@better-auth/oauth-provider 1.5.6 → 1.6.0-beta.0

package/dist/oauth-CEoJtL3Y.d.mts

@@ -0,0 +1,1879 @@
+import { c as OAuthConsent, i as OIDCMetadata, m as Scope, r as OAuthClient, t as AuthServerMetadata, u as OAuthOptions } from "./oauth-4vgZlF-I.mjs";
+import * as better_call0 from "better-call";
+import * as better_auth_plugins0 from "better-auth/plugins";
+import * as jose from "jose";
+import * as better_auth0 from "better-auth";
+
+//#region src/oauth.d.ts
+declare module "@better-auth/core" {
+  interface BetterAuthPluginRegistry<AuthOptions, Options> {
+    "oauth-provider": {
+      creator: typeof oauthProvider;
+    };
+  }
+}
+declare const getOAuthProviderState: () => Promise<{
+  query?: string;
+} | null>;
+/**
+ * oAuth 2.1 provider plugin for Better Auth.
+ *
+ * @see https://better-auth.com/docs/plugins/oauth-provider
+ * @param options - The options for the oAuth Provider plugin.
+ * @returns A Better Auth plugin.
+ */
+declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
+  id: "oauth-provider";
+  version: string;
+  options: NoInfer<O>;
+  init: (ctx: better_auth0.AuthContext) => void;
+  hooks: {
+    before: {
+      matcher(ctx: better_auth0.HookEndpointContext): any;
+      handler: better_call0.Middleware<(inputContext: Record<string, any>) => Promise<void>>;
+    }[];
+    after: {
+      matcher(ctx: better_auth0.HookEndpointContext): boolean;
+      handler: better_call0.Middleware<(inputContext: Record<string, any>) => Promise<{
+        redirect: boolean;
+        url: string;
+      } | undefined>>;
+    }[];
+  };
+  endpoints: {
+    /**
+     * A server-only endpoint that helps provide the
+     * oAuth Server configuration at the well-known endpoint.
+     *
+     * Provided at /.well-known/oauth-authorization-server/[issuer-path]
+     * (root if no issuer-path).
+     */
+    getOAuthServerConfig: better_call0.Endpoint<"/.well-known/oauth-authorization-server", "GET", undefined, Record<string, any> | undefined, any, AuthServerMetadata, {
+      SERVER_ONLY: true;
+    }, undefined>;
+    /**
+     * A server-only endpoint that helps provide the
+     * OpenId configuration at the well-known endpoint.
+     *
+     * Provided at [issuer-path]/.well-known/openid-configuration
+     * (root if no issuer-path).
+     */
+    getOpenIdConfig: better_call0.Endpoint<"/.well-known/openid-configuration", "GET", undefined, Record<string, any> | undefined, any, Omit<OIDCMetadata, "id_token_signing_alg_values_supported"> & {
+      id_token_signing_alg_values_supported: better_auth_plugins0.JWSAlgorithms[] | ["HS256"];
+    }, {
+      SERVER_ONLY: true;
+    }, undefined>;
+    oauth2Authorize: better_call0.Endpoint<"/oauth2/authorize", "GET", undefined, {
+      response_type: "code";
+      client_id: string;
+      redirect_uri?: string | undefined;
+      scope?: string | undefined;
+      state?: string | undefined;
+      code_challenge?: string | undefined;
+      code_challenge_method?: "S256" | undefined;
+      nonce?: string | undefined;
+      prompt?: "none" | "consent" | "login" | "create" | "select_account" | "login consent" | "select_account consent" | undefined;
+    }, any, {
+      redirect: boolean;
+      url: string;
+    }, {
+      openapi: {
+        description: string;
+        parameters: ({
+          name: string;
+          in: "query";
+          required: true;
+          schema: {
+            type: "string";
+            format?: undefined;
+          };
+          description: string;
+        } | {
+          name: string;
+          in: "query";
+          required: false;
+          schema: {
+            type: "string";
+            format: string;
+          };
+          description: string;
+        } | {
+          name: string;
+          in: "query";
+          required: false;
+          schema: {
+            type: "string";
+            format?: undefined;
+          };
+          description: string;
+        })[];
+        responses: {
+          "302": {
+            description: string;
+            headers: {
+              Location: {
+                description: string;
+                schema: {
+                  type: string;
+                  format: string;
+                };
+              };
+            };
+          };
+          "400": {
+            description: string;
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object";
+                  properties: {
+                    error: {
+                      type: string;
+                    };
+                    error_description: {
+                      type: string;
+                    };
+                    state: {
+                      type: string;
+                    };
+                  };
+                  required: string[];
+                };
+              };
+            };
+          };
+        };
+      };
+    }, undefined>;
+    oauth2Consent: better_call0.Endpoint<"/oauth2/consent", "POST", {
+      accept: boolean;
+      scope?: string | undefined;
+      oauth_query?: string | undefined;
+    }, Record<string, any> | undefined, [better_call0.Middleware<(inputContext: Record<string, any>) => Promise<{
+      session: {
+        session: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          userId: string;
+          expiresAt: Date;
+          token: string;
+          ipAddress?: string | null | undefined;
+          userAgent?: string | null | undefined;
+        };
+        user: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          email: string;
+          emailVerified: boolean;
+          name: string;
+          image?: string | null | undefined;
+        };
+      };
+    }>>], {
+      redirect: boolean;
+      url: string;
+    }, {
+      openapi: {
+        description: string;
+        responses: {
+          "200": {
+            description: string;
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object";
+                  properties: {
+                    redirect_uri: {
+                      type: string;
+                      format: string;
+                      description: string;
+                    };
+                  };
+                  required: string[];
+                };
+              };
+            };
+          };
+        };
+      };
+    }, undefined>;
+    oauth2Continue: better_call0.Endpoint<"/oauth2/continue", "POST", {
+      selected?: boolean | undefined;
+      created?: boolean | undefined;
+      postLogin?: boolean | undefined;
+      oauth_query?: string | undefined;
+    }, Record<string, any> | undefined, [better_call0.Middleware<(inputContext: Record<string, any>) => Promise<{
+      session: {
+        session: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          userId: string;
+          expiresAt: Date;
+          token: string;
+          ipAddress?: string | null | undefined;
+          userAgent?: string | null | undefined;
+        };
+        user: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          email: string;
