@better-auth/oauth-provider 1.6.0-beta.0 → 1.6.0

package/dist/oauth-CYgzO8Am.d.mts

@@ -0,0 +1,2081 @@
+import { c as OAuthConsent, i as OIDCMetadata, m as Scope, r as OAuthClient, t as AuthServerMetadata, u as OAuthOptions } from "./oauth-Cc0nzj5Q.mjs";
+import * as better_call0 from "better-call";
+import * as z from "zod";
+import * as better_auth_plugins0 from "better-auth/plugins";
+import * as jose from "jose";
+import * as better_auth0 from "better-auth";
+
+//#region src/oauth.d.ts
+declare module "@better-auth/core" {
+  interface BetterAuthPluginRegistry<AuthOptions, Options> {
+    "oauth-provider": {
+      creator: typeof oauthProvider;
+    };
+  }
+}
+declare const getOAuthProviderState: () => Promise<{
+  query?: string;
+} | null>;
+/**
+ * oAuth 2.1 provider plugin for Better Auth.
+ *
+ * @see https://better-auth.com/docs/plugins/oauth-provider
+ * @param options - The options for the oAuth Provider plugin.
+ * @returns A Better Auth plugin.
+ */
+declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
+  id: "oauth-provider";
+  version: string;
+  options: NoInfer<O>;
+  init: (ctx: better_auth0.AuthContext) => void;
+  hooks: {
+    before: {
+      matcher(ctx: better_auth0.HookEndpointContext): any;
+      handler: (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>;
+    }[];
+    after: {
+      matcher(ctx: better_auth0.HookEndpointContext): boolean;
+      handler: (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        redirect: boolean;
+        url: string;
+      } | undefined>;
+    }[];
+  };
+  endpoints: {
+    /**
+     * A server-only endpoint that helps provide the
+     * oAuth Server configuration at the well-known endpoint.
+     *
+     * Provided at /.well-known/oauth-authorization-server/[issuer-path]
+     * (root if no issuer-path).
+     */
+    getOAuthServerConfig: better_call0.StrictEndpoint<"/.well-known/oauth-authorization-server", {
+      method: "GET";
+      metadata: {
+        SERVER_ONLY: true;
+      };
+    }, AuthServerMetadata>;
+    /**
+     * A server-only endpoint that helps provide the
+     * OpenId configuration at the well-known endpoint.
+     *
+     * Provided at [issuer-path]/.well-known/openid-configuration
+     * (root if no issuer-path).
+     */
+    getOpenIdConfig: better_call0.StrictEndpoint<"/.well-known/openid-configuration", {
+      method: "GET";
+      metadata: {
+        SERVER_ONLY: true;
+      };
+    }, Omit<OIDCMetadata, "id_token_signing_alg_values_supported"> & {
+      id_token_signing_alg_values_supported: better_auth_plugins0.JWSAlgorithms[] | ["HS256"];
+    }>;
+    oauth2Authorize: better_call0.StrictEndpoint<"/oauth2/authorize", {
+      method: "GET";
+      query: z.ZodObject<{
+        response_type: z.ZodOptional<z.ZodEnum<{
+          code: "code";
+        }>>;
+        client_id: z.ZodString;
+        redirect_uri: z.ZodOptional<z.ZodURL>;
+        scope: z.ZodOptional<z.ZodString>;
+        state: z.ZodOptional<z.ZodString>;
+        request_uri: z.ZodOptional<z.ZodString>;
+        code_challenge: z.ZodOptional<z.ZodString>;
+        code_challenge_method: z.ZodOptional<z.ZodEnum<{
+          S256: "S256";
+        }>>;
+        nonce: z.ZodOptional<z.ZodString>;
+        prompt: z.ZodOptional<z.ZodEnum<{
+          none: "none";
+          consent: "consent";
+          login: "login";
+          create: "create";
+          select_account: "select_account";
+          "login consent": "login consent";
+          "select_account consent": "select_account consent";
+        }>>;
+      }, z.core.$strip>;
+      metadata: {
+        openapi: {
+          description: string;
+          parameters: ({
+            name: string;
+            in: "query";
+            required: false;
+            schema: {
+              type: "string";
+              format?: undefined;
+            };
+            description: string;
+          } | {
+            name: string;
+            in: "query";
+            required: true;
+            schema: {
+              type: "string";
+              format?: undefined;
+            };
+            description: string;
+          } | {
+            name: string;
+            in: "query";
+            required: false;
+            schema: {
+              type: "string";
+              format: string;
+            };
+            description: string;
+          })[];
+          responses: {
+            "302": {
+              description: string;
+              headers: {
+                Location: {
+                  description: string;
+                  schema: {
+                    type: string;
+                    format: string;
+                  };
+                };
+              };
+            };
+            "400": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      error: {
+                        type: string;
+                      };
+                      error_description: {
+                        type: string;
+                      };
+                      state: {
+                        type: string;
+                      };
+                    };
+                    required: string[];
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, {
+      redirect: boolean;
+      url: string;
+    }>;
+    oauth2Consent: better_call0.StrictEndpoint<"/oauth2/consent", {
+      method: "POST";
+      body: z.ZodObject<{
+        accept: z.ZodBoolean;
+        scope: z.ZodOptional<z.ZodString>;
+        oauth_query: z.ZodOptional<z.ZodString>;
