@better-auth/core 1.4.6-beta.3 → 1.4.6-beta.4

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @better-auth/core@1.4.6-beta.3 build /home/runner/work/better-auth/better-auth/packages/core
+> @better-auth/core@1.4.6-beta.4 build /home/runner/work/better-auth/better-auth/packages/core
 > tsdown
 
 ℹ tsdown v0.17.0 powered by rolldown v1.0.0-beta.53
@@ -7,8 +7,8 @@
 ℹ entry: src/index.ts, src/db/index.ts, src/db/adapter/index.ts, src/async_hooks/index.ts, src/context/index.ts, src/env/index.ts, src/oauth2/index.ts, src/api/index.ts, src/social-providers/index.ts, src/utils/index.ts, src/error/index.ts
 ℹ tsconfig: tsconfig.json
 ℹ Build start
-ℹ dist/social-providers/index.mjs     79.87 kB │ gzip: 10.31 kB
-ℹ dist/db/adapter/index.mjs           37.94 kB │ gzip:  7.72 kB
+ℹ dist/social-providers/index.mjs     80.39 kB │ gzip: 10.31 kB
+ℹ dist/db/adapter/index.mjs           38.13 kB │ gzip:  7.79 kB
 ℹ dist/db/index.mjs                    1.66 kB │ gzip:  0.54 kB
 ℹ dist/api/index.mjs                   0.86 kB │ gzip:  0.42 kB
 ℹ dist/context/index.mjs               0.77 kB │ gzip:  0.28 kB
@@ -25,19 +25,19 @@
 ℹ dist/error-CMXuwPsa.mjs              1.77 kB │ gzip:  0.79 kB
 ℹ dist/async_hooks-CrTStdt6.mjs        1.70 kB │ gzip:  0.85 kB
 ℹ dist/utils-BqQC77zO.mjs              1.10 kB │ gzip:  0.55 kB
-ℹ dist/social-providers/index.d.mts    3.84 kB │ gzip:  1.18 kB
+ℹ dist/social-providers/index.d.mts    3.88 kB │ gzip:  1.19 kB
 ℹ dist/context/index.d.mts             3.02 kB │ gzip:  0.95 kB
 ℹ dist/error/index.d.mts               1.84 kB │ gzip:  0.72 kB
 ℹ dist/db/adapter/index.d.mts          1.34 kB │ gzip:  0.42 kB
 ℹ dist/utils/index.d.mts               1.19 kB │ gzip:  0.55 kB
 ℹ dist/db/index.d.mts                  1.04 kB │ gzip:  0.38 kB
 ℹ dist/index.d.mts                     0.86 kB │ gzip:  0.33 kB
-ℹ dist/oauth2/index.d.mts              0.76 kB │ gzip:  0.29 kB
+ℹ dist/oauth2/index.d.mts              0.76 kB │ gzip:  0.28 kB
 ℹ dist/env/index.d.mts                 0.59 kB │ gzip:  0.30 kB
 ℹ dist/api/index.d.mts                 0.26 kB │ gzip:  0.14 kB
 ℹ dist/async_hooks/index.d.mts         0.14 kB │ gzip:  0.10 kB
-ℹ dist/index-BfhTkcnW.d.mts          217.64 kB │ gzip: 34.32 kB
+ℹ dist/index-Bp1Bfmzt.d.mts          218.16 kB │ gzip: 34.38 kB
 ℹ dist/index-D4vfN5ui.d.mts            3.31 kB │ gzip:  1.11 kB
 ℹ dist/index-Da4Ujjef.d.mts            0.24 kB │ gzip:  0.16 kB
-ℹ 32 files, total: 390.80 kB
-✔ Build complete in 4643ms
+ℹ 32 files, total: 392.08 kB
+✔ Build complete in 4911ms

package/dist/api/index.d.mts

@@ -1,2 +1,2 @@
-import { a as optionsMiddleware, i as createAuthMiddleware, n as AuthMiddleware, r as createAuthEndpoint, t as AuthEndpoint } from "../index-BfhTkcnW.mjs";
+import { a as optionsMiddleware, i as createAuthMiddleware, n as AuthMiddleware, r as createAuthEndpoint, t as AuthEndpoint } from "../index-Bp1Bfmzt.mjs";
 export { AuthEndpoint, AuthMiddleware, createAuthEndpoint, createAuthMiddleware, optionsMiddleware };

package/dist/context/index.d.mts

@@ -1,4 +1,4 @@
-import { Gn as DBAdapter, Xn as DBTransactionAdapter, f as AuthContext } from "../index-BfhTkcnW.mjs";
+import { Kn as DBAdapter, Zn as DBTransactionAdapter, f as AuthContext } from "../index-Bp1Bfmzt.mjs";
 import { t as AsyncLocalStorage } from "../index-Da4Ujjef.mjs";
 import { EndpointContext, InputContext } from "better-call";
 

package/dist/db/adapter/index.d.mts

@@ -1,2 +1,2 @@
-import { $n as Where, Gn as DBAdapter, Jn as DBAdapterInstance, Kn as DBAdapterDebugLogOption, Qn as JoinOption, Un as CleanedWhere, Wn as CustomAdapter, Xn as DBTransactionAdapter, Yn as DBAdapterSchemaCreation, Zn as JoinConfig, _r as initGetFieldName, ar as AdapterConfig, br as initGetDefaultFieldName, cr as AdapterFactoryOptions, dr as CreateCustomAdapter, er as deepmerge, gr as initGetIdField, hr as initGetModelName, ir as createAdapterFactory, lr as AdapterTestDebugLogs, nr as AdapterFactory, or as AdapterFactoryConfig, qn as DBAdapterFactoryConfig, rr as createAdapter, sr as AdapterFactoryCustomizeAdapterCreator, tr as withApplyDefault, ur as CreateAdapterOptions, vr as initGetFieldAttributes, yr as initGetDefaultModelName } from "../../index-BfhTkcnW.mjs";
+import { $n as JoinOption, Gn as CustomAdapter, Jn as DBAdapterFactoryConfig, Kn as DBAdapter, Qn as JoinConfig, Wn as CleanedWhere, Xn as DBAdapterSchemaCreation, Yn as DBAdapterInstance, Zn as DBTransactionAdapter, _r as initGetIdField, ar as createAdapterFactory, br as initGetDefaultModelName, cr as AdapterFactoryCustomizeAdapterCreator, dr as CreateAdapterOptions, er as Where, fr as CreateCustomAdapter, gr as initGetModelName, ir as createAdapter, lr as AdapterFactoryOptions, nr as withApplyDefault, or as AdapterConfig, qn as DBAdapterDebugLogOption, rr as AdapterFactory, sr as AdapterFactoryConfig, tr as deepmerge, ur as AdapterTestDebugLogs, vr as initGetFieldName, xr as initGetDefaultFieldName, yr as initGetFieldAttributes } from "../../index-Bp1Bfmzt.mjs";
 export { AdapterConfig, AdapterFactory, AdapterFactoryConfig, AdapterFactoryCustomizeAdapterCreator, AdapterFactoryOptions, AdapterTestDebugLogs, CleanedWhere, CreateAdapterOptions, CreateCustomAdapter, CustomAdapter, DBAdapter, DBAdapterDebugLogOption, DBAdapterFactoryConfig, DBAdapterInstance, DBAdapterSchemaCreation, DBTransactionAdapter, JoinConfig, JoinOption, Where, createAdapter, createAdapterFactory, deepmerge, initGetDefaultFieldName, initGetDefaultModelName, initGetFieldAttributes, initGetFieldName, initGetIdField, initGetModelName, withApplyDefault };

package/dist/db/adapter/index.mjs

@@ -1,5 +1,5 @@
 import { t as getAuthTables } from "../../get-tables-BGfrxIVZ.mjs";
-import { i as logger, o as getColorDepth, t as TTY_COLORS } from "../../env-D6s-lvJz.mjs";
+import { i as logger, n as createLogger, o as getColorDepth, t as TTY_COLORS } from "../../env-D6s-lvJz.mjs";
 import { n as safeJSONParse, r as generateId } from "../../utils-BqQC77zO.mjs";
 import { t as BetterAuthError } from "../../error-CMXuwPsa.mjs";
 