+          emailVerified: boolean;
+          name: string;
+          image?: string | null | undefined;
+        };
+      };
+    }>>], {
+      redirect: boolean;
+      url: string;
+    }, {
+      openapi: {
+        description: string;
+        responses: {
+          "200": {
+            description: string;
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object";
+                  properties: {
+                    redirect_uri: {
+                      type: string;
+                      format: string;
+                      description: string;
+                    };
+                  };
+                  required: string[];
+                };
+              };
+            };
+          };
+        };
+      };
+    }, undefined>;
+    oauth2Token: better_call0.Endpoint<"/oauth2/token", "POST", {
+      grant_type: "authorization_code" | "client_credentials" | "refresh_token";
+      client_id?: string | undefined;
+      client_secret?: string | undefined;
+      code?: string | undefined;
+      code_verifier?: string | undefined;
+      redirect_uri?: string | undefined;
+      refresh_token?: string | undefined;
+      resource?: string | undefined;
+      scope?: string | undefined;
+    }, Record<string, any> | undefined, any, {
+      access_token: string;
+      expires_in: number;
+      expires_at: number;
+      token_type: string;
+      scope: string;
+    }, {
+      allowedMediaTypes: string[];
+      openapi: {
+        description: string;
+        requestBody: {
+          required: boolean;
+          content: {
+            "application/json": {
+              schema: {
+                type: "object";
+                properties: {
+                  grant_type: {
+                    type: string;
+                    enum: string[];
+                    description: string;
+                  };
+                  client_id: {
+                    type: string;
+                    description: string;
+                  };
+                  client_secret: {
+                    type: string;
+                    description: string;
+                  };
+                  code: {
+                    type: string;
+                    description: string;
+                  };
+                  code_verifier: {
+                    type: string;
+                    description: string;
+                  };
+                  redirect_uri: {
+                    type: string;
+                    format: string;
+                    description: string;
+                  };
+                  refresh_token: {
+                    type: string;
+                    description: string;
+                  };
+                  resource: {
+                    type: string;
+                    description: string;
+                  };
+                  scope: {
+                    type: string;
+                    description: string;
+                  };
+                };
+                required: string[];
+              };
+            };
+          };
+        };
+        responses: {
+          "200": {
+            description: string;
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object";
+                  properties: {
+                    access_token: {
+                      type: string;
+                      description: string;
+                    };
+                    token_type: {
+                      type: string;
+                      description: string;
+                      enum: string[];
+                    };
+                    expires_in: {
+                      type: string;
+                      description: string;
+                    };
+                    refresh_token: {
+                      type: string;
+                      description: string;
+                    };
+                    scope: {
+                      type: string;
+                      description: string;
+                    };
+                    id_token: {
+                      type: string;
+                      description: string;
+                    };
+                  };
+                  required: string[];
+                };
+              };
+            };
+          };
+          "400": {
+            description: string;
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object";
+                  properties: {
+                    error: {
+                      type: string;
+                    };
+                    error_description: {
+                      type: string;
+                    };
+                    error_uri: {
+                      type: string;
+                    };
+                  };
+                  required: string[];
+                };
+              };
+            };
+          };
+        };
+      };
+    }, undefined>;
+    oauth2Introspect: better_call0.Endpoint<"/oauth2/introspect", "POST", {
+      token: string;
+      client_id?: string | undefined;
+      client_secret?: string | undefined;
+      token_type_hint?: "refresh_token" | "access_token" | undefined;
+    }, Record<string, any> | undefined, any, jose.JWTPayload, {
+      allowedMediaTypes: string[];
+      openapi: {
+        description: string;
+        requestBody: {
+          required: boolean;
+          content: {
+            "application/json": {
+              schema: {
+                type: "object";
+                properties: {
+                  client_id: {
+                    type: string;
+                    description: string;
+                  };
+                  client_secret: {
+                    type: string;
+                    description: string;
+                  };
+                  token: {
+                    type: string;
+                    description: string;
+                  };
+                  token_type_hint: {
+                    type: string;
+                    enum: string[];
+                    description: string;
+                  };
+                  resource: {
+                    type: string;
+                    description: string;
+                  };
+                };
+                required: string[];
+              };
+            };
+          };
+        };
+        responses: {
+          "200": {
+            description: string;
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object";
+                  properties: {
+                    active: {
+                      type: string;
+                      description: string;
+                    };
+                    scope: {
+                      type: string;
+                      description: string;
+                    };
+                    client_id: {
+                      type: string;
+                      description: string;
+                    };
+                    username: {
+                      type: string;
+                      description: string;
+                    };
+                    token_type: {
+                      type: string;
