Merge branch 'develop' into fix/auth-frontend-remediation

2026-02-17 20:35:59 +00:00
parent 57d0f5d2a3 027fee1afa
commit af113707d9
32 changed files with 464 additions and 2488 deletions
--- a/apps/api/src/auth/auth.config.ts
+++ b/apps/api/src/auth/auth.config.ts
@@ -1,3 +1,4 @@
+import { randomUUID } from "node:crypto";
 import { betterAuth } from "better-auth";
 import { prismaAdapter } from "better-auth/adapters/prisma";
 import { genericOAuth } from "better-auth/plugins";
@@ -216,6 +217,7 @@ export function createAuth(prisma: PrismaClient) {
      updateAge: 60 * 60 * 2, // 2 hours — minimum session age before BetterAuth refreshes the expiry on next request
    },
    advanced: {
+      generateId: () => randomUUID(),
      defaultCookieAttributes: {
        httpOnly: true,
        secure: process.env.NODE_ENV === "production",