@better-auth/core 1.7.0-beta.6 → 1.7.0-beta.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (53) hide show
  1. package/dist/context/global.mjs +1 -1
  2. package/dist/db/adapter/factory.mjs +1 -1
  3. package/dist/instrumentation/tracer.mjs +1 -1
  4. package/dist/oauth2/create-authorization-url.d.mts +3 -1
  5. package/dist/oauth2/create-authorization-url.mjs +3 -1
  6. package/dist/oauth2/index.d.mts +2 -2
  7. package/dist/oauth2/oauth-provider.d.mts +37 -3
  8. package/dist/oauth2/refresh-access-token.mjs +15 -1
  9. package/dist/social-providers/apple.d.mts +2 -0
  10. package/dist/social-providers/atlassian.d.mts +2 -0
  11. package/dist/social-providers/cognito.d.mts +2 -0
  12. package/dist/social-providers/discord.d.mts +2 -0
  13. package/dist/social-providers/dropbox.d.mts +2 -0
  14. package/dist/social-providers/facebook.d.mts +2 -0
  15. package/dist/social-providers/figma.d.mts +2 -0
  16. package/dist/social-providers/github.d.mts +2 -0
  17. package/dist/social-providers/gitlab.d.mts +2 -0
  18. package/dist/social-providers/google.d.mts +2 -0
  19. package/dist/social-providers/huggingface.d.mts +2 -0
  20. package/dist/social-providers/index.d.mts +70 -0
  21. package/dist/social-providers/kakao.d.mts +2 -0
  22. package/dist/social-providers/kick.d.mts +2 -0
  23. package/dist/social-providers/line.d.mts +2 -0
  24. package/dist/social-providers/linear.d.mts +2 -0
  25. package/dist/social-providers/linkedin.d.mts +2 -0
  26. package/dist/social-providers/microsoft-entra-id.d.mts +2 -0
  27. package/dist/social-providers/naver.d.mts +2 -0
  28. package/dist/social-providers/notion.d.mts +2 -0
  29. package/dist/social-providers/paybin.d.mts +2 -0
  30. package/dist/social-providers/paypal.d.mts +2 -0
  31. package/dist/social-providers/polar.d.mts +2 -0
  32. package/dist/social-providers/railway.d.mts +2 -0
  33. package/dist/social-providers/reddit.d.mts +2 -0
  34. package/dist/social-providers/roblox.d.mts +2 -0
  35. package/dist/social-providers/salesforce.d.mts +2 -0
  36. package/dist/social-providers/slack.d.mts +2 -0
  37. package/dist/social-providers/spotify.d.mts +2 -0
  38. package/dist/social-providers/tiktok.d.mts +2 -0
  39. package/dist/social-providers/twitch.d.mts +2 -0
  40. package/dist/social-providers/twitter.d.mts +2 -0
  41. package/dist/social-providers/vercel.d.mts +2 -0
  42. package/dist/social-providers/vk.d.mts +2 -0
  43. package/dist/social-providers/wechat.d.mts +2 -0
  44. package/dist/social-providers/zoom.d.mts +2 -0
  45. package/dist/utils/host.d.mts +1 -1
  46. package/dist/utils/host.mjs +3 -0
  47. package/package.json +1 -1
  48. package/src/oauth2/create-authorization-url.ts +4 -0
  49. package/src/oauth2/index.ts +1 -0
  50. package/src/oauth2/oauth-provider.ts +40 -2
  51. package/src/oauth2/refresh-access-token.ts +27 -3
  52. package/src/oauth2/verify-id-token.ts +2 -0
  53. package/src/utils/host.ts +10 -1
package/dist/social-providers/index.d.mts CHANGED
@@ -56,6 +56,7 @@ declare const socialProviders: {
56
56
  redirectURI: string;
57
57
  display?: string | undefined;
58
58
  loginHint?: string | undefined;
59
+ idTokenNonce?: string | undefined;
59
60
  additionalParams?: Record<string, string> | undefined;
60
61
  }): Promise<{
61
62
  url: URL;
@@ -80,6 +81,7 @@ declare const socialProviders: {
80
81
  };
81
82
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
82
83
  getUserInfo(token: OAuth2Tokens & {
84
+ expectedIdTokenNonce?: string | undefined;
83
85
  user?: {
84
86
  name?: {
85
87
  firstName?: string;
@@ -117,6 +119,7 @@ declare const socialProviders: {
117
119
  redirectURI: string;
118
120
  display?: string | undefined;
119
121
  loginHint?: string | undefined;
122
+ idTokenNonce?: string | undefined;
120
123
  additionalParams?: Record<string, string> | undefined;
121
124
  }): Promise<{
122
125
  url: URL;
@@ -134,6 +137,7 @@ declare const socialProviders: {
134
137
  }) => Promise<OAuth2Tokens>;
135
138
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
136
139
  getUserInfo(token: OAuth2Tokens & {
140
+ expectedIdTokenNonce?: string | undefined;
137
141
  user?: {
138
142
  name?: {
139
143
  firstName?: string;
@@ -171,6 +175,7 @@ declare const socialProviders: {
171
175
  redirectURI: string;
172
176
  display?: string | undefined;
173
177
  loginHint?: string | undefined;
178
+ idTokenNonce?: string | undefined;
174
179
  additionalParams?: Record<string, string> | undefined;
175
180
  }): Promise<{
176
181
  url: URL;
@@ -194,6 +199,7 @@ declare const socialProviders: {
194
199
  maxTokenAge: string;
195
200
  };
196
201
  getUserInfo(token: OAuth2Tokens & {
202
+ expectedIdTokenNonce?: string | undefined;
197
203
  user?: {
198
204
  name?: {
199
205
  firstName?: string;
@@ -230,6 +236,7 @@ declare const socialProviders: {
230
236
  redirectURI: string;
231
237
  display?: string | undefined;
232
238
  loginHint?: string | undefined;
239
+ idTokenNonce?: string | undefined;
233
240
  additionalParams?: Record<string, string> | undefined;
234
241
  }): Promise<{
235
242
  url: URL;
@@ -246,6 +253,7 @@ declare const socialProviders: {
246
253
  }) => Promise<OAuth2Tokens>;
247
254
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
248
255
  getUserInfo(token: OAuth2Tokens & {
256
+ expectedIdTokenNonce?: string | undefined;
249
257
  user?: {
250
258
  name?: {
251
259
  firstName?: string;
@@ -283,6 +291,7 @@ declare const socialProviders: {
283
291
  redirectURI: string;
284
292
  display?: string | undefined;
285
293
  loginHint?: string | undefined;
294
+ idTokenNonce?: string | undefined;
286
295
  additionalParams?: Record<string, string> | undefined;
287
296
  }): Promise<{
288
297
  url: URL;
@@ -313,6 +322,7 @@ declare const socialProviders: {
313
322
  };
314
323
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
315
324
  getUserInfo(token: OAuth2Tokens & {
325
+ expectedIdTokenNonce?: string | undefined;
316
326
  user?: {
317
327
  name?: {
318
328
  firstName?: string;
@@ -350,6 +360,7 @@ declare const socialProviders: {
350
360
  redirectURI: string;
351
361
  display?: string | undefined;
352
362
  loginHint?: string | undefined;
363
+ idTokenNonce?: string | undefined;
353
364
  additionalParams?: Record<string, string> | undefined;
354
365
  }): Promise<{
355
366
  url: URL;
@@ -367,6 +378,7 @@ declare const socialProviders: {
367
378
  }) => Promise<OAuth2Tokens>;
368
379
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
369
380
  getUserInfo(token: OAuth2Tokens & {
381
+ expectedIdTokenNonce?: string | undefined;
370
382
  user?: {
371
383
  name?: {
372
384
  firstName?: string;
@@ -405,6 +417,7 @@ declare const socialProviders: {
405
417
  redirectURI: string;
406
418
  display?: string | undefined;
407
419
  loginHint?: string | undefined;
420
+ idTokenNonce?: string | undefined;
408
421
  additionalParams?: Record<string, string> | undefined;
409
422
  }): Promise<{
410
423
  url: URL;
@@ -422,6 +435,7 @@ declare const socialProviders: {
422
435
  }) => Promise<OAuth2Tokens | null>;
423
436
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
424
437
  getUserInfo(token: OAuth2Tokens & {
438
+ expectedIdTokenNonce?: string | undefined;
425
439
  user?: {
426
440
  name?: {
427
441
  firstName?: string;
@@ -453,6 +467,7 @@ declare const socialProviders: {
453
467
  redirectURI: string;
454
468
  display?: string | undefined;
455
469
  loginHint?: string | undefined;
470
+ idTokenNonce?: string | undefined;
456
471
  additionalParams?: Record<string, string> | undefined;
457
472
  }): Promise<{
458
473
  url: URL;
@@ -476,6 +491,7 @@ declare const socialProviders: {
476
491
  verifyClaims: (claims: Record<string, unknown>) => boolean;
477
492
  };
478
493
  getUserInfo(token: OAuth2Tokens & {
494
+ expectedIdTokenNonce?: string | undefined;
479
495
  user?: {
480
496
  name?: {
481
497
  firstName?: string;
