@better-auth/core 1.7.0-rc.5 → 1.7.0

package/dist/oauth2/verify.mjs

@@ -4,7 +4,7 @@ import { createInMemoryDpopReplayStore, enforceDpopBinding, getDpopJktFromPayloa
 import { APIError } from "better-call";
 import { UnsecuredJWT, createLocalJWKSet, decodeProtectedHeader, errors, jwtVerify } from "jose";
 //#region src/oauth2/verify.ts
-const joseInfrastructureErrorCodes = /* @__PURE__ */ new Set([
+const joseInfrastructureErrorCodes = new Set([
 	errors.JWKSTimeout.code,
 	errors.JWKSInvalid.code,
 	errors.JWKSMultipleMatchingKeys.code
@@ -330,4 +330,4 @@ async function verifyAccessTokenRequest(request, opts) {
 	return payload;
 }
 //#endregion
-export { createInsufficientScopeError, getJwks, isInsufficientScopeError, jwksCache, requestToResourceInput, verifyAccessTokenRequest, verifyBearerToken, verifyJwsAccessToken };
+export { createInsufficientScopeError, getJwks, isInsufficientScopeError, requestToResourceInput, verifyAccessTokenRequest, verifyBearerToken, verifyJwsAccessToken };

package/dist/social-providers/apple.d.mts

@@ -1,5 +1,6 @@
 import { OAuth2Tokens, OAuth2UserInfo, OAuthAccountKeyContext, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
+import * as _$jose from "jose";
+
 //#region src/social-providers/apple.d.ts
 interface AppleProfile {
   /**
@@ -68,9 +69,17 @@ interface AppleOptions extends ProviderOptions<AppleProfile> {
 declare const apple: (options: AppleOptions) => {
   id: "apple";
   name: string;
-  accountSubject: ({ profile }: OAuthAccountKeyContext<AppleProfile>) => string;
+  accountSubject: ({
+    profile
+  }: OAuthAccountKeyContext<AppleProfile>) => string;
   accountIssuer: string;
-  createAuthorizationURL({ state, scopes, redirectURI, additionalParams, codeVerifier }: {
+  createAuthorizationURL({
+    state,
+    scopes,
+    redirectURI,
+    additionalParams,
+    codeVerifier
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -80,14 +89,18 @@ declare const apple: (options: AppleOptions) => {
     idTokenNonce?: string | undefined;
     additionalParams?: Record<string, string> | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    codeVerifier,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;
     deviceId?: string | undefined;
   }) => Promise<OAuth2Tokens>;
   idToken: {
-    jwks: (header: import("jose").JWTHeaderParameters) => Promise<Uint8Array<ArrayBufferLike> | CryptoKey>;
+    jwks: (header: _$jose.JWTHeaderParameters) => Promise<Uint8Array<ArrayBufferLike> | CryptoKey>;
     issuer: string;
     audience: string | string[];
     maxTokenAge: string;

package/dist/social-providers/atlassian.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Tokens, OAuth2UserInfo, OAuthAccountKeyContext, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/atlassian.d.ts
 interface AtlassianProfile {
   account_type?: string | undefined;
@@ -22,8 +21,16 @@ interface AtlassianOptions extends ProviderOptions<AtlassianProfile> {
 declare const atlassian: (options: AtlassianOptions) => {
   id: "atlassian";
   name: string;
-  accountSubject: ({ profile }: OAuthAccountKeyContext<AtlassianProfile>) => string;
-  createAuthorizationURL({ state, scopes, codeVerifier, redirectURI, additionalParams }: {
+  accountSubject: ({
+    profile
+  }: OAuthAccountKeyContext<AtlassianProfile>) => string;
+  createAuthorizationURL({
+    state,
+    scopes,
+    codeVerifier,
+    redirectURI,
+    additionalParams
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -33,7 +40,11 @@ declare const atlassian: (options: AtlassianOptions) => {
     idTokenNonce?: string | undefined;
     additionalParams?: Record<string, string> | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    codeVerifier,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/cognito.d.mts

