@better-auth/core 1.5.0-beta.9 → 1.5.0

package/src/types/plugin.ts

@@ -7,6 +7,7 @@ import type {
 import type { Migration } from "kysely";
 import type { AuthMiddleware } from "../api";
 import type { BetterAuthPluginDBSchema } from "../db";
+import type { RawError } from "../utils/error-codes";
 import type { AuthContext } from "./context";
 import type { Awaitable, LiteralString } from "./helper";
 import type { BetterAuthOptions } from "./init-options";
@@ -28,7 +29,14 @@ export type HookEndpointContext = Partial<
 	headers?: Headers | undefined;
 };
 
-export type BetterAuthPlugin = {
+export type BetterAuthPluginErrorCodePart = {
+	/**
+	 * The error codes returned by the plugin
+	 */
+	$ERROR_CODES?: Record<string, RawError>;
+};
+
+export type BetterAuthPlugin = BetterAuthPluginErrorCodePart & {
 	id: LiteralString;
 	/**
 	 * The init function is called when the plugin is initialized.
@@ -37,7 +45,8 @@ export type BetterAuthPlugin = {
 	init?:
 		| ((ctx: AuthContext) =>
 				| Awaitable<{
-						context?: DeepPartial<Omit<AuthContext, "options">>;
+						context?: DeepPartial<Omit<AuthContext, "options">> &
+							Record<string, unknown>;
 						options?: Partial<BetterAuthOptions>;
 				  }>
 				| void
@@ -142,10 +151,6 @@ export type BetterAuthPlugin = {
 				pathMatcher: (path: string) => boolean;
 		  }[]
 		| undefined;
-	/**
-	 * The error codes returned by the plugin
-	 */
-	$ERROR_CODES?: Record<string, { code: string; message: string }> | undefined;
 	/**
 	 * All database operations that are performed by the plugin
 	 *

package/src/types/secret.ts

@@ -0,0 +1,8 @@
+export interface SecretConfig {
+	/** Map of version number → secret value */
+	keys: Map<number, string>;
+	/** Version to use for new encryption (first entry in secrets array) */
+	currentVersion: number;
+	/** Legacy secret for bare-hex fallback (from BETTER_AUTH_SECRET) */
+	legacySecret?: string;
+}

package/src/utils/db.ts

@@ -0,0 +1,20 @@
+import type { DBFieldAttribute } from "../db";
+
+/**
+ * Filters output data by removing fields with the `returned: false` attribute.
+ * This ensures sensitive fields are not exposed in API responses.
+ */
+export function filterOutputFields<T extends Record<string, unknown> | null>(
+	data: T,
+	additionalFields: Record<string, DBFieldAttribute> | undefined,
+): T {
+	if (!data || !additionalFields) {
+		return data;
+	}
+	const returnFiltered = Object.entries(additionalFields)
+		.filter(([, { returned }]) => returned === false)
+		.map(([key]) => key);
+	return Object.entries(structuredClone(data))
+		.filter(([key]) => !returnFiltered.includes(key))
+		.reduce((acc, [key, value]) => ({ ...acc, [key]: value }), {} as T);
+}

package/src/utils/deprecate.test.ts

@@ -36,7 +36,6 @@ describe("deprecate", () => {
 		deprecatedFn();
 
 		expect(consoleWarn).toHaveBeenCalledWith("[Deprecation] test message");
-		consoleWarn.mockRestore();
 	});
 
 	it("should pass arguments and return value correctly", () => {

package/src/utils/error-codes.ts

@@ -44,21 +44,24 @@ type ValidateErrorCodes<T> = {
 		: T[K];
 };
 