+                      description: string;
+                    };
+                    exp: {
+                      type: string;
+                      description: string;
+                    };
+                    iat: {
+                      type: string;
+                      description: string;
+                    };
+                    nbf: {
+                      type: string;
+                      description: string;
+                    };
+                    sub: {
+                      type: string;
+                      description: string;
+                    };
+                    aud: {
+                      type: string;
+                      description: string;
+                    };
+                    iss: {
+                      type: string;
+                      description: string;
+                    };
+                    jti: {
+                      type: string;
+                      description: string;
+                    };
+                  };
+                  required: string[];
+                };
+              };
+            };
+          };
+          "400": {
+            description: string;
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object";
+                  properties: {
+                    error: {
+                      type: string;
+                    };
+                    error_description: {
+                      type: string;
+                    };
+                    error_uri: {
+                      type: string;
+                    };
+                  };
+                  required: string[];
+                };
+              };
+            };
+          };
+        };
+      };
+    }, undefined>;
+    oauth2Revoke: better_call0.Endpoint<"/oauth2/revoke", "POST", {
+      token: string;
+      client_id?: string | undefined;
+      client_secret?: string | undefined;
+      token_type_hint?: "refresh_token" | "access_token" | undefined;
+    }, Record<string, any> | undefined, any, null | undefined, {
+      allowedMediaTypes: string[];
+      openapi: {
+        description: string;
+        requestBody: {
+          required: boolean;
+          content: {
+            "application/json": {
+              schema: {
+                type: "object";
+                properties: {
+                  client_id: {
+                    type: string;
+                    description: string;
+                  };
+                  client_secret: {
+                    type: string;
+                    description: string;
+                  };
+                  token: {
+                    type: string;
+                    description: string;
+                  };
+                  token_type_hint: {
+                    type: string;
+                    enum: string[];
+                    description: string;
+                  };
+                };
+                required: string[];
+              };
+            };
+          };
+        };
+        responses: {
+          "200": {
+            description: string;
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object";
+                  description: string;
+                };
+              };
+            };
+          };
+          "400": {
+            description: string;
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object";
+                  properties: {
+                    error: {
+                      type: string;
+                    };
+                    error_description: {
+                      type: string;
+                    };
+                    error_uri: {
+                      type: string;
+                    };
+                  };
+                  required: string[];
+                };
+              };
+            };
+          };
+        };
+      };
+    }, undefined>;
+    oauth2UserInfo: better_call0.Endpoint<"/oauth2/userinfo", "GET", undefined, Record<string, any> | undefined, any, {
+      email?: string | undefined;
+      email_verified?: boolean | undefined;
+      name?: string | undefined;
+      picture?: string | undefined;
+      given_name?: string | undefined;
+      family_name?: string | undefined;
+      sub: string;
+    }, {
+      openapi: {
+        description: string;
+        security: ({
+          bearerAuth: never[];
+          OAuth2?: undefined;
+        } | {
+          OAuth2: string[];
+          bearerAuth?: undefined;
+        })[];
+        parameters: {
+          name: string;
+          in: "header";
+          required: false;
+          schema: {
+            type: "string";
+          };
+          description: string;
+        }[];
+        responses: {
+          "200": {
+            description: string;
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object";
+                  properties: {
+                    sub: {
+                      type: string;
+                      description: string;
+                    };
+                    email: {
+                      type: string;
+                      format: string;
+                      nullable: boolean;
+                      description: string;
+                    };
+                    name: {
+                      type: string;
+                      nullable: boolean;
+                      description: string;
+                    };
+                    picture: {
+                      type: string;
+                      format: string;
+                      nullable: boolean;
+                      description: string;
+                    };
+                    given_name: {
+                      type: string;
+                      nullable: boolean;
+                      description: string;
+                    };
+                    family_name: {
+                      type: string;
+                      nullable: boolean;
+                      description: string;
+                    };
+                    email_verified: {
+                      type: string;
+                      nullable: boolean;
+                      description: string;
+                    };
+                  };
+                  required: string[];
+                };
+              };
+            };
+          };
+          "401": {
+            description: string;
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object";
+                  properties: {
+                    error: {
+                      type: string;
+                    };
+                    error_description: {
+                      type: string;
+                    };
+                  };
+                  required: string[];
+                };
+              };
+            };
+          };
+          "403": {
+            description: string;
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object";
+                  properties: {
+                    error: {
+                      type: string;
+                    };
+                    error_description: {