@@ -260,6 +260,7 @@ const createAdapterFactory = ({ adapter: customAdapter, config: cfg }) => (optio
 		adapterName: cfg.adapterName ?? cfg.adapterId,
 		supportsNumericIds: cfg.supportsNumericIds ?? true,
 		supportsUUIDs: cfg.supportsUUIDs ?? false,
+		supportsArrays: cfg.supportsArrays ?? false,
 		transaction: cfg.transaction ?? false,
 		disableTransformInput: cfg.disableTransformInput ?? false,
 		disableTransformOutput: cfg.disableTransformOutput ?? false,
@@ -269,6 +270,7 @@ const createAdapterFactory = ({ adapter: customAdapter, config: cfg }) => (optio
 	const schema = getAuthTables(options);
 	const debugLog = (...args) => {
 		if (config.debugLogs === true || typeof config.debugLogs === "object") {
+			const logger$2 = createLogger({ level: "info" });
 			if (typeof config.debugLogs === "object" && "isRunningAdapterTests" in config.debugLogs) {
 				if (config.debugLogs.isRunningAdapterTests) {
 					args.shift();
@@ -292,10 +294,11 @@ const createAdapterFactory = ({ adapter: customAdapter, config: cfg }) => (optio
 					else if (method === "deleteMany" && !config.debugLogs.deleteMany) return;
 					else if (method === "count" && !config.debugLogs.count) return;
 				}
-				logger.info(`[${config.adapterName}]`, ...args);
-			} else logger.info(`[${config.adapterName}]`, ...args);
+				logger$2.info(`[${config.adapterName}]`, ...args);
+			} else logger$2.info(`[${config.adapterName}]`, ...args);
 		}
 	};
+	const logger$1 = createLogger(options.logger);
 	const getDefaultModelName = initGetDefaultModelName({
 		usePlural: config.usePlural,
 		schema
@@ -344,7 +347,7 @@ const createAdapterFactory = ({ adapter: customAdapter, config: cfg }) => (optio
 			if (fieldAttributes && fieldAttributes.type === "date" && !(value instanceof Date) && typeof value === "string") try {
 				value = new Date(value);
 			} catch {
-				logger.error("[Adapter Factory] Failed to convert string to date", {
+				logger$1.error("[Adapter Factory] Failed to convert string to date", {
 					value,
 					field
 				});
@@ -354,7 +357,7 @@ const createAdapterFactory = ({ adapter: customAdapter, config: cfg }) => (optio
 			if (fieldAttributes.references?.field === "id" && useNumberId) if (Array.isArray(newValue)) newValue = newValue.map((x) => x !== null ? Number(x) : null);
 			else newValue = newValue !== null ? Number(newValue) : null;
 			else if (config.supportsJSON === false && typeof newValue === "object" && fieldAttributes.type === "json") newValue = JSON.stringify(newValue);
-			else if (config.supportsJSON === false && Array.isArray(newValue) && (fieldAttributes.type === "string[]" || fieldAttributes.type === "number[]")) newValue = JSON.stringify(newValue);
+			else if (config.supportsArrays === false && Array.isArray(newValue) && (fieldAttributes.type === "string[]" || fieldAttributes.type === "number[]")) newValue = JSON.stringify(newValue);
 			else if (config.supportsDates === false && newValue instanceof Date && fieldAttributes.type === "date") newValue = newValue.toISOString();
 			else if (config.supportsBooleans === false && typeof newValue === "boolean") newValue = newValue ? 1 : 0;
 			if (config.customTransformInput) newValue = config.customTransformInput({
@@ -389,7 +392,7 @@ const createAdapterFactory = ({ adapter: customAdapter, config: cfg }) => (optio
 					if (originalKey === "id" || field.references?.field === "id") {
 						if (typeof newValue !== "undefined" && newValue !== null) newValue = String(newValue);
 					} else if (config.supportsJSON === false && typeof newValue === "string" && field.type === "json") newValue = safeJSONParse(newValue);
-					else if (config.supportsJSON === false && typeof newValue === "string" && (field.type === "string[]" || field.type === "number[]")) newValue = safeJSONParse(newValue);
+					else if (config.supportsArrays === false && typeof newValue === "string" && (field.type === "string[]" || field.type === "number[]")) newValue = safeJSONParse(newValue);
 					else if (config.supportsDates === false && typeof newValue === "string" && field.type === "date") newValue = new Date(newValue);
 					else if (config.supportsBooleans === false && typeof newValue === "number" && field.type === "boolean") newValue = newValue === 1;
 					if (config.customTransformOutput) newValue = config.customTransformOutput({
@@ -579,7 +582,7 @@ const createAdapterFactory = ({ adapter: customAdapter, config: cfg }) => (optio
 				});
 			}
 		} catch (error) {
-			logger.error(`Failed to query fallback join for model ${modelName}:`, {
+			logger$1.error(`Failed to query fallback join for model ${modelName}:`, {
 				where,
 				limit: joinConfig.limit
 			});
@@ -606,7 +609,7 @@ const createAdapterFactory = ({ adapter: customAdapter, config: cfg }) => (optio
 		transaction: async (cb) => {
 			if (!lazyLoadTransaction) if (!config.transaction) lazyLoadTransaction = createAsIsTransaction(adapter);
 			else {
-				logger.debug(`[${config.adapterName}] - Using provided transaction implementation.`);
+				logger$1.debug(`[${config.adapterName}] - Using provided transaction implementation.`);
 				lazyLoadTransaction = config.transaction;
 			}
 			return lazyLoadTransaction(cb);
@@ -617,7 +620,7 @@ const createAdapterFactory = ({ adapter: customAdapter, config: cfg }) => (optio
 			const model = getModelName(unsafeModel);
 			unsafeModel = getDefaultModelName(unsafeModel);
 			if ("id" in unsafeData && typeof unsafeData.id !== "undefined" && !forceAllowId) {
-				logger.warn(`[${config.adapterName}] - You are trying to create a record with an id. This is not allowed as we handle id generation for you, unless you pass in the \`forceAllowId\` parameter. The id will be ignored.`);
+				logger$1.warn(`[${config.adapterName}] - You are trying to create a record with an id. This is not allowed as we handle id generation for you, unless you pass in the \`forceAllowId\` parameter. The id will be ignored.`);
 				const stack = (/* @__PURE__ */ new Error()).stack?.split("\n").filter((_, i) => i !== 1).join("\n").replace("Error:", "Create method with `id` being called at:");
 				console.log(stack);
 				unsafeData.id = void 0;
@@ -944,6 +947,7 @@ function formatAction(action) {
 }
 /**
 * @deprecated Use `createAdapterFactory` instead. This export will be removed in a future version.
+* @alias
 */
 const createAdapter = createAdapterFactory;
 

package/dist/db/index.d.mts

@@ -1,2 +1,2 @@
-import { Ar as User, Br as BaseModelNames, Cr as FieldAttribute, Dr as getAuthTables, Er as Primitive, Fr as RateLimit, Gr as DBPrimitive, Hr as DBFieldAttribute, Ir as rateLimitSchema, Kr as ModelNames, Lr as Account, Mr as coreSchema, Nr as Session, Or as Verification, Pr as sessionSchema, Rr as accountSchema, Sr as BetterAuthDbSchema, Tr as FieldType, Ur as DBFieldAttributeConfig, Vr as BetterAuthDBSchema, Wr as DBFieldType, jr as userSchema, kr as verificationSchema, qr as SecondaryStorage, wr as FieldAttributeConfig, xr as AuthPluginSchema, zr as BetterAuthPluginDBSchema } from "../index-BfhTkcnW.mjs";
+import { Ar as verificationSchema, Br as BetterAuthPluginDBSchema, Cr as BetterAuthDbSchema, Dr as Primitive, Er as FieldType, Fr as sessionSchema, Gr as DBFieldType, Hr as BetterAuthDBSchema, Ir as RateLimit, Jr as SecondaryStorage, Kr as DBPrimitive, Lr as rateLimitSchema, Mr as userSchema, Nr as coreSchema, Or as getAuthTables, Pr as Session, Rr as Account, Sr as AuthPluginSchema, Tr as FieldAttributeConfig, Ur as DBFieldAttribute, Vr as BaseModelNames, Wr as DBFieldAttributeConfig, jr as User, kr as Verification, qr as ModelNames, wr as FieldAttribute, zr as accountSchema } from "../index-Bp1Bfmzt.mjs";
 export { Account, AuthPluginSchema, BaseModelNames, BetterAuthDBSchema, BetterAuthDbSchema, BetterAuthPluginDBSchema, DBFieldAttribute, DBFieldAttributeConfig, DBFieldType, DBPrimitive, FieldAttribute, FieldAttributeConfig, FieldType, ModelNames, Primitive, RateLimit, SecondaryStorage, Session, User, Verification, accountSchema, coreSchema, getAuthTables, rateLimitSchema, sessionSchema, userSchema, verificationSchema };

