@better-auth/core 1.7.0-beta.0 → 1.7.0-beta.10

package/dist/social-providers/index.d.mts

@@ -6,7 +6,7 @@ import { FacebookOptions, FacebookProfile, facebook } from "./facebook.mjs";
 import { FigmaOptions, FigmaProfile, figma } from "./figma.mjs";
 import { GithubOptions, GithubProfile, github } from "./github.mjs";
 import { MicrosoftEntraIDProfile, MicrosoftOptions, getMicrosoftPublicKey, microsoft } from "./microsoft-entra-id.mjs";
-import { GoogleOptions, GoogleProfile, getGooglePublicKey, google } from "./google.mjs";
+import { GoogleOptions, GoogleProfile, VerifyGoogleIdTokenOptions, getGooglePublicKey, google, isGoogleHostedDomainAllowed, verifyGoogleIdToken } from "./google.mjs";
 import { HuggingFaceOptions, HuggingFaceProfile, huggingface } from "./huggingface.mjs";
 import { SlackOptions, SlackProfile, slack } from "./slack.mjs";
 import { SpotifyOptions, SpotifyProfile, spotify } from "./spotify.mjs";
@@ -36,6 +36,7 @@ import { WeChatOptions, WeChatProfile, wechat } from "./wechat.mjs";
 import { AwaitableFunction } from "../types/helper.mjs";
 import { OAuth2Tokens } from "../oauth2/oauth-provider.mjs";
 import * as z from "zod";
+import * as jose from "jose";
 
 //#region src/social-providers/index.d.ts
 declare const socialProviders: {
@@ -45,7 +46,8 @@ declare const socialProviders: {
     createAuthorizationURL({
       state,
       scopes,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -53,6 +55,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -64,9 +68,16 @@ declare const socialProviders: {
       codeVerifier?: string | undefined;
       deviceId?: string | undefined;
     }) => Promise<OAuth2Tokens>;
-    verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+    idToken: {
+      jwks: (header: jose.JWTHeaderParameters) => Promise<Uint8Array<ArrayBufferLike> | CryptoKey>;
+      issuer: string;
+      audience: string | string[];
+      maxTokenAge: string;
+      nonceComparison: "exact-or-sha256";
+    };
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -94,7 +105,8 @@ declare const socialProviders: {
       state,
       scopes,
       codeVerifier,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -102,6 +114,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -115,6 +129,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -142,7 +157,8 @@ declare const socialProviders: {
       state,
       scopes,
       codeVerifier,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -150,6 +166,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -162,8 +180,14 @@ declare const socialProviders: {
       deviceId?: string | undefined;
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
-    verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+    idToken: {
+      jwks: (header: jose.JWTHeaderParameters) => Promise<Uint8Array<ArrayBufferLike> | CryptoKey>;
+      issuer: string;
+      audience: string | string[];
+      maxTokenAge: string;
+    };
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -190,7 +214,8 @@ declare const socialProviders: {
     createAuthorizationURL({
       state,
       scopes,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -198,7 +223,9 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
-    }): URL;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
+    }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
       redirectURI
@@ -210,6 +237,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -237,7 +265,8 @@ declare const socialProviders: {
       state,
       scopes,
       redirectURI,
-      loginHint
+      loginHint,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -245,6 +274,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -255,9 +286,23 @@ declare const socialProviders: {
       codeVerifier?: string | undefined;
       deviceId?: string | undefined;
     }) => Promise<OAuth2Tokens>;
-    verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+    idToken: {
+      jwks: {
+        (protectedHeader?: jose.JWSHeaderParameters, token?: jose.FlattenedJWSInput): Promise<jose.CryptoKey>;
+        coolingDown: boolean;
+        fresh: boolean;
+        reloading: boolean;
+        reload: () => Promise<void>;
+        jwks: () => jose.JSONWebKeySet | undefined;
+      };
+      issuer: string;
+      audience: string | string[];
+      algorithms: string[];
+      allowOpaqueToken: true;
+    };
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -285,7 +330,8 @@ declare const socialProviders: {
       state,
       scopes,
       codeVerifier,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -293,6 +339,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -306,6 +354,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -334,7 +383,8 @@ declare const socialProviders: {
       scopes,
       loginHint,
