@better-auth/core 1.6.24 → 1.6.26

package/dist/context/global.mjs

@@ -2,7 +2,7 @@
 const symbol = Symbol.for("better-auth:global");
 let bind = null;
 const __context = {};
-const __betterAuthVersion = "1.6.24";
+const __betterAuthVersion = "1.6.26";
 /**
 * We store context instance in the globalThis.
 *

package/dist/instrumentation/tracer.mjs

@@ -2,7 +2,7 @@ import { ATTR_HTTP_RESPONSE_STATUS_CODE } from "./attributes.mjs";
 import { getOpenTelemetryAPI } from "./api.mjs";
 //#region src/instrumentation/tracer.ts
 const INSTRUMENTATION_SCOPE = "better-auth";
-const INSTRUMENTATION_VERSION = "1.6.24";
+const INSTRUMENTATION_VERSION = "1.6.26";
 /**
 * Better-auth uses `throw ctx.redirect(url)` for flow control (e.g. OAuth
 * callbacks). These are APIErrors with 3xx status codes and should not be

package/dist/social-providers/apple.d.mts

@@ -70,7 +70,7 @@ interface AppleOptions extends ProviderOptions<AppleProfile> {
 declare const apple: (options: AppleOptions) => {
   id: "apple";
   name: string;
-  createAuthorizationURL({ state, scopes, redirectURI }: {
+  createAuthorizationURL({ state, scopes, redirectURI, codeVerifier }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;

package/dist/social-providers/apple.mjs

@@ -22,7 +22,7 @@ const apple = (options) => {
 	return {
 		id: "apple",
 		name: "Apple",
-		async createAuthorizationURL({ state, scopes, redirectURI }) {
+		async createAuthorizationURL({ state, scopes, redirectURI, codeVerifier }) {
 			if (!getPrimaryClientId(options.clientId) || !options.clientSecret) {
 				logger.error("Client ID and client secret are required for Apple. Make sure to provide them in the options.");
 				throw new BetterAuthError("CLIENT_ID_AND_SECRET_REQUIRED");
@@ -37,6 +37,7 @@ const apple = (options) => {
 				scopes: _scope,
 				state,
 				redirectURI,
+				codeVerifier,
 				responseMode: "form_post",
 				responseType: "code id_token"
 			});

package/dist/social-providers/index.d.mts

@@ -43,7 +43,7 @@ declare const socialProviders: {
   apple: (options: AppleOptions) => {
     id: "apple";
     name: string;
-    createAuthorizationURL({ state, scopes, redirectURI }: {
+    createAuthorizationURL({ state, scopes, redirectURI, codeVerifier }: {
       state: string;
       codeVerifier: string;
       scopes?: string[] | undefined;

package/dist/utils/email.d.mts

@@ -0,0 +1,19 @@
+//#region src/utils/email.d.ts
+interface PlaceholderEmailOptions {
+  /**
+   * A stable identifier that distinguishes the account within the namespace.
+   */
+  identifier: string;
+  /**
+   * A namespace that distinguishes identical identifiers from different sources.
+   */
+  namespace: string;
+}
+/**
+ * Creates a stable, non-routable email address for an account without an email.
+ *
+ * @throws TypeError if the generated email is invalid.
+ */
+declare function createPlaceholderEmail({ identifier, namespace }: PlaceholderEmailOptions): string;
+//#endregion
+export { PlaceholderEmailOptions, createPlaceholderEmail };

package/dist/utils/email.mjs

@@ -0,0 +1,18 @@
+import * as z from "zod";
+//#region src/utils/email.ts
+/**
+* @see https://www.rfc-editor.org/rfc/rfc6761.html#section-6.4
+*/
+const PLACEHOLDER_EMAIL_DOMAIN = "placeholder.invalid";
+/**
+* Creates a stable, non-routable email address for an account without an email.
+*
+* @throws TypeError if the generated email is invalid.
+*/
+function createPlaceholderEmail({ identifier, namespace }) {
+	const result = z.email().safeParse(`${identifier}@${namespace}.${PLACEHOLDER_EMAIL_DOMAIN}`);
+	if (!result.success) throw new TypeError("Invalid placeholder email");
+	return result.data;
+}
+//#endregion
+export { createPlaceholderEmail };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@better-auth/core",
-  "version": "1.6.24",
+  "version": "1.6.26",
   "description": "The most comprehensive authentication framework for TypeScript.",
   "type": "module",
   "license": "MIT",
@@ -155,8 +155,8 @@
     "@better-auth/utils": "0.4.2",
     "@better-fetch/fetch": "1.3.1",
     "@opentelemetry/api": "^1.9.0",
-    "@opentelemetry/sdk-trace-base": "^1.30.0",
-    "@opentelemetry/sdk-trace-node": "^1.30.0",
+    "@opentelemetry/sdk-trace-base": "^2.10.0",
+    "@opentelemetry/sdk-trace-node": "^2.10.0",
     "better-call": "1.3.7",
     "@cloudflare/workers-types": "^4.20250121.0",
     "jose": "^6.1.3",

package/src/social-providers/apple.ts

@@ -101,7 +101,7 @@ export const apple = (options: AppleOptions) => {
 	return {
 		id: "apple",
 		name: "Apple",
-		async createAuthorizationURL({ state, scopes, redirectURI }) {
+		async createAuthorizationURL({ state, scopes, redirectURI, codeVerifier }) {
 			if (!getPrimaryClientId(options.clientId) || !options.clientSecret) {
 				logger.error(
 					"Client ID and client secret are required for Apple. Make sure to provide them in the options.",
@@ -118,6 +118,7 @@ export const apple = (options: AppleOptions) => {
 				scopes: _scope,
 				state,
 				redirectURI,
+				codeVerifier,
 				responseMode: "form_post",
 				responseType: "code id_token",
 			});

package/src/utils/email.ts

@@ -0,0 +1,36 @@
+import * as z from "zod";
+
+/**
+ * @see https://www.rfc-editor.org/rfc/rfc6761.html#section-6.4
+ */
+const PLACEHOLDER_EMAIL_DOMAIN = "placeholder.invalid";
+
+export interface PlaceholderEmailOptions {
+	/**
+	 * A stable identifier that distinguishes the account within the namespace.
+	 */
+	identifier: string;
+	/**
+	 * A namespace that distinguishes identical identifiers from different sources.
+	 */
+	namespace: string;
+}
+
+/**
+ * Creates a stable, non-routable email address for an account without an email.
+ *
+ * @throws TypeError if the generated email is invalid.
+ */
+export function createPlaceholderEmail({
+	identifier,
+	namespace,
+}: PlaceholderEmailOptions): string {
+	const result = z
+		.email()
+		.safeParse(`${identifier}@${namespace}.${PLACEHOLDER_EMAIL_DOMAIN}`);
+	if (!result.success) {
+		throw new TypeError("Invalid placeholder email");
+	}
+
+	return result.data;
+}