package/dist/{index-BfhTkcnW.d.mts → index-Bp1Bfmzt.d.mts}

@@ -526,6 +526,7 @@ declare const createAdapterFactory: ({
 }: AdapterFactoryOptions) => AdapterFactory;
 /**
  * @deprecated Use `createAdapterFactory` instead. This export will be removed in a future version.
+ * @alias
  */
 declare const createAdapter: ({
   adapter: customAdapter,
@@ -641,6 +642,14 @@ interface DBAdapterFactoryConfig<Options extends BetterAuthOptions = BetterAuthO
    * @default true
    */
   supportsBooleans?: boolean | undefined;
+  /**
+   * If the database doesn't support arrays, set this to `false`.
+   *
+   * We will handle the translation between using `array`s, and saving `string`s to the database.
+   *
+   * @default false
+   */
+  supportsArrays?: boolean | undefined;
   /**
    * Execute multiple operations in a transaction.
    *
@@ -2280,6 +2289,7 @@ declare const google: (options: GoogleOptions) => {
   } | null>;
   options: GoogleOptions;
 };
+declare const getGooglePublicKey: (kid: string) => Promise<Uint8Array<ArrayBufferLike> | CryptoKey>;
 //#endregion
 //#region src/social-providers/huggingface.d.ts
 interface HuggingFaceProfile {
@@ -7157,13 +7167,13 @@ type BetterAuthOptions = {
          * if the hook returns false, the user will not be created.
          * If the hook returns an object, it'll be used instead of the original data
          */
-        before?: (user: User & Record<string, unknown>, context?: GenericEndpointContext) => Promise<boolean | void | {
+        before?: (user: User & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<boolean | void | {
           data: Optional<User> & Record<string, any>;
         }>;
         /**
          * Hook that is called after a user is created.
          */
-        after?: (user: User & Record<string, unknown>, context?: GenericEndpointContext) => Promise<void>;
+        after?: (user: User & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<void>;
       };
       update?: {
         /**
@@ -7171,24 +7181,24 @@ type BetterAuthOptions = {
          * if the hook returns false, the user will not be updated.
          * If the hook returns an object, it'll be used instead of the original data
          */
-        before?: (user: Partial<User> & Record<string, unknown>, context?: GenericEndpointContext) => Promise<boolean | void | {
+        before?: (user: Partial<User> & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<boolean | void | {
           data: Optional<User & Record<string, any>>;
         }>;
         /**
          * Hook that is called after a user is updated.
          */
-        after?: (user: User & Record<string, unknown>, context?: GenericEndpointContext) => Promise<void>;
+        after?: (user: User & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<void>;
       };
       delete?: {
         /**
          * Hook that is called before a user is deleted.
          * if the hook returns false, the user will not be deleted.
          */
-        before?: (user: User & Record<string, unknown>, context?: GenericEndpointContext) => Promise<boolean | void>;
+        before?: (user: User & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<boolean | void>;
         /**
          * Hook that is called after a user is deleted.
          */
-        after?: (user: User & Record<string, unknown>, context?: GenericEndpointContext) => Promise<void>;
+        after?: (user: User & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<void>;
       };
     };
     /**
@@ -7201,13 +7211,13 @@ type BetterAuthOptions = {
          * if the hook returns false, the session will not be created.
          * If the hook returns an object, it'll be used instead of the original data
          */
-        before?: (session: Session & Record<string, unknown>, context?: GenericEndpointContext) => Promise<boolean | void | {
+        before?: (session: Session & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<boolean | void | {
           data: Optional<Session> & Record<string, any>;
         }>;
         /**
          * Hook that is called after a session is created.
          */
-        after?: (session: Session & Record<string, unknown>, context?: GenericEndpointContext) => Promise<void>;
+        after?: (session: Session & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<void>;
       };
       /**
        * Update hook
@@ -7218,24 +7228,24 @@ type BetterAuthOptions = {
          * if the hook returns false, the session will not be updated.
          * If the hook returns an object, it'll be used instead of the original data
          */
-        before?: (session: Partial<Session> & Record<string, unknown>, context?: GenericEndpointContext) => Promise<boolean | void | {
+        before?: (session: Partial<Session> & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<boolean | void | {
           data: Optional<Session & Record<string, any>>;
         }>;
         /**
          * Hook that is called after a session is updated.
          */
-        after?: (session: Session & Record<string, unknown>, context?: GenericEndpointContext) => Promise<void>;
+        after?: (session: Session & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<void>;
       };
       delete?: {
         /**
          * Hook that is called before a session is deleted.
          * if the hook returns false, the session will not be deleted.
          */
-        before?: (session: Session & Record<string, unknown>, context?: GenericEndpointContext) => Promise<boolean | void>;
+        before?: (session: Session & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<boolean | void>;
         /**
          * Hook that is called after a session is deleted.
          */
-        after?: (session: Session & Record<string, unknown>, context?: GenericEndpointContext) => Promise<void>;
+        after?: (session: Session & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<void>;
       };
     };
     /**
@@ -7248,13 +7258,13 @@ type BetterAuthOptions = {
          * If the hook returns false, the account will not be created.
          * If the hook returns an object, it'll be used instead of the original data
          */
-        before?: (account: Account, context?: GenericEndpointContext) => Promise<boolean | void | {
+        before?: (account: Account, context: GenericEndpointContext | null) => Promise<boolean | void | {
           data: Optional<Account> & Record<string, any>;
         }>;
         /**
          * Hook that is called after a account is created.
          */
-        after?: (account: Account, context?: GenericEndpointContext) => Promise<void>;
+        after?: (account: Account, context: GenericEndpointContext | null) => Promise<void>;
       };
       /**
        * Update hook
@@ -7265,24 +7275,24 @@ type BetterAuthOptions = {
          * If the hook returns false, the user will not be updated.
          * If the hook returns an object, it'll be used instead of the original data
          */
-        before?: (account: Partial<Account> & Record<string, unknown>, context?: GenericEndpointContext) => Promise<boolean | void | {
+        before?: (account: Partial<Account> & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<boolean | void | {
           data: Optional<Account & Record<string, any>>;
         }>;
         /**
          * Hook that is called after a account is updated.
          */
-        after?: (account: Account & Record<string, unknown>, context?: GenericEndpointContext) => Promise<void>;
+        after?: (account: Account & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<void>;
       };
       delete?: {
         /**
          * Hook that is called before an account is deleted.
          * if the hook returns false, the account will not be deleted.
          */
-        before?: (account: Account & Record<string, unknown>, context?: GenericEndpointContext) => Promise<boolean | void>;
+        before?: (account: Account & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<boolean | void>;
         /**
          * Hook that is called after an account is deleted.
          */
-        after?: (account: Account & Record<string, unknown>, context?: GenericEndpointContext) => Promise<void>;
+        after?: (account: Account & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<void>;
       };
     };
     /**
@@ -7295,13 +7305,13 @@ type BetterAuthOptions = {
          * if the hook returns false, the verification will not be created.
          * If the hook returns an object, it'll be used instead of the original data
          */
-        before?: (verification: Verification & Record<string, unknown>, context?: GenericEndpointContext) => Promise<boolean | void | {
+        before?: (verification: Verification & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<boolean | void | {
           data: Optional<Verification> & Record<string, any>;
         }>;
         /**
          * Hook that is called after a verification is created.
          */
-        after?: (verification: Verification & Record<string, unknown>, context?: GenericEndpointContext) => Promise<void>;
+        after?: (verification: Verification & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<void>;
       };
       update?: {
         /**
@@ -7309,24 +7319,24 @@ type BetterAuthOptions = {
          * if the hook returns false, the verification will not be updated.
          * If the hook returns an object, it'll be used instead of the original data
          */
-        before?: (verification: Partial<Verification> & Record<string, unknown>, context?: GenericEndpointContext) => Promise<boolean | void | {
+        before?: (verification: Partial<Verification> & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<boolean | void | {
           data: Optional<Verification & Record<string, any>>;
         }>;
         /**
          * Hook that is called after a verification is updated.
          */
-        after?: (verification: Verification & Record<string, unknown>, context?: GenericEndpointContext) => Promise<void>;
+        after?: (verification: Verification & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<void>;