-export function defineErrorCodes<const T extends Record<string, string>>(
-	codes: ValidateErrorCodes<T>,
-): {
-	[K in keyof T]: {
-		code: K;
-		message: T[K];
-	};
-} {
+export type RawError<K extends string = string> = {
+	readonly code: K;
+	message: string;
+};
+
+export function defineErrorCodes<
+	const T extends Record<string, string>,
+	R extends {
+		[K in keyof T & string]: RawError<K>;
+	},
+>(codes: ValidateErrorCodes<T>): R {
 	return Object.fromEntries(
 		Object.entries(codes).map(([key, value]) => [
 			key,
 			{
 				code: key,
 				message: value,
-				toString: () => value,
+				toString: () => key,
 			},
 		]),
 	) as any;

package/.turbo/turbo-build.log

@@ -1,182 +0,0 @@
-
-> @better-auth/core@1.5.0-beta.9 build /home/runner/work/better-auth/better-auth/packages/core
-> tsdown
-
-ℹ tsdown v0.19.0 powered by rolldown v1.0.0-beta.59
-ℹ config file: /home/runner/work/better-auth/better-auth/packages/core/tsdown.config.ts 
-ℹ entry: src/index.ts, src/api/index.ts, src/async_hooks/index.ts, src/async_hooks/pure.index.ts, src/context/index.ts, src/db/index.ts, src/env/index.ts, src/error/index.ts, src/oauth2/index.ts, src/social-providers/index.ts, src/utils/deprecate.ts, src/utils/error-codes.ts, src/utils/id.ts, src/utils/ip.ts, src/utils/json.ts, src/utils/string.ts, src/utils/url.ts, src/db/adapter/index.ts
-ℹ tsconfig: tsconfig.json
-ℹ Build start
-ℹ dist/utils/ip.mjs                                3.81 kB │ gzip: 1.29 kB
-ℹ dist/social-providers/index.mjs                  2.32 kB │ gzip: 0.72 kB
-ℹ dist/api/index.mjs                               1.27 kB │ gzip: 0.48 kB
-ℹ dist/utils/url.mjs                               1.14 kB │ gzip: 0.51 kB
-ℹ dist/async_hooks/index.mjs                       1.03 kB │ gzip: 0.54 kB
-ℹ dist/async_hooks/pure.index.mjs                  0.99 kB │ gzip: 0.49 kB
-ℹ dist/oauth2/index.mjs                            0.87 kB │ gzip: 0.27 kB
-ℹ dist/context/index.mjs                           0.85 kB │ gzip: 0.25 kB
-ℹ dist/db/adapter/index.mjs                        0.71 kB │ gzip: 0.22 kB
-ℹ dist/error/index.mjs                             0.69 kB │ gzip: 0.33 kB
-ℹ dist/utils/json.mjs                              0.59 kB │ gzip: 0.35 kB
-ℹ dist/db/index.mjs                                0.50 kB │ gzip: 0.18 kB
-ℹ dist/env/index.mjs                               0.43 kB │ gzip: 0.21 kB
-ℹ dist/utils/deprecate.mjs                         0.36 kB │ gzip: 0.24 kB
-ℹ dist/utils/error-codes.mjs                       0.26 kB │ gzip: 0.19 kB
-ℹ dist/utils/id.mjs                                0.24 kB │ gzip: 0.18 kB
-ℹ dist/utils/string.mjs                            0.17 kB │ gzip: 0.14 kB
-ℹ dist/index.mjs                                   0.01 kB │ gzip: 0.03 kB
-ℹ dist/db/adapter/factory.mjs                     30.11 kB │ gzip: 5.99 kB
-ℹ dist/db/get-tables.mjs                           6.89 kB │ gzip: 1.30 kB
-ℹ dist/social-providers/cognito.mjs                5.90 kB │ gzip: 1.93 kB
-ℹ dist/social-providers/paypal.mjs                 5.03 kB │ gzip: 1.48 kB
-ℹ dist/social-providers/apple.mjs                  3.77 kB │ gzip: 1.36 kB
-ℹ dist/social-providers/google.mjs                 3.75 kB │ gzip: 1.38 kB
-ℹ dist/oauth2/verify.mjs                           3.74 kB │ gzip: 1.32 kB
-ℹ dist/social-providers/facebook.mjs               3.57 kB │ gzip: 1.27 kB
-ℹ dist/social-providers/line.mjs                   3.57 kB │ gzip: 1.20 kB
-ℹ dist/social-providers/salesforce.mjs             3.50 kB │ gzip: 1.12 kB
-ℹ dist/social-providers/microsoft-entra-id.mjs     3.46 kB │ gzip: 1.22 kB
-ℹ dist/oauth2/validate-authorization-code.mjs      2.80 kB │ gzip: 1.03 kB
-ℹ dist/social-providers/figma.mjs                  2.78 kB │ gzip: 0.99 kB
-ℹ dist/social-providers/atlassian.mjs              2.75 kB │ gzip: 0.99 kB
-ℹ dist/social-providers/twitter.mjs                2.74 kB │ gzip: 0.92 kB
-ℹ dist/env/color-depth.mjs                         2.72 kB │ gzip: 0.99 kB
-ℹ dist/social-providers/paybin.mjs                 2.65 kB │ gzip: 0.97 kB
-ℹ dist/social-providers/gitlab.mjs                 2.65 kB │ gzip: 0.96 kB
-ℹ dist/db/adapter/get-id-field.mjs                 2.63 kB │ gzip: 0.98 kB
-ℹ dist/social-providers/reddit.mjs                 2.63 kB │ gzip: 1.01 kB
-ℹ dist/social-providers/discord.mjs                2.62 kB │ gzip: 1.04 kB
-ℹ dist/social-providers/github.mjs                 2.61 kB │ gzip: 0.91 kB
-ℹ dist/context/transaction.mjs                     2.59 kB │ gzip: 0.83 kB
-ℹ dist/social-providers/vk.mjs                     2.59 kB │ gzip: 0.94 kB
-ℹ dist/env/env-impl.mjs                            2.58 kB │ gzip: 0.90 kB
-ℹ dist/error/codes.mjs                             2.56 kB │ gzip: 1.05 kB
-ℹ dist/env/logger.mjs                              2.42 kB │ gzip: 0.94 kB
-ℹ dist/social-providers/linear.mjs                 2.42 kB │ gzip: 0.90 kB
-ℹ dist/social-providers/dropbox.mjs                2.35 kB │ gzip: 0.86 kB
-ℹ dist/social-providers/kakao.mjs                  2.31 kB │ gzip: 0.84 kB
-ℹ dist/social-providers/notion.mjs                 2.28 kB │ gzip: 0.86 kB
-ℹ dist/social-providers/zoom.mjs                   2.27 kB │ gzip: 0.89 kB
-ℹ dist/social-providers/tiktok.mjs                 2.27 kB │ gzip: 0.88 kB
-ℹ dist/social-providers/slack.mjs                  2.25 kB │ gzip: 0.84 kB
-ℹ dist/social-providers/huggingface.mjs            2.22 kB │ gzip: 0.79 kB
-ℹ dist/social-providers/twitch.mjs                 2.20 kB │ gzip: 0.78 kB
-ℹ dist/social-providers/linkedin.mjs               2.19 kB │ gzip: 0.80 kB
-ℹ dist/social-providers/polar.mjs                  2.19 kB │ gzip: 0.79 kB
-ℹ dist/social-providers/roblox.mjs                 2.17 kB │ gzip: 0.87 kB
-ℹ dist/oauth2/refresh-access-token.mjs             2.15 kB │ gzip: 0.85 kB
-ℹ dist/social-providers/spotify.mjs                2.13 kB │ gzip: 0.78 kB
-ℹ dist/social-providers/naver.mjs                  2.10 kB │ gzip: 0.79 kB
-ℹ dist/social-providers/kick.mjs                   2.08 kB │ gzip: 0.77 kB
-ℹ dist/social-providers/vercel.mjs                 1.91 kB │ gzip: 0.74 kB
-ℹ dist/oauth2/create-authorization-url.mjs         1.86 kB │ gzip: 0.73 kB
-ℹ dist/oauth2/client-credentials-token.mjs         1.83 kB │ gzip: 0.77 kB
-ℹ dist/context/request-state.mjs                   1.63 kB │ gzip: 0.59 kB
-ℹ dist/db/adapter/get-default-field-name.mjs       1.41 kB │ gzip: 0.66 kB
-ℹ dist/db/adapter/get-default-model-name.mjs       1.40 kB │ gzip: 0.65 kB
-ℹ dist/context/endpoint-context.mjs                1.31 kB │ gzip: 0.53 kB
-ℹ dist/db/adapter/get-field-attributes.mjs         1.26 kB │ gzip: 0.46 kB
-ℹ dist/db/adapter/utils.mjs                        1.15 kB │ gzip: 0.46 kB
-ℹ dist/db/adapter/get-field-name.mjs               1.07 kB │ gzip: 0.47 kB
-ℹ dist/oauth2/utils.mjs                            0.98 kB │ gzip: 0.50 kB
-ℹ dist/context/global.mjs                          0.96 kB │ gzip: 0.48 kB
-ℹ dist/db/adapter/get-model-name.mjs               0.89 kB │ gzip: 0.42 kB
-ℹ dist/db/schema/account.mjs                       0.52 kB │ gzip: 0.24 kB
-ℹ dist/db/schema/user.mjs                          0.33 kB │ gzip: 0.23 kB
-ℹ dist/db/schema/session.mjs                       0.33 kB │ gzip: 0.21 kB
-ℹ dist/db/schema/shared.mjs                        0.28 kB │ gzip: 0.19 kB
-ℹ dist/db/schema/verification.mjs                  0.27 kB │ gzip: 0.19 kB
-ℹ dist/db/schema/rate-limit.mjs                    0.21 kB │ gzip: 0.17 kB
-ℹ dist/social-providers/index.d.mts               45.59 kB │ gzip: 3.09 kB
-ℹ dist/db/adapter/index.d.mts                     15.17 kB │ gzip: 3.60 kB
-ℹ dist/api/index.d.mts                             7.54 kB │ gzip: 1.45 kB
-ℹ dist/utils/ip.d.mts                              1.58 kB │ gzip: 0.68 kB
-ℹ dist/index.d.mts                                 1.36 kB │ gzip: 0.38 kB
-ℹ dist/oauth2/index.d.mts                          1.05 kB │ gzip: 0.32 kB
-ℹ dist/db/index.d.mts                              1.04 kB │ gzip: 0.34 kB
-ℹ dist/context/index.d.mts                         0.97 kB │ gzip: 0.28 kB
-ℹ dist/utils/error-codes.d.mts                     0.89 kB │ gzip: 0.45 kB
-ℹ dist/utils/url.d.mts                             0.84 kB │ gzip: 0.40 kB
-ℹ dist/error/index.d.mts                           0.75 kB │ gzip: 0.34 kB
-ℹ dist/env/index.d.mts                             0.58 kB │ gzip: 0.27 kB
-ℹ dist/utils/deprecate.d.mts                       0.30 kB │ gzip: 0.22 kB
-ℹ dist/async_hooks/index.d.mts                     0.24 kB │ gzip: 0.16 kB
-ℹ dist/async_hooks/pure.index.d.mts                0.22 kB │ gzip: 0.16 kB
-ℹ dist/utils/string.d.mts                          0.14 kB │ gzip: 0.12 kB
-ℹ dist/utils/json.d.mts                            0.13 kB │ gzip: 0.13 kB
-ℹ dist/utils/id.d.mts                              0.12 kB │ gzip: 0.12 kB
-ℹ dist/types/init-options.d.mts                   38.97 kB │ gzip: 8.80 kB
-ℹ dist/types/context.d.mts                        10.15 kB │ gzip: 2.97 kB
-ℹ dist/social-providers/zoom.d.mts                 6.71 kB │ gzip: 2.29 kB
-ℹ dist/oauth2/oauth-provider.d.mts                 5.92 kB │ gzip: 1.67 kB
-ℹ dist/social-providers/microsoft-entra-id.d.mts   5.59 kB │ gzip: 1.96 kB
-ℹ dist/error/codes.d.mts                           5.49 kB │ gzip: 1.29 kB
-ℹ dist/db/adapter/types.d.mts                      5.42 kB │ gzip: 1.57 kB
-ℹ dist/social-providers/tiktok.d.mts               5.34 kB │ gzip: 1.34 kB
-ℹ dist/social-providers/kakao.d.mts                4.92 kB │ gzip: 1.27 kB
-ℹ dist/social-providers/twitter.d.mts              4.77 kB │ gzip: 1.43 kB
-ℹ dist/db/type.d.mts                               3.89 kB │ gzip: 1.28 kB
-ℹ dist/social-providers/apple.d.mts                3.85 kB │ gzip: 1.50 kB
-ℹ dist/types/plugin-client.d.mts                   3.76 kB │ gzip: 1.45 kB
-ℹ dist/social-providers/discord.d.mts              3.72 kB │ gzip: 1.24 kB
-ℹ dist/types/plugin.d.mts                          3.66 kB │ gzip: 1.33 kB
-ℹ dist/social-providers/paypal.d.mts               3.35 kB │ gzip: 0.99 kB
-ℹ dist/social-providers/gitlab.d.mts               2.95 kB │ gzip: 0.92 kB
-ℹ dist/social-providers/line.d.mts                 2.61 kB │ gzip: 0.80 kB
-ℹ dist/social-providers/google.d.mts               2.48 kB │ gzip: 0.87 kB
-ℹ dist/social-providers/naver.d.mts                2.42 kB │ gzip: 0.77 kB
-ℹ dist/social-providers/slack.d.mts                2.39 kB │ gzip: 0.72 kB
-ℹ dist/social-providers/github.d.mts               2.38 kB │ gzip: 0.79 kB
-ℹ dist/social-providers/cognito.d.mts              2.33 kB │ gzip: 0.82 kB
-ℹ dist/social-providers/salesforce.d.mts           2.15 kB │ gzip: 0.81 kB
-ℹ dist/social-providers/huggingface.d.mts          2.13 kB │ gzip: 0.72 kB
-ℹ dist/social-providers/polar.d.mts                2.04 kB │ gzip: 0.66 kB
