diff --git a/documentation/backlog.md b/documentation/backlog.md index c1cd276..23bd2cc 100644 --- a/documentation/backlog.md +++ b/documentation/backlog.md @@ -32,6 +32,9 @@ Things that are actively in progress or should be picked up immediately. Mostly - **Security headers with helmet** `[security]` Add helmet middleware to set secure HTTP response headers. One-liner: app.use(helmet()). Covers headers like X-Content-Type-Options, X-Frame-Options, and Content-Security-Policy. +- **Conditionally register OAuth providers** `[debt]` + Better Auth logs warnings when social providers are registered without credentials (`Social provider google is missing clientId or clientSecret`). Instead of registering all providers unconditionally, only add a provider to the config when its credentials are present in the environment. Keeps local dev clean for contributors who don't have OAuth apps set up. + --- ## next