       };
       delete?: {
         /**
          * Hook that is called before a verification is deleted.
          * if the hook returns false, the verification will not be deleted.
          */
-        before?: (verification: Verification & Record<string, unknown>, context?: GenericEndpointContext) => Promise<boolean | void>;
+        before?: (verification: Verification & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<boolean | void>;
         /**
          * Hook that is called after a verification is deleted.
          */
-        after?: (verification: Verification & Record<string, unknown>, context?: GenericEndpointContext) => Promise<void>;
+        after?: (verification: Verification & Record<string, unknown>, context: GenericEndpointContext | null) => Promise<void>;
       };
     };
   } | undefined;
@@ -7738,4 +7748,4 @@ declare const createAuthEndpoint: <Path extends string, Opts extends EndpointOpt
 type AuthEndpoint = ReturnType<typeof createAuthEndpoint>;
 type AuthMiddleware = ReturnType<typeof createAuthMiddleware>;
 //#endregion
-export { AccountStatus as $, Where as $n, GoogleProfile as $t, PolarOptions as A, validateAuthorizationCode as An, User as Ar, linear as At, LineIdTokenPayload as B, OAuth2UserInfo as Bn, BaseModelNames as Br, TwitchOptions as Bt, SocialProviderListEnum as C, AppleNonConformUser as Cn, FieldAttribute as Cr, gitlab as Ct, VercelOptions as D, getApplePublicKey as Dn, getAuthTables as Dr, LinearOptions as Dt, socialProviders as E, apple as En, Primitive$1 as Er, linkedin as Et, PayPalTokenResponse as F, refreshAccessToken as Fn, RateLimit as Fr, DropboxProfile as Ft, NaverProfile as G, DBAdapter as Gn, DBPrimitive as Gr, spotify as Gt, LineUserInfo as H, ProviderOptions as Hn, DBFieldAttribute as Hr, twitch as Ht, paypal as I, createAuthorizationURL as In, rateLimitSchema as Ir, dropbox as It, KakaoProfile as J, DBAdapterInstance as Jn, slack as Jt, naver as K, DBAdapterDebugLogOption as Kn, ModelNames as Kr, SlackOptions as Kt, PaybinOptions as L, clientCredentialsToken as Ln, Account as Lr, TwitterOption as Lt, polar as M, generateCodeChallenge as Mn, coreSchema as Mr, KickProfile as Mt, PayPalOptions as N, getOAuth2Tokens as Nn, Session as Nr, kick as Nt, VercelProfile as O, BetterAuthCookies as On, Verification as Or, LinearProfile as Ot, PayPalProfile as P, createRefreshAccessTokenRequest as Pn, sessionSchema as Pr, DropboxOptions as Pt, notion as Q, JoinOption as Qn, GoogleOptions as Qt, PaybinProfile as R, createClientCredentialsTokenRequest as Rn, accountSchema as Rr, TwitterProfile as Rt, SocialProviderList as S, atlassian as Sn, BetterAuthDbSchema as Sr, GitlabProfile as St, socialProviderList as T, AppleProfile as Tn, FieldType as Tr, LinkedInProfile as Tt, line as U, CleanedWhere as Un, DBFieldAttributeConfig as Ur, SpotifyOptions as Ut, LineOptions as V, OAuthProvider as Vn, BetterAuthDBSchema as Vr, TwitchProfile as Vt, NaverOptions as W, CustomAdapter as Wn, DBFieldType as Wr, SpotifyProfile as Wt, NotionOptions as X, DBTransactionAdapter as Xn, HuggingFaceProfile as Xt, kakao as Y, DBAdapterSchemaCreation as Yn, HuggingFaceOptions as Yt, NotionProfile as Z, JoinConfig as Zn, huggingface as Zt, BetterAuthRateLimitOptions as _, CognitoProfile as _n, initGetFieldName as _r, reddit as _t, optionsMiddleware as a, GithubProfile as an, AdapterConfig as ar, zoom as at, HookEndpointContext as b, AtlassianOptions as bn, initGetDefaultFieldName as br, tiktok as bt, BetterAuthClientPlugin as c, FigmaProfile as cn, AdapterFactoryOptions as cr, vk as ct, ClientStore as d, FacebookProfile as dn, CreateCustomAdapter as dr, salesforce as dt, google as en, deepmerge as er, LoginType as et, AuthContext as f, facebook as fn, LiteralString as fr, RobloxOptions as ft, BetterAuthOptions as g, CognitoOptions as gn, initGetIdField as gr, RedditProfile as gt, BetterAuthAdvancedOptions as h, discord as hn, initGetModelName as hr, RedditOptions as ht, createAuthMiddleware as i, GithubOptions as in, createAdapterFactory as ir, ZoomProfile as it, PolarProfile as j, validateToken as jn, userSchema as jr, KickOptions as jt, vercel as k, createAuthorizationCodeRequest as kn, verificationSchema as kr, LinearUser as kt, ClientAtomListener as l, figma as ln, AdapterTestDebugLogs as lr, SalesforceOptions as lt, InternalAdapter as m, DiscordProfile as mn, Prettify as mr, roblox as mt, AuthMiddleware as n, MicrosoftOptions as nn, AdapterFactory as nr, PronounOption as nt, StandardSchemaV1$1 as o, github as on, AdapterFactoryConfig as or, VkOption as ot, GenericEndpointContext as p, DiscordOptions as pn, LiteralUnion as pr, RobloxProfile as pt, KakaoOptions as q, DBAdapterFactoryConfig as qn, SecondaryStorage as qr, SlackProfile as qt, createAuthEndpoint as r, microsoft as rn, createAdapter as rr, ZoomOptions as rt, BetterAuthClientOptions as s, FigmaOptions as sn, AdapterFactoryCustomizeAdapterCreator as sr, VkProfile as st, AuthEndpoint as t, MicrosoftEntraIDProfile as tn, withApplyDefault as tr, PhoneNumber as tt, ClientFetchOption as u, FacebookOptions as un, CreateAdapterOptions as ur, SalesforceProfile as ut, GenerateIdFn as v, cognito as vn, initGetFieldAttributes as vr, TiktokOptions as vt, SocialProviders as w, AppleOptions as wn, FieldAttributeConfig as wr, LinkedInOptions as wt, SocialProvider as x, AtlassianProfile as xn, AuthPluginSchema as xr, GitlabOptions as xt, BetterAuthPlugin as y, getCognitoPublicKey as yn, initGetDefaultModelName as yr, TiktokProfile as yt, paybin as z, OAuth2Tokens as zn, BetterAuthPluginDBSchema as zr, twitter as zt };
+export { AccountStatus as $, JoinOption as $n, GoogleProfile as $t, PolarOptions as A, createAuthorizationCodeRequest as An, verificationSchema as Ar, linear as At, LineIdTokenPayload as B, OAuth2Tokens as Bn, BetterAuthPluginDBSchema as Br, TwitchOptions as Bt, SocialProviderListEnum as C, atlassian as Cn, BetterAuthDbSchema as Cr, gitlab as Ct, VercelOptions as D, apple as Dn, Primitive$1 as Dr, LinearOptions as Dt, socialProviders as E, AppleProfile as En, FieldType as Er, linkedin as Et, PayPalTokenResponse as F, createRefreshAccessTokenRequest as Fn, sessionSchema as Fr, DropboxProfile as Ft, NaverProfile as G, CustomAdapter as Gn, DBFieldType as Gr, spotify as Gt, LineUserInfo as H, OAuthProvider as Hn, BetterAuthDBSchema as Hr, twitch as Ht, paypal as I, refreshAccessToken as In, RateLimit as Ir, dropbox as It, KakaoProfile as J, DBAdapterFactoryConfig as Jn, SecondaryStorage as Jr, slack as Jt, naver as K, DBAdapter as Kn, DBPrimitive as Kr, SlackOptions as Kt, PaybinOptions as L, createAuthorizationURL as Ln, rateLimitSchema as Lr, TwitterOption as Lt, polar as M, validateToken as Mn, userSchema as Mr, KickProfile as Mt, PayPalOptions as N, generateCodeChallenge as Nn, coreSchema as Nr, kick as Nt, VercelProfile as O, getApplePublicKey as On, getAuthTables as Or, LinearProfile as Ot, PayPalProfile as P, getOAuth2Tokens as Pn, Session as Pr, DropboxOptions as Pt, notion as Q, JoinConfig as Qn, GoogleOptions as Qt, PaybinProfile as R, clientCredentialsToken as Rn, Account as Rr, TwitterProfile as Rt, SocialProviderList as S, AtlassianProfile as Sn, AuthPluginSchema as Sr, GitlabProfile as St, socialProviderList as T, AppleOptions as Tn, FieldAttributeConfig as Tr, LinkedInProfile as Tt, line as U, ProviderOptions as Un, DBFieldAttribute as Ur, SpotifyOptions as Ut, LineOptions as V, OAuth2UserInfo as Vn, BaseModelNames as Vr, TwitchProfile as Vt, NaverOptions as W, CleanedWhere as Wn, DBFieldAttributeConfig as Wr, SpotifyProfile as Wt, NotionOptions as X, DBAdapterSchemaCreation as Xn, HuggingFaceProfile as Xt, kakao as Y, DBAdapterInstance as Yn, HuggingFaceOptions as Yt, NotionProfile as Z, DBTransactionAdapter as Zn, huggingface as Zt, BetterAuthRateLimitOptions as _, CognitoOptions as _n, initGetIdField as _r, reddit as _t, optionsMiddleware as a, GithubOptions as an, createAdapterFactory as ar, zoom as at, HookEndpointContext as b, getCognitoPublicKey as bn, initGetDefaultModelName as br, tiktok as bt, BetterAuthClientPlugin as c, FigmaOptions as cn, AdapterFactoryCustomizeAdapterCreator as cr, vk as ct, ClientStore as d, FacebookOptions as dn, CreateAdapterOptions as dr, salesforce as dt, getGooglePublicKey as en, Where as er, LoginType as et, AuthContext as f, FacebookProfile as fn, CreateCustomAdapter as fr, RobloxOptions as ft, BetterAuthOptions as g, discord as gn, initGetModelName as gr, RedditProfile as gt, BetterAuthAdvancedOptions as h, DiscordProfile as hn, Prettify as hr, RedditOptions as ht, createAuthMiddleware as i, microsoft as in, createAdapter as ir, ZoomProfile as it, PolarProfile as j, validateAuthorizationCode as jn, User as jr, KickOptions as jt, vercel as k, BetterAuthCookies as kn, Verification as kr, LinearUser as kt, ClientAtomListener as l, FigmaProfile as ln, AdapterFactoryOptions as lr, SalesforceOptions as lt, InternalAdapter as m, DiscordOptions as mn, LiteralUnion as mr, roblox as mt, AuthMiddleware as n, MicrosoftEntraIDProfile as nn, withApplyDefault as nr, PronounOption as nt, StandardSchemaV1$1 as o, GithubProfile as on, AdapterConfig as or, VkOption as ot, GenericEndpointContext as p, facebook as pn, LiteralString as pr, RobloxProfile as pt, KakaoOptions as q, DBAdapterDebugLogOption as qn, ModelNames as qr, SlackProfile as qt, createAuthEndpoint as r, MicrosoftOptions as rn, AdapterFactory as rr, ZoomOptions as rt, BetterAuthClientOptions as s, github as sn, AdapterFactoryConfig as sr, VkProfile as st, AuthEndpoint as t, google as tn, deepmerge as tr, PhoneNumber as tt, ClientFetchOption as u, figma as un, AdapterTestDebugLogs as ur, SalesforceProfile as ut, GenerateIdFn as v, CognitoProfile as vn, initGetFieldName as vr, TiktokOptions as vt, SocialProviders as w, AppleNonConformUser as wn, FieldAttribute as wr, LinkedInOptions as wt, SocialProvider as x, AtlassianOptions as xn, initGetDefaultFieldName as xr, GitlabOptions as xt, BetterAuthPlugin as y, cognito as yn, initGetFieldAttributes as yr, TiktokProfile as yt, paybin as z, createClientCredentialsTokenRequest as zn, accountSchema as zr, twitter as zt };