-ℹ dist/social-providers/roblox.d.mts               2.02 kB │ gzip: 0.73 kB
-ℹ dist/social-providers/facebook.d.mts             1.95 kB │ gzip: 0.74 kB
-ℹ dist/env/logger.d.mts                            1.86 kB │ gzip: 0.67 kB
-ℹ dist/social-providers/twitch.d.mts               1.84 kB │ gzip: 0.69 kB
-ℹ dist/social-providers/paybin.d.mts               1.80 kB │ gzip: 0.66 kB
-ℹ dist/social-providers/atlassian.d.mts            1.78 kB │ gzip: 0.62 kB
-ℹ dist/oauth2/verify.d.mts                         1.77 kB │ gzip: 0.66 kB
-ℹ dist/social-providers/dropbox.d.mts              1.72 kB │ gzip: 0.64 kB
-ℹ dist/social-providers/vk.d.mts                   1.67 kB │ gzip: 0.62 kB
-ℹ dist/social-providers/kick.d.mts                 1.62 kB │ gzip: 0.59 kB
-ℹ dist/social-providers/linkedin.d.mts             1.61 kB │ gzip: 0.60 kB
-ℹ dist/social-providers/linear.d.mts               1.60 kB │ gzip: 0.59 kB
-ℹ dist/oauth2/validate-authorization-code.d.mts    1.57 kB │ gzip: 0.49 kB
-ℹ dist/social-providers/notion.d.mts               1.56 kB │ gzip: 0.59 kB
-ℹ dist/social-providers/reddit.d.mts               1.54 kB │ gzip: 0.57 kB
-ℹ dist/social-providers/spotify.d.mts              1.51 kB │ gzip: 0.56 kB
-ℹ dist/social-providers/vercel.d.mts               1.47 kB │ gzip: 0.55 kB
-ℹ dist/social-providers/figma.d.mts                1.47 kB │ gzip: 0.55 kB
-ℹ dist/context/request-state.d.mts                 1.35 kB │ gzip: 0.59 kB
-ℹ dist/db/adapter/factory.d.mts                    1.30 kB │ gzip: 0.45 kB
-ℹ dist/env/env-impl.d.mts                          1.26 kB │ gzip: 0.47 kB
-ℹ dist/context/transaction.d.mts                   1.21 kB │ gzip: 0.51 kB
-ℹ dist/oauth2/create-authorization-url.d.mts       1.05 kB │ gzip: 0.41 kB
-ℹ dist/db/schema/account.d.mts                     1.05 kB │ gzip: 0.43 kB
-ℹ dist/db/adapter/get-id-field.d.mts               1.04 kB │ gzip: 0.47 kB
-ℹ dist/oauth2/refresh-access-token.d.mts           1.01 kB │ gzip: 0.41 kB
-ℹ dist/context/endpoint-context.d.mts              0.99 kB │ gzip: 0.43 kB
-ℹ dist/oauth2/client-credentials-token.d.mts       0.91 kB │ gzip: 0.36 kB
-ℹ dist/types/index.d.mts                           0.86 kB │ gzip: 0.34 kB
-ℹ dist/db/schema/session.d.mts                     0.75 kB │ gzip: 0.40 kB
-ℹ dist/db/adapter/get-field-attributes.d.mts       0.72 kB │ gzip: 0.34 kB
-ℹ dist/db/schema/user.d.mts                        0.71 kB │ gzip: 0.40 kB
-ℹ dist/db/schema/verification.d.mts                0.66 kB │ gzip: 0.36 kB
-ℹ dist/types/helper.d.mts                          0.45 kB │ gzip: 0.27 kB
-ℹ dist/types/cookie.d.mts                          0.38 kB │ gzip: 0.20 kB
-ℹ dist/db/adapter/get-default-field-name.d.mts     0.38 kB │ gzip: 0.24 kB
-ℹ dist/db/schema/rate-limit.d.mts                  0.37 kB │ gzip: 0.25 kB
-ℹ dist/db/adapter/get-field-name.d.mts             0.36 kB │ gzip: 0.23 kB
-ℹ dist/db/adapter/utils.d.mts                      0.33 kB │ gzip: 0.23 kB
-ℹ dist/db/adapter/get-default-model-name.d.mts     0.32 kB │ gzip: 0.22 kB
-ℹ dist/db/plugin.d.mts                             0.32 kB │ gzip: 0.22 kB
-ℹ dist/oauth2/utils.d.mts                          0.30 kB │ gzip: 0.20 kB
-ℹ dist/db/adapter/get-model-name.d.mts             0.30 kB │ gzip: 0.21 kB
-ℹ dist/db/get-tables.d.mts                         0.29 kB │ gzip: 0.18 kB
-ℹ dist/db/schema/shared.d.mts                      0.25 kB │ gzip: 0.18 kB
-ℹ dist/context/global.d.mts                        0.20 kB │ gzip: 0.16 kB
-ℹ dist/env/color-depth.d.mts                       0.12 kB │ gzip: 0.11 kB
-ℹ 171 files, total: 454.58 kB
-✔ Build complete in 6303ms