       codeVerifier,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -342,6 +392,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -355,6 +407,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens | null>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -385,6 +438,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode({
       code,
@@ -396,8 +451,15 @@ declare const socialProviders: {
       codeVerifier?: string | undefined;
       deviceId?: string | undefined;
     }): Promise<OAuth2Tokens>;
-    verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+    idToken: {
+      jwks: (header: jose.JWTHeaderParameters) => Promise<Uint8Array<ArrayBufferLike> | CryptoKey>;
+      audience: string | string[];
+      maxTokenAge: string;
+      issuer: string | undefined;
+      verifyClaims: (claims: Record<string, unknown>) => boolean;
+    };
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -428,7 +490,8 @@ declare const socialProviders: {
       codeVerifier,
       redirectURI,
       loginHint,
-      display
+      display,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -436,6 +499,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -448,8 +513,15 @@ declare const socialProviders: {
       deviceId?: string | undefined;
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
-    verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+    idToken: {
+      jwks: (header: jose.JWTHeaderParameters) => Promise<Uint8Array<ArrayBufferLike> | CryptoKey>;
+      issuer: string[];
+      audience: string | string[];
+      maxTokenAge: string;
+      verifyClaims: ((claims: Record<string, unknown>) => boolean) | undefined;
+    };
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -477,7 +549,8 @@ declare const socialProviders: {
       state,
       scopes,
       codeVerifier,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -485,6 +558,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -498,6 +573,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -524,7 +600,8 @@ declare const socialProviders: {
     createAuthorizationURL({
       state,
       scopes,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -532,7 +609,9 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
-    }): URL;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
+    }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
       redirectURI
@@ -544,6 +623,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -571,7 +651,8 @@ declare const socialProviders: {
       state,
       scopes,
       codeVerifier,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -579,6 +660,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -592,6 +675,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -618,7 +702,8 @@ declare const socialProviders: {
     createAuthorizationURL({
       state,
       scopes,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -626,6 +711,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -638,6 +725,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -668,6 +756,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -681,6 +771,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -708,7 +799,8 @@ declare const socialProviders: {
       state,
       scopes,
       codeVerifier,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -716,6 +808,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }) => Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -729,6 +823,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -756,7 +851,8 @@ declare const socialProviders: {
       state,
       scopes,
       redirectURI,
-      codeVerifier
+      codeVerifier,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -764,6 +860,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode({
       code,
@@ -777,6 +875,7 @@ declare const socialProviders: {
     }): Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -804,7 +903,8 @@ declare const socialProviders: {
       state,
       scopes,
       loginHint,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -812,6 +912,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -824,6 +926,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -851,7 +954,8 @@ declare const socialProviders: {
       state,
       scopes,
       redirectURI,
-      loginHint
+      loginHint,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -859,6 +963,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }) => Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -871,6 +977,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -899,7 +1006,8 @@ declare const socialProviders: {
       scopes,
       codeVerifier,
       loginHint,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -907,6 +1015,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }) => Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -920,6 +1030,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -967,7 +1078,8 @@ declare const socialProviders: {