@@ -1,5 +1,6 @@
 import { OAuth2Tokens, OAuth2UserInfo, OAuthAccountKeyContext, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
+import * as _$jose from "jose";
+
 //#region src/social-providers/cognito.d.ts
 interface CognitoProfile {
   sub: string;
@@ -48,9 +49,17 @@ interface CognitoOptions extends ProviderOptions<CognitoProfile> {
 declare const cognito: (options: CognitoOptions) => {
   id: "cognito";
   name: string;
-  accountSubject: ({ profile }: OAuthAccountKeyContext<CognitoProfile>) => string;
+  accountSubject: ({
+    profile
+  }: OAuthAccountKeyContext<CognitoProfile>) => string;
   accountIssuer: string;
-  createAuthorizationURL({ state, scopes, codeVerifier, redirectURI, additionalParams }: {
+  createAuthorizationURL({
+    state,
+    scopes,
+    codeVerifier,
+    redirectURI,
+    additionalParams
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -60,7 +69,11 @@ declare const cognito: (options: CognitoOptions) => {
     idTokenNonce?: string | undefined;
     additionalParams?: Record<string, string> | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    codeVerifier,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;
@@ -68,7 +81,7 @@ declare const cognito: (options: CognitoOptions) => {
   }) => Promise<OAuth2Tokens>;
   refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
   idToken: {
-    jwks: (header: import("jose").JWTHeaderParameters) => Promise<Uint8Array<ArrayBufferLike> | CryptoKey>;
+    jwks: (header: _$jose.JWTHeaderParameters) => Promise<Uint8Array<ArrayBufferLike> | CryptoKey>;
     issuer: string;
     audience: string | string[];
     maxTokenAge: string;

package/dist/social-providers/discord.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Tokens, OAuth2UserInfo, OAuthAccountKeyContext, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/discord.d.ts
 interface DiscordProfile extends Record<string, any> {
   /** the user's id (i.e. the numerical snowflake) */
@@ -78,8 +77,15 @@ interface DiscordOptions extends ProviderOptions<DiscordProfile> {
 declare const discord: (options: DiscordOptions) => {
   id: "discord";
   name: string;
-  accountSubject: ({ profile }: OAuthAccountKeyContext<DiscordProfile>) => string;
-  createAuthorizationURL({ state, scopes, redirectURI, additionalParams }: {
+  accountSubject: ({
+    profile
+  }: OAuthAccountKeyContext<DiscordProfile>) => string;
+  createAuthorizationURL({
+    state,
+    scopes,
+    redirectURI,
+    additionalParams
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -89,7 +95,10 @@ declare const discord: (options: DiscordOptions) => {
     idTokenNonce?: string | undefined;
     additionalParams?: Record<string, string> | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({ code, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/dropbox.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Tokens, OAuth2UserInfo, OAuthAccountKeyContext, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/dropbox.d.ts
 interface DropboxProfile {
   account_id: string;
@@ -21,8 +20,16 @@ interface DropboxOptions extends ProviderOptions<DropboxProfile> {
 declare const dropbox: (options: DropboxOptions) => {
   id: "dropbox";
   name: string;
-  accountSubject: ({ profile }: OAuthAccountKeyContext<DropboxProfile>) => string;
-  createAuthorizationURL: ({ state, scopes, codeVerifier, redirectURI, additionalParams }: {
+  accountSubject: ({
+    profile
+  }: OAuthAccountKeyContext<DropboxProfile>) => string;
+  createAuthorizationURL: ({
+    state,
+    scopes,
+    codeVerifier,
+    redirectURI,
+    additionalParams
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -32,7 +39,11 @@ declare const dropbox: (options: DropboxOptions) => {
     idTokenNonce?: string | undefined;
     additionalParams?: Record<string, string> | undefined;
   }) => Promise<URL>;
-  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    codeVerifier,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/facebook.d.mts

