@better-auth/electron 1.5.0-beta.20 → 1.5.0

package/dist/client.d.mts

@@ -11,6 +11,7 @@ declare const electronClient: <O extends ElectronClientOptions>(options: O) => {
     id: string;
     name: string;
     init(url: string, options: ({
+      priority?: RequestPriority | undefined;
       cache?: RequestCache | undefined;
       credentials?: RequestCredentials | undefined;
       headers?: (HeadersInit & (HeadersInit | {
@@ -22,7 +23,6 @@ declare const electronClient: <O extends ElectronClientOptions>(options: O) => {
       keepalive?: boolean | undefined;
       method?: string | undefined;
       mode?: RequestMode | undefined;
-      priority?: RequestPriority | undefined;
       redirect?: RequestRedirect | undefined;
       referrer?: string | undefined;
       referrerPolicy?: ReferrerPolicy | undefined;
@@ -66,6 +66,7 @@ declare const electronClient: <O extends ElectronClientOptions>(options: O) => {
     } & Record<string, any>) | undefined): Promise<{
       url: string;
       options: {
+        priority?: RequestPriority | undefined;
         cache?: RequestCache | undefined;
         credentials?: RequestCredentials | undefined;
         headers?: (HeadersInit & (HeadersInit | {
@@ -77,7 +78,6 @@ declare const electronClient: <O extends ElectronClientOptions>(options: O) => {
         keepalive?: boolean | undefined;
         method?: string | undefined;
         mode?: RequestMode | undefined;
-        priority?: RequestPriority | undefined;
         redirect?: RequestRedirect | undefined;
         referrer?: string | undefined;
         referrerPolicy?: ReferrerPolicy | undefined;

package/dist/index.d.mts

@@ -114,6 +114,7 @@ declare const electron: (options?: ElectronOptions | undefined) => {
         internalAdapter: better_auth0.InternalAdapter<better_auth0.BetterAuthOptions>;
         createAuthCookie: (cookieName: string, overrideAttributes?: Partial<better_call0.CookieOptions> | undefined) => better_auth0.BetterAuthCookie;
         secret: string;
+        secretConfig: string | better_auth0.SecretConfig;
         sessionConfig: {
           updateAge: number;
           expiresIn: number;

package/dist/preload.d.mts

@@ -6,6 +6,7 @@ import "nanostores";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 import { Database } from "bun:sqlite";
 import { DatabaseSync } from "node:sqlite";
+import { D1Database } from "@cloudflare/workers-types";
 import { Dialect, Kysely, Migration, MysqlPool, PostgresPool, SqliteDatabase } from "kysely";
 import "better-auth";
 