@@ -517,6 +533,7 @@ declare const socialProviders: {
517
533
  redirectURI: string;
518
534
  display?: string | undefined;
519
535
  loginHint?: string | undefined;
536
+ idTokenNonce?: string | undefined;
520
537
  additionalParams?: Record<string, string> | undefined;
521
538
  }): Promise<{
522
539
  url: URL;
@@ -541,6 +558,7 @@ declare const socialProviders: {
541
558
  verifyClaims: ((claims: Record<string, unknown>) => boolean) | undefined;
542
559
  };
543
560
  getUserInfo(token: OAuth2Tokens & {
561
+ expectedIdTokenNonce?: string | undefined;
544
562
  user?: {
545
563
  name?: {
546
564
  firstName?: string;
@@ -578,6 +596,7 @@ declare const socialProviders: {
578
596
  redirectURI: string;
579
597
  display?: string | undefined;
580
598
  loginHint?: string | undefined;
599
+ idTokenNonce?: string | undefined;
581
600
  additionalParams?: Record<string, string> | undefined;
582
601
  }): Promise<{
583
602
  url: URL;
@@ -595,6 +614,7 @@ declare const socialProviders: {
595
614
  }) => Promise<OAuth2Tokens>;
596
615
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
597
616
  getUserInfo(token: OAuth2Tokens & {
617
+ expectedIdTokenNonce?: string | undefined;
598
618
  user?: {
599
619
  name?: {
600
620
  firstName?: string;
@@ -631,6 +651,7 @@ declare const socialProviders: {
631
651
  redirectURI: string;
632
652
  display?: string | undefined;
633
653
  loginHint?: string | undefined;
654
+ idTokenNonce?: string | undefined;
634
655
  additionalParams?: Record<string, string> | undefined;
635
656
  }): Promise<{
636
657
  url: URL;
@@ -647,6 +668,7 @@ declare const socialProviders: {
647
668
  }) => Promise<OAuth2Tokens>;
648
669
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
649
670
  getUserInfo(token: OAuth2Tokens & {
671
+ expectedIdTokenNonce?: string | undefined;
650
672
  user?: {
651
673
  name?: {
652
674
  firstName?: string;
@@ -684,6 +706,7 @@ declare const socialProviders: {
684
706
  redirectURI: string;
685
707
  display?: string | undefined;
686
708
  loginHint?: string | undefined;
709
+ idTokenNonce?: string | undefined;
687
710
  additionalParams?: Record<string, string> | undefined;
688
711
  }): Promise<{
689
712
  url: URL;
@@ -701,6 +724,7 @@ declare const socialProviders: {
701
724
  }) => Promise<OAuth2Tokens>;
702
725
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
703
726
  getUserInfo(token: OAuth2Tokens & {
727
+ expectedIdTokenNonce?: string | undefined;
704
728
  user?: {
705
729
  name?: {
706
730
  firstName?: string;
@@ -737,6 +761,7 @@ declare const socialProviders: {
737
761
  redirectURI: string;
738
762
  display?: string | undefined;
739
763
  loginHint?: string | undefined;
764
+ idTokenNonce?: string | undefined;
740
765
  additionalParams?: Record<string, string> | undefined;
741
766
  }): Promise<{
742
767
  url: URL;
@@ -753,6 +778,7 @@ declare const socialProviders: {
753
778
  }) => Promise<OAuth2Tokens>;
754
779
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
755
780
  getUserInfo(token: OAuth2Tokens & {
781
+ expectedIdTokenNonce?: string | undefined;
756
782
  user?: {
757
783
  name?: {
758
784
  firstName?: string;
@@ -784,6 +810,7 @@ declare const socialProviders: {
784
810
  redirectURI: string;
785
811
  display?: string | undefined;
786
812
  loginHint?: string | undefined;
813
+ idTokenNonce?: string | undefined;
787
814
  additionalParams?: Record<string, string> | undefined;
788
815
  }): Promise<{
789
816
  url: URL;
@@ -801,6 +828,7 @@ declare const socialProviders: {
801
828
  }) => Promise<OAuth2Tokens>;
802
829
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
803
830
  getUserInfo(token: OAuth2Tokens & {
831
+ expectedIdTokenNonce?: string | undefined;
804
832
  user?: {
805
833
  name?: {
806
834
  firstName?: string;
@@ -838,6 +866,7 @@ declare const socialProviders: {
838
866
  redirectURI: string;
839
867
  display?: string | undefined;
840
868
  loginHint?: string | undefined;
869
+ idTokenNonce?: string | undefined;
841
870
  additionalParams?: Record<string, string> | undefined;
842
871
  }) => Promise<{
843
872
  url: URL;
@@ -855,6 +884,7 @@ declare const socialProviders: {
855
884
  }) => Promise<OAuth2Tokens>;
856
885
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
857
886
  getUserInfo(token: OAuth2Tokens & {
887
+ expectedIdTokenNonce?: string | undefined;
858
888
  user?: {
859
889
  name?: {
860
890
  firstName?: string;
@@ -892,6 +922,7 @@ declare const socialProviders: {
892
922
  redirectURI: string;
893
923
  display?: string | undefined;
894
924
  loginHint?: string | undefined;
925
+ idTokenNonce?: string | undefined;
895
926
  additionalParams?: Record<string, string> | undefined;
896
927
  }): Promise<{
897
928
  url: URL;
@@ -909,6 +940,7 @@ declare const socialProviders: {
909
940
  }): Promise<OAuth2Tokens>;
910
941
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
911
942
  getUserInfo(token: OAuth2Tokens & {
943
+ expectedIdTokenNonce?: string | undefined;
912
944
  user?: {
913
945
  name?: {
914
946
  firstName?: string;
@@ -946,6 +978,7 @@ declare const socialProviders: {
946
978
  redirectURI: string;
947
979
  display?: string | undefined;
948
980
  loginHint?: string | undefined;
981
+ idTokenNonce?: string | undefined;
949
982
  additionalParams?: Record<string, string> | undefined;
950
983
  }): Promise<{
951
984
  url: URL;
@@ -962,6 +995,7 @@ declare const socialProviders: {
962
995
  }) => Promise<OAuth2Tokens>;
963
996
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
964
997
  getUserInfo(token: OAuth2Tokens & {
998
+ expectedIdTokenNonce?: string | undefined;
965
999
  user?: {
966
1000
  name?: {
967
1001
  firstName?: string;
@@ -999,6 +1033,7 @@ declare const socialProviders: {
999
1033
  redirectURI: string;
1000
1034
  display?: string | undefined;
1001
1035
  loginHint?: string | undefined;
1036
+ idTokenNonce?: string | undefined;
1002
1037
  additionalParams?: Record<string, string> | undefined;
1003
1038
  }) => Promise<{
1004
1039
  url: URL;
@@ -1015,6 +1050,7 @@ declare const socialProviders: {
1015
1050
  }) => Promise<OAuth2Tokens>;
1016
1051
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
1017
1052
  getUserInfo(token: OAuth2Tokens & {
1053
+ expectedIdTokenNonce?: string | undefined;
1018
1054
  user?: {
1019
1055
  name?: {
1020
1056
  firstName?: string;
@@ -1053,6 +1089,7 @@ declare const socialProviders: {
1053
1089
  redirectURI: string;
1054
1090
  display?: string | undefined;
1055
1091
  loginHint?: string | undefined;
1092
+ idTokenNonce?: string | undefined;
1056
1093
  additionalParams?: Record<string, string> | undefined;
1057
1094
  }) => Promise<{
1058
1095
  url: URL;
@@ -1070,6 +1107,7 @@ declare const socialProviders: {
1070
1107
  }) => Promise<OAuth2Tokens>;
1071
1108
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
1072
1109
  getUserInfo(token: OAuth2Tokens & {
1110
+ expectedIdTokenNonce?: string | undefined;
1073
1111
  user?: {
1074
1112
  name?: {
1075
1113
  firstName?: string;
@@ -1127,6 +1165,7 @@ declare const socialProviders: {
1127
1165
  redirectURI: string;
1128
1166
  display?: string | undefined;
1129
1167
  loginHint?: string | undefined;
1168
+ idTokenNonce?: string | undefined;
1130
1169
  additionalParams?: Record<string, string> | undefined;
1131
1170
  }): {
1132
1171
  url: URL;
@@ -1143,6 +1182,7 @@ declare const socialProviders: {
1143
1182
  }) => Promise<OAuth2Tokens>;
1144
1183
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
1145
1184
  getUserInfo(token: OAuth2Tokens & {
1185
+ expectedIdTokenNonce?: string | undefined;
1146
1186
  user?: {
1147
1187
  name?: {
1148
1188
  firstName?: string;
@@ -1179,6 +1219,7 @@ declare const socialProviders: {
1179
1219
  redirectURI: string;
1180
1220
  display?: string | undefined;
1181
1221
  loginHint?: string | undefined;
1222
+ idTokenNonce?: string | undefined;
1182
1223
  additionalParams?: Record<string, string> | undefined;
