@better-auth/core 1.4.12-beta.2 → 1.4.13

package/dist/types/context.d.mts

@@ -0,0 +1,215 @@
+import { BetterAuthDBSchema, ModelNames, SecondaryStorage } from "../db/type.mjs";
+import { Account } from "../db/schema/account.mjs";
+import { Session } from "../db/schema/session.mjs";
+import { User } from "../db/schema/user.mjs";
+import { Verification } from "../db/schema/verification.mjs";
+import "../db/index.mjs";
+import { DBAdapter, Where } from "../db/adapter/index.mjs";
+import { createLogger } from "../env/logger.mjs";
+import { OAuthProvider } from "../oauth2/oauth-provider.mjs";
+import "../oauth2/index.mjs";
+import { BetterAuthCookie, BetterAuthCookies } from "./cookie.mjs";
+import { BetterAuthPlugin } from "./plugin.mjs";
+import { BetterAuthOptions, BetterAuthRateLimitOptions } from "./init-options.mjs";
+import { CookieOptions, EndpointContext } from "better-call";
+
+//#region src/types/context.d.ts
+type GenericEndpointContext<Options extends BetterAuthOptions = BetterAuthOptions> = EndpointContext<string, any> & {
+  context: AuthContext<Options>;
+};
+interface InternalAdapter<_Options extends BetterAuthOptions = BetterAuthOptions> {
+  createOAuthUser(user: Omit<User, "id" | "createdAt" | "updatedAt">, account: Omit<Account, "userId" | "id" | "createdAt" | "updatedAt"> & Partial<Account>): Promise<{
+    user: User;
+    account: Account;
+  }>;
+  createUser<T extends Record<string, any>>(user: Omit<User, "id" | "createdAt" | "updatedAt" | "emailVerified"> & Partial<User> & Record<string, any>): Promise<T & User>;
+  createAccount<T extends Record<string, any>>(account: Omit<Account, "id" | "createdAt" | "updatedAt"> & Partial<Account> & T): Promise<T & Account>;
+  listSessions(userId: string): Promise<Session[]>;
+  listUsers(limit?: number | undefined, offset?: number | undefined, sortBy?: {
+    field: string;
+    direction: "asc" | "desc";
+  } | undefined, where?: Where[] | undefined): Promise<User[]>;
+  countTotalUsers(where?: Where[] | undefined): Promise<number>;
+  deleteUser(userId: string): Promise<void>;
+  createSession(userId: string, dontRememberMe?: boolean | undefined, override?: (Partial<Session> & Record<string, any>) | undefined, overrideAll?: boolean | undefined): Promise<Session>;
+  findSession(token: string): Promise<{
+    session: Session & Record<string, any>;
+    user: User & Record<string, any>;
+  } | null>;
+  findSessions(sessionTokens: string[]): Promise<{
+    session: Session;
+    user: User;
+  }[]>;
+  updateSession(sessionToken: string, session: Partial<Session> & Record<string, any>): Promise<Session | null>;
+  deleteSession(token: string): Promise<void>;
+  deleteAccounts(userId: string): Promise<void>;
+  deleteAccount(accountId: string): Promise<void>;
+  deleteSessions(userIdOrSessionTokens: string | string[]): Promise<void>;
+  findOAuthUser(email: string, accountId: string, providerId: string): Promise<{
+    user: User;
+    accounts: Account[];
+  } | null>;
+  findUserByEmail(email: string, options?: {
+    includeAccounts: boolean;
+  } | undefined): Promise<{
+    user: User;
+    accounts: Account[];
+  } | null>;
+  findUserById(userId: string): Promise<User | null>;
+  linkAccount(account: Omit<Account, "id" | "createdAt" | "updatedAt"> & Partial<Account>): Promise<Account>;
+  updateUser<T extends Record<string, any>>(userId: string, data: Partial<User> & Record<string, any>): Promise<User & T>;
+  updateUserByEmail<T extends Record<string, any>>(email: string, data: Partial<User & Record<string, any>>): Promise<User & T>;
+  updatePassword(userId: string, password: string): Promise<void>;
+  findAccounts(userId: string): Promise<Account[]>;
+  findAccount(accountId: string): Promise<Account | null>;
+  findAccountByProviderId(accountId: string, providerId: string): Promise<Account | null>;
+  findAccountByUserId(userId: string): Promise<Account[]>;
+  updateAccount(id: string, data: Partial<Account>): Promise<Account>;
+  createVerificationValue(data: Omit<Verification, "createdAt" | "id" | "updatedAt"> & Partial<Verification>): Promise<Verification>;
+  findVerificationValue(identifier: string): Promise<Verification | null>;
+  deleteVerificationValue(id: string): Promise<void>;
+  deleteVerificationByIdentifier(identifier: string): Promise<void>;
+  updateVerificationValue(id: string, data: Partial<Verification>): Promise<Verification>;
+}
+type CreateCookieGetterFn = (cookieName: string, overrideAttributes?: Partial<CookieOptions> | undefined) => BetterAuthCookie;
+type CheckPasswordFn<Options extends BetterAuthOptions = BetterAuthOptions> = (userId: string, ctx: GenericEndpointContext<Options>) => Promise<boolean>;