package/dist/index.d.mts

@@ -1,2 +1,2 @@
-import { On as BetterAuthCookies, _ as BetterAuthRateLimitOptions, b as HookEndpointContext, c as BetterAuthClientPlugin, d as ClientStore, f as AuthContext, fr as LiteralString, g as BetterAuthOptions, h as BetterAuthAdvancedOptions, l as ClientAtomListener, m as InternalAdapter, mr as Prettify, o as StandardSchemaV1, p as GenericEndpointContext, pr as LiteralUnion, s as BetterAuthClientOptions, u as ClientFetchOption, v as GenerateIdFn, y as BetterAuthPlugin } from "./index-BfhTkcnW.mjs";
+import { _ as BetterAuthRateLimitOptions, b as HookEndpointContext, c as BetterAuthClientPlugin, d as ClientStore, f as AuthContext, g as BetterAuthOptions, h as BetterAuthAdvancedOptions, hr as Prettify, kn as BetterAuthCookies, l as ClientAtomListener, m as InternalAdapter, mr as LiteralUnion, o as StandardSchemaV1, p as GenericEndpointContext, pr as LiteralString, s as BetterAuthClientOptions, u as ClientFetchOption, v as GenerateIdFn, y as BetterAuthPlugin } from "./index-Bp1Bfmzt.mjs";
 export { AuthContext, BetterAuthAdvancedOptions, BetterAuthClientOptions, BetterAuthClientPlugin, BetterAuthCookies, BetterAuthOptions, BetterAuthPlugin, BetterAuthRateLimitOptions, ClientAtomListener, ClientFetchOption, ClientStore, GenerateIdFn, GenericEndpointContext, HookEndpointContext, InternalAdapter, LiteralString, LiteralUnion, Prettify, StandardSchemaV1 };

package/dist/oauth2/index.d.mts

@@ -1,2 +1,2 @@
-import { An as validateAuthorizationCode, Bn as OAuth2UserInfo, Fn as refreshAccessToken, Hn as ProviderOptions, In as createAuthorizationURL, Ln as clientCredentialsToken, Mn as generateCodeChallenge, Nn as getOAuth2Tokens, Pn as createRefreshAccessTokenRequest, Rn as createClientCredentialsTokenRequest, Vn as OAuthProvider, jn as validateToken, kn as createAuthorizationCodeRequest, zn as OAuth2Tokens } from "../index-BfhTkcnW.mjs";
+import { An as createAuthorizationCodeRequest, Bn as OAuth2Tokens, Fn as createRefreshAccessTokenRequest, Hn as OAuthProvider, In as refreshAccessToken, Ln as createAuthorizationURL, Mn as validateToken, Nn as generateCodeChallenge, Pn as getOAuth2Tokens, Rn as clientCredentialsToken, Un as ProviderOptions, Vn as OAuth2UserInfo, jn as validateAuthorizationCode, zn as createClientCredentialsTokenRequest } from "../index-Bp1Bfmzt.mjs";
 export { OAuth2Tokens, OAuth2UserInfo, OAuthProvider, ProviderOptions, clientCredentialsToken, createAuthorizationCodeRequest, createAuthorizationURL, createClientCredentialsTokenRequest, createRefreshAccessTokenRequest, generateCodeChallenge, getOAuth2Tokens, refreshAccessToken, validateAuthorizationCode, validateToken };