+                      type: string;
+                    };
+                  };
+                  required: string[];
+                };
+              };
+            };
+          };
+        };
+      };
+    }, undefined>;
+    oauth2EndSession: better_call0.Endpoint<"/oauth2/end-session", "GET", undefined, {
+      id_token_hint: string;
+      client_id?: string | undefined;
+      post_logout_redirect_uri?: string | undefined;
+      state?: string | undefined;
+    }, any, {
+      redirect: boolean;
+      url: string;
+    } | undefined, {
+      openapi: {
+        description: string;
+        responses: {
+          "200": {
+            description: string;
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object";
+                  properties: {
+                    redirect_uri: {
+                      type: string;
+                      format: string;
+                      description: string;
+                    };
+                    message: {
+                      type: string;
+                      description: string;
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, undefined>;
+    registerOAuthClient: better_call0.Endpoint<"/oauth2/register", "POST", {
+      redirect_uris: string[];
+      scope?: string | undefined;
+      client_name?: string | undefined;
+      client_uri?: string | undefined;
+      logo_uri?: string | undefined;
+      contacts?: string[] | undefined;
+      tos_uri?: string | undefined;
+      policy_uri?: string | undefined;
+      software_id?: string | undefined;
+      software_version?: string | undefined;
+      software_statement?: string | undefined;
+      post_logout_redirect_uris?: string[] | undefined;
+      token_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_post" | undefined;
+      grant_types?: ("authorization_code" | "client_credentials" | "refresh_token")[] | undefined;
+      response_types?: "code"[] | undefined;
+      type?: "web" | "native" | "user-agent-based" | undefined;
+      subject_type?: "public" | "pairwise" | undefined;
+    }, Record<string, any> | undefined, any, OAuthClient, {
+      openapi: {
+        description: string;
+        responses: {
+          "200": {
+            description: string;
+            content: {
+              "application/json": {
+                schema: {
+                  /** @returns {OauthClient} */type: "object";
+                  properties: {
+                    client_id: {
+                      type: string;
+                      description: string;
+                    };
+                    client_secret: {
+                      type: string;
+                      description: string;
+                    };
+                    client_secret_expires_at: {
+                      type: string;
+                      description: string;
+                    };
+                    scope: {
+                      type: string;
+                      description: string;
+                    };
+                    user_id: {
+                      type: string;
+                      description: string;
+                    };
+                    client_id_issued_at: {
+                      type: string;
+                      description: string;
+                    };
+                    client_name: {
+                      type: string;
+                      description: string;
+                    };
+                    client_uri: {
+                      type: string;
+                      description: string;
+                    };
+                    logo_uri: {
+                      type: string;
+                      description: string;
+                    };
+                    contacts: {
+                      type: string;
+                      items: {
+                        type: string;
+                      };
+                      description: string;
+                    };
+                    tos_uri: {
+                      type: string;
+                      description: string;
+                    };
+                    policy_uri: {
+                      type: string;
+                      description: string;
+                    };
+                    software_id: {
+                      type: string;
+                      description: string;
+                    };
+                    software_version: {
+                      type: string;
+                      description: string;
+                    };
+                    software_statement: {
+                      type: string;
+                      description: string;
+                    };
+                    redirect_uris: {
+                      type: string;
+                      items: {
+                        type: string;
+                        format: string;
+                      };
+                      description: string;
+                    };
+                    post_logout_redirect_uris: {
+                      type: string;
+                      items: {
+                        type: string;
+                        format: string;
+                      };
+                      description: string;
+                    };
+                    token_endpoint_auth_method: {
+                      type: string;
+                      description: string;
+                      enum: string[];
+                    };
+                    grant_types: {
+                      type: string;
+                      items: {
+                        type: string;
+                        enum: string[];
+                      };
+                      description: string;
+                    };
+                    response_types: {
+                      type: string;
+                      items: {
+                        type: string;
+                        enum: string[];
+                      };
+                      description: string;
+                    };
+                    public: {
+                      type: string;
+                      description: string;
+                    };
+                    type: {
+                      type: string;
+                      description: string;
+                      enum: string[];
+                    };
+                    disabled: {
+                      type: string;
+                      description: string;
+                    };
+                  };
+                  required: string[];
+                };
+              };
+            };
+          };
+        };
+      };
+    }, undefined>;
+    adminCreateOAuthClient: better_call0.Endpoint<"/admin/oauth2/create-client", "POST", {
+      redirect_uris: string[];
+      scope?: string | undefined;
+      client_name?: string | undefined;
+      client_uri?: string | undefined;
+      logo_uri?: string | undefined;
+      contacts?: string[] | undefined;
+      tos_uri?: string | undefined;
+      policy_uri?: string | undefined;
+      software_id?: string | undefined;
