Issues

• 0.13: @better-auth/oauth-provider 1.7 fails to load (compound unique index on oauthClientResource)

  convex/better-auth#475 · Filter by author AndrewStratigos opened on Nov 11, 2026

• Sort by id is refused, so @better-auth/oauth-provider >= 1.7.10 returns 500 on authorize and consent

  convex/better-auth#474 · Filter by author 413n opened on Nov 10, 2026

• Local Install schema generation indexes user.userId without declaring it when convex() is not used

  convex/better-auth#473 · Filter by author ethan-huo opened on Nov 10, 2026

• Support compound unique indexes so @better-auth/oauth-provider 1.7 (and the MCP plugin) works

  convex/better-auth#470 · Filter by author nabilfatih opened on Nov 7, 2026
  1

• Component adapter loads the client index and sample auth options on every call (~10 ms each)

  convex/better-auth#459 · Filter by author mikirejf opened on Nov 2, 2026

• Signed-out session re-check (tab return / online) flips isLoading to true and remounts <Unauthenticated> sign-in forms empty

  convex/better-auth#453 · Filter by author sensei-woo opened on Oct 23, 2026

• rateLimit table needs an index on lastRequest (better-auth 1.6 prunes expired rows with deleteMany)

  convex/better-auth#446 · Filter by author RealSid08 opened on Oct 5, 2026

• JWKS endpoint is revalidated on every token validation

  convex/better-auth#437 · Filter by author stickerdaniel opened on Sep 4, 2026
  2

• better-auth 1.6.30 twoFactor lockout columns are rejected by the component schema; twoFactor.enable() corrupts accounts

  convex/better-auth#435 · Filter by author wkoverfield opened on Aug 31, 2026
  1

• Token endpoint mints valid JWTs for deleted sessions when session.cookieCache is enabled

  convex/better-auth#434 · Filter by author wkoverfield opened on Aug 31, 2026

• convex() fails to bundle on better-auth 1.7 (oidc-provider removed)

  convex/better-auth#433 · Filter by author PeterHewat opened on Aug 28, 2026
  4

• rateLimit storage:"database": OCC retry exhaustion on hot ip|path rows escapes uncaught and 500s auth requests (no native incrementOne)

  convex/better-auth#432 · Filter by author steve-rodri opened on Aug 28, 2026

• Static JWKS: /api/auth/convex/token throws once a deployment has two signing keys

  convex/better-auth#427 · Filter by author Misophistful opened on Aug 13, 2026
  4

• ConvexBetterAuthProvider rejects better-auth@1.6.22 client types (ReactAuthClient not assignable to AuthClient) - blocks the security-patched version

  convex/better-auth#420 · Filter by author Y1am0 opened on Jul 28, 2026
  4

• /verify-email can leave the Convex JWT bound to the previous Better Auth session

  convex/better-auth#416 · Filter by author pavolpr opened on Jul 20, 2026

• TanStack Start auth proxy returns empty 400 ~every other request under Connection: close

  convex/better-auth#414 · Filter by author voiys opened on Jul 18, 2026

• findOne/findMany with an _id where-clause can return a document from a different model

  convex/better-auth#410 · Filter by author stickerdaniel opened on Jul 11, 2026

• react-start entry's dynamic import("@tanstack/react-start/server") pulls the server-SSR graph (node:stream) into client bundles

  convex/better-auth#409 · Filter by author ryanwoodcox opened on Jul 9, 2026
  1

• ConvexBetterAuthProvider treats transient /get-session and /convex/token failures as sign-out (users logged out mid-session)

  convex/better-auth#408 · Filter by author Saibaba161 opened on Jul 9, 2026
  3

• [Bug] organization plugin: invite-member returns 500 — adapter:create rejects pre-generated _id for the invitation model

  convex/better-auth#407 · Filter by author maat-kheru opened on Jul 7, 2026
  2

• eq null never matches absent optional fields — breaks oauth-provider refresh-token rotation (400 invalid_grant on every refresh)

  convex/better-auth#399 · Filter by author a-fatah opened on Jul 3, 2026
  2

• ConvexBetterAuthProvider triggers a transient clearAuth() on every page load, re-running all subscribed queries unauthenticated server-side

  convex/better-auth#398 · Filter by author r3ivaj opened on Jul 3, 2026
  4

• @better-auth/oauth-provider breaks convex()'s /api/auth/convex/token at runtime (login bounces to /login) — OIDC-provider collision?

  convex/better-auth#395 · Filter by author ParwarYasinQadr opened on Jun 30, 2026
  3

• AuthClient type rejects createAuthClient result with convexClient

  convex/better-auth#393 · Filter by author ericdew opened on Jun 23, 2026

• getRequestHeaders is not a function in serverless environments (Netlify/Vercel)

  convex/better-auth#384 · Filter by author crudbrain opened on May 25, 2026