package/dist/social-providers/index.d.mts

@@ -1,2 +1,2 @@
-import { $ as AccountStatus, $t as GoogleProfile, A as PolarOptions, At as linear, B as LineIdTokenPayload, Bt as TwitchOptions, C as SocialProviderListEnum, Cn as AppleNonConformUser, Ct as gitlab, D as VercelOptions, Dn as getApplePublicKey, Dt as LinearOptions, E as socialProviders, En as apple, Et as linkedin, F as PayPalTokenResponse, Ft as DropboxProfile, G as NaverProfile, Gt as spotify, H as LineUserInfo, Ht as twitch, I as paypal, It as dropbox, J as KakaoProfile, Jt as slack, K as naver, Kt as SlackOptions, L as PaybinOptions, Lt as TwitterOption, M as polar, Mt as KickProfile, N as PayPalOptions, Nt as kick, O as VercelProfile, Ot as LinearProfile, P as PayPalProfile, Pt as DropboxOptions, Q as notion, Qt as GoogleOptions, R as PaybinProfile, Rt as TwitterProfile, S as SocialProviderList, Sn as atlassian, St as GitlabProfile, T as socialProviderList, Tn as AppleProfile, Tt as LinkedInProfile, U as line, Ut as SpotifyOptions, V as LineOptions, Vt as TwitchProfile, W as NaverOptions, Wt as SpotifyProfile, X as NotionOptions, Xt as HuggingFaceProfile, Y as kakao, Yt as HuggingFaceOptions, Z as NotionProfile, Zt as huggingface, _n as CognitoProfile, _t as reddit, an as GithubProfile, at as zoom, bn as AtlassianOptions, bt as tiktok, cn as FigmaProfile, ct as vk, dn as FacebookProfile, dt as salesforce, en as google, et as LoginType, fn as facebook, ft as RobloxOptions, gn as CognitoOptions, gt as RedditProfile, hn as discord, ht as RedditOptions, in as GithubOptions, it as ZoomProfile, j as PolarProfile, jt as KickOptions, k as vercel, kt as LinearUser, ln as figma, lt as SalesforceOptions, mn as DiscordProfile, mt as roblox, nn as MicrosoftOptions, nt as PronounOption, on as github, ot as VkOption, pn as DiscordOptions, pt as RobloxProfile, q as KakaoOptions, qt as SlackProfile, rn as microsoft, rt as ZoomOptions, sn as FigmaOptions, st as VkProfile, tn as MicrosoftEntraIDProfile, tt as PhoneNumber, un as FacebookOptions, ut as SalesforceProfile, vn as cognito, vt as TiktokOptions, w as SocialProviders, wn as AppleOptions, wt as LinkedInOptions, x as SocialProvider, xn as AtlassianProfile, xt as GitlabOptions, yn as getCognitoPublicKey, yt as TiktokProfile, z as paybin, zt as twitter } from "../index-BfhTkcnW.mjs";
-export { AccountStatus, AppleNonConformUser, AppleOptions, AppleProfile, AtlassianOptions, AtlassianProfile, CognitoOptions, CognitoProfile, DiscordOptions, DiscordProfile, DropboxOptions, DropboxProfile, FacebookOptions, FacebookProfile, FigmaOptions, FigmaProfile, GithubOptions, GithubProfile, GitlabOptions, GitlabProfile, GoogleOptions, GoogleProfile, HuggingFaceOptions, HuggingFaceProfile, KakaoOptions, KakaoProfile, KickOptions, KickProfile, LineIdTokenPayload, LineOptions, LineUserInfo, LinearOptions, LinearProfile, LinearUser, LinkedInOptions, LinkedInProfile, LoginType, MicrosoftEntraIDProfile, MicrosoftOptions, NaverOptions, NaverProfile, NotionOptions, NotionProfile, PayPalOptions, PayPalProfile, PayPalTokenResponse, PaybinOptions, PaybinProfile, PhoneNumber, PolarOptions, PolarProfile, PronounOption, RedditOptions, RedditProfile, RobloxOptions, RobloxProfile, SalesforceOptions, SalesforceProfile, SlackOptions, SlackProfile, SocialProvider, SocialProviderList, SocialProviderListEnum, SocialProviders, SpotifyOptions, SpotifyProfile, TiktokOptions, TiktokProfile, TwitchOptions, TwitchProfile, TwitterOption, TwitterProfile, VercelOptions, VercelProfile, VkOption, VkProfile, ZoomOptions, ZoomProfile, apple, atlassian, cognito, discord, dropbox, facebook, figma, getApplePublicKey, getCognitoPublicKey, github, gitlab, google, huggingface, kakao, kick, line, linear, linkedin, microsoft, naver, notion, paybin, paypal, polar, reddit, roblox, salesforce, slack, socialProviderList, socialProviders, spotify, tiktok, twitch, twitter, vercel, vk, zoom };
+import { $ as AccountStatus, $t as GoogleProfile, A as PolarOptions, At as linear, B as LineIdTokenPayload, Bt as TwitchOptions, C as SocialProviderListEnum, Cn as atlassian, Ct as gitlab, D as VercelOptions, Dn as apple, Dt as LinearOptions, E as socialProviders, En as AppleProfile, Et as linkedin, F as PayPalTokenResponse, Ft as DropboxProfile, G as NaverProfile, Gt as spotify, H as LineUserInfo, Ht as twitch, I as paypal, It as dropbox, J as KakaoProfile, Jt as slack, K as naver, Kt as SlackOptions, L as PaybinOptions, Lt as TwitterOption, M as polar, Mt as KickProfile, N as PayPalOptions, Nt as kick, O as VercelProfile, On as getApplePublicKey, Ot as LinearProfile, P as PayPalProfile, Pt as DropboxOptions, Q as notion, Qt as GoogleOptions, R as PaybinProfile, Rt as TwitterProfile, S as SocialProviderList, Sn as AtlassianProfile, St as GitlabProfile, T as socialProviderList, Tn as AppleOptions, Tt as LinkedInProfile, U as line, Ut as SpotifyOptions, V as LineOptions, Vt as TwitchProfile, W as NaverOptions, Wt as SpotifyProfile, X as NotionOptions, Xt as HuggingFaceProfile, Y as kakao, Yt as HuggingFaceOptions, Z as NotionProfile, Zt as huggingface, _n as CognitoOptions, _t as reddit, an as GithubOptions, at as zoom, bn as getCognitoPublicKey, bt as tiktok, cn as FigmaOptions, ct as vk, dn as FacebookOptions, dt as salesforce, en as getGooglePublicKey, et as LoginType, fn as FacebookProfile, ft as RobloxOptions, gn as discord, gt as RedditProfile, hn as DiscordProfile, ht as RedditOptions, in as microsoft, it as ZoomProfile, j as PolarProfile, jt as KickOptions, k as vercel, kt as LinearUser, ln as FigmaProfile, lt as SalesforceOptions, mn as DiscordOptions, mt as roblox, nn as MicrosoftEntraIDProfile, nt as PronounOption, on as GithubProfile, ot as VkOption, pn as facebook, pt as RobloxProfile, q as KakaoOptions, qt as SlackProfile, rn as MicrosoftOptions, rt as ZoomOptions, sn as github, st as VkProfile, tn as google, tt as PhoneNumber, un as figma, ut as SalesforceProfile, vn as CognitoProfile, vt as TiktokOptions, w as SocialProviders, wn as AppleNonConformUser, wt as LinkedInOptions, x as SocialProvider, xn as AtlassianOptions, xt as GitlabOptions, yn as cognito, yt as TiktokProfile, z as paybin, zt as twitter } from "../index-Bp1Bfmzt.mjs";
+export { AccountStatus, AppleNonConformUser, AppleOptions, AppleProfile, AtlassianOptions, AtlassianProfile, CognitoOptions, CognitoProfile, DiscordOptions, DiscordProfile, DropboxOptions, DropboxProfile, FacebookOptions, FacebookProfile, FigmaOptions, FigmaProfile, GithubOptions, GithubProfile, GitlabOptions, GitlabProfile, GoogleOptions, GoogleProfile, HuggingFaceOptions, HuggingFaceProfile, KakaoOptions, KakaoProfile, KickOptions, KickProfile, LineIdTokenPayload, LineOptions, LineUserInfo, LinearOptions, LinearProfile, LinearUser, LinkedInOptions, LinkedInProfile, LoginType, MicrosoftEntraIDProfile, MicrosoftOptions, NaverOptions, NaverProfile, NotionOptions, NotionProfile, PayPalOptions, PayPalProfile, PayPalTokenResponse, PaybinOptions, PaybinProfile, PhoneNumber, PolarOptions, PolarProfile, PronounOption, RedditOptions, RedditProfile, RobloxOptions, RobloxProfile, SalesforceOptions, SalesforceProfile, SlackOptions, SlackProfile, SocialProvider, SocialProviderList, SocialProviderListEnum, SocialProviders, SpotifyOptions, SpotifyProfile, TiktokOptions, TiktokProfile, TwitchOptions, TwitchProfile, TwitterOption, TwitterProfile, VercelOptions, VercelProfile, VkOption, VkProfile, ZoomOptions, ZoomProfile, apple, atlassian, cognito, discord, dropbox, facebook, figma, getApplePublicKey, getCognitoPublicKey, getGooglePublicKey, github, gitlab, google, huggingface, kakao, kick, line, linear, linkedin, microsoft, naver, notion, paybin, paypal, polar, reddit, roblox, salesforce, slack, socialProviderList, socialProviders, spotify, tiktok, twitch, twitter, vercel, vk, zoom };