+      software_version?: string | undefined;
+      software_statement?: string | undefined;
+      post_logout_redirect_uris?: string[] | undefined;
+      token_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_post" | undefined;
+      grant_types?: ("authorization_code" | "client_credentials" | "refresh_token")[] | undefined;
+      response_types?: "code"[] | undefined;
+      type?: "web" | "native" | "user-agent-based" | undefined;
+      client_secret_expires_at?: string | number | undefined;
+      skip_consent?: boolean | undefined;
+      enable_end_session?: boolean | undefined;
+      require_pkce?: boolean | undefined;
+      subject_type?: "public" | "pairwise" | undefined;
+      metadata?: Record<string, unknown> | undefined;
+    }, Record<string, any> | undefined, [], OAuthClient, {
+      SERVER_ONLY: true;
+      openapi: {
+        description: string;
+        responses: {
+          "200": {
+            description: string;
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object";
+                  properties: {
+                    client_id: {
+                      type: string;
+                      description: string;
+                    };
+                    client_secret: {
+                      type: string;
+                      description: string;
+                    };
+                    client_secret_expires_at: {
+                      type: string;
+                      description: string;
+                    };
+                    scope: {
+                      type: string;
+                      description: string;
+                    };
+                    user_id: {
+                      type: string;
+                      description: string;
+                    };
+                    client_id_issued_at: {
+                      type: string;
+                      description: string;
+                    };
+                    client_name: {
+                      type: string;
+                      description: string;
+                    };
+                    client_uri: {
+                      type: string;
+                      description: string;
+                    };
+                    logo_uri: {
+                      type: string;
+                      description: string;
+                    };
+                    contacts: {
+                      type: string;
+                      items: {
+                        type: string;
+                      };
+                      description: string;
+                    };
+                    tos_uri: {
+                      type: string;
+                      description: string;
+                    };
+                    policy_uri: {
+                      type: string;
+                      description: string;
+                    };
+                    software_id: {
+                      type: string;
+                      description: string;
+                    };
+                    software_version: {
+                      type: string;
+                      description: string;
+                    };
+                    software_statement: {
+                      type: string;
+                      description: string;
+                    };
+                    redirect_uris: {
+                      type: string;
+                      items: {
+                        type: string;
+                        format: string;
+                      };
+                      description: string;
+                    };
+                    token_endpoint_auth_method: {
+                      type: string;
+                      description: string;
+                      enum: string[];
+                    };
+                    grant_types: {
+                      type: string;
+                      items: {
+                        type: string;
+                        enum: string[];
+                      };
+                      description: string;
+                    };
+                    response_types: {
+                      type: string;
+                      items: {
+                        type: string;
+                        enum: string[];
+                      };
+                      description: string;
+                    };
+                    public: {
+                      type: string;
+                      description: string;
+                    };
+                    type: {
+                      type: string;
+                      description: string;
+                      enum: string[];
+                    };
+                    disabled: {
+                      type: string;
+                      description: string;
+                    };
+                    require_pkce: {
+                      type: string;
+                      description: string;
+                      default: boolean;
+                    };
+                    metadata: {
+                      type: string;
+                      additionalProperties: boolean;
+                      nullable: boolean;
+                      description: string;
+                    };
+                  };
+                  required: string[];
+                };
+              };
+            };
+          };
+        };
+      };
+    }, undefined>;
+    createOAuthClient: better_call0.Endpoint<"/oauth2/create-client", "POST", {
+      redirect_uris: string[];
+      scope?: string | undefined;
+      client_name?: string | undefined;
+      client_uri?: string | undefined;
+      logo_uri?: string | undefined;
+      contacts?: string[] | undefined;
+      tos_uri?: string | undefined;
+      policy_uri?: string | undefined;
+      software_id?: string | undefined;
+      software_version?: string | undefined;
+      software_statement?: string | undefined;
+      post_logout_redirect_uris?: string[] | undefined;
+      token_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_post" | undefined;
+      grant_types?: ("authorization_code" | "client_credentials" | "refresh_token")[] | undefined;
+      response_types?: "code"[] | undefined;
+      type?: "web" | "native" | "user-agent-based" | undefined;
+    }, Record<string, any> | undefined, [better_call0.Middleware<(inputContext: Record<string, any>) => Promise<{
+      session: {
+        session: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          userId: string;
+          expiresAt: Date;
+          token: string;
+          ipAddress?: string | null | undefined;
+          userAgent?: string | null | undefined;
+        };
+        user: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          email: string;
+          emailVerified: boolean;
+          name: string;
+          image?: string | null | undefined;
+        };
+      };
+    }>>], OAuthClient, {
+      openapi: {
+        description: string;
+        responses: {
+          "200": {
+            description: string;
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object";