1183
1224
  }): Promise<{
1184
1225
  url: URL;
@@ -1195,6 +1236,7 @@ declare const socialProviders: {
1195
1236
  }) => Promise<OAuth2Tokens>;
1196
1237
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
1197
1238
  getUserInfo(token: OAuth2Tokens & {
1239
+ expectedIdTokenNonce?: string | undefined;
1198
1240
  user?: {
1199
1241
  name?: {
1200
1242
  firstName?: string;
@@ -1231,6 +1273,7 @@ declare const socialProviders: {
1231
1273
  redirectURI: string;
1232
1274
  display?: string | undefined;
1233
1275
  loginHint?: string | undefined;
1276
+ idTokenNonce?: string | undefined;
1234
1277
  additionalParams?: Record<string, string> | undefined;
1235
1278
  }): Promise<{
1236
1279
  url: URL;
@@ -1247,6 +1290,7 @@ declare const socialProviders: {
1247
1290
  }) => Promise<OAuth2Tokens>;
1248
1291
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
1249
1292
  getUserInfo(token: OAuth2Tokens & {
1293
+ expectedIdTokenNonce?: string | undefined;
1250
1294
  user?: {
1251
1295
  name?: {
1252
1296
  firstName?: string;
@@ -1284,6 +1328,7 @@ declare const socialProviders: {
1284
1328
  redirectURI: string;
1285
1329
  display?: string | undefined;
1286
1330
  loginHint?: string | undefined;
1331
+ idTokenNonce?: string | undefined;
1287
1332
  additionalParams?: Record<string, string> | undefined;
1288
1333
  }): Promise<{
1289
1334
  url: URL;
@@ -1301,6 +1346,7 @@ declare const socialProviders: {
1301
1346
  }) => Promise<OAuth2Tokens>;
1302
1347
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
1303
1348
  getUserInfo(token: OAuth2Tokens & {
1349
+ expectedIdTokenNonce?: string | undefined;
1304
1350
  user?: {
1305
1351
  name?: {
1306
1352
  firstName?: string;
@@ -1338,6 +1384,7 @@ declare const socialProviders: {
1338
1384
  redirectURI: string;
1339
1385
  display?: string | undefined;
1340
1386
  loginHint?: string | undefined;
1387
+ idTokenNonce?: string | undefined;
1341
1388
  additionalParams?: Record<string, string> | undefined;
1342
1389
  }): Promise<{
1343
1390
  url: URL;
@@ -1356,6 +1403,7 @@ declare const socialProviders: {
1356
1403
  }) => Promise<OAuth2Tokens>;
1357
1404
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
1358
1405
  getUserInfo(data: OAuth2Tokens & {
1406
+ expectedIdTokenNonce?: string | undefined;
1359
1407
  user?: {
1360
1408
  name?: {
1361
1409
  firstName?: string;
@@ -1393,6 +1441,7 @@ declare const socialProviders: {
1393
1441
  redirectURI: string;
1394
1442
  display?: string | undefined;
1395
1443
  loginHint?: string | undefined;
1444
+ idTokenNonce?: string | undefined;
1396
1445
  additionalParams?: Record<string, string> | undefined;
1397
1446
  }) => Promise<{
1398
1447
  url: URL;
@@ -1410,6 +1459,7 @@ declare const socialProviders: {
1410
1459
  }) => Promise<OAuth2Tokens>;
1411
1460
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
1412
1461
  getUserInfo(token: OAuth2Tokens & {
1462
+ expectedIdTokenNonce?: string | undefined;
1413
1463
  user?: {
1414
1464
  name?: {
1415
1465
  firstName?: string;
@@ -1446,6 +1496,7 @@ declare const socialProviders: {
1446
1496
  redirectURI: string;
1447
1497
  display?: string | undefined;
1448
1498
  loginHint?: string | undefined;
1499
+ idTokenNonce?: string | undefined;
1449
1500
  additionalParams?: Record<string, string> | undefined;
1450
1501
  }): Promise<{
1451
1502
  url: URL;
@@ -1462,6 +1513,7 @@ declare const socialProviders: {
1462
1513
  }) => Promise<OAuth2Tokens>;
1463
1514
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
1464
1515
  getUserInfo(token: OAuth2Tokens & {
1516
+ expectedIdTokenNonce?: string | undefined;
1465
1517
  user?: {
1466
1518
  name?: {
1467
1519
  firstName?: string;
@@ -1498,6 +1550,7 @@ declare const socialProviders: {
1498
1550
  redirectURI: string;
1499
1551
  display?: string | undefined;
1500
1552
  loginHint?: string | undefined;
1553
+ idTokenNonce?: string | undefined;
1501
1554
