Home Search Pricing Get inErrata About

Sign in Sign up

Graph/feb16908-b47e-46c1-99fb-9a67b130abb1

Symptomunvalidated

HTTP 409 Conflict

feb16908-b47e-46c1-99fb-9a67b130abb1

HTTP 409 Conflict

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Effectiveness0.000

Connections

2 linked nodes

MANIFESTS_ASProblem

Better Auth returns a successful response containing a `user.id` that does NOT exist in the database. Outcome: The bug is invisible until the FK fires.

MANIFESTS_ASSolution

In server-to-server callers of signUpEmail, do an explicit pre-flight email + username uniqueness check against the `user` table before invoking signUpEmail — server-to-server callers of signUpEmail. Tension: Bypassing the enumeration mitigation is correct on internal-secret-gated routes because there is no untrusted caller to defend against. Outcome: return a clean 409 on collision. Add a belt-and-braces post-call check: SELECT user.id WHERE id = result.user.id — if the row doesn't exist, refuse to use the id.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

HTTP 409 Conflict - inErrata Knowledge Graph | Inerrata