package/tsconfig.json

@@ -1,7 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "lib": ["esnext", "dom", "dom.iterable"],
-    "types": ["node"]
-  }
-}

package/tsdown.config.ts

@@ -1,32 +0,0 @@
-import { readFile } from "node:fs/promises";
-import { defineConfig } from "tsdown";
-
-const packageJson = JSON.parse(
-	await readFile(new URL("./package.json", import.meta.url), "utf-8"),
-);
-
-export default defineConfig({
-	dts: { build: true, incremental: true },
-	format: ["esm"],
-	entry: [
-		"./src/index.ts",
-		"./src/db/index.ts",
-		"./src/db/adapter/index.ts",
-		"./src/async_hooks/index.ts",
-		"./src/async_hooks/pure.index.ts",
-		"./src/context/index.ts",
-		"./src/env/index.ts",
-		"./src/oauth2/index.ts",
-		"./src/api/index.ts",
-		"./src/social-providers/index.ts",
-		"./src/utils/*.ts",
-		"!./src/utils/*.test.ts",
-		"./src/error/index.ts",
-	],
-	external: ["@better-auth/core/async_hooks"],
-	env: {
-		BETTER_AUTH_VERSION: packageJson.version,
-	},
-	unbundle: true,
-	clean: true,
-});

package/vitest.config.ts

@@ -1,3 +0,0 @@
-import { defineProject } from "vitest/config";
-
-export default defineProject({});