+      }, z.core.$strip>;
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+      metadata: {
+        openapi: {
+          description: string;
+          responses: {
+            "200": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      redirect_uri: {
+                        type: string;
+                        format: string;
+                        description: string;
+                      };
+                    };
+                    required: string[];
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, {
+      redirect: boolean;
+      url: string;
+    }>;
+    oauth2Continue: better_call0.StrictEndpoint<"/oauth2/continue", {
+      method: "POST";
+      body: z.ZodObject<{
+        selected: z.ZodOptional<z.ZodBoolean>;
+        created: z.ZodOptional<z.ZodBoolean>;
+        postLogin: z.ZodOptional<z.ZodBoolean>;
+        oauth_query: z.ZodOptional<z.ZodString>;
+      }, z.core.$strip>;
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+      metadata: {
+        openapi: {
+          description: string;
+          responses: {
+            "200": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      redirect_uri: {
+                        type: string;
+                        format: string;
+                        description: string;
+                      };
+                    };
+                    required: string[];
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, {
+      redirect: boolean;
+      url: string;
+    }>;
+    oauth2Token: better_call0.StrictEndpoint<"/oauth2/token", {
+      method: "POST";
+      body: z.ZodObject<{
+        grant_type: z.ZodEnum<{
+          authorization_code: "authorization_code";
+          client_credentials: "client_credentials";
+          refresh_token: "refresh_token";
+        }>;
+        client_id: z.ZodOptional<z.ZodString>;
+        client_secret: z.ZodOptional<z.ZodString>;
+        code: z.ZodOptional<z.ZodString>;
+        code_verifier: z.ZodOptional<z.ZodString>;
+        redirect_uri: z.ZodOptional<z.ZodURL>;
+        refresh_token: z.ZodOptional<z.ZodString>;
+        resource: z.ZodOptional<z.ZodString>;
+        scope: z.ZodOptional<z.ZodString>;
+      }, z.core.$strip>;
+      metadata: {
+        allowedMediaTypes: string[];
+        openapi: {
+          description: string;
+          requestBody: {
+            required: boolean;
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object";
+                  properties: {
+                    grant_type: {
+                      type: string;
+                      enum: string[];
+                      description: string;
+                    };
+                    client_id: {
+                      type: string;
+                      description: string;
+                    };
+                    client_secret: {
+                      type: string;
+                      description: string;
+                    };
+                    code: {
+                      type: string;
+                      description: string;
+                    };
+                    code_verifier: {
+                      type: string;
+                      description: string;
+                    };
+                    redirect_uri: {
+                      type: string;
+                      format: string;
+                      description: string;
+                    };
+                    refresh_token: {
+                      type: string;
+                      description: string;
+                    };
+                    resource: {
+                      type: string;
+                      description: string;
+                    };
+                    scope: {
+                      type: string;
+                      description: string;
+                    };
+                  };
+                  required: string[];
+                };
+              };
+            };
+          };
+          responses: {
+            "200": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      access_token: {
+                        type: string;
+                        description: string;
+                      };
+                      token_type: {
+                        type: string;
+                        description: string;
+                        enum: string[];
+                      };
+                      expires_in: {
+                        type: string;
+                        description: string;
+                      };
+                      refresh_token: {
+                        type: string;
+                        description: string;
+                      };
+                      scope: {
+                        type: string;
+                        description: string;
+                      };
+                      id_token: {
+                        type: string;
+                        description: string;
+                      };
+                    };
+                    required: string[];
+                  };
+                };
+              };
+            };
+            "400": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      error: {
+                        type: string;
+                      };
+                      error_description: {
+                        type: string;
+                      };
+                      error_uri: {
+                        type: string;
+                      };
+                    };
+                    required: string[];