+type PluginContext = {
+  getPlugin: <Plugin extends BetterAuthPlugin>(pluginId: Plugin["id"]) => Plugin | null;
+};
+type InfoContext = {
+  appName: string;
+  baseURL: string;
+  version: string;
+};
+type AuthContext<Options extends BetterAuthOptions = BetterAuthOptions> = PluginContext & InfoContext & {
+  options: Options;
+  trustedOrigins: string[];
+  /**
+   * Verifies whether url is a trusted origin according to the "trustedOrigins" configuration
+   * @param url The url to verify against the "trustedOrigins" configuration
+   * @param settings Specify supported pattern matching settings
+   * @returns {boolean} true if the URL matches the origin pattern, false otherwise.
+   */
+  isTrustedOrigin: (url: string, settings?: {
+    allowRelativePaths: boolean;
+  }) => boolean;
+  oauthConfig: {
+    /**
+     * This is dangerous and should only be used in dev or staging environments.
+     */
+    skipStateCookieCheck?: boolean | undefined;
+    /**
+     * Strategy for storing OAuth state
+     *
+     * - "cookie": Store state in an encrypted cookie (stateless)
+     * - "database": Store state in the database
+     *
+     * @default "cookie"
+     */
+    storeStateStrategy: "database" | "cookie";
+  };
+  /**
+   * New session that will be set after the request
+   * meaning: there is a `set-cookie` header that will set
+   * the session cookie. This is the fetched session. And it's set
+   * by `setNewSession` method.
+   */
+  newSession: {
+    session: Session & Record<string, any>;
+    user: User & Record<string, any>;
+  } | null;
+  session: {
+    session: Session & Record<string, any>;
+    user: User & Record<string, any>;
+  } | null;
+  setNewSession: (session: {
+    session: Session & Record<string, any>;
+    user: User & Record<string, any>;
+  } | null) => void;
+  socialProviders: OAuthProvider[];
+  authCookies: BetterAuthCookies;
+  logger: ReturnType<typeof createLogger>;
+  rateLimit: {
+    enabled: boolean;
+    window: number;
+    max: number;
+    storage: "memory" | "database" | "secondary-storage";
+  } & Omit<BetterAuthRateLimitOptions, "enabled" | "window" | "max" | "storage">;
+  adapter: DBAdapter<Options>;
+  internalAdapter: InternalAdapter<Options>;
+  createAuthCookie: CreateCookieGetterFn;
+  secret: string;
+  sessionConfig: {
+    updateAge: number;
+    expiresIn: number;
+    freshAge: number;
+    cookieRefreshCache: false | {
+      enabled: true;
+      updateAge: number;
+    };
+  };
+  generateId: (options: {
+    model: ModelNames;
+    size?: number | undefined;
+  }) => string | false;
+  secondaryStorage: SecondaryStorage | undefined;
+  password: {
+    hash: (password: string) => Promise<string>;
+    verify: (data: {
+      password: string;
+      hash: string;
+    }) => Promise<boolean>;
+    config: {
+      minPasswordLength: number;
+      maxPasswordLength: number;
+    };
+    checkPassword: CheckPasswordFn<Options>;
+  };
+  tables: BetterAuthDBSchema;
+  runMigrations: () => Promise<void>;
+  publishTelemetry: (event: {
+    type: string;
+    anonymousId?: string | undefined;
+    payload: Record<string, any>;
+  }) => Promise<void>;
+  /**
+   * Skip origin check for requests.
+   *
+   * - `true`: Skip for ALL requests (DANGEROUS - disables CSRF protection)
+   * - `string[]`: Skip only for specific paths (e.g., SAML callbacks)
+   * - `false`: Enable origin check (default)
+   *
+   * Paths support prefix matching (e.g., "/sso/saml2/callback" matches
+   * "/sso/saml2/callback/provider-name").
+   *
+   * @default false (true in test environments)
+   */
+  skipOriginCheck: boolean | string[];
+  /**
+   * This skips the CSRF check for all requests.
+   *
+   * This is inferred from the `options.advanced?.
+   * disableCSRFCheck` option.
+   *
+   * @default false
+   */
+  skipCSRFCheck: boolean;
+  /**
+   * Background task handler for deferred operations.
+   *
+   * This is inferred from the `options.advanced?.backgroundTasks?.handler` option.
+   * Defaults to a no-op that just runs the promise.
+   */
+  runInBackground: (promise: Promise<void>) => void;
+  /**
+   * Runs a task in the background if `runInBackground` is configured,
+   * otherwise awaits the task directly.
+   *
+   * This is useful for operations like sending emails where we want
+   * to avoid blocking the response when possible (for timing attack
+   * mitigation), but still ensure the operation completes.
+   */
+  runInBackgroundOrAwait: (promise: Promise<unknown> | Promise<void> | void | unknown) => Promise<unknown>;
+};
+//#endregion
+export { AuthContext, GenericEndpointContext, InfoContext, InternalAdapter, PluginContext };

