@better-auth/core 1.6.23 → 1.6.24

package/dist/social-providers/cognito.d.mts

@@ -1,4 +1,7 @@
+import { GenericEndpointContext } from "../types/context.mjs";
+import "../types/index.mjs";
 import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
+import "../oauth2/index.mjs";
 //#region src/social-providers/cognito.d.ts
 interface CognitoProfile {
   sub: string;
@@ -34,12 +37,7 @@ interface CognitoOptions extends ProviderOptions<CognitoProfile> {
 declare const cognito: (options: CognitoOptions) => {
   id: "cognito";
   name: string;
-  createAuthorizationURL({
-    state,
-    scopes,
-    codeVerifier,
-    redirectURI
-  }: {
+  createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -47,18 +45,14 @@ declare const cognito: (options: CognitoOptions) => {
     display?: string | undefined;
     loginHint?: string | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({
-    code,
-    codeVerifier,
-    redirectURI
-  }: {
+  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;
     deviceId?: string | undefined;
   }) => Promise<OAuth2Tokens>;
   refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
-  verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+  verifyIdToken(token: string, nonce?: string, ctx?: GenericEndpointContext): Promise<boolean>;
   getUserInfo(token: OAuth2Tokens & {
     user?: {
       name?: {

package/dist/social-providers/cognito.mjs

@@ -75,9 +75,9 @@ const cognito = (options) => {
 				tokenEndpoint
 			});
 		},
-		async verifyIdToken(token, nonce) {
+		async verifyIdToken(token, nonce, ctx) {
 			if (options.disableIdTokenSignIn) return false;
-			if (options.verifyIdToken) return options.verifyIdToken(token, nonce);
+			if (options.verifyIdToken) return options.verifyIdToken(token, nonce, ctx);
 			try {
 				const { kid, alg: jwtAlg } = decodeProtectedHeader(token);
 				if (!kid || !jwtAlg) return false;

package/dist/social-providers/discord.d.mts

@@ -1,4 +1,5 @@
 import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
+import "../oauth2/index.mjs";
 //#region src/social-providers/discord.d.ts
 interface DiscordProfile extends Record<string, any> {
   /** the user's id (i.e. the numerical snowflake) */
@@ -77,11 +78,7 @@ interface DiscordOptions extends ProviderOptions<DiscordProfile> {
 declare const discord: (options: DiscordOptions) => {
   id: "discord";
   name: string;
-  createAuthorizationURL({
-    state,
-    scopes,
-    redirectURI
-  }: {
+  createAuthorizationURL({ state, scopes, redirectURI }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -89,10 +86,7 @@ declare const discord: (options: DiscordOptions) => {
     display?: string | undefined;
     loginHint?: string | undefined;
   }): URL;
-  validateAuthorizationCode: ({
-    code,
-    redirectURI
-  }: {
+  validateAuthorizationCode: ({ code, redirectURI }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/dropbox.d.mts

@@ -1,4 +1,5 @@
 import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
+import "../oauth2/index.mjs";
 //#region src/social-providers/dropbox.d.ts
 interface DropboxProfile {
   account_id: string;
@@ -20,12 +21,7 @@ interface DropboxOptions extends ProviderOptions<DropboxProfile> {
 declare const dropbox: (options: DropboxOptions) => {
   id: "dropbox";
   name: string;
-  createAuthorizationURL: ({
-    state,
-    scopes,
-    codeVerifier,
-    redirectURI
-  }: {
+  createAuthorizationURL: ({ state, scopes, codeVerifier, redirectURI }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -33,11 +29,7 @@ declare const dropbox: (options: DropboxOptions) => {
     display?: string | undefined;
     loginHint?: string | undefined;
   }) => Promise<URL>;
-  validateAuthorizationCode: ({
-    code,
-    codeVerifier,
-    redirectURI
-  }: {
+  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/facebook.d.mts

