@better-auth/infra 0.3.7 → 0.4.1

package/dist/native.d.mts

@@ -1,12 +1,16 @@
-import { a as DashGetAuditLogsInput, i as DashGetAllAuditLogsInput, n as DashAuditLogsResponse, o as dashClient, r as DashClientOptions, t as DashAuditLog } from "./dash-client-DXuu2ctl.mjs";
+import { a as DashGetAllAuditLogsInput, i as DashClientOptions, n as DashAuditLog, o as DashGetAuditLogsInput, r as DashAuditLogsResponse, s as dashClient, t as IdentifyClientOptions } from "./identify-client-options-CgijjwVT.mjs";
 import { BetterAuthClientPlugin } from "better-auth";
-
 //#region src/sentinel/native/client.d.ts
 interface SentinelNativeClientOptions {
   identifyUrl?: string;
   /**
-   * Timeout for KV identify and related HTTP requests (milliseconds).
+   * Identify HTTP client options.
+   */
+  identifyOptions?: IdentifyClientOptions;
+  /**
+   * Timeout for identify and related HTTP requests (milliseconds).
    * @default 1000
+   * @deprecated Use `identifyOptions.timeout` instead.
    */
   kvTimeout?: number;
   autoSolveChallenge?: boolean;

package/dist/native.mjs

@@ -1,11 +1,11 @@
-import { o as createKV, t as bytesToHex } from "./crypto--3ycICW4.mjs";
-import { a as resolveSentinelClientIdentifyUrl, c as dashClient, i as solvePoWChallenge, n as decodePoWChallenge, r as encodePoWSolution, s as identify, t as createPowRetryTimeout } from "./pow-retry-Dy1D-TKx.mjs";
+import { o as createKV, t as bytesToHex } from "./crypto-CV91nSbp.mjs";
+import { a as resolveSentinelClientIdentifyUrl, c as identify, i as solvePoWChallenge, l as dashClient, n as decodePoWChallenge, o as resolveIdentifyClientRetry, r as encodePoWSolution, t as createPowRetryTimeout } from "./pow-retry-7sPi32Ow.mjs";
 import { env } from "@better-auth/core/env";
 import { Dimensions, InteractionManager, PixelRatio, Platform } from "react-native";
 //#region src/sentinel/native/components.ts
 /**
 * Default first-party component payload for React Native / Expo.
-* Avoids browser-style entropy; sets `clientRuntime` for durable-kv bot scoring.
+* Avoids browser-style entropy; sets `clientRuntime` for identify bot scoring.
 */
 async function defaultCollectNativeComponents() {
 	const windowDims = Dimensions.get("window");
@@ -224,26 +224,17 @@ function scheduleIdentify(send) {
 }
 const sentinelNativeClient = (options) => {
 	const autoSolve = options?.autoSolveChallenge !== false;
+	const identifyUrl = resolveSentinelClientIdentifyUrl({
+		identifyUrl: options?.identifyUrl,
+		envKvUrl: env.BETTER_AUTH_KV_URL
+	});
 	const runtime = createNativeFingerprintRuntime({
 		$kv: createKV({
-			kvUrl: resolveSentinelClientIdentifyUrl({
-				identifyUrl: options?.identifyUrl,
-				envKvUrl: env.BETTER_AUTH_KV_URL
-			}),
-			kvTimeout: options?.kvTimeout
+			kvUrl: identifyUrl,
+			timeout: options?.identifyOptions?.timeout ?? options?.kvTimeout
 		}, {
 			throw: true,
-			retry: {
-				type: "exponential",
-				attempts: 2,
-				baseDelay: 400,
-				maxDelay: 600,
-				shouldRetry(response) {
-					if (response === null) return true;
-					if (response.status === 429) return true;
-					return response.status >= 500;
-				}
-			}
+			retry: resolveIdentifyClientRetry(options?.identifyOptions?.retry)
 		}),
 		getOrCreateVisitorId: () => getOrCreateVisitorId(options?.storage)
 	});

package/dist/{pow-retry-Dy1D-TKx.mjs → pow-retry-7sPi32Ow.mjs}

@@ -1,4 +1,4 @@
-import { i as randomBytes, n as hash, t as bytesToHex } from "./crypto--3ycICW4.mjs";
+import { i as randomBytes, n as hash, t as bytesToHex } from "./crypto-CV91nSbp.mjs";
 //#region src/dash-client.ts
 function resolveDashUserId(input, options) {
 	return input.userId || options?.resolveUserId?.({
@@ -58,6 +58,21 @@ async function identify($kv, payload) {
 	});
 }
 //#endregion
+//#region src/sentinel/identify-client-options.ts
+function resolveIdentifyClientRetry(retry) {
+	return {
+		type: "exponential",
+		attempts: retry?.attempts ?? 2,
+		baseDelay: retry?.baseDelay ?? 400,
+		maxDelay: retry?.maxDelay ?? 600,
+		shouldRetry(response) {
+			if (response === null) return true;
+			if (response.status === 429) return true;
+			return response.status >= 500;
+		}
+	};
+}
+//#endregion
 //#region src/sentinel/identify-url.ts
 const DEFAULT_IDENTIFY_URL = "https://kv.better-auth.com";
 function normalizeIdentifyUrl(url) {
@@ -105,7 +120,8 @@ async function solvePoWChallenge(challenge) {
 	const { nonce, difficulty } = challenge;
 	let counter = 0;
 	while (true) {
-		if (hasLeadingZeroBits(await hash(`${nonce}:${counter}`), difficulty)) return {
+		const input = `${nonce}:${counter}`;
+		if (hasLeadingZeroBits(await hash(input), difficulty)) return {
 			nonce,
 			counter
 		};
@@ -167,4 +183,4 @@ function createPowRetryTimeout(timeoutMs) {
 	};
 }
 //#endregion
-export { resolveSentinelClientIdentifyUrl as a, dashClient as c, solvePoWChallenge as i, decodePoWChallenge as n, generateRequestId as o, encodePoWSolution as r, identify as s, createPowRetryTimeout as t };
+export { resolveSentinelClientIdentifyUrl as a, identify as c, solvePoWChallenge as i, dashClient as l, decodePoWChallenge as n, resolveIdentifyClientRetry as o, encodePoWSolution as r, generateRequestId as s, createPowRetryTimeout as t };

package/dist/saml-policy-DQR0MBLk.mjs

@@ -0,0 +1,12 @@
+//#region src/directory-sync/saml-policy.ts
+/**
+* `deriveSAMLServiceProviderPolicy` ships in `@better-auth/sso` 1.7.0+.
+* Load it at runtime so typecheck against older matrix versions still succeeds.
+*/
+async function requiresSignedSAMLAssertions(config) {
+	const sso = await import("@better-auth/sso");
+	if (typeof sso.deriveSAMLServiceProviderPolicy === "function") return sso.deriveSAMLServiceProviderPolicy(config).wantAssertionsSigned;
+	return config.wantAssertionsSigned === true;
+}
+//#endregion
+export { requiresSignedSAMLAssertions };