@@ -1,5 +1,6 @@
 import { OAuth2Tokens, OAuth2UserInfo, OAuthAccountKeyContext, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
+import * as _$jose from "jose";
+
 //#region src/social-providers/facebook.d.ts
 interface FacebookGraphProfile {
   id: string;
@@ -38,9 +39,17 @@ interface FacebookOptions extends ProviderOptions<FacebookProfile> {
 declare const facebook: (options: FacebookOptions) => {
   id: "facebook";
   name: string;
-  accountSubject: ({ profile }: OAuthAccountKeyContext<FacebookProfile>) => string;
+  accountSubject: ({
+    profile
+  }: OAuthAccountKeyContext<FacebookProfile>) => string;
   accountIssuer: string;
-  createAuthorizationURL({ state, scopes, redirectURI, loginHint, additionalParams }: {
+  createAuthorizationURL({
+    state,
+    scopes,
+    redirectURI,
+    loginHint,
+    additionalParams
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -50,7 +59,10 @@ declare const facebook: (options: FacebookOptions) => {
     idTokenNonce?: string | undefined;
     additionalParams?: Record<string, string> | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({ code, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;
@@ -58,12 +70,12 @@ declare const facebook: (options: FacebookOptions) => {
   }) => Promise<OAuth2Tokens>;
   idToken: {
     jwks: {
-      (protectedHeader?: import("jose").JWSHeaderParameters, token?: import("jose").FlattenedJWSInput): Promise<import("jose").CryptoKey>;
+      (protectedHeader?: _$jose.JWSHeaderParameters, token?: _$jose.FlattenedJWSInput): Promise<_$jose.CryptoKey>;
       coolingDown: boolean;
       fresh: boolean;
       reloading: boolean;
       reload: () => Promise<void>;
-      jwks: () => import("jose").JSONWebKeySet | undefined;
+      jwks: () => _$jose.JSONWebKeySet | undefined;
     };
     issuer: string;
     audience: string | string[];

package/dist/social-providers/figma.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Tokens, OAuth2UserInfo, OAuthAccountKeyContext, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/figma.d.ts
 interface FigmaProfile {
   id: string;
@@ -13,8 +12,16 @@ interface FigmaOptions extends ProviderOptions<FigmaProfile> {
 declare const figma: (options: FigmaOptions) => {
   id: "figma";
   name: string;
-  accountSubject: ({ profile }: OAuthAccountKeyContext<FigmaProfile>) => string;
-  createAuthorizationURL({ state, scopes, codeVerifier, redirectURI, additionalParams }: {
+  accountSubject: ({
+    profile
+  }: OAuthAccountKeyContext<FigmaProfile>) => string;
+  createAuthorizationURL({
+    state,
+    scopes,
+    codeVerifier,
+    redirectURI,
+    additionalParams
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -24,7 +31,11 @@ declare const figma: (options: FigmaOptions) => {
     idTokenNonce?: string | undefined;
     additionalParams?: Record<string, string> | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    codeVerifier,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/github.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Tokens, OAuth2UserInfo, OAuthAccountKeyContext, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/github.d.ts
 interface GithubProfile {
   login: string;
@@ -53,8 +52,17 @@ interface GithubOptions extends ProviderOptions<GithubProfile> {
 declare const github: (options: GithubOptions) => {
   id: "github";
   name: string;
-  accountSubject: ({ profile }: OAuthAccountKeyContext<GithubProfile>) => string;
-  createAuthorizationURL({ state, scopes, loginHint, codeVerifier, redirectURI, additionalParams }: {
+  accountSubject: ({
+    profile
+  }: OAuthAccountKeyContext<GithubProfile>) => string;
+  createAuthorizationURL({
+    state,
+    scopes,
+    loginHint,
+    codeVerifier,
+    redirectURI,
+    additionalParams
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -64,7 +72,11 @@ declare const github: (options: GithubOptions) => {
     idTokenNonce?: string | undefined;
     additionalParams?: Record<string, string> | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    codeVerifier,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/gitlab.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Tokens, OAuth2UserInfo, OAuthAccountKeyContext, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/gitlab.d.ts
 interface GitlabProfile extends Record<string, any> {
   id: number;
@@ -53,8 +52,17 @@ interface GitlabOptions extends ProviderOptions<GitlabProfile> {
 declare const gitlab: (options: GitlabOptions) => {
   id: "gitlab";
   name: string;
-  accountSubject: ({ profile }: OAuthAccountKeyContext<GitlabProfile>) => number;
-  createAuthorizationURL: ({ state, scopes, codeVerifier, loginHint, redirectURI, additionalParams }: {
+  accountSubject: ({
+    profile
+  }: OAuthAccountKeyContext<GitlabProfile>) => number;
+  createAuthorizationURL: ({
+    state,
+    scopes,
+    codeVerifier,
+    loginHint,
+    redirectURI,
+    additionalParams
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -64,7 +72,11 @@ declare const gitlab: (options: GitlabOptions) => {
     idTokenNonce?: string | undefined;
     additionalParams?: Record<string, string> | undefined;
   }) => Promise<URL>;
-  validateAuthorizationCode: ({ code, redirectURI, codeVerifier }: {
+  validateAuthorizationCode: ({
+    code,
+    redirectURI,
+    codeVerifier
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/google.d.mts