@@ -1,4 +1,7 @@
+import { GenericEndpointContext } from "../types/context.mjs";
+import "../types/index.mjs";
 import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
+import "../oauth2/index.mjs";
 //#region src/social-providers/facebook.d.ts
 interface FacebookProfile {
   id: string;
@@ -30,12 +33,7 @@ interface FacebookOptions extends ProviderOptions<FacebookProfile> {
 declare const facebook: (options: FacebookOptions) => {
   id: "facebook";
   name: string;
-  createAuthorizationURL({
-    state,
-    scopes,
-    redirectURI,
-    loginHint
-  }: {
+  createAuthorizationURL({ state, scopes, redirectURI, loginHint }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -43,16 +41,13 @@ declare const facebook: (options: FacebookOptions) => {
     display?: string | undefined;
     loginHint?: string | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({
-    code,
-    redirectURI
-  }: {
+  validateAuthorizationCode: ({ code, redirectURI }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;
     deviceId?: string | undefined;
   }) => Promise<OAuth2Tokens>;
-  verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+  verifyIdToken(token: string, nonce?: string, ctx?: GenericEndpointContext): Promise<boolean>;
   refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
   getUserInfo(token: OAuth2Tokens & {
     user?: {

package/dist/social-providers/facebook.mjs

@@ -66,9 +66,9 @@ const facebook = (options) => {
 				tokenEndpoint: "https://graph.facebook.com/v24.0/oauth/access_token"
 			});
 		},
-		async verifyIdToken(token, nonce) {
+		async verifyIdToken(token, nonce, ctx) {
 			if (options.disableIdTokenSignIn) return false;
-			if (options.verifyIdToken) return options.verifyIdToken(token, nonce);
+			if (options.verifyIdToken) return options.verifyIdToken(token, nonce, ctx);
 			if (token.split(".").length === 3) try {
 				const { payload: jwtClaims } = await jwtVerify(token, createRemoteJWKSet(new URL("https://limited.facebook.com/.well-known/oauth/openid/jwks/")), {
 					algorithms: ["RS256"],

package/dist/social-providers/figma.d.mts

@@ -1,4 +1,5 @@
 import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
+import "../oauth2/index.mjs";
 //#region src/social-providers/figma.d.ts
 interface FigmaProfile {
   id: string;
@@ -12,12 +13,7 @@ interface FigmaOptions extends ProviderOptions<FigmaProfile> {
 declare const figma: (options: FigmaOptions) => {
   id: "figma";
   name: string;
-  createAuthorizationURL({
-    state,
-    scopes,
-    codeVerifier,
-    redirectURI
-  }: {
+  createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -25,11 +21,7 @@ declare const figma: (options: FigmaOptions) => {
     display?: string | undefined;
     loginHint?: string | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({
-    code,
-    codeVerifier,
-    redirectURI
-  }: {
+  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/github.d.mts

@@ -1,4 +1,5 @@
 import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
+import "../oauth2/index.mjs";
 //#region src/social-providers/github.d.ts
 interface GithubProfile {
   login: string;
@@ -52,13 +53,7 @@ interface GithubOptions extends ProviderOptions<GithubProfile> {
 declare const github: (options: GithubOptions) => {
   id: "github";
   name: string;
-  createAuthorizationURL({
-    state,
-    scopes,
-    loginHint,
-    codeVerifier,
-    redirectURI
-  }: {
+  createAuthorizationURL({ state, scopes, loginHint, codeVerifier, redirectURI }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -66,11 +61,7 @@ declare const github: (options: GithubOptions) => {
     display?: string | undefined;
     loginHint?: string | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({
-    code,
-    codeVerifier,
-    redirectURI
-  }: {
+  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/gitlab.d.mts