+                  properties: {
+                    client_id: {
+                      type: string;
+                      description: string;
+                    };
+                    client_secret: {
+                      type: string;
+                      description: string;
+                    };
+                    client_secret_expires_at: {
+                      type: string;
+                      description: string;
+                    };
+                    scope: {
+                      type: string;
+                      description: string;
+                    };
+                    user_id: {
+                      type: string;
+                      description: string;
+                    };
+                    client_id_issued_at: {
+                      type: string;
+                      description: string;
+                    };
+                    client_name: {
+                      type: string;
+                      description: string;
+                    };
+                    client_uri: {
+                      type: string;
+                      description: string;
+                    };
+                    logo_uri: {
+                      type: string;
+                      description: string;
+                    };
+                    contacts: {
+                      type: string;
+                      items: {
+                        type: string;
+                      };
+                      description: string;
+                    };
+                    tos_uri: {
+                      type: string;
+                      description: string;
+                    };
+                    policy_uri: {
+                      type: string;
+                      description: string;
+                    };
+                    software_id: {
+                      type: string;
+                      description: string;
+                    };
+                    software_version: {
+                      type: string;
+                      description: string;
+                    };
+                    software_statement: {
+                      type: string;
+                      description: string;
+                    };
+                    redirect_uris: {
+                      type: string;
+                      items: {
+                        type: string;
+                        format: string;
+                      };
+                      description: string;
+                    };
+                    token_endpoint_auth_method: {
+                      type: string;
+                      description: string;
+                      enum: string[];
+                    };
+                    grant_types: {
+                      type: string;
+                      items: {
+                        type: string;
+                        enum: string[];
+                      };
+                      description: string;
+                    };
+                    response_types: {
+                      type: string;
+                      items: {
+                        type: string;
+                        enum: string[];
+                      };
+                      description: string;
+                    };
+                    public: {
+                      type: string;
+                      description: string;
+                    };
+                    type: {
+                      type: string;
+                      description: string;
+                      enum: string[];
+                    };
+                    disabled: {
+                      type: string;
+                      description: string;
+                    };
+                    metadata: {
+                      type: string;
+                      additionalProperties: boolean;
+                      nullable: boolean;
+                      description: string;
+                    };
+                  };
+                  required: string[];
+                };
+              };
+            };
+          };
+        };
+      };
+    }, undefined>;
+    getOAuthClient: better_call0.Endpoint<"/oauth2/get-client", "GET", undefined, {
+      client_id: string;
+    }, [better_call0.Middleware<(inputContext: Record<string, any>) => Promise<{
+      session: {
+        session: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          userId: string;
+          expiresAt: Date;
+          token: string;
+          ipAddress?: string | null | undefined;
+          userAgent?: string | null | undefined;
+        };
+        user: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          email: string;
+          emailVerified: boolean;
+          name: string;
+          image?: string | null | undefined;
+        };
+      };
+    }>>], OAuthClient, {
+      openapi: {
+        description: string;
+      };
+    }, undefined>;
+    getOAuthClientPublic: better_call0.Endpoint<"/oauth2/public-client", "GET", undefined, {
+      client_id: string;
+    }, [better_call0.Middleware<(inputContext: Record<string, any>) => Promise<{
+      session: {
+        session: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          userId: string;
+          expiresAt: Date;
+          token: string;
+          ipAddress?: string | null | undefined;
+          userAgent?: string | null | undefined;
+        };
+        user: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          email: string;
+          emailVerified: boolean;
+          name: string;
+          image?: string | null | undefined;
+        };
+      };
+    }>>], OAuthClient, {
+      openapi: {
+        description: string;
+      };
+    }, undefined>;
+    getOAuthClientPublicPrelogin: better_call0.Endpoint<"/oauth2/public-client-prelogin", "POST", {
+      client_id: string;
+      oauth_query?: string | undefined;
+    }, Record<string, any> | undefined, [better_call0.Middleware<(inputContext: Record<string, any>) => Promise<void>>], OAuthClient, {
+      openapi: {
+        description: string;
+      };
+    }, undefined>;
+    getOAuthClients: better_call0.Endpoint<"/oauth2/get-clients", "GET", undefined, Record<string, any> | undefined, [better_call0.Middleware<(inputContext: Record<string, any>) => Promise<{
+      session: {
+        session: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          userId: string;
+          expiresAt: Date;
+          token: string;
+          ipAddress?: string | null | undefined;
+          userAgent?: string | null | undefined;
+        };
+        user: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          email: string;
+          emailVerified: boolean;
+          name: string;
+          image?: string | null | undefined;
+        };
+      };
+    }>>], OAuthClient[] | null, {
+      openapi: {
+        description: string;
+      };
+    }, undefined>;
+    adminUpdateOAuthClient: better_call0.Endpoint<"/admin/oauth2/update-client", "PATCH", {
+      client_id: string;
