
639
|
}
|
|
640
640
|
} catch {
|
|
641
|
-
// JWT verification failed — not a valid OAuth
|
|
641
|
+
// JWT verification failed — token is not a valid OAuth JWT
|
|
642
|
+
// Per Better Auth docs: "only accept JWT-formatted access tokens for your API"
|
|
643
|
+
// Opaque tokens should be handled via the /oauth2/introspect endpoint if needed
|
|
642
644
|
}
|
|
643
645
|
}
|
|
644
646
|
return {
|