     createAuthorizationURL({
       state,
       scopes,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -975,6 +1087,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): URL;
     validateAuthorizationCode: ({
       code,
@@ -987,6 +1101,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -1013,7 +1128,8 @@ declare const socialProviders: {
     createAuthorizationURL({
       state,
       scopes,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -1021,6 +1137,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -1033,6 +1151,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -1059,7 +1178,8 @@ declare const socialProviders: {
     createAuthorizationURL({
       state,
       scopes,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -1067,7 +1187,9 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
-    }): URL;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
+    }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
       redirectURI
@@ -1079,6 +1201,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -1106,7 +1229,8 @@ declare const socialProviders: {
       state,
       scopes,
       codeVerifier,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -1114,6 +1238,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -1127,6 +1253,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -1154,7 +1281,8 @@ declare const socialProviders: {
       state,
       scopes,
       codeVerifier,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -1162,6 +1290,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -1176,6 +1306,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(data: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -1202,7 +1333,8 @@ declare const socialProviders: {
     createAuthorizationURL: ({
       state,
       redirectURI,
-      codeVerifier
+      codeVerifier,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -1210,6 +1342,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }) => Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -1223,6 +1357,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -1249,7 +1384,8 @@ declare const socialProviders: {
       state,
       scopes,
       loginHint,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -1257,6 +1393,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -1269,6 +1407,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -1295,7 +1434,8 @@ declare const socialProviders: {
     createAuthorizationURL({
       state,
       scopes,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -1303,6 +1443,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -1315,6 +1457,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -1362,7 +1505,8 @@ declare const socialProviders: {
     createAuthorizationURL({
       state,
       scopes,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -1370,6 +1514,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -1382,6 +1528,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -1431,7 +1578,8 @@ declare const socialProviders: {
       scopes,
       codeVerifier,
       redirectURI,
-      loginHint
+      loginHint,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -1439,6 +1587,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -1451,8 +1601,11 @@ declare const socialProviders: {
       deviceId?: string | undefined;
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
-    verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+    idToken: {
+      verify: (token: string, nonce: string | undefined) => Promise<boolean>;
+    };
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -1502,7 +1655,8 @@ declare const socialProviders: {
       scopes,
       codeVerifier,
       redirectURI,
-      loginHint
+      loginHint,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -1510,6 +1664,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -1523,6 +1679,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -1549,7 +1706,8 @@ declare const socialProviders: {
     createAuthorizationURL({
       state,
       codeVerifier,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -1557,6 +1715,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -1577,8 +1737,8 @@ declare const socialProviders: {
       refreshToken: any;
       accessTokenExpiresAt: Date | undefined;
     }>);
-    verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -1627,7 +1787,8 @@ declare const socialProviders: {
       state,
       scopes,
       codeVerifier,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -1635,6 +1796,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -1648,6 +1811,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -1675,7 +1839,8 @@ declare const socialProviders: {
       state,
       scopes,
