v1.6.7

Automattic/harperv1.6.7Apr 22, 2026by better-release[bot]

AI Summary

Introduces support for multiple client IDs in social provider ID tokens and resolves several crashes related to runtime errors and OAuth state parsing.

Key Highlights

Added support for an array of client IDs in social providers
Fixed response headers being lost when `APIError` is thrown
Fixed browser and edge runtime errors via a no-op module
Fixed crashes when parsing OAuth2 state

New Features

Support for an array of client IDs as the ID token audience

Full Release Notes

## `better-auth`

### Features

- Added support for an array of client IDs as the ID token audience in social providers ([#9292](https://github.com/better-auth/better-auth/pull/9292))

### Bug Fixes

- Fixed response headers being lost when an `APIError` is thrown ([#9211](https://github.com/better-auth/better-auth/pull/9211))
- Fixed browser and edge runtime errors by serving a no-op `./instrumentation` module in those environments ([#9281](https://github.com/better-auth/better-auth/pull/9281))
- Fixed a crash when parsing OAuth2 state with an undefined request body ([#9293](https://github.com/better-auth/better-auth/pull/9293))
- Fixed `callbackOnVerification` not being called when `updatePhoneNumber` is enabled ([#4894](https://github.com/better-auth/better-auth/pull/4894))

For detailed changes, see [`CHANGELOG`](https://github.com/better-auth/better-auth/blob/f8076d141aec8f41765eaf7229f386af663f64a0/packages/better-auth/CHANGELOG.md)

## `@better-auth/oauth-provider`

### Bug Fixes

- Fixed the userinfo endpoint to read the `Authorization` header from request context when using `auth.api` ([#9244](https://github.com/better-auth/better-auth/pull/9244))

For detailed changes, see [`CHANGELOG`](https://github.com/better-auth/better-auth/blob/f8076d141aec8f41765eaf7229f386af663f64a0/packages/oauth-provider/CHANGELOG.md)

## `@better-auth/passkey`

### Bug Fixes

- Fixed passkey authentication verification not returning the user ([#5209](https://github.com/better-auth/better-auth/pull/5209))

For detailed changes, see [`CHANGELOG`](https://github.com/better-auth/better-auth/blob/f8076d141aec8f41765eaf7229f386af663f64a0/packages/passkey/CHANGELOG.md)

## Contributors

Thanks to everyone who contributed to this release:

@gustavovalverde, @Kinfe123, @ouwargui, @ramonclaudio, @stewartjarod, @TanishValesha

**Full changelog:** [`v1.6.6...v1.6.7`](https://github.com/better-auth/better-auth/compare/v1.6.6...v1.6.7)