Version Packages by github-actions[bot] · Pull Request #814 · OpenSaasAU/stack

github-actions · 2026-07-24T12:35:47Z

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@opensaas/stack-auth@0.32.0

Minor Changes

#813 5a6198c Thanks @borisno2! - Auth forms now submit through app-owned server actions instead of the browser authClient

The pre-built auth forms (SignInForm, SignUpForm, ForgotPasswordForm, and the new
ResetPasswordForm) no longer take an authClient prop that calls /api/auth/* from the
browser. Instead each form takes server action props — 'use server' functions the app
defines against its own auth instance. This keeps the auth network surface server-side and
matches the app's existing lib/actions/* convention. createAuth now auto-adds
better-auth's nextCookies plugin, so the session cookie set inside a server action persists.
See ADR-0020.

The package exports the action contract types (AuthActionResult, SignInInput,
SignUpInput, RequestPasswordResetInput, ResetPasswordInput, and the action aliases).
createClient is unchanged for client-side session reading (useSession).

Migration — define the actions in your app and pass them to the forms:
```
// lib/actions/auth.ts
'use server'
import { headers } from 'next/headers'
import { auth } from '@/lib/auth'
import type { AuthActionResult, SignInInput } from '@opensaas/stack-auth/ui'

export async function signInAction(input: SignInInput): Promise<AuthActionResult> {
  try {
    await auth.api.signInEmail({
      body: { email: input.email, password: input.password },
      headers: await headers(),
    })
    return { success: true }
  } catch (err) {
    return { success: false, error: err instanceof Error ? err.message : 'Sign in failed' }
  }
}
```
```
// Before
<SignInForm authClient={authClient} redirectTo="/admin" />

// After
<SignInForm signInAction={signInAction} redirectTo="/admin" />
```
Social sign-in becomes a redirecting server action passed as signInSocialAction. The CLI
feature-generator now scaffolds lib/actions/auth.ts and a reset-password page, and no
longer emits lib/auth-client.ts.

@opensaas/stack-cli@0.32.0

Minor Changes

#813 5a6198c Thanks @borisno2! - Auth forms now submit through app-owned server actions instead of the browser authClient

The pre-built auth forms (SignInForm, SignUpForm, ForgotPasswordForm, and the new
ResetPasswordForm) no longer take an authClient prop that calls /api/auth/* from the
browser. Instead each form takes server action props — 'use server' functions the app
defines against its own auth instance. This keeps the auth network surface server-side and
matches the app's existing lib/actions/* convention. createAuth now auto-adds
better-auth's nextCookies plugin, so the session cookie set inside a server action persists.
See ADR-0020.

The package exports the action contract types (AuthActionResult, SignInInput,
SignUpInput, RequestPasswordResetInput, ResetPasswordInput, and the action aliases).
createClient is unchanged for client-side session reading (useSession).

Migration — define the actions in your app and pass them to the forms:
```
// lib/actions/auth.ts
'use server'
import { headers } from 'next/headers'
import { auth } from '@/lib/auth'
import type { AuthActionResult, SignInInput } from '@opensaas/stack-auth/ui'

export async function signInAction(input: SignInInput): Promise<AuthActionResult> {
  try {
    await auth.api.signInEmail({
      body: { email: input.email, password: input.password },
      headers: await headers(),
    })
    return { success: true }
  } catch (err) {
    return { success: false, error: err instanceof Error ? err.message : 'Sign in failed' }
  }
}
```
```
// Before
<SignInForm authClient={authClient} redirectTo="/admin" />

// After
<SignInForm signInAction={signInAction} redirectTo="/admin" />
```
Social sign-in becomes a redirecting server action passed as signInSocialAction. The CLI
feature-generator now scaffolds lib/actions/auth.ts and a reset-password page, and no
longer emits lib/auth-client.ts.

Patch Changes

Updated dependencies []:
- @opensaas/stack-core@0.32.0

@opensaas/stack-core@0.32.0

@opensaas/stack-rag@0.32.0

@opensaas/stack-storage@0.32.0

@opensaas/stack-storage-s3@0.32.0

@opensaas/stack-storage-vercel@0.32.0

@opensaas/stack-tiptap@0.32.0

@opensaas/stack-ui@0.32.0

vercel · 2026-07-24T12:35:49Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
stack-docs	Ready	Preview, Comment	Jul 24, 2026 12:36pm

github-actions · 2026-07-24T23:06:14Z