package/dist/social-providers/index.mjs

@@ -836,9 +836,16 @@ const google = (options) => {
 		async verifyIdToken(token, nonce) {
 			if (options.disableIdTokenSignIn) return false;
 			if (options.verifyIdToken) return options.verifyIdToken(token, nonce);
-			const { data: tokenInfo } = await betterFetch(`https://www.googleapis.com/oauth2/v3/tokeninfo?id_token=${token}`);
-			if (!tokenInfo) return false;
-			return tokenInfo.aud === options.clientId && (tokenInfo.iss === "https://accounts.google.com" || tokenInfo.iss === "accounts.google.com");
+			const { kid, alg: jwtAlg } = decodeProtectedHeader(token);
+			if (!kid || !jwtAlg) return false;
+			const { payload: jwtClaims } = await jwtVerify(token, await getGooglePublicKey(kid), {
+				algorithms: [jwtAlg],
+				issuer: ["https://accounts.google.com", "accounts.google.com"],
+				audience: options.clientId,
+				maxTokenAge: "1h"
+			});
+			if (nonce && jwtClaims.nonce !== nonce) return false;
+			return true;
 		},
 		async getUserInfo(token) {
 			if (options.getUserInfo) return options.getUserInfo(token);
@@ -860,6 +867,13 @@ const google = (options) => {
 		options
 	};
 };
+const getGooglePublicKey = async (kid) => {
+	const { data } = await betterFetch("https://www.googleapis.com/oauth2/v3/certs");
+	if (!data?.keys) throw new APIError("BAD_REQUEST", { message: "Keys not found" });
+	const jwk = data.keys.find((key) => key.kid === kid);
+	if (!jwk) throw new Error(`JWK with kid ${kid} not found`);
+	return await importJWK(jwk, jwk.alg);
+};
 
 //#endregion
 //#region src/social-providers/huggingface.ts
@@ -2577,4 +2591,4 @@ const socialProviderList = Object.keys(socialProviders);
 const SocialProviderListEnum = z.enum(socialProviderList).or(z.string());
 
 //#endregion
-export { SocialProviderListEnum, apple, atlassian, cognito, discord, dropbox, facebook, figma, getApplePublicKey, getCognitoPublicKey, github, gitlab, google, huggingface, kakao, kick, line, linear, linkedin, microsoft, naver, notion, paybin, paypal, polar, reddit, roblox, salesforce, slack, socialProviderList, socialProviders, spotify, tiktok, twitch, twitter, vercel, vk, zoom };
+export { SocialProviderListEnum, apple, atlassian, cognito, discord, dropbox, facebook, figma, getApplePublicKey, getCognitoPublicKey, getGooglePublicKey, github, gitlab, google, huggingface, kakao, kick, line, linear, linkedin, microsoft, naver, notion, paybin, paypal, polar, reddit, roblox, salesforce, slack, socialProviderList, socialProviders, spotify, tiktok, twitch, twitter, vercel, vk, zoom };

package/package.json

@@ -1,15 +1,16 @@
 {
   "name": "@better-auth/core",
-  "version": "1.4.6-beta.3",
+  "version": "1.4.6-beta.4",
   "description": "The most comprehensive authentication framework for TypeScript.",
   "type": "module",
   "repository": {
     "type": "git",
-    "url": "https://github.com/better-auth/better-auth",
+    "url": "git+https://github.com/better-auth/better-auth.git",
     "directory": "packages/core"
   },
   "main": "./dist/index.mjs",
   "module": "./dist/index.mjs",
+  "types": "./dist/index.d.mts",
   "exports": {
     ".": {
       "dev-source": "./src/index.ts",
@@ -107,7 +108,7 @@
   "devDependencies": {
     "@better-auth/utils": "0.3.0",
     "@better-fetch/fetch": "1.1.18",
-    "better-call": "1.1.4",
+    "better-call": "1.1.5",
     "jose": "^6.1.0",
     "kysely": "^0.28.5",
     "nanostores": "^1.0.1",
@@ -120,7 +121,7 @@
   "peerDependencies": {
     "@better-auth/utils": "0.3.0",
     "@better-fetch/fetch": "1.1.18",
-    "better-call": "1.1.4",
+    "better-call": "1.1.5",
     "jose": "^6.1.0",
     "kysely": "^0.28.5",
     "nanostores": "^1.0.1"
@@ -130,6 +131,7 @@
     "dev": "tsdown --watch",
     "lint:package": "publint run --strict",
     "typecheck": "tsc --project tsconfig.json",
-    "test": "vitest"
+    "test": "vitest",
+    "coverage": "vitest run --coverage"
   }
 }

package/src/db/adapter/factory.ts

@@ -1,4 +1,4 @@
-import { getColorDepth, logger, TTY_COLORS } from "../../env";
+import { createLogger, getColorDepth, TTY_COLORS } from "../../env";
 import { BetterAuthError } from "../../error";
 import type { BetterAuthOptions } from "../../types";
 import { safeJSONParse } from "../../utils/json";
@@ -64,11 +64,13 @@ export const createAdapterFactory =
 			adapterName: cfg.adapterName ?? cfg.adapterId,
 			supportsNumericIds: cfg.supportsNumericIds ?? true,
 			supportsUUIDs: cfg.supportsUUIDs ?? false,
+			supportsArrays: cfg.supportsArrays ?? false,
 			transaction: cfg.transaction ?? false,
 			disableTransformInput: cfg.disableTransformInput ?? false,
 			disableTransformOutput: cfg.disableTransformOutput ?? false,
 			disableTransformJoin: cfg.disableTransformJoin ?? false,
 		} satisfies AdapterFactoryConfig;
+
 		const useNumberId =
 			options.advanced?.database?.useNumberId === true ||
 			options.advanced?.database?.generateId === "serial";
@@ -83,6 +85,7 @@ export const createAdapterFactory =
 
 		const debugLog = (...args: any[]) => {
 			if (config.debugLogs === true || typeof config.debugLogs === "object") {
+				const logger = createLogger({ level: "info" });
 				// If we're running adapter tests, we'll keep debug logs in memory, then print them out if a test fails.
 				if (
 					typeof config.debugLogs === "object" &&
@@ -138,6 +141,8 @@ export const createAdapterFactory =
 			}
 		};
 
+		const logger = createLogger(options.logger);
+
 		const getDefaultModelName = initGetDefaultModelName({
 			usePlural: config.usePlural,
 			schema,
@@ -248,7 +253,7 @@ export const createAdapterFactory =
 				) {
 					newValue = JSON.stringify(newValue);
 				} else if (
-					config.supportsJSON === false &&
+					config.supportsArrays === false &&
 					Array.isArray(newValue) &&
 					(fieldAttributes!.type === "string[]" ||
 						fieldAttributes!.type === "number[]")
@@ -343,7 +348,7 @@ export const createAdapterFactory =
 						) {
 							newValue = safeJSONParse(newValue);
 						} else if (
-							config.supportsJSON === false &&
+							config.supportsArrays === false &&
 							typeof newValue === "string" &&
 							(field.type === "string[]" || field.type === "number[]")
 						) {
@@ -1358,5 +1363,6 @@ function formatAction(action: string) {
 