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, {
+      access_token: string;
+      expires_in: number;
+      expires_at: number;
+      token_type: string;
+      scope: string;
+    }>;
+    oauth2Introspect: better_call0.StrictEndpoint<"/oauth2/introspect", {
+      method: "POST";
+      body: z.ZodObject<{
+        client_id: z.ZodOptional<z.ZodString>;
+        client_secret: z.ZodOptional<z.ZodString>;
+        token: z.ZodString;
+        token_type_hint: z.ZodOptional<z.ZodEnum<{
+          refresh_token: "refresh_token";
+          access_token: "access_token";
+        }>>;
+      }, z.core.$strip>;
+      metadata: {
+        allowedMediaTypes: string[];
+        openapi: {
+          description: string;
+          requestBody: {
+            required: boolean;
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object";
+                  properties: {
+                    client_id: {
+                      type: string;
+                      description: string;
+                    };
+                    client_secret: {
+                      type: string;
+                      description: string;
+                    };
+                    token: {
+                      type: string;
+                      description: string;
+                    };
+                    token_type_hint: {
+                      type: string;
+                      enum: string[];
+                      description: string;
+                    };
+                    resource: {
+                      type: string;
+                      description: string;
+                    };
+                  };
+                  required: string[];
+                };
+              };
+            };
+          };
+          responses: {
+            "200": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      active: {
+                        type: string;
+                        description: string;
+                      };
+                      scope: {
+                        type: string;
+                        description: string;
+                      };
+                      client_id: {
+                        type: string;
+                        description: string;
+                      };
+                      username: {
+                        type: string;
+                        description: string;
+                      };
+                      token_type: {
+                        type: string;
+                        description: string;
+                      };
+                      exp: {
+                        type: string;
+                        description: string;
+                      };
+                      iat: {
+                        type: string;
+                        description: string;
+                      };
+                      nbf: {
+                        type: string;
+                        description: string;
+                      };
+                      sub: {
+                        type: string;
+                        description: string;
+                      };
+                      aud: {
+                        type: string;
+                        description: string;
+                      };
+                      iss: {
+                        type: string;
+                        description: string;
+                      };
+                      jti: {
+                        type: string;
+                        description: string;
+                      };
+                    };
+                    required: string[];
+                  };
+                };
+              };
+            };
+            "400": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      error: {
+                        type: string;
+                      };
+                      error_description: {
+                        type: string;
+                      };
+                      error_uri: {
+                        type: string;
+                      };
+                    };
+                    required: string[];
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, jose.JWTPayload>;
+    oauth2Revoke: better_call0.StrictEndpoint<"/oauth2/revoke", {
+      method: "POST";
+      body: z.ZodObject<{
+        client_id: z.ZodOptional<z.ZodString>;
+        client_secret: z.ZodOptional<z.ZodString>;
+        token: z.ZodString;
+        token_type_hint: z.ZodOptional<z.ZodEnum<{
+          refresh_token: "refresh_token";
+          access_token: "access_token";
+        }>>;
+      }, z.core.$strip>;
+      metadata: {
+        allowedMediaTypes: string[];
+        openapi: {
+          description: string;
+          requestBody: {
+            required: boolean;
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object";
+                  properties: {
+                    client_id: {
+                      type: string;
+                      description: string;
+                    };
+                    client_secret: {
+                      type: string;
+                      description: string;
+                    };
+                    token: {
+                      type: string;
+                      description: string;
+                    };
+                    token_type_hint: {
+                      type: string;
+                      enum: string[];
+                      description: string;
+                    };
+                  };
+                  required: string[];