  additionalParams?: Record<string, string> | undefined;
1502
1555
  }): Promise<{
1503
1556
  url: URL;
@@ -1514,6 +1567,7 @@ declare const socialProviders: {
1514
1567
  }) => Promise<OAuth2Tokens>;
1515
1568
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
1516
1569
  getUserInfo(token: OAuth2Tokens & {
1570
+ expectedIdTokenNonce?: string | undefined;
1517
1571
  user?: {
1518
1572
  name?: {
1519
1573
  firstName?: string;
@@ -1571,6 +1625,7 @@ declare const socialProviders: {
1571
1625
  redirectURI: string;
1572
1626
  display?: string | undefined;
1573
1627
  loginHint?: string | undefined;
1628
+ idTokenNonce?: string | undefined;
1574
1629
  additionalParams?: Record<string, string> | undefined;
1575
1630
  }): Promise<{
1576
1631
  url: URL;
@@ -1587,6 +1642,7 @@ declare const socialProviders: {
1587
1642
  }) => Promise<OAuth2Tokens>;
1588
1643
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
1589
1644
  getUserInfo(token: OAuth2Tokens & {
1645
+ expectedIdTokenNonce?: string | undefined;
1590
1646
  user?: {
1591
1647
  name?: {
1592
1648
  firstName?: string;
@@ -1646,6 +1702,7 @@ declare const socialProviders: {
1646
1702
  redirectURI: string;
1647
1703
  display?: string | undefined;
1648
1704
  loginHint?: string | undefined;
1705
+ idTokenNonce?: string | undefined;
1649
1706
  additionalParams?: Record<string, string> | undefined;
1650
1707
  }): Promise<{
1651
1708
  url: URL;
@@ -1666,6 +1723,7 @@ declare const socialProviders: {
1666
1723
  verify: (token: string, nonce: string | undefined) => Promise<boolean>;
1667
1724
  };
1668
1725
  getUserInfo(token: OAuth2Tokens & {
1726
+ expectedIdTokenNonce?: string | undefined;
1669
1727
  user?: {
1670
1728
  name?: {
1671
1729
  firstName?: string;
@@ -1725,6 +1783,7 @@ declare const socialProviders: {
1725
1783
  redirectURI: string;
1726
1784
  display?: string | undefined;
1727
1785
  loginHint?: string | undefined;
1786
+ idTokenNonce?: string | undefined;
1728
1787
  additionalParams?: Record<string, string> | undefined;
1729
1788
  }): Promise<{
1730
1789
  url: URL;
@@ -1742,6 +1801,7 @@ declare const socialProviders: {
1742
1801
  }) => Promise<OAuth2Tokens>;
1743
1802
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
1744
1803
  getUserInfo(token: OAuth2Tokens & {
1804
+ expectedIdTokenNonce?: string | undefined;
1745
1805
  user?: {
1746
1806
  name?: {
1747
1807
  firstName?: string;
@@ -1778,6 +1838,7 @@ declare const socialProviders: {
1778
1838
  redirectURI: string;
1779
1839
  display?: string | undefined;
1780
1840
  loginHint?: string | undefined;
1841
+ idTokenNonce?: string | undefined;
1781
1842
  additionalParams?: Record<string, string> | undefined;
1782
1843
  }): Promise<{
1783
1844
  url: URL;
@@ -1803,6 +1864,7 @@ declare const socialProviders: {
1803
1864
  accessTokenExpiresAt: Date | undefined;
1804
1865
  }>);
1805
1866
  getUserInfo(token: OAuth2Tokens & {
1867
+ expectedIdTokenNonce?: string | undefined;
1806
1868
  user?: {
1807
1869
  name?: {
1808
1870
  firstName?: string;
@@ -1861,6 +1923,7 @@ declare const socialProviders: {
1861
1923
  redirectURI: string;
1862
1924
  display?: string | undefined;
1863
1925
  loginHint?: string | undefined;
1926
+ idTokenNonce?: string | undefined;
1864
1927
  additionalParams?: Record<string, string> | undefined;
1865
1928
  }): Promise<{
1866
1929
  url: URL;
@@ -1878,6 +1941,7 @@ declare const socialProviders: {
1878
1941
  }) => Promise<OAuth2Tokens>;
1879
1942
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
1880
1943
  getUserInfo(token: OAuth2Tokens & {
1944
+ expectedIdTokenNonce?: string | undefined;
1881
1945
  user?: {
1882
1946
  name?: {
1883
1947
  firstName?: string;
@@ -1915,6 +1979,7 @@ declare const socialProviders: {
1915
1979
  redirectURI: string;
1916
1980
  display?: string | undefined;
1917
1981
  loginHint?: string | undefined;
1982
+ idTokenNonce?: string | undefined;
1918
1983
  additionalParams?: Record<string, string> | undefined;
1919
1984
  }): Promise<{
1920
1985
  url: URL;
@@ -1932,6 +1997,7 @@ declare const socialProviders: {
1932
1997
  }) => Promise<OAuth2Tokens>;
1933
1998
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
1934
1999
  getUserInfo(token: OAuth2Tokens & {
2000
+ expectedIdTokenNonce?: string | undefined;
1935
2001
  user?: {
1936
2002
  name?: {
1937
2003
  firstName?: string;
@@ -1969,6 +2035,7 @@ declare const socialProviders: {
1969
2035
  redirectURI: string;
1970
2036
  display?: string | undefined;
1971
2037
  loginHint?: string | undefined;
2038
+ idTokenNonce?: string | undefined;
1972
2039
  additionalParams?: Record<string, string> | undefined;
1973
2040
  }): Promise<{
1974
2041
  url: URL;
@@ -1985,6 +2052,7 @@ declare const socialProviders: {
1985
2052
  deviceId?: string | undefined;
1986
2053
  }) => Promise<OAuth2Tokens>;
1987
2054
  getUserInfo(token: OAuth2Tokens & {
2055
+ expectedIdTokenNonce?: string | undefined;
1988
2056
  user?: {
1989
2057
  name?: {
1990
2058
  firstName?: string;
@@ -2021,6 +2089,7 @@ declare const socialProviders: {
2021
2089
  redirectURI: string;
2022
2090
  display?: string | undefined;
2023
2091
  loginHint?: string | undefined;
2092
+ idTokenNonce?: string | undefined;
2024
2093
  additionalParams?: Record<string, string> | undefined;
2025
2094
  }): {
2026
2095
  url: URL;
@@ -2050,6 +2119,7 @@ declare const socialProviders: {
2050
2119
  scopes: string[];
2051
2120
  }>);
2052
2121
  getUserInfo(token: OAuth2Tokens & {
2122
+ expectedIdTokenNonce?: string | undefined;
2053
2123
  user?: {
2054
2124
  name?: {
2055
2125
  firstName?: string;
package/dist/social-providers/kakao.d.mts CHANGED
@@ -106,6 +106,7 @@ declare const kakao: (options: KakaoOptions) => {
106
106
  redirectURI: string;
107
107
  display?: string | undefined;
108
108
  loginHint?: string | undefined;
109
+ idTokenNonce?: string | undefined;
109
110
  additionalParams?: Record<string, string> | undefined;
110
111
  }): Promise<{
111
112
  url: URL;
@@ -122,6 +123,7 @@ declare const kakao: (options: KakaoOptions) => {
122
123
  }) => Promise<OAuth2Tokens>;
123
124
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
124
125
  getUserInfo(token: OAuth2Tokens & {
126
+ expectedIdTokenNonce?: string | undefined;
125
127
  user?: {
126
128
  name?: {
127
129
  firstName?: string;
package/dist/social-providers/kick.d.mts CHANGED
@@ -38,6 +38,7 @@ declare const kick: (options: KickOptions) => {
38
38
  redirectURI: string;
39
39
  display?: string | undefined;
40
40
  loginHint?: string | undefined;
41
+ idTokenNonce?: string | undefined;
41
42
  additionalParams?: Record<string, string> | undefined;
42
43
  }): Promise<{
43
44
  url: URL;
@@ -55,6 +56,7 @@ declare const kick: (options: KickOptions) => {
55
56
  }): Promise<OAuth2Tokens>;
56
57
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
57
58
  getUserInfo(token: OAuth2Tokens & {
59
+ expectedIdTokenNonce?: string | undefined;
58
60
  user?: {
59
61
  name?: {
60
62
  firstName?: string;
package/dist/social-providers/line.d.mts CHANGED
@@ -48,6 +48,7 @@ declare const line: (options: LineOptions) => {
48
48
  redirectURI: string;
49
49
  display?: string | undefined;
50
50
  loginHint?: string | undefined;
51
+ idTokenNonce?: string | undefined;
51
52
  additionalParams?: Record<string, string> | undefined;
52
53
  }): Promise<{
53
54
  url: URL;
@@ -68,6 +69,7 @@ declare const line: (options: LineOptions) => {
68
69
  verify: (token: string, nonce: string | undefined) => Promise<boolean>;
69
70
  };
70
71
  getUserInfo(token: OAuth2Tokens & {
72
+ expectedIdTokenNonce?: string | undefined;
71
73
  user?: {
72
74
  name?: {
73
75
  firstName?: string;
package/dist/social-providers/linear.d.mts CHANGED
@@ -34,6 +34,7 @@ declare const linear: (options: LinearOptions) => {
34
34
  redirectURI: string;
35
35
  display?: string | undefined;
36
36
  loginHint?: string | undefined;
37
