From ee05b6c3ca5091c0c1d1d5dd6807ed311f7c259c Mon Sep 17 00:00:00 2001 From: Till-JS <101404291+Till-JS@users.noreply.github.com> Date: Fri, 30 Jan 2026 18:22:06 +0100 Subject: [PATCH] fix(mana-core-auth): use correct property name 'redirectUrls' for Better Auth Better Auth expects 'redirectUrls' (lowercase 'urls') but schema had 'redirectURLs' (uppercase 'URLs'). This caused the redirect URI validation to fail because Drizzle returned the wrong property name. Co-Authored-By: Claude Opus 4.5 --- services/mana-core-auth/src/db/schema/auth.schema.ts | 2 +- services/mana-core-auth/src/db/seeds/seed-oidc-clients.ts | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/services/mana-core-auth/src/db/schema/auth.schema.ts b/services/mana-core-auth/src/db/schema/auth.schema.ts index 8c67140b7..957c23500 100644 --- a/services/mana-core-auth/src/db/schema/auth.schema.ts +++ b/services/mana-core-auth/src/db/schema/auth.schema.ts @@ -135,7 +135,7 @@ export const oauthApplications = authSchema.table('oauth_applications', { metadata: text('metadata'), clientId: text('client_id').unique().notNull(), clientSecret: text('client_secret').notNull(), - redirectURLs: text('redirect_urls').notNull(), // Comma-separated URLs (Better Auth expects this format, NOT JSON) + redirectUrls: text('redirect_urls').notNull(), // Comma-separated URLs (Better Auth expects 'redirectUrls' property name) type: text('type').notNull().default('web'), // web, native, spa disabled: boolean('disabled').default(false).notNull(), userId: text('user_id').references(() => users.id, { onDelete: 'cascade' }), diff --git a/services/mana-core-auth/src/db/seeds/seed-oidc-clients.ts b/services/mana-core-auth/src/db/seeds/seed-oidc-clients.ts index 926b329db..33cbf15a4 100644 --- a/services/mana-core-auth/src/db/seeds/seed-oidc-clients.ts +++ b/services/mana-core-auth/src/db/seeds/seed-oidc-clients.ts @@ -63,7 +63,7 @@ async function seed() { .set({ clientSecret: synapseClientSecret, // Better Auth expects comma-separated string, NOT JSON array - redirectURLs: 'https://matrix.mana.how/_synapse/client/oidc/callback', + redirectUrls: 'https://matrix.mana.how/_synapse/client/oidc/callback', updatedAt: new Date(), }) .where(eq(oauthApplications.clientId, 'synapse')); @@ -79,7 +79,7 @@ async function seed() { clientId: 'synapse', clientSecret: synapseClientSecret, // Better Auth expects comma-separated string, NOT JSON array - redirectURLs: 'https://matrix.mana.how/_synapse/client/oidc/callback', + redirectUrls: 'https://matrix.mana.how/_synapse/client/oidc/callback', type: 'web', disabled: false, metadata: JSON.stringify({