+      update: {
+        redirect_uris?: string[] | undefined;
+        scope?: string | undefined;
+        client_name?: string | undefined;
+        client_uri?: string | undefined;
+        logo_uri?: string | undefined;
+        contacts?: string[] | undefined;
+        tos_uri?: string | undefined;
+        policy_uri?: string | undefined;
+        software_id?: string | undefined;
+        software_version?: string | undefined;
+        software_statement?: string | undefined;
+        post_logout_redirect_uris?: string[] | undefined;
+        grant_types?: ("authorization_code" | "client_credentials" | "refresh_token")[] | undefined;
+        response_types?: "code"[] | undefined;
+        type?: "web" | "native" | "user-agent-based" | undefined;
+        client_secret_expires_at?: string | number | undefined;
+        skip_consent?: boolean | undefined;
+        enable_end_session?: boolean | undefined;
+        metadata?: Record<string, unknown> | undefined;
+      };
+    }, Record<string, any> | undefined, [], OAuthClient, {
+      SERVER_ONLY: true;
+      openapi: {
+        description: string;
+      };
+    }, undefined>;
+    updateOAuthClient: better_call0.Endpoint<"/oauth2/update-client", "POST", {
+      client_id: string;
+      update: {
+        redirect_uris?: string[] | undefined;
+        scope?: string | undefined;
+        client_name?: string | undefined;
+        client_uri?: string | undefined;
+        logo_uri?: string | undefined;
+        contacts?: string[] | undefined;
+        tos_uri?: string | undefined;
+        policy_uri?: string | undefined;
+        software_id?: string | undefined;
+        software_version?: string | undefined;
+        software_statement?: string | undefined;
+        post_logout_redirect_uris?: string[] | undefined;
+        grant_types?: ("authorization_code" | "client_credentials" | "refresh_token")[] | undefined;
+        response_types?: "code"[] | undefined;
+        type?: "web" | "native" | "user-agent-based" | undefined;
+      };
+    }, Record<string, any> | undefined, [better_call0.Middleware<(inputContext: Record<string, any>) => Promise<{
+      session: {
+        session: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          userId: string;
+          expiresAt: Date;
+          token: string;
+          ipAddress?: string | null | undefined;
+          userAgent?: string | null | undefined;
+        };
+        user: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          email: string;
+          emailVerified: boolean;
+          name: string;
+          image?: string | null | undefined;
+        };
+      };
+    }>>], OAuthClient, {
+      openapi: {
+        description: string;
+      };
+    }, undefined>;
+    rotateClientSecret: better_call0.Endpoint<"/oauth2/client/rotate-secret", "POST", {
+      client_id: string;
+    }, Record<string, any> | undefined, [better_call0.Middleware<(inputContext: Record<string, any>) => Promise<{
+      session: {
+        session: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          userId: string;
+          expiresAt: Date;
+          token: string;
+          ipAddress?: string | null | undefined;
+          userAgent?: string | null | undefined;
+        };
+        user: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          email: string;
+          emailVerified: boolean;
+          name: string;
+          image?: string | null | undefined;
+        };
+      };
+    }>>], OAuthClient, {
+      openapi: {
+        description: string;
+      };
+    }, undefined>;
+    deleteOAuthClient: better_call0.Endpoint<"/oauth2/delete-client", "POST", {
+      client_id: string;
+    }, Record<string, any> | undefined, [better_call0.Middleware<(inputContext: Record<string, any>) => Promise<{
+      session: {
+        session: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          userId: string;
+          expiresAt: Date;
+          token: string;
+          ipAddress?: string | null | undefined;
+          userAgent?: string | null | undefined;
+        };
+        user: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          email: string;
+          emailVerified: boolean;
+          name: string;
+          image?: string | null | undefined;
+        };
+      };
+    }>>], void, {
+      openapi: {
+        description: string;
+      };
+    }, undefined>;
+    getOAuthConsent: better_call0.Endpoint<"/oauth2/get-consent", "GET", undefined, {
+      id: string;
+    }, [better_call0.Middleware<(inputContext: Record<string, any>) => Promise<{
+      session: {
+        session: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          userId: string;
+          expiresAt: Date;
+          token: string;
+          ipAddress?: string | null | undefined;
+          userAgent?: string | null | undefined;
+        };
+        user: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          email: string;
+          emailVerified: boolean;
+          name: string;
+          image?: string | null | undefined;
+        };
+      };
+    }>>], OAuthConsent<Scope[]>, {
+      openapi: {
+        description: string;
+      };
+    }, undefined>;
+    getOAuthConsents: better_call0.Endpoint<"/oauth2/get-consents", "GET", undefined, Record<string, any> | undefined, [better_call0.Middleware<(inputContext: Record<string, any>) => Promise<{
+      session: {
+        session: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          userId: string;
+          expiresAt: Date;
+          token: string;
+          ipAddress?: string | null | undefined;
+          userAgent?: string | null | undefined;
+        };
+        user: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          email: string;
+          emailVerified: boolean;
+          name: string;
+          image?: string | null | undefined;
+        };
+      };
+    }>>], OAuthConsent<Scope[]>[], {
+      openapi: {
+        description: string;
+      };
+    }, undefined>;
+    updateOAuthConsent: better_call0.Endpoint<"/oauth2/update-consent", "POST", {
+      id: string;
+      update: {
+        scopes: string[];
+      };
+    }, Record<string, any> | undefined, [better_call0.Middleware<(inputContext: Record<string, any>) => Promise<{
+      session: {
+        session: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          userId: string;
+          expiresAt: Date;
+          token: string;
+          ipAddress?: string | null | undefined;
+          userAgent?: string | null | undefined;
+        };
+        user: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          email: string;
+          emailVerified: boolean;
+          name: string;
+          image?: string | null | undefined;
+        };
+      };
+    }>>], OAuthConsent<Scope[]> | null, {
+      openapi: {
+        description: string;
+      };
+    }, undefined>;
+    deleteOAuthConsent: better_call0.Endpoint<"/oauth2/delete-consent", "POST", {
+      id: string;