+ idTokenNonce?: string | undefined;
37
38
  additionalParams?: Record<string, string> | undefined;
38
39
  }): Promise<{
39
40
  url: URL;
@@ -50,6 +51,7 @@ declare const linear: (options: LinearOptions) => {
50
51
  }) => Promise<OAuth2Tokens>;
51
52
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
52
53
  getUserInfo(token: OAuth2Tokens & {
54
+ expectedIdTokenNonce?: string | undefined;
53
55
  user?: {
54
56
  name?: {
55
57
  firstName?: string;
package/dist/social-providers/linkedin.d.mts CHANGED
@@ -33,6 +33,7 @@ declare const linkedin: (options: LinkedInOptions) => {
33
33
  redirectURI: string;
34
34
  display?: string | undefined;
35
35
  loginHint?: string | undefined;
36
+ idTokenNonce?: string | undefined;
36
37
  additionalParams?: Record<string, string> | undefined;
37
38
  }) => Promise<{
38
39
  url: URL;
@@ -49,6 +50,7 @@ declare const linkedin: (options: LinkedInOptions) => {
49
50
  }) => Promise<OAuth2Tokens>;
50
51
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
51
52
  getUserInfo(token: OAuth2Tokens & {
53
+ expectedIdTokenNonce?: string | undefined;
52
54
  user?: {
53
55
  name?: {
54
56
  firstName?: string;
package/dist/social-providers/microsoft-entra-id.d.mts CHANGED
@@ -147,6 +147,7 @@ declare const microsoft: (options: MicrosoftOptions) => {
147
147
  redirectURI: string;
148
148
  display?: string | undefined;
149
149
  loginHint?: string | undefined;
150
+ idTokenNonce?: string | undefined;
150
151
  additionalParams?: Record<string, string> | undefined;
151
152
  }): Promise<{
152
153
  url: URL;
@@ -184,6 +185,7 @@ declare const microsoft: (options: MicrosoftOptions) => {
184
185
  verifyClaims: (claims: Record<string, unknown>) => boolean;
185
186
  };
186
187
  getUserInfo(token: OAuth2Tokens & {
188
+ expectedIdTokenNonce?: string | undefined;
187
189
  user?: {
188
190
  name?: {
189
191
  firstName?: string;
package/dist/social-providers/naver.d.mts CHANGED
@@ -37,6 +37,7 @@ declare const naver: (options: NaverOptions) => {
37
37
  redirectURI: string;
38
38
  display?: string | undefined;
39
39
  loginHint?: string | undefined;
40
+ idTokenNonce?: string | undefined;
40
41
  additionalParams?: Record<string, string> | undefined;
41
42
  }): Promise<{
42
43
  url: URL;
@@ -53,6 +54,7 @@ declare const naver: (options: NaverOptions) => {
53
54
  }) => Promise<OAuth2Tokens>;
54
55
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
55
56
  getUserInfo(token: OAuth2Tokens & {
57
+ expectedIdTokenNonce?: string | undefined;
56
58
  user?: {
57
59
  name?: {
58
60
  firstName?: string;
package/dist/social-providers/notion.d.mts CHANGED
@@ -30,6 +30,7 @@ declare const notion: (options: NotionOptions) => {
30
30
  redirectURI: string;
31
31
  display?: string | undefined;
32
32
  loginHint?: string | undefined;
33
+ idTokenNonce?: string | undefined;
33
34
  additionalParams?: Record<string, string> | undefined;
34
35
  }): Promise<{
35
36
  url: URL;
@@ -46,6 +47,7 @@ declare const notion: (options: NotionOptions) => {
46
47
  }) => Promise<OAuth2Tokens>;
47
48
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
48
49
  getUserInfo(token: OAuth2Tokens & {
50
+ expectedIdTokenNonce?: string | undefined;
49
51
  user?: {
50
52
  name?: {
51
53
  firstName?: string;
package/dist/social-providers/paybin.d.mts CHANGED
@@ -36,6 +36,7 @@ declare const paybin: (options: PaybinOptions) => {
36
36
  redirectURI: string;
37
37
  display?: string | undefined;
38
38
  loginHint?: string | undefined;
39
+ idTokenNonce?: string | undefined;
39
40
  additionalParams?: Record<string, string> | undefined;
40
41
  }): Promise<{
41
42
  url: URL;
@@ -53,6 +54,7 @@ declare const paybin: (options: PaybinOptions) => {
53
54
  }) => Promise<OAuth2Tokens>;
54
55
  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
55
56
  getUserInfo(token: OAuth2Tokens & {
57
+ expectedIdTokenNonce?: string | undefined;
56
58
  user?: {
57
59
  name?: {
58
60
  firstName?: string;