new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

Better Auth · Authentication · all subjects

social sign-on/third-party providers

4 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

PayPal user info validated against ID token subject

PayPal user info is now validated against the verified ID token subject during social sign-in.

SIWE message bound to server nonce before session creation

Sign-In with Ethereum now binds the signed message to server state before creating a session. The plugin parses the ERC-4361 message and requires its nonce, domain, address, and chain ID to match the server-issued nonce and configured domain, and enforces the message's Expiration Time / Not Before bounds before verifying the signature. message must now be a valid ERC-4361 message. Non-conforming or mismatched messages are rejected with a 401.

SIWE no longer binds provided email to another account

The SIWE plugin no longer binds a provided email that already belongs to another account. With anonymous set to false, /siwe/verify now keeps the wallet-derived address in that case, so one email cannot be attached to two accounts.

SIWE nonce prevents concurrent redemption

A Sign-In with Ethereum nonce can no longer be used to sign in more than once when submitted from several requests at the same time.

Give your agent this brain