package/dist/types/cookie.d.mts

@@ -0,0 +1,15 @@
+import { CookieOptions } from "better-call";
+
+//#region src/types/cookie.d.ts
+type BetterAuthCookie = {
+  name: string;
+  attributes: CookieOptions;
+};
+type BetterAuthCookies = {
+  sessionToken: BetterAuthCookie;
+  sessionData: BetterAuthCookie;
+  accountData: BetterAuthCookie;
+  dontRememberToken: BetterAuthCookie;
+};
+//#endregion
+export { BetterAuthCookie, BetterAuthCookies };

package/dist/types/helper.d.mts

@@ -0,0 +1,8 @@
+//#region src/types/helper.d.ts
+type Primitive = string | number | symbol | bigint | boolean | null | undefined;
+type Awaitable<T> = T | Promise<T>;
+type LiteralString = "" | (string & Record<never, never>);
+type LiteralUnion<LiteralType, BaseType extends Primitive> = LiteralType | (BaseType & Record<never, never>);
+type Prettify<T> = { [K in keyof T]: T[K] } & {};
+//#endregion
+export { Awaitable, LiteralString, LiteralUnion, Prettify, Primitive };

package/dist/types/index.d.mts

@@ -0,0 +1,8 @@
+import { Awaitable, LiteralString, LiteralUnion, Prettify, Primitive } from "./helper.mjs";
+import { BetterAuthCookie, BetterAuthCookies } from "./cookie.mjs";
+import { BetterAuthPlugin, HookEndpointContext } from "./plugin.mjs";
+import { BetterAuthAdvancedOptions, BetterAuthOptions, BetterAuthRateLimitOptions, GenerateIdFn } from "./init-options.mjs";
+import { AuthContext, GenericEndpointContext, InfoContext, InternalAdapter, PluginContext } from "./context.mjs";
+import { BetterAuthClientOptions, BetterAuthClientPlugin, ClientAtomListener, ClientFetchOption, ClientStore } from "./plugin-client.mjs";
+import { StandardSchemaV1 as StandardSchemaV1$1 } from "@standard-schema/spec";
+export { type StandardSchemaV1$1 as StandardSchemaV1 };