@better-auth/electron 1.6.3 → 1.7.0-beta.1

package/dist/client.mjs

@@ -1,4 +1,4 @@
-import { t as PACKAGE_VERSION } from "./version-1sp6DKT-.mjs";
+import { t as PACKAGE_VERSION } from "./version-C22JHwcK.mjs";
 import { n as isProcessType, r as parseProtocolScheme, t as getChannelPrefixWithDelimiter } from "./utils-DxDKRT6e.mjs";
 import { BetterAuthError } from "@better-auth/core/error";
 import { base64, base64Url } from "@better-auth/utils/base64";

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { t as PACKAGE_VERSION } from "./version-1sp6DKT-.mjs";
+import { t as PACKAGE_VERSION } from "./version-C22JHwcK.mjs";
 import { createAuthMiddleware } from "@better-auth/core/api";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
 import { base64Url } from "@better-auth/utils/base64";
@@ -7,7 +7,6 @@ import { generateRandomString } from "better-auth/crypto";
 import * as z from "zod";
 import { Buffer } from "node:buffer";
 import { timingSafeEqual } from "node:crypto";
-import { SocialProviderListEnum } from "@better-auth/core/social-providers";
 import { safeJSONParse as safeJSONParse$1 } from "@better-auth/core/utils/json";
 import { createHash } from "@better-auth/utils/hash";
 import { betterFetch } from "@better-fetch/fetch";
@@ -117,8 +116,6 @@ const electronInitOAuthProxy = (opts) => createAuthEndpoint("/electron/init-oaut
 		}
 	}
 }, async (ctx) => {
-	const isSocialProvider = SocialProviderListEnum.safeParse(ctx.query.provider);
-	if (!isSocialProvider && !ctx.context.getPlugin("generic-oauth")) throw APIError.from("BAD_REQUEST", BASE_ERROR_CODES.PROVIDER_NOT_FOUND);
 	const headers = new Headers(ctx.request?.headers);
 	headers.set("origin", new URL(ctx.context.baseURL).origin);
 	let setCookie = null;
@@ -127,7 +124,7 @@ const electronInitOAuthProxy = (opts) => createAuthEndpoint("/electron/init-oaut
 	searchParams.set("code_challenge", ctx.query.code_challenge);
 	searchParams.set("code_challenge_method", ctx.query.code_challenge_method || "plain");
 	searchParams.set("state", ctx.query.state);
-	const res = await betterFetch(`${isSocialProvider ? "/sign-in/social" : "/sign-in/oauth2"}?${searchParams.toString()}`, {
+	const res = await betterFetch(`/sign-in/social?${searchParams.toString()}`, {
 		baseURL: ctx.context.baseURL,
 		method: "POST",
 		body: { provider: ctx.query.provider },
@@ -201,7 +198,7 @@ const electron = (options) => {
 		...options || {}
 	};
 	const hookMatcher = (ctx) => {
-		return !!(ctx.path?.startsWith("/sign-in") || ctx.path?.startsWith("/sign-up") || ctx.path?.startsWith("/callback") || ctx.path?.startsWith("/oauth2/callback") || ctx.path?.startsWith("/magic-link/verify") || ctx.path?.startsWith("/email-otp/verify-email") || ctx.path?.startsWith("/verify-email") || ctx.path?.startsWith("/one-tap/callback") || ctx.path?.startsWith("/passkey/verify-authentication") || ctx.path?.startsWith("/phone-number/verify"));
+		return !!(ctx.path?.startsWith("/sign-in") || ctx.path?.startsWith("/sign-up") || ctx.path?.startsWith("/callback") || ctx.path?.startsWith("/magic-link/verify") || ctx.path?.startsWith("/email-otp/verify-email") || ctx.path?.startsWith("/verify-email") || ctx.path?.startsWith("/one-tap/callback") || ctx.path?.startsWith("/passkey/verify-authentication") || ctx.path?.startsWith("/phone-number/verify"));
 	};
 	const handleTransfer = async (ctx, payload) => {
 		const { client_id, state, code_challenge, code_challenge_method = "plain" } = payload;

package/dist/preload.d.mts

@@ -676,6 +676,12 @@ interface OAuthProvider<T extends Record<string, any> = Record<string, any>, O e
    * @returns True if the id token is valid, false otherwise
    */
   verifyIdToken?: ((token: string, nonce?: string) => Promise<boolean>) | undefined;
+  /**
+   * The expected issuer identifier for this provider (RFC 9207).
+   * When set, the callback handler validates the `iss` query parameter
+   * against this value to prevent authorization server mix-up attacks.
+   */
+  issuer?: string | undefined;
   /**
    * Disable implicit sign up for new users. When set to true for the provider,
    * sign-in need to be called with with requestSignUp as true to create new users.

package/dist/proxy.mjs

@@ -1,4 +1,4 @@
-import { t as PACKAGE_VERSION } from "./version-1sp6DKT-.mjs";
+import { t as PACKAGE_VERSION } from "./version-C22JHwcK.mjs";
 import { r as parseProtocolScheme } from "./utils-DxDKRT6e.mjs";
 import { parseCookies } from "better-auth/cookies";
 //#region src/proxy.ts

package/dist/{version-1sp6DKT-.mjs → version-C22JHwcK.mjs}

@@ -1,5 +1,5 @@
 //#endregion
 //#region src/version.ts
-const PACKAGE_VERSION = "1.6.3";
+const PACKAGE_VERSION = "1.7.0-beta.1";
 //#endregion
 export { PACKAGE_VERSION as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@better-auth/electron",
-  "version": "1.6.3",
+  "version": "1.7.0-beta.1",
   "description": "Better Auth integration for Electron applications.",
   "type": "module",
   "license": "MIT",
@@ -80,8 +80,8 @@
     "better-sqlite3": "^12.6.2",
     "electron": "^38.8.4",
     "tsdown": "0.21.1",
-    "@better-auth/core": "1.6.3",
-    "better-auth": "1.6.3"
+    "@better-auth/core": "1.7.0-beta.1",
+    "better-auth": "1.7.0-beta.1"
   },
   "peerDependencies": {
     "@better-auth/utils": "0.4.0",
@@ -89,8 +89,8 @@
     "better-call": "1.3.5",
     "conf": "^15.0.2",
     "electron": ">=36.0.0",
-    "@better-auth/core": "^1.6.3",
-    "better-auth": "^1.6.3"
+    "@better-auth/core": "^1.7.0-beta.1",
+    "better-auth": "^1.7.0-beta.1"
   },
   "peerDependenciesMeta": {
     "electron": {