       codeVerifier,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -1683,6 +1848,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -1696,6 +1863,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -1723,7 +1891,8 @@ declare const socialProviders: {
       state,
       scopes,
       codeVerifier,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -1731,6 +1900,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): Promise<URL>;
     validateAuthorizationCode: ({
       code,
@@ -1743,6 +1914,7 @@ declare const socialProviders: {
       deviceId?: string | undefined;
     }) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -1769,7 +1941,8 @@ declare const socialProviders: {
     createAuthorizationURL({
       state,
       scopes,
-      redirectURI
+      redirectURI,
+      additionalParams
     }: {
       state: string;
       codeVerifier: string;
@@ -1777,6 +1950,8 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
+      additionalParams?: Record<string, string> | undefined;
     }): URL;
     validateAuthorizationCode: ({
       code
@@ -1802,6 +1977,7 @@ declare const socialProviders: {
       scopes: string[];
     }>);
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -1831,4 +2007,4 @@ type SocialProviders = { [K in SocialProviderList[number]]?: AwaitableFunction<P
 }> };
 type SocialProviderList = typeof socialProviderList;
 //#endregion
-export { AccountStatus, AppleNonConformUser, AppleOptions, AppleProfile, AtlassianOptions, AtlassianProfile, CognitoOptions, CognitoProfile, DiscordOptions, DiscordProfile, DropboxOptions, DropboxProfile, FacebookOptions, FacebookProfile, FigmaOptions, FigmaProfile, GithubOptions, GithubProfile, GitlabOptions, GitlabProfile, GoogleOptions, GoogleProfile, HuggingFaceOptions, HuggingFaceProfile, KakaoOptions, KakaoProfile, KickOptions, KickProfile, LineIdTokenPayload, LineOptions, LineUserInfo, LinearOptions, LinearProfile, LinearUser, LinkedInOptions, LinkedInProfile, LoginType, MicrosoftEntraIDProfile, MicrosoftOptions, NaverOptions, NaverProfile, NotionOptions, NotionProfile, PayPalOptions, PayPalProfile, PayPalTokenResponse, PaybinOptions, PaybinProfile, PhoneNumber, PolarOptions, PolarProfile, PronounOption, RailwayOptions, RailwayProfile, RedditOptions, RedditProfile, RobloxOptions, RobloxProfile, SalesforceOptions, SalesforceProfile, SlackOptions, SlackProfile, SocialProvider, SocialProviderList, SocialProviderListEnum, SocialProviders, SpotifyOptions, SpotifyProfile, TiktokOptions, TiktokProfile, TwitchOptions, TwitchProfile, TwitterOption, TwitterProfile, VercelOptions, VercelProfile, VkOption, VkProfile, WeChatOptions, WeChatProfile, ZoomOptions, ZoomProfile, apple, atlassian, cognito, discord, dropbox, facebook, figma, getApplePublicKey, getCognitoPublicKey, getGooglePublicKey, getMicrosoftPublicKey, github, gitlab, google, huggingface, kakao, kick, line, linear, linkedin, microsoft, naver, notion, paybin, paypal, polar, railway, reddit, roblox, salesforce, slack, socialProviderList, socialProviders, spotify, tiktok, twitch, twitter, vercel, vk, wechat, zoom };
+export { AccountStatus, AppleNonConformUser, AppleOptions, AppleProfile, AtlassianOptions, AtlassianProfile, CognitoOptions, CognitoProfile, DiscordOptions, DiscordProfile, DropboxOptions, DropboxProfile, FacebookOptions, FacebookProfile, FigmaOptions, FigmaProfile, GithubOptions, GithubProfile, GitlabOptions, GitlabProfile, GoogleOptions, GoogleProfile, HuggingFaceOptions, HuggingFaceProfile, KakaoOptions, KakaoProfile, KickOptions, KickProfile, LineIdTokenPayload, LineOptions, LineUserInfo, LinearOptions, LinearProfile, LinearUser, LinkedInOptions, LinkedInProfile, LoginType, MicrosoftEntraIDProfile, MicrosoftOptions, NaverOptions, NaverProfile, NotionOptions, NotionProfile, PayPalOptions, PayPalProfile, PayPalTokenResponse, PaybinOptions, PaybinProfile, PhoneNumber, PolarOptions, PolarProfile, PronounOption, RailwayOptions, RailwayProfile, RedditOptions, RedditProfile, RobloxOptions, RobloxProfile, SalesforceOptions, SalesforceProfile, SlackOptions, SlackProfile, SocialProvider, SocialProviderList, SocialProviderListEnum, SocialProviders, SpotifyOptions, SpotifyProfile, TiktokOptions, TiktokProfile, TwitchOptions, TwitchProfile, TwitterOption, TwitterProfile, VercelOptions, VercelProfile, VerifyGoogleIdTokenOptions, VkOption, VkProfile, WeChatOptions, WeChatProfile, ZoomOptions, ZoomProfile, apple, atlassian, cognito, discord, dropbox, facebook, figma, getApplePublicKey, getCognitoPublicKey, getGooglePublicKey, getMicrosoftPublicKey, github, gitlab, google, huggingface, isGoogleHostedDomainAllowed, kakao, kick, line, linear, linkedin, microsoft, naver, notion, paybin, paypal, polar, railway, reddit, roblox, salesforce, slack, socialProviderList, socialProviders, spotify, tiktok, twitch, twitter, vercel, verifyGoogleIdToken, vk, wechat, zoom };