+    }, Record<string, any> | undefined, [better_call0.Middleware<(inputContext: Record<string, any>) => Promise<{
+      session: {
+        session: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          userId: string;
+          expiresAt: Date;
+          token: string;
+          ipAddress?: string | null | undefined;
+          userAgent?: string | null | undefined;
+        };
+        user: Record<string, any> & {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          email: string;
+          emailVerified: boolean;
+          name: string;
+          image?: string | null | undefined;
+        };
+      };
+    }>>], void, {
+      openapi: {
+        description: string;
+      };
+    }, undefined>;
+  };
+  schema: {
+    oauthClient: {
+      modelName: string;
+      fields: {
+        clientId: {
+          type: "string";
+          unique: true;
+          required: true;
+        };
+        clientSecret: {
+          type: "string";
+          required: false;
+        };
+        disabled: {
+          type: "boolean";
+          defaultValue: false;
+          required: false;
+        };
+        skipConsent: {
+          type: "boolean";
+          required: false;
+        };
+        enableEndSession: {
+          type: "boolean";
+          required: false;
+        };
+        subjectType: {
+          type: "string";
+          required: false;
+        };
+        scopes: {
+          type: "string[]";
+          required: false;
+        };
+        userId: {
+          type: "string";
+          required: false;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        createdAt: {
+          type: "date";
+          required: false;
+        };
+        updatedAt: {
+          type: "date";
+          required: false;
+        };
+        name: {
+          type: "string";
+          required: false;
+        };
+        uri: {
+          type: "string";
+          required: false;
+        };
+        icon: {
+          type: "string";
+          required: false;
+        };
+        contacts: {
+          type: "string[]";
+          required: false;
+        };
+        tos: {
+          type: "string";
+          required: false;
+        };
+        policy: {
+          type: "string";
+          required: false;
+        };
+        softwareId: {
+          type: "string";
+          required: false;
+        };
+        softwareVersion: {
+          type: "string";
+          required: false;
+        };
+        softwareStatement: {
+          type: "string";
+          required: false;
+        };
+        redirectUris: {
+          type: "string[]";
+          required: true;
+        };
+        postLogoutRedirectUris: {
+          type: "string[]";
+          required: false;
+        };
+        tokenEndpointAuthMethod: {
+          type: "string";
+          required: false;
+        };
+        grantTypes: {
+          type: "string[]";
+          required: false;
+        };
+        responseTypes: {
+          type: "string[]";
+          required: false;
+        };
+        public: {
+          type: "boolean";
+          required: false;
+        };
+        type: {
+          type: "string";
+          required: false;
+        };
+        requirePKCE: {
+          type: "boolean";
+          required: false;
+        };
+        referenceId: {
+          type: "string";
+          required: false;
+        };
+        metadata: {
+          type: "json";
+          required: false;
+        };
+      };
+    };
+    oauthRefreshToken: {
+      fields: {
+        token: {
+          type: "string";
+          required: true;
+        };
+        clientId: {
+          type: "string";
+          required: true;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        sessionId: {
+          type: "string";
+          required: false;
+          references: {
+            model: string;
+            field: string;
+            onDelete: "set null";
+          };
+        };
+        userId: {
+          type: "string";
+          required: true;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        referenceId: {
+          type: "string";
+          required: false;
+        };
+        expiresAt: {
+          type: "date";
+        };
+        createdAt: {
+          type: "date";
+        };
+        revoked: {
+          type: "date";
+          required: false;
+        };
+        authTime: {
+          type: "date";
+          required: false;
+        };
+        scopes: {
+          type: "string[]";
+          required: true;
+        };
+      };
+    };
+    oauthAccessToken: {
+      modelName: string;
+      fields: {
+        token: {
+          type: "string";
+          unique: true;
+        };
+        clientId: {
+          type: "string";
+          required: true;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        sessionId: {
+          type: "string";
+          required: false;
+          references: {
+            model: string;
+            field: string;
+            onDelete: "set null";
+          };
+        };
+        userId: {
+          type: "string";
+          required: false;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        referenceId: {
+          type: "string";
+          required: false;
+        };
+        refreshId: {
+          type: "string";
+          required: false;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        expiresAt: {
+          type: "date";
+        };
+        createdAt: {
+          type: "date";
+        };
+        scopes: {
+          type: "string[]";
+          required: true;
+        };
+      };
+    };
+    oauthConsent: {
+      modelName: string;
+      fields: {
+        clientId: {
+          type: "string";
+          required: true;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        userId: {
+          type: "string";
+          required: false;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        referenceId: {
+          type: "string";
+          required: false;
+        };
+        scopes: {
+          type: "string[]";
+          required: true;
+        };
+        createdAt: {
+          type: "date";
+        };
+        updatedAt: {
+          type: "date";
+        };
+      };
+    };
+  };
+  rateLimit: ({
+    pathMatcher: (path: string) => path is "/oauth2/token";
+    window: number;
+    max: number;
+  } | {
+    pathMatcher: (path: string) => path is "/oauth2/authorize";
+    window: number;
+    max: number;
+  } | {
+    pathMatcher: (path: string) => path is "/oauth2/introspect";
+    window: number;
+    max: number;
+  } | {
+    pathMatcher: (path: string) => path is "/oauth2/revoke";
+    window: number;
+    max: number;
+  } | {
+    pathMatcher: (path: string) => path is "/oauth2/register";
+    window: number;
+    max: number;
+  } | {
+    pathMatcher: (path: string) => path is "/oauth2/userinfo";
+    window: number;
+    max: number;
+  })[];
+};
+//#endregion
+export { oauthProvider as n, getOAuthProviderState as t };