@better-auth/electron 1.7.0-beta.6 → 1.7.0-beta.7

package/dist/client.mjs

@@ -1,4 +1,4 @@
-import { t as PACKAGE_VERSION } from "./version-BTlyLl-N.mjs";
+import { t as PACKAGE_VERSION } from "./version-DQW8cveo.mjs";
 import { n as isProcessType, r as parseProtocolScheme, t as getChannelPrefixWithDelimiter } from "./utils-DxDKRT6e.mjs";
 import { BetterAuthError } from "@better-auth/core/error";
 import { base64, base64Url } from "@better-auth/utils/base64";

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { t as PACKAGE_VERSION } from "./version-BTlyLl-N.mjs";
+import { t as PACKAGE_VERSION } from "./version-DQW8cveo.mjs";
 import { createAuthMiddleware } from "@better-auth/core/api";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
 import { base64Url } from "@better-auth/utils/base64";

package/dist/preload.d.mts

@@ -756,6 +756,17 @@ type OAuth2UserInfo = {
   image?: string | undefined;
   emailVerified: boolean;
 };
+/**
+ * Request metadata available to provider refresh hooks.
+ *
+ * The refresh flow may be triggered by endpoints such as `getAccessToken` or
+ * `refreshToken`; this context gives provider hooks access to the triggering
+ * request without exposing the full endpoint implementation surface.
+ */
+interface OAuthRefreshContext {
+  headers?: Headers | undefined;
+  request?: Request | undefined;
+}
 /**
  * The result of building a provider authorization URL.
  *
@@ -815,6 +826,12 @@ interface UpstreamProvider<T extends Record<string, any> = Record<string, any>,
     redirectURI: string;
     display?: string | undefined;
     loginHint?: string | undefined;
+    /**
+     * OIDC nonce generated by the redirect initiator and persisted in OAuth
+     * state. Providers that set `requiresIdTokenNonce` must forward this to
+     * the authorization URL as the `nonce` parameter.
+     */
+    idTokenNonce?: string | undefined;
     /**
      * Extra query parameters to append to the authorization URL.
      * Providers forward these to the shared `createAuthorizationURL` helper,
@@ -831,6 +848,12 @@ interface UpstreamProvider<T extends Record<string, any> = Record<string, any>,
     deviceId?: string | undefined;
   }) => Promise<OAuth2Tokens | null>;
   getUserInfo: (token: OAuth2Tokens & {
+    /**
+     * OIDC nonce recovered from OAuth state. Providers that required an
+     * ID-token nonce must pass this to `verifyProviderIdToken` before
+     * trusting ID-token claims.
+     */
+    expectedIdTokenNonce?: string | undefined;
     /**
      * The user object from the provider
      * This is only available for some providers like Apple
@@ -847,9 +870,13 @@ interface UpstreamProvider<T extends Record<string, any> = Record<string, any>,
     data: T;
   } | null>;
   /**
-   * Custom function to refresh a token
+   * Custom function to refresh a token.
+   *
+   * Receives request metadata from the endpoint that triggered the refresh.
+   * Providers that don't need request-scoped data can ignore the second
+   * argument.
    */
-  refreshAccessToken?: ((refreshToken: string) => Promise<OAuth2Tokens>) | undefined;
+  refreshAccessToken?: ((refreshToken: string, ctx?: OAuthRefreshContext) => Promise<OAuth2Tokens>) | undefined;
   /**
    * Declarative id_token verification config consumed by the shared
    * `verifyProviderIdToken` verifier. Providers set this instead of implementing a boolean
@@ -862,6 +889,13 @@ interface UpstreamProvider<T extends Record<string, any> = Record<string, any>,
    * against this value to prevent authorization server mix-up attacks.
    */
   issuer?: string | undefined;
+  /**
+   * Require shared OAuth redirect routes to bind ID-token verification to an
+   * authorization request nonce. When true, routes generate `idTokenNonce`,
+   * pass it to `createAuthorizationURL`, persist it in state, and provide it
+   * back to `getUserInfo` as `expectedIdTokenNonce`.
+   */
+  requiresIdTokenNonce?: boolean | undefined;
   /**
    * Disable implicit sign up for new users. When set to true for the provider,
    * sign-in need to be called with with requestSignUp as true to create new users.
@@ -2409,6 +2443,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -2433,6 +2468,7 @@ declare const socialProviders: {
     };
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -2470,6 +2506,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -2487,6 +2524,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -2524,6 +2562,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -2547,6 +2586,7 @@ declare const socialProviders: {
       maxTokenAge: string;
     };
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -2583,6 +2623,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -2599,6 +2640,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -2636,6 +2678,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -2666,6 +2709,7 @@ declare const socialProviders: {
     };
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -2703,6 +2747,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -2720,6 +2765,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -2758,6 +2804,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -2775,6 +2822,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens | null>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -2806,6 +2854,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -2829,6 +2878,7 @@ declare const socialProviders: {
       verifyClaims: (claims: Record<string, unknown>) => boolean;
     };
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -2870,6 +2920,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -2894,6 +2945,7 @@ declare const socialProviders: {
       verifyClaims: ((claims: Record<string, unknown>) => boolean) | undefined;
     };
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -2931,6 +2983,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -2948,6 +3001,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -2984,6 +3038,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -3000,6 +3055,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -3037,6 +3093,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -3054,6 +3111,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -3090,6 +3148,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -3106,6 +3165,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -3137,6 +3197,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -3154,6 +3215,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -3191,6 +3253,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }) => Promise<{
       url: URL;
@@ -3208,6 +3271,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -3245,6 +3309,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -3262,6 +3327,7 @@ declare const socialProviders: {
     }): Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -3299,6 +3365,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -3315,6 +3382,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -3352,6 +3420,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }) => Promise<{
       url: URL;
@@ -3368,6 +3437,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -3406,6 +3476,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }) => Promise<{
       url: URL;
@@ -3423,6 +3494,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -3480,6 +3552,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): {
       url: URL;
@@ -3496,6 +3569,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -3532,6 +3606,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -3548,6 +3623,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -3584,6 +3660,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -3600,6 +3677,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -3637,6 +3715,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -3654,6 +3733,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -3691,6 +3771,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -3709,6 +3790,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(data: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -3746,6 +3828,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }) => Promise<{
       url: URL;
@@ -3763,6 +3846,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -3799,6 +3883,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -3815,6 +3900,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -3851,6 +3937,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -3867,6 +3954,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -3924,6 +4012,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -3940,6 +4029,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -3999,6 +4089,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -4019,6 +4110,7 @@ declare const socialProviders: {
       verify: (token: string, nonce: string | undefined) => Promise<boolean>;
     };
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -4078,6 +4170,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -4095,6 +4188,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -4131,6 +4225,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -4156,6 +4251,7 @@ declare const socialProviders: {
       accessTokenExpiresAt: Date | undefined;
     }>);
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -4214,6 +4310,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -4231,6 +4328,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -4268,6 +4366,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -4285,6 +4384,7 @@ declare const socialProviders: {
     }) => Promise<OAuth2Tokens>;
     refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -4322,6 +4422,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): Promise<{
       url: URL;
@@ -4338,6 +4439,7 @@ declare const socialProviders: {
       deviceId?: string | undefined;
     }) => Promise<OAuth2Tokens>;
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;
@@ -4374,6 +4476,7 @@ declare const socialProviders: {
       redirectURI: string;
       display?: string | undefined;
       loginHint?: string | undefined;
+      idTokenNonce?: string | undefined;
       additionalParams?: Record<string, string> | undefined;
     }): {
       url: URL;
@@ -4403,6 +4506,7 @@ declare const socialProviders: {
       scopes: string[];
     }>);
     getUserInfo(token: OAuth2Tokens & {
+      expectedIdTokenNonce?: string | undefined;
       user?: {
         name?: {
           firstName?: string;