@@ -827,6 +828,17 @@ type BetterAuthCookies = {
   dontRememberToken: BetterAuthCookie;
 }; //#endregion
 //#endregion
+//#region ../core/dist/types/secret.d.mts
+//#region src/types/secret.d.ts
+interface SecretConfig {
+  /** Map of version number → secret value */
+  keys: Map<number, string>;
+  /** Version to use for new encryption (first entry in secrets array) */
+  currentVersion: number;
+  /** Legacy secret for bare-hex fallback (from BETTER_AUTH_SECRET) */
+  legacySecret?: string;
+} //#endregion
+//#endregion
 //#region ../core/dist/db/schema/session.d.mts
 //#region src/db/schema/session.d.ts
 declare const sessionSchema: z.ZodObject<{
@@ -1153,7 +1165,9 @@ interface InternalAdapter<_Options extends BetterAuthOptions = BetterAuthOptions
   }>;
   createUser<T extends Record<string, any>>(user: Omit<User, "id" | "createdAt" | "updatedAt" | "emailVerified"> & Partial<User> & Record<string, any>): Promise<T & User>;
   createAccount<T extends Record<string, any>>(account: Omit<Account, "id" | "createdAt" | "updatedAt"> & Partial<Account> & T): Promise<T & Account>;
-  listSessions(userId: string): Promise<Session[]>;
+  listSessions(userId: string, options?: {
+    onlyActiveSessions?: boolean | undefined;
+  } | undefined): Promise<Session[]>;
   listUsers(limit?: number | undefined, offset?: number | undefined, sortBy?: {
     field: string;
     direction: "asc" | "desc";
@@ -1165,7 +1179,9 @@ interface InternalAdapter<_Options extends BetterAuthOptions = BetterAuthOptions
     session: Session & Record<string, any>;
     user: User & Record<string, any>;
   } | null>;
-  findSessions(sessionTokens: string[]): Promise<{
+  findSessions(sessionTokens: string[], options?: {
+    onlyActiveSessions?: boolean | undefined;
+  } | undefined): Promise<{
     session: Session;
     user: User;
   }[]>;
@@ -1290,6 +1306,7 @@ type AuthContext<Options extends BetterAuthOptions = BetterAuthOptions> = Plugin
   internalAdapter: InternalAdapter<Options>;
   createAuthCookie: CreateCookieGetterFn;
   secret: string;
+  secretConfig: string | SecretConfig;
   sessionConfig: {
     updateAge: number;
     expiresIn: number;
@@ -4982,6 +4999,7 @@ declare const createAuthMiddleware: {
     internalAdapter: InternalAdapter<BetterAuthOptions>;
     createAuthCookie: (cookieName: string, overrideAttributes?: Partial<CookieOptions> | undefined) => BetterAuthCookie;
     secret: string;
+    secretConfig: string | SecretConfig;
     sessionConfig: {
       updateAge: number;
       expiresIn: number;
@@ -5110,6 +5128,7 @@ declare const createAuthMiddleware: {
     internalAdapter: InternalAdapter<BetterAuthOptions>;
     createAuthCookie: (cookieName: string, overrideAttributes?: Partial<CookieOptions> | undefined) => BetterAuthCookie;
     secret: string;
+    secretConfig: string | SecretConfig;
     sessionConfig: {
       updateAge: number;
       expiresIn: number;
@@ -5512,10 +5531,26 @@ type BetterAuthOptions = {
    * ```
    */
   secret?: string | undefined;
+  /**
+   * Versioned secrets for non-destructive secret rotation.
+   * When set, encryption uses an envelope format with key IDs.
+   * First entry is the current key used for new encryption.
+   * Remaining entries are decryption-only (previous rotations).
+   *
+   * Can also be set via BETTER_AUTH_SECRETS env var:
+   * `BETTER_AUTH_SECRETS=2:base64secret,1:base64secret`
+   *
+   * When set, `secret` is only used as legacy fallback
+   * for decrypting bare-hex payloads that predate the envelope format.
+   */
+  secrets?: Array<{
+    version: number;
+    value: string;
+  }> | undefined;
   /**
    * Database configuration
    */
-  database?: (PostgresPool | MysqlPool | SqliteDatabase | Dialect | DBAdapterInstance | Database | DatabaseSync | {
+  database?: (PostgresPool | MysqlPool | SqliteDatabase | Dialect | DBAdapterInstance | Database | DatabaseSync | D1Database | {
     dialect: Dialect;
     type: KyselyDatabaseType;
     /**
@@ -5754,6 +5789,42 @@ type BetterAuthOptions = {
     data: {
       user: User;
     }, request?: Request) => Promise<void>;
+    /**
+     * Build a custom synthetic user for email enumeration
+     * protection. When a sign-up attempt is made with an
+     * email that already exists, this function is called
+     * to build the fake user response.
+     *
+     * Use this when plugins add fields to the user table
+     * (e.g. admin plugin adds `role`, `banned`, etc.)
+     * to ensure the fake response is indistinguishable
+     * from a real sign-up.
+     *
+     * @example
+     * ```ts
+     * customSyntheticUser: ({ coreFields, additionalFields, id }) => ({
+     *   ...coreFields,
+     *   role: "user",
+     *   banned: false,
+     *   banReason: null,
+     *   banExpires: null,
+     *   ...additionalFields,
+     *   id,
+     * })
+     * ```
+     */
+    customSyntheticUser?: (params: {
+      /** Core user fields: name, email, emailVerified, image, createdAt, updatedAt */coreFields: {
+        name: string;
+        email: string;
+        emailVerified: boolean;
+        image: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+      }; /** Processed additional fields from options.user.additionalFields (with defaults applied) */
+      additionalFields: Record<string, unknown>; /** Generated user ID */
+      id: string;
+    }) => Record<string, unknown>;
   } | undefined;
   /**
    * list of social providers

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@better-auth/electron",
-  "version": "1.5.0-beta.20",
+  "version": "1.5.0",
   "description": "Better Auth integration for Electron applications.",
   "type": "module",
   "license": "MIT",
@@ -79,8 +79,8 @@
     "better-sqlite3": "^12.6.2",
     "electron": "^38.8.4",
     "tsdown": "^0.20.3",
-    "@better-auth/core": "1.5.0-beta.20",
-    "better-auth": "1.5.0-beta.20"
+    "@better-auth/core": "1.5.0",
+    "better-auth": "1.5.0"
   },
   "peerDependencies": {
     "@better-auth/utils": "0.3.1",
@@ -88,8 +88,8 @@
     "better-call": "1.3.2",
     "conf": "^15.0.2",
     "electron": ">=36.0.0",
-    "@better-auth/core": "1.5.0-beta.20",
-    "better-auth": "1.5.0-beta.20"
+    "@better-auth/core": "1.5.0",
+    "better-auth": "1.5.0"
   },
   "peerDependenciesMeta": {
     "electron": {