@@ -1,6 +1,7 @@
 import { OAuth2Tokens, OAuth2UserInfo, OAuthAccountKeyContext, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
+import * as _$jose from "jose";
 import { JWTPayload } from "jose";
+
 //#region src/social-providers/google.d.ts
 interface GoogleProfile {
   aud: string;
@@ -68,7 +69,11 @@ interface VerifyGoogleIdTokenOptions {
  * Verifies a Google ID token against Google's issuer, audience, signature,
  * expiry, and maximum token age.
  */
-declare const verifyGoogleIdToken: ({ token, audience, nonce }: VerifyGoogleIdTokenOptions) => Promise<JWTPayload | null>;
+declare const verifyGoogleIdToken: ({
+  token,
+  audience,
+  nonce
+}: VerifyGoogleIdTokenOptions) => Promise<JWTPayload | null>;
 /**
  * Checks whether Google's verified `hd` claim satisfies the configured hosted
  * domain restriction. `hd: "*"` accepts any Google Workspace hosted domain.
@@ -77,9 +82,19 @@ declare const isGoogleHostedDomainAllowed: (configuredHostedDomain: string | und
 declare const google: (options: GoogleOptions) => {
   id: "google";
   name: string;
-  accountSubject: ({ profile }: OAuthAccountKeyContext<GoogleProfile>) => string;
+  accountSubject: ({
+    profile
+  }: OAuthAccountKeyContext<GoogleProfile>) => string;
   accountIssuer: string;
-  createAuthorizationURL({ state, scopes, codeVerifier, redirectURI, loginHint, display, additionalParams }: {
+  createAuthorizationURL({
+    state,
+    scopes,
+    codeVerifier,
+    redirectURI,
+    loginHint,
+    display,
+    additionalParams
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -89,7 +104,11 @@ declare const google: (options: GoogleOptions) => {
     idTokenNonce?: string | undefined;
     additionalParams?: Record<string, string> | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    codeVerifier,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;
@@ -97,7 +116,7 @@ declare const google: (options: GoogleOptions) => {
   }) => Promise<OAuth2Tokens>;
   refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
   idToken: {
-    jwks: (header: import("jose").JWTHeaderParameters) => Promise<Uint8Array<ArrayBufferLike> | CryptoKey>;
+    jwks: (header: _$jose.JWTHeaderParameters) => Promise<Uint8Array<ArrayBufferLike> | CryptoKey>;
     issuer: string[];
     audience: string | string[];
     maxTokenAge: string;

package/dist/social-providers/huggingface.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Tokens, OAuth2UserInfo, OAuthAccountKeyContext, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/huggingface.d.ts
 interface HuggingFaceProfile {
   sub: string;
@@ -35,8 +34,16 @@ interface HuggingFaceOptions extends ProviderOptions<HuggingFaceProfile> {
 declare const huggingface: (options: HuggingFaceOptions) => {
   id: "huggingface";
   name: string;
-  accountSubject: ({ profile }: OAuthAccountKeyContext<HuggingFaceProfile>) => string;
-  createAuthorizationURL({ state, scopes, codeVerifier, redirectURI, additionalParams }: {
+  accountSubject: ({
+    profile
+  }: OAuthAccountKeyContext<HuggingFaceProfile>) => string;
+  createAuthorizationURL({
+    state,
+    scopes,
+    codeVerifier,
+    redirectURI,
+    additionalParams
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -46,7 +53,11 @@ declare const huggingface: (options: HuggingFaceOptions) => {
     idTokenNonce?: string | undefined;
     additionalParams?: Record<string, string> | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    codeVerifier,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;