[codex] prevent SSO provider update org reassignment

[salasebas]

Summary

Fixes Linear issue OPE-193.

• Remove organizationId from /sso/update-provider handling and OpenAPI schema.
• Keep organization linking as registration-time behavior, matching Better Auth 1.6.9.
• Update regression coverage so stray organizationId on update is ignored and organizationId alone returns NO_UPDATE_FIELDS.

Root Cause

RustAuth accepted organizationId on provider update, checked only membership in the submitted target organization, and persisted it. That let a personal provider become organization-scoped after only personal-provider ownership authorization.

Validation

• cargo fmt --all --check
• cargo clippy --workspace --all-targets --all-features -- -D warnings
• cargo nextest run -p rustauth-sso --all-features

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
rustauth-docs-site	Ignored		Jul 2, 2026 8:22am