Skip to content

fix(saml): enforce single-use relay state - #130

Draft
salasebas wants to merge 1 commit into
mainfrom
salasebas/parity-redis-10-saml-relay-state
Draft

fix(saml): enforce single-use relay state#130
salasebas wants to merge 1 commit into
mainfrom
salasebas/parity-redis-10-saml-relay-state

Conversation

@salasebas

Copy link
Copy Markdown
Owner

Summary

  • match Better Auth v1.6.23 RelayState identifiers, payload schema, cookie strategies, and TTLs
  • atomically consume database/secondary RelayState after validation so replay has one winner
  • cover database, atomic secondary storage, cookie storage, expiry, key layout, and fallback redirects

Checks

  • Better Auth SAML suite: 232 runs, 896 assertions
  • verification-state inventory: 2 runs, 72 assertions
  • StandardRB on changed files
  • fresh blind upstream-parity review: Approve

Match upstream v1.6.23 state identifiers, storage strategies, TTLs, schema validation, and one-time consumption.
@vercel

vercel Bot commented Aug 20, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
better-auth Ignored Ignored Aug 20, 2026 9:27pm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant