---
changelog:
  category: Release
  version: convex-auth@1.7.0
date: '2026-09-07T17:17:13Z'
seo:
  description: >-
    docs: add Blume docs site with Convex static-hosting by @shlomokabareti in
    https://github.com/shlomokabareti/convex-better-auth-2.0/pull/17docs: README
    hero…
title: convex-auth@1.7.0
type: changelog
---
## What's Changed
* docs: add Blume docs site with Convex static-hosting by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/17
* docs: README hero, badges, and minimal release workflow by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/18
* docs: README status now says packages are on npm by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/20
* chore: mark convex-auth-tsconfig private by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/21
* chore: set Blume deployment site by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/22
* ci: add changesets for changelog and release automation by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/23
* feat: vendor convex better-auth adapter and support better-auth 1.7 by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/24
* docs: update README example to use vendored adapter by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/25
* ci: format vendored adapter tests and pin changesets action to v1.9.0 by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/26
* chore: version packages by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/27
* docs: add adapter to README, attribution, compatibility matrix, and migration guide by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/28
* docs: sync public status and compatibility versions by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/29
* docs: convex-native auth strategy by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/30
* native: add email/password provider factory, ConvexAuthProvider, and useAuthActions by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/31
* react: wire ConvexAuthProvider to Convex client setAuth; add README example by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/32
* chore: version packages by @github-actions[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/33
* ci: pass NODE_AUTH_TOKEN to changesets/action by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/34
* ci: build packages before publish; release 1.1.1 by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/35
* style: apply formatting by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/36
* feat: email verification and password reset by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/37
* changeset: email verification and password reset by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/38
* fix: include component module files in convex-auth package by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/41
* chore: remove in-repo tracking files by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/50
* milestone-2: native email verification, password reset, and session revocation by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/51
* Milestone 3: native GitHub OAuth by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/52
* Milestone 4 slice: Google OAuth by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/53
* Milestone 1-2 catch-up: Better Auth email/password parity by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/55
* Trigger CI on changeset release PRs by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/56
* chore: version packages by @github-actions[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/39
* Fix release workflow CI trigger filename by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/58
* Milestone 4: native TOTP 2FA with backup codes, trusted devices, and sign-in gating by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/62
* docs(agents): GitHub-only branch and PR workflow by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/63
* fix(auth): resolve milestone 2 open questions by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/64
* refactor(auth): remove better-auth as a required peer of convex-auth by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/65
* fix(auth): validate callback URL origins in native HTTP/OAuth routes by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/66
* fix(auth): validate sign-out callbackURL against trusted origins by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/67
* fix(auth): set session cookies on /api/auth/update-session by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/68
* fix(milestone-6): add CSRF protection to native auth HTTP routes by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/69
* feat: native AuthProvider and isAuthenticated query by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/71
* fix: drop better-auth/cookies from conformance by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/72
* fix: make convex-auth-react/native optional peers by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/73
* fix: split Better Auth testing helpers into convex-auth/better-auth/testing by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/74
* docs: ADR for #70 Convex Auth 2.0 alignment decisions by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/75
* feat: signInMagicLink action with authVerifiers token store by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/76
* feat: verifyMagicLink action, HTTP route, and React client helper by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/77
* feat: native email-OTP sign-in by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/78
* fix: stop hand-rolling protocols and crypto in native runtime (#81) by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/85
* Adopt convex-helpers pagination and relationship helpers by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/87
* feat: native magic-link sign-in and React client helper by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/89
* feat: email OTP verification, reset, and change-email flows by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/80
* feat: OAuth client helpers in ConvexAuthProvider by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/90
* feat: changeEmail helper in useAuthActions by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/91
* Add first-party Resend and Twilio providers by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/88
* feat: add initial token props to ConvexAuthProvider by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/92
* feat: ExpoConvexAuthProvider and convex-auth-react/client subpath by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/93
* chore: version packages by @github-actions[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/57
* refactor: split convexAuth component schema into feature modules by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/94
* fix: allow argon2 native build by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/95
* ci: make ci:publish idempotent via changeset publish by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/96
* feat: convexAuthCore component and components.core support by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/97
* feat: convexAuthOrganizations as components.core for convexAuth() by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/98
* feat: components bag for convexAuthOrganizationOperations by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/99
* feat: extract all feature-gated auth components by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/121
* chore(deps-dev): bump convex-test from 0.0.51 to 0.0.56 by @dependabot[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/108
* chore(deps-dev): bump @types/node from 22.20.1 to 26.4.0 by @dependabot[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/105
* chore(deps): bump lucide-react from 1.34.0 to 1.37.0 by @dependabot[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/104
* chore(deps-dev): bump @types/semver from 7.7.1 to 7.8.0 by @dependabot[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/102
* feat: split-component consumer fixture and docs by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/122
* chore(deps): bump zod from 4.4.3 to 4.5.4 by @dependabot[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/101
* chore(deps-dev): bump next from 16.2.6 to 16.3.3 by @dependabot[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/107
* chore(deps-dev): bump @changesets/cli from 2.31.1 to 3.0.1 by @dependabot[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/100
* chore: add changeset for feature-gated component split by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/123
* chore: version packages by @github-actions[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/124
* test: enforce convex-auth default entry is Better Auth-free by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/125
* feat(react): native ConvexBetterAuthClient facade over useAuthActions by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/126
* feat(auth): remove better-auth from default packages and add migration docs by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/127
* refactor(auth): remove better-auth runtime artifacts from convex-auth default package by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/128
* refactor(auth): rename resolveLinkedBetterAuthMcpSession to resolveLinkedMcpSession by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/129
* refactor(auth): remove betterAuthUserId from native MCP public API and component schema by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/130
* refactor(auth): delete orphaned compat/convex/mcp migration runtime by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/131
* refactor(auth): remove non-migration Better Auth branding from native auth package by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/132
* refactor(auth): rotate OAuth token encryption salt away from better-auth branding by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/133
* test(react): add packaging guard to keep better-auth out of convex-auth-react dist by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/134
* test(react-native): add packaging guard to keep better-auth out of dist by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/135
* chore: version packages by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/136
* auth: default auth-md identity provider to convex-auth by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/144
* feat(auth): one-time migration from Better Auth to native convex-auth tables by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/149
* docs: align password hashing strategy with Node-free @noble/hashes/argon2 by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/150
* fix(auth): preserve absolute URLs in OAuth error redirects and map provider errors by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/151
* test(bridge): bundle-size and memory regression tests by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/142
* chore(better-auth): mark bridge packages as migration-only by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/141
* auth: default auth-md identity provider to convex-auth by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/146
* docs: update convex-native-auth-strategy with current runtime status by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/147
* docs: lead the docs index with the convex-auth native path by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/143
* docs: ADR for one-time Better Auth migration by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/148
* chore: add changeset for feature-gated component split by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/152
* chore: version packages by @github-actions[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/145
* Add native HIBP breached-password screening to convex-auth by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/153
* feat(auth): use @convex-dev/rate-limiter for native sign-in rate limiting by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/155
* chore(knip): clean deps, add knip config, fix dead exports by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/159
* fix(auth): align preflight with the actual convexAuth API by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/160
* docs: align README, compatibility, and strategy versions by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/164
* devin: add convex-auth agent skill by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/163
* docs: sync compatibility matrix with package versions by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/162
* feat: runnable examples/react consumer wired to live convex-auth deployment by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/165
* docs: add spec for one-time Better Auth migration CLI by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/157
* fix(auth): add POST /api/auth/sign-in/social route and fix social-login conformance by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/166
* fix(auth): make preflight discover web package in examples/react layout by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/167
* feat(auth): live webhook delivery proof using Convex scheduler and HTTP sink by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/169
* feat(auth): native multi-provider CAPTCHA support for convex-auth by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/168
* Make the Better Auth migration run end-to-end against a live deployment by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/170
* docs: add one-shot Better Auth migration CLI section by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/171
* chore: version packages by @github-actions[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/154

## New Contributors
* @github-actions[bot] made their first contribution in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/33
* @dependabot[bot] made their first contribution in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/108

**Full Changelog**: https://github.com/shlomokabareti/convex-better-auth-2.0/compare/v0.1.0-alpha.0...convex-auth@1.7.0