better_auth-api-key 0.2.0 → 0.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: df93f92692f0e4ce8a929b7c13ead11567450cb00052eae52b3d3505c82e0930
-  data.tar.gz: df7adda82f9f74ac01760f30ecd8013693a18f91c2fb799d961a9acc168cf78b
+  metadata.gz: 2ac9db4e9d87c466c1bf8ecb7be2978d8ffc17fa168b5a626e82b29ddf36c4c2
+  data.tar.gz: 90f8b579bdf6fd84d7d0d2b0360f479c50800bc5ac724b0fdde6c721a8290e3a
 SHA512:
-  metadata.gz: 0c592f30fac4c14c801eeedb43884c66b6ffac714e407e10e41ede39eab3c382341dd1143dc246ade4ebee9dc63ff9b7f13302da1291b4b4180434739df3d314
-  data.tar.gz: '087f99ab7f1e18be8afa5b3c48d64b579580b5468be4d3c387918c9a19f899087b1c695ae766144f05965050ba9cb9430ad02d64d30e53f6fae41270ed41e6b1'
+  metadata.gz: 970bf80895c95174c91e269560260f6b90281dcc5f3a1be4cd708bcdb53a12dd5d567874a3b046b86867b069000009238982bbd22b980edfa990ed7c68a04b6b
+  data.tar.gz: c52b6d7e9d2b98e77754e9105681bd1c1f8e619b1a0819ab93798a7eacc62cd10a40e11a32debe1a119578de868e76f3982dd366f745d4eb7abb60eab97a4332

data/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.2.1 - 2026-04-30
+
+- Fixed API key metadata normalization so symbol and string metadata keys preserve nested metadata payloads.
+- Added upstream parity coverage for API key behavior and error-code response details.
+
 ## 0.2.0 - 2026-04-29
 
 - Aligned API key behavior with upstream Better Auth v1.6.9, including key verification, permission checks, metadata updates, expiration, rate limiting, prefix handling, and route response shapes.

data/lib/better_auth/api_key/version.rb

@@ -2,6 +2,6 @@
 
 module BetterAuth
   module APIKey
-    VERSION = "0.2.0"
+    VERSION = "0.2.1"
   end
 end

data/lib/better_auth/plugins/api_key.rb

@@ -181,7 +181,7 @@ module BetterAuth
 
     def api_key_create_endpoint(config)
       Endpoint.new(path: "/api-key/create", method: "POST") do |ctx|
-        body = normalize_hash(ctx.body)
+        body = api_key_normalize_body(ctx.body)
         resolved_config = api_key_resolve_config(ctx.context, config, body[:config_id])
         session = Routes.current_session(ctx, allow_nil: true)
         reference_id = api_key_create_reference_id!(ctx, body, session, resolved_config)
@@ -262,7 +262,7 @@ module BetterAuth
 
     def api_key_update_endpoint(config)
       Endpoint.new(path: "/api-key/update", method: "POST") do |ctx|
-        body = normalize_hash(ctx.body)
+        body = api_key_normalize_body(ctx.body)
         resolved_config = api_key_resolve_config(ctx.context, config, body[:config_id])
         session = Routes.current_session(ctx, allow_nil: true)
         user_id = session&.dig(:user, "id") || body[:user_id]
@@ -379,7 +379,13 @@ module BetterAuth
     def api_key_create_reference_id!(ctx, body, session, config)
       if config[:references].to_s == "organization"
         organization_id = body[:organization_id]
-        raise APIError.new("BAD_REQUEST", message: API_KEY_ERROR_CODES["ORGANIZATION_ID_REQUIRED"]) if organization_id.to_s.empty?
+        if organization_id.to_s.empty?
+          raise APIError.new(
+            "BAD_REQUEST",
+            message: API_KEY_ERROR_CODES["ORGANIZATION_ID_REQUIRED"],
+            code: "ORGANIZATION_ID_REQUIRED"
+          )
+        end
 
         user_id = session&.dig(:user, "id") || body[:user_id]
         raise APIError.new("UNAUTHORIZED", message: API_KEY_ERROR_CODES["UNAUTHORIZED_SESSION"]) if user_id.to_s.empty?
@@ -515,11 +521,21 @@ module BetterAuth
       record = api_key_validate!(ctx, key, config)
       api_key_schedule_cleanup(ctx, config)
       if config[:references].to_s != "user"
-        raise APIError.new("UNAUTHORIZED", message: API_KEY_ERROR_CODES["INVALID_REFERENCE_ID_FROM_API_KEY"])
+        raise APIError.new(
+          "UNAUTHORIZED",
+          message: API_KEY_ERROR_CODES["INVALID_REFERENCE_ID_FROM_API_KEY"],
+          code: "INVALID_REFERENCE_ID_FROM_API_KEY"
+        )
       end
       reference_id = api_key_record_reference_id(record)
       user = ctx.context.internal_adapter.find_user_by_id(reference_id)
-      raise APIError.new("UNAUTHORIZED", message: API_KEY_ERROR_CODES["INVALID_REFERENCE_ID_FROM_API_KEY"]) unless user
+      unless user
+        raise APIError.new(
+          "UNAUTHORIZED",
+          message: API_KEY_ERROR_CODES["INVALID_REFERENCE_ID_FROM_API_KEY"],
+          code: "INVALID_REFERENCE_ID_FROM_API_KEY"
+        )
+      end
 
       session = {
         user: user,
@@ -699,6 +715,15 @@ module BetterAuth
       config[:disable_key_hashing] ? key.to_s : default_api_key_hasher(key)
     end
 
+    def api_key_normalize_body(raw)
+      body = normalize_hash(raw)
+      return body unless raw.is_a?(Hash)
+
+      metadata_key = raw.key?(:metadata) ? :metadata : ("metadata" if raw.key?("metadata"))
+      body[:metadata] = raw[metadata_key] if metadata_key
+      body
+    end
+
     def api_key_expires_at(body, config)
       if body.key?(:expires_in)
         Time.now + body[:expires_in].to_i unless body[:expires_in].nil?

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: better_auth-api-key
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.1
 platform: ruby
 authors:
 - Sebastian Sala