@@ -1,4 +1,5 @@
 import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
+import "../oauth2/index.mjs";
 //#region src/social-providers/gitlab.d.ts
 interface GitlabProfile extends Record<string, any> {
   id: number;
@@ -52,13 +53,7 @@ interface GitlabOptions extends ProviderOptions<GitlabProfile> {
 declare const gitlab: (options: GitlabOptions) => {
   id: "gitlab";
   name: string;
-  createAuthorizationURL: ({
-    state,
-    scopes,
-    codeVerifier,
-    loginHint,
-    redirectURI
-  }: {
+  createAuthorizationURL: ({ state, scopes, codeVerifier, loginHint, redirectURI }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -66,11 +61,7 @@ declare const gitlab: (options: GitlabOptions) => {
     display?: string | undefined;
     loginHint?: string | undefined;
   }) => Promise<URL>;
-  validateAuthorizationCode: ({
-    code,
-    redirectURI,
-    codeVerifier
-  }: {
+  validateAuthorizationCode: ({ code, redirectURI, codeVerifier }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/google.d.mts

@@ -1,6 +1,8 @@
+import { GenericEndpointContext } from "../types/context.mjs";
+import "../types/index.mjs";
 import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
+import "../oauth2/index.mjs";
 import { JWTPayload } from "jose";
-
 //#region src/social-providers/google.d.ts
 interface GoogleProfile {
   aud: string;
@@ -57,11 +59,7 @@ interface VerifyGoogleIdTokenOptions {
  * Verifies a Google ID token against Google's issuer, audience, signature,
  * expiry, and maximum token age.
  */
-declare const verifyGoogleIdToken: ({
-  token,
-  audience,
-  nonce
-}: VerifyGoogleIdTokenOptions) => Promise<JWTPayload | null>;
+declare const verifyGoogleIdToken: ({ token, audience, nonce }: VerifyGoogleIdTokenOptions) => Promise<JWTPayload | null>;
 /**
  * Checks whether Google's verified `hd` claim satisfies the configured hosted
  * domain restriction. `hd: "*"` accepts any Google Workspace hosted domain.
@@ -70,14 +68,7 @@ declare const isGoogleHostedDomainAllowed: (configuredHostedDomain: string | und
 declare const google: (options: GoogleOptions) => {
   id: "google";
   name: string;
-  createAuthorizationURL({
-    state,
-    scopes,
-    codeVerifier,
-    redirectURI,
-    loginHint,
-    display
-  }: {
+  createAuthorizationURL({ state, scopes, codeVerifier, redirectURI, loginHint, display }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -85,18 +76,14 @@ declare const google: (options: GoogleOptions) => {
     display?: string | undefined;
     loginHint?: string | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({
-    code,
-    codeVerifier,
-    redirectURI
-  }: {
+  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;
     deviceId?: string | undefined;
   }) => Promise<OAuth2Tokens>;
   refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
-  verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+  verifyIdToken(token: string, nonce?: string, ctx?: GenericEndpointContext): Promise<boolean>;
   getUserInfo(token: OAuth2Tokens & {
     user?: {
       name?: {

package/dist/social-providers/google.mjs

@@ -91,9 +91,9 @@ const google = (options) => {
 				tokenEndpoint: "https://oauth2.googleapis.com/token"
 			});
 		},
-		async verifyIdToken(token, nonce) {
+		async verifyIdToken(token, nonce, ctx) {
 			if (options.disableIdTokenSignIn) return false;
-			if (options.verifyIdToken) return options.verifyIdToken(token, nonce);
+			if (options.verifyIdToken) return options.verifyIdToken(token, nonce, ctx);
 			const jwtClaims = await verifyGoogleIdToken({
 				token,
 				audience: options.clientId,

package/dist/social-providers/huggingface.d.mts

@@ -1,4 +1,5 @@
 import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
+import "../oauth2/index.mjs";
 //#region src/social-providers/huggingface.d.ts
 interface HuggingFaceProfile {
   sub: string;
@@ -34,12 +35,7 @@ interface HuggingFaceOptions extends ProviderOptions<HuggingFaceProfile> {
 declare const huggingface: (options: HuggingFaceOptions) => {
   id: "huggingface";
   name: string;
-  createAuthorizationURL({
-    state,
-    scopes,
-    codeVerifier,
-    redirectURI
-  }: {
+  createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -47,11 +43,7 @@ declare const huggingface: (options: HuggingFaceOptions) => {
     display?: string | undefined;
     loginHint?: string | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({
-    code,
-    codeVerifier,
-    redirectURI
-  }: {
+  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;