Skip to content

Conversation

@onmax
Copy link
Collaborator

@onmax onmax commented Feb 5, 2026

Auth migration to Better Auth.

  • Switch Shelve app auth to @onmax/nuxt-better-auth / better-auth.
  • Add migration e2e coverage.
  • Resolve conflicts with main.

Testing:

  • Manual: tested on a real deployment by running a new DB migration and using the app as a user; migration applied and core flows worked.
  • Local: pnpm typecheck.

Notes:

  • Preview/CI builds no longer hard-require BETTER_AUTH_SECRET; production still should set it.
  • DB migrations are no longer applied during build by default (set HUB_APPLY_MIGRATIONS_DURING_BUILD=true to enable).

@vercel
Copy link

vercel bot commented Feb 5, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
shelve-app Error Error Feb 7, 2026 11:26am
shelve-vault Error Error Feb 7, 2026 11:26am
1 Skipped Deployment
Project Deployment Actions Updated (UTC)
shelve-lp Skipped Skipped Feb 7, 2026 11:26am

@github-actions
Copy link

github-actions bot commented Feb 5, 2026

Thank you for following the naming conventions! 🙏

Copy link

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1a58d2e5b8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

? `/auth/${props.provider}?redirect=${encodeURIComponent(props.redirectUrl)}`
: `/auth/${props.provider}`
window.location.href = url
signIn.social({ provider: props.provider })

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Preserve redirect target in social sign-in

This change drops the redirect parameter when starting OAuth (signIn.social({ provider })), so users who were sent to /login?redirect=... after hitting a protected page will no longer be returned to their original destination after social auth. The login flow still passes redirect-url into this component, but the prop is no longer read, which is a user-visible regression in navigation behavior.

Useful? React with 👍 / 👎.

@pkg-pr-new
Copy link

pkg-pr-new bot commented Feb 6, 2026

Open in StackBlitz

npm i https://pkg.pr.new/HugoRCD/shelve/@shelve/cli@696

commit: be54d13

@onmax onmax marked this pull request as ready for review February 7, 2026 11:17
@HugoRCD HugoRCD changed the title feat: switch to better auth feat(app): switch to better-auth Feb 7, 2026
@vercel vercel bot temporarily deployed to Preview – shelve-lp February 7, 2026 11:26 Inactive
Copy link

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a9d9ddb9cb

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment on lines -1 to -3
import { AuthType } from '@types'
import { userSchema } from '~~/server/db/zod'

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep invite social sign-in route reachable

Removing the legacy OAuth route handlers drops the /auth/{provider} entrypoints, but the invite flow still calls loginWithRedirect with window.location.href = /auth/${provider}?redirect=... in apps/shelve/app/pages/invite/[token].vue. In deployments where Better Auth only serves /api/auth/*, invited users who choose GitHub/Google from the invite screen will hit a missing route and be blocked from accepting invitations unless they switch to email login.

Useful? React with 👍 / 👎.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

feature New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant