@better-auth/infra 0.4.7 → 0.4.9

package/CHANGELOG.md

@@ -5,6 +5,18 @@ All notable changes to `@better-auth/infra` are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0/).
 
+## [0.4.9] - 2026-09-09
+
+### Fixed
+
+- **Auth base URL resolution** — Correctly handle Better Auth `baseURL` with an embedded path and dynamic `allowedHosts` (1.5+): dash config, invitation callbacks, SSO/SCIM endpoints, and Sentinel no longer use the wrong mount path or break on object `baseURL`.
+
+## [0.4.8] - 2026-09-09
+
+### Added
+
+- **`apiOptions.headers` / `kvOptions.headers`** — Extra headers on dash, sentinel, email, and SMS HTTP clients. Built-in auth headers cannot be overridden.
+
 ## [0.4.7] - 2026-09-07
 
 ### Fixed

package/dist/client.d.mts

@@ -1,4 +1,4 @@
-import { a as DashGetAllAuditLogsInput, i as DashClientOptions, n as DashAuditLog, o as DashGetAuditLogsInput, r as DashAuditLogsResponse, s as dashClient, t as IdentifyClientOptions } from "./identify-client-options-Be9mAljS.mjs";
+import { a as DashGetAllAuditLogsInput, i as DashClientOptions, n as DashAuditLog, o as DashGetAuditLogsInput, r as DashAuditLogsResponse, s as dashClient, t as IdentifyClientOptions } from "./identify-client-options-DgKA4Eq8.mjs";
 import { BetterFetchPlugin } from "@better-fetch/fetch";
 //#region src/sentinel/client.d.ts
 interface SentinelClientOptions {

package/dist/client.mjs

@@ -1,5 +1,5 @@
-import { n as hash, o as createKV } from "./crypto-C9Iqqv8l.mjs";
-import { a as resolveSentinelClientIdentifyUrl, c as identify, i as solvePoWChallenge, l as dashClient, n as decodePoWChallenge, o as resolveIdentifyClientRetry, r as encodePoWSolution, s as generateRequestId, t as createPowRetryTimeout } from "./pow-retry-Bk5otjQT.mjs";
+import { n as hash, o as createKV } from "./crypto-DDadesq-.mjs";
+import { a as resolveSentinelClientIdentifyUrl, c as identify, i as solvePoWChallenge, l as dashClient, n as decodePoWChallenge, o as resolveIdentifyClientRetry, r as encodePoWSolution, s as generateRequestId, t as createPowRetryTimeout } from "./pow-retry-DRUkPcBn.mjs";
 import { env } from "@better-auth/core/env";
 //#region src/sentinel/fingerprint.ts
 function murmurhash3(str, seed = 0) {

package/dist/{constants-BypXAAvQ.mjs → constants-CdZodAXp.mjs}

@@ -1,7 +1,7 @@
 import { env } from "@better-auth/core/env";
 //#endregion
 //#region src/version.ts
-const PLUGIN_VERSION = "0.4.7";
+const PLUGIN_VERSION = "0.4.9";
 //#endregion
 //#region src/constants.ts
 /**

package/dist/{crypto-C9Iqqv8l.mjs → crypto-DDadesq-.mjs}

@@ -1,26 +1,29 @@
-import { i as INFRA_USER_AGENT } from "./constants-BypXAAvQ.mjs";
+import { i as INFRA_USER_AGENT } from "./constants-CdZodAXp.mjs";
 import { createFetch } from "@better-fetch/fetch";
 import { sha256 } from "@noble/hashes/sha2.js";
 //#region src/fetch.ts
 function createAPI(options, fetchOptions) {
 	return createFetch({
 		baseURL: options.apiUrl,
+		timeout: options.apiOptions.timeout,
+		...fetchOptions,
 		headers: {
+			...options.apiOptions.headers,
 			"user-agent": INFRA_USER_AGENT,
 			"x-api-key": options.apiKey
-		},
-		timeout: options.apiOptions.timeout,
-		...fetchOptions
+		}
 	});
 }
 function createKV(options, fetchOptions) {
-	const headers = { "user-agent": INFRA_USER_AGENT };
-	if (options.apiKey) headers["x-api-key"] = options.apiKey;
 	return createFetch({
 		baseURL: options.kvUrl,
-		headers,
 		timeout: options.timeout ?? 1e3,
-		...fetchOptions
+		...fetchOptions,
+		headers: {
+			...options.headers,
+			"user-agent": INFRA_USER_AGENT,
+			...options.apiKey ? { "x-api-key": options.apiKey } : {}
+		}
 	});
 }
 //#endregion

package/dist/email.d.mts

@@ -155,6 +155,11 @@ interface EmailConfig {
      * @default 3000
      */
     timeout?: number;
+    /**
+     * Extra headers on every email API request.
+     * Cannot override built-in headers (`user-agent`, `Authorization`).
+     */
+    headers?: Record<string, string>;
   };
   /**
    * Timeout for Dash email API HTTP requests (milliseconds).

package/dist/email.mjs

@@ -1,4 +1,4 @@
-import { i as INFRA_USER_AGENT, n as INFRA_API_URL } from "./constants-BypXAAvQ.mjs";
+import { i as INFRA_USER_AGENT, n as INFRA_API_URL } from "./constants-CdZodAXp.mjs";
 import { logger } from "better-auth";
 import { env } from "@better-auth/core/env";
 import { createFetch } from "@better-fetch/fetch";
@@ -37,11 +37,12 @@ function createEmailSender(config) {
 	if (!apiKey) logger.warn("[Dash] No API key provided for email sending. Set BETTER_AUTH_API_KEY environment variable or pass apiKey in config.");
 	const $api = createFetch({
 		baseURL: apiUrl,
+		timeout: config?.apiOptions?.timeout ?? config?.apiTimeout ?? 3e3,
 		headers: {
+			...config?.apiOptions?.headers,
 			"user-agent": INFRA_USER_AGENT,
 			Authorization: `Bearer ${apiKey}`
-		},
-		timeout: config?.apiOptions?.timeout ?? config?.apiTimeout ?? 3e3
+		}
 	});
 	/**
 	* Send an email using a template from Better Auth Infra

package/dist/{identify-client-options-Be9mAljS.d.mts → identify-client-options-DgKA4Eq8.d.mts}

@@ -1,4 +1,4 @@
-import { m as KvRetryOptions } from "./types-Ba7NK8JV.mjs";
+import { g as KvRetryOptions } from "./types-BkUWsMpe.mjs";
 import { BetterAuthClientOptions, ClientStore } from "better-auth";
 import { BetterFetch } from "@better-fetch/fetch";
 //#region src/dash-client.d.ts