Vulnerabilities
Update Better Auth to 1.7.7 to Fix Critical Login Bypass Flaw
Attackers can hijack accounts in Better Auth versions before 1.7.7 by swapping OAuth tokens for magic links, allowing them to log in as any user.
OAuth
Everything Vector Update has reported about OAuth: 2 stories, newest first. Part of our Tech News coverage.
Tech News
OAuth vs OIDC: The Structural Difference for Secure Identity
OAuth handles authorization for resources while OIDC adds an identity layer on top, meaning you cannot verify who a user is with OAuth alone.