 /**
  * @deprecated Use `createAdapterFactory` instead. This export will be removed in a future version.
+ * @alias
  */
 export const createAdapter = createAdapterFactory;

package/src/db/adapter/index.ts

@@ -112,6 +112,14 @@ export interface DBAdapterFactoryConfig<
 	 * @default true
 	 */
 	supportsBooleans?: boolean | undefined;
+	/**
+	 * If the database doesn't support arrays, set this to `false`.
+	 *
+	 * We will handle the translation between using `array`s, and saving `string`s to the database.
+	 *
+	 * @default false
+	 */
+	supportsArrays?: boolean | undefined;
 	/**
 	 * Execute multiple operations in a transaction.
 	 *

package/src/env/logger.ts

@@ -55,12 +55,10 @@ export interface Logger {
 		| undefined;
 }
 
-export type LogHandlerParams = Parameters<NonNullable<Logger["log"]>> extends [
-	LogLevel,
-	...infer Rest,
-]
-	? Rest
-	: never;
+export type LogHandlerParams =
+	Parameters<NonNullable<Logger["log"]>> extends [LogLevel, ...infer Rest]
+		? Rest
+		: never;
 
 const levelColors: Record<LogLevel, string> = {
 	info: TTY_COLORS.fg.blue,

package/src/social-providers/google.ts

@@ -1,5 +1,6 @@
 import { betterFetch } from "@better-fetch/fetch";
-import { decodeJwt } from "jose";
+import { APIError } from "better-call";
+import { decodeJwt, decodeProtectedHeader, importJWK, jwtVerify } from "jose";
 import { logger } from "../env";
 import { BetterAuthError } from "../error";
 import type { OAuthProvider, ProviderOptions } from "../oauth2";
@@ -126,24 +127,26 @@ export const google = (options: GoogleOptions) => {
 			if (options.verifyIdToken) {
 				return options.verifyIdToken(token, nonce);
 			}
-			const googlePublicKeyUrl = `https://www.googleapis.com/oauth2/v3/tokeninfo?id_token=${token}`;
-			const { data: tokenInfo } = await betterFetch<{
-				aud: string;
-				iss: string;
-				email: string;
-				email_verified: boolean;
-				name: string;
-				picture: string;
-				sub: string;
-			}>(googlePublicKeyUrl);
-			if (!tokenInfo) {
+
+			// Verify JWT integrity
+			// See https://developers.google.com/identity/sign-in/web/backend-auth#verify-the-integrity-of-the-id-token
+
+			const { kid, alg: jwtAlg } = decodeProtectedHeader(token);
+			if (!kid || !jwtAlg) return false;
+
+			const publicKey = await getGooglePublicKey(kid);
+			const { payload: jwtClaims } = await jwtVerify(token, publicKey, {
+				algorithms: [jwtAlg],
+				issuer: ["https://accounts.google.com", "accounts.google.com"],
+				audience: options.clientId,
+				maxTokenAge: "1h",
+			});
+
+			if (nonce && jwtClaims.nonce !== nonce) {
 				return false;
 			}
-			const isValid =
-				tokenInfo.aud === options.clientId &&
-				(tokenInfo.iss === "https://accounts.google.com" ||
-					tokenInfo.iss === "accounts.google.com");
-			return isValid;
+
+			return true;
 		},
 		async getUserInfo(token) {
 			if (options.getUserInfo) {
@@ -169,3 +172,29 @@ export const google = (options: GoogleOptions) => {
 		options,
 	} satisfies OAuthProvider<GoogleProfile>;
 };
+
+export const getGooglePublicKey = async (kid: string) => {
+	const { data } = await betterFetch<{
+		keys: Array<{
+			kid: string;
+			alg: string;
+			kty: string;
+			use: string;
+			n: string;
+			e: string;
+		}>;
+	}>("https://www.googleapis.com/oauth2/v3/certs");
+
+	if (!data?.keys) {
+		throw new APIError("BAD_REQUEST", {
+			message: "Keys not found",
+		});
+	}
+
+	const jwk = data.keys.find((key) => key.kid === kid);
+	if (!jwk) {
+		throw new Error(`JWK with kid ${kid} not found`);
+	}
+
+	return await importJWK(jwk, jwk.alg);
+};

package/src/types/init-options.ts

@@ -995,7 +995,7 @@ export type BetterAuthOptions = {
 						 */
 						before?: (
 							user: User & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<
 							| boolean
 							| void
@@ -1008,7 +1008,7 @@ export type BetterAuthOptions = {
 						 */
 						after?: (
 							user: User & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<void>;
 					};
 					update?: {
@@ -1019,7 +1019,7 @@ export type BetterAuthOptions = {
 						 */
 						before?: (
 							user: Partial<User> & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<
 							| boolean
 							| void
@@ -1032,7 +1032,7 @@ export type BetterAuthOptions = {
 						 */
 						after?: (
 							user: User & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<void>;
 					};
 					delete?: {
@@ -1042,14 +1042,14 @@ export type BetterAuthOptions = {
 						 */
 						before?: (
 							user: User & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<boolean | void>;
 						/**
 						 * Hook that is called after a user is deleted.
 						 */
 						after?: (
 							user: User & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<void>;
 					};
 				};
@@ -1065,7 +1065,7 @@ export type BetterAuthOptions = {
 						 */
 						before?: (
 							session: Session & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<
 							| boolean
 							| void
@@ -1078,7 +1078,7 @@ export type BetterAuthOptions = {
 						 */
 						after?: (
 							session: Session & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<void>;
 					};
 					/**
@@ -1092,7 +1092,7 @@ export type BetterAuthOptions = {
 						 */
 						before?: (
 							session: Partial<Session> & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<
 							| boolean
 							| void
@@ -1105,7 +1105,7 @@ export type BetterAuthOptions = {
 						 */
 						after?: (
 							session: Session & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<void>;
 					};
 					delete?: {
@@ -1115,14 +1115,14 @@ export type BetterAuthOptions = {
 						 */
 						before?: (
 							session: Session & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<boolean | void>;
 						/**
 						 * Hook that is called after a session is deleted.
 						 */
 						after?: (
 							session: Session & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<void>;
 					};
 				};
@@ -1138,7 +1138,7 @@ export type BetterAuthOptions = {
 						 */
 						before?: (
 							account: Account,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<
 							| boolean
 							| void
@@ -1151,7 +1151,7 @@ export type BetterAuthOptions = {
 						 */
 						after?: (
 							account: Account,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<void>;
 					};
 					/**
@@ -1165,7 +1165,7 @@ export type BetterAuthOptions = {
 						 */
 						before?: (
 							account: Partial<Account> & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<
 							| boolean
 							| void
@@ -1178,7 +1178,7 @@ export type BetterAuthOptions = {
 						 */
 						after?: (
 							account: Account & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<void>;
 					};
 					delete?: {
@@ -1188,14 +1188,14 @@ export type BetterAuthOptions = {
 						 */
 						before?: (
 							account: Account & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<boolean | void>;
 						/**
 						 * Hook that is called after an account is deleted.
 						 */
 						after?: (
 							account: Account & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<void>;
 					};
 				};
@@ -1211,7 +1211,7 @@ export type BetterAuthOptions = {
 						 */
 						before?: (
 							verification: Verification & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<
 							| boolean
 							| void
@@ -1224,7 +1224,7 @@ export type BetterAuthOptions = {
 						 */
 						after?: (
 							verification: Verification & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<void>;
 					};
 					update?: {
@@ -1235,7 +1235,7 @@ export type BetterAuthOptions = {
 						 */
 						before?: (
 							verification: Partial<Verification> & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<
 							| boolean
 							| void
@@ -1248,7 +1248,7 @@ export type BetterAuthOptions = {
 						 */
 						after?: (
 							verification: Verification & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<void>;
 					};
 					delete?: {
@@ -1258,14 +1258,14 @@ export type BetterAuthOptions = {
 						 */
 						before?: (
 							verification: Verification & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<boolean | void>;
 						/**
 						 * Hook that is called after a verification is deleted.
 						 */
 						after?: (
 							verification: Verification & Record<string, unknown>,
-							context?: GenericEndpointContext,
+							context: GenericEndpointContext | null,
 						) => Promise<void>;
 					};
 				};