package/dist/proxy.mjs

@@ -1,4 +1,4 @@
-import { t as PACKAGE_VERSION } from "./version-BTlyLl-N.mjs";
+import { t as PACKAGE_VERSION } from "./version-DQW8cveo.mjs";
 import { r as parseProtocolScheme } from "./utils-DxDKRT6e.mjs";
 import { parseCookies } from "better-auth/cookies";
 //#region src/proxy.ts

package/dist/{version-BTlyLl-N.mjs → version-DQW8cveo.mjs}

@@ -1,5 +1,5 @@
 //#endregion
 //#region src/version.ts
-const PACKAGE_VERSION = "1.7.0-beta.6";
+const PACKAGE_VERSION = "1.7.0-beta.7";
 //#endregion
 export { PACKAGE_VERSION as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@better-auth/electron",
-  "version": "1.7.0-beta.6",
+  "version": "1.7.0-beta.7",
   "description": "Better Auth integration for Electron applications.",
   "type": "module",
   "license": "MIT",
@@ -80,8 +80,8 @@
     "better-sqlite3": "^12.6.2",
     "electron": "^41.2.2",
     "tsdown": "0.21.1",
-    "@better-auth/core": "1.7.0-beta.6",
-    "better-auth": "1.7.0-beta.6"
+    "@better-auth/core": "1.7.0-beta.7",
+    "better-auth": "1.7.0-beta.7"
   },
   "peerDependencies": {
     "@better-auth/utils": "0.4.2",
@@ -89,8 +89,8 @@
     "better-call": "1.3.6",
     "conf": "^15.0.2",
     "electron": ">=36.0.0",
-    "@better-auth/core": "^1.7.0-beta.6",
-    "better-auth": "^1.7.0-beta.6"
+    "@better-auth/core": "^1.7.0-beta.7",
+    "better-auth": "^1.7.0-beta.7"
   },
   "peerDependenciesMeta": {
     "electron": {