+                };
+              };
+            };
+          };
+          responses: {
+            "200": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    description: string;
+                  };
+                };
+              };
+            };
+            "400": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      error: {
+                        type: string;
+                      };
+                      error_description: {
+                        type: string;
+                      };
+                      error_uri: {
+                        type: string;
+                      };
+                    };
+                    required: string[];
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, null | undefined>;
+    oauth2UserInfo: better_call0.StrictEndpoint<"/oauth2/userinfo", {
+      method: "GET";
+      metadata: {
+        openapi: {
+          description: string;
+          security: ({
+            bearerAuth: never[];
+            OAuth2?: undefined;
+          } | {
+            OAuth2: string[];
+            bearerAuth?: undefined;
+          })[];
+          parameters: {
+            name: string;
+            in: "header";
+            required: false;
+            schema: {
+              type: "string";
+            };
+            description: string;
+          }[];
+          responses: {
+            "200": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      sub: {
+                        type: string;
+                        description: string;
+                      };
+                      email: {
+                        type: string;
+                        format: string;
+                        nullable: boolean;
+                        description: string;
+                      };
+                      name: {
+                        type: string;
+                        nullable: boolean;
+                        description: string;
+                      };
+                      picture: {
+                        type: string;
+                        format: string;
+                        nullable: boolean;
+                        description: string;
+                      };
+                      given_name: {
+                        type: string;
+                        nullable: boolean;
+                        description: string;
+                      };
+                      family_name: {
+                        type: string;
+                        nullable: boolean;
+                        description: string;
+                      };
+                      email_verified: {
+                        type: string;
+                        nullable: boolean;
+                        description: string;
+                      };
+                    };
+                    required: string[];
+                  };
+                };
+              };
+            };
+            "401": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      error: {
+                        type: string;
+                      };
+                      error_description: {
+                        type: string;
+                      };
+                    };
+                    required: string[];
+                  };
+                };
+              };
+            };
+            "403": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      error: {
+                        type: string;
+                      };
+                      error_description: {
+                        type: string;
+                      };
+                    };
+                    required: string[];
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, {
+      email?: string | undefined;
+      email_verified?: boolean | undefined;
+      name?: string | undefined;
+      picture?: string | undefined;
+      given_name?: string | undefined;
+      family_name?: string | undefined;
+      sub: string;
+    }>;
+    oauth2EndSession: better_call0.StrictEndpoint<"/oauth2/end-session", {
+      method: "GET";
+      query: z.ZodObject<{
+        id_token_hint: z.ZodString;
+        client_id: z.ZodOptional<z.ZodString>;
+        post_logout_redirect_uri: z.ZodOptional<z.ZodURL>;
+        state: z.ZodOptional<z.ZodString>;
+      }, z.core.$strip>;
+      metadata: {
+        openapi: {
+          description: string;
+          responses: {
+            "200": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      redirect_uri: {
+                        type: string;
+                        format: string;
+                        description: string;
+                      };
+                      message: {
+                        type: string;
+                        description: string;
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, {
+      redirect: boolean;
+      url: string;
+    } | undefined>;
+    registerOAuthClient: better_call0.StrictEndpoint<"/oauth2/register", {
+      method: "POST";
+      body: z.ZodObject<{
+        redirect_uris: z.ZodArray<z.ZodURL>;
+        scope: z.ZodOptional<z.ZodString>;
+        client_name: z.ZodOptional<z.ZodString>;
+        client_uri: z.ZodOptional<z.ZodString>;
+        logo_uri: z.ZodOptional<z.ZodString>;
+        contacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        tos_uri: z.ZodOptional<z.ZodString>;
+        policy_uri: z.ZodOptional<z.ZodString>;
+        software_id: z.ZodOptional<z.ZodString>;
+        software_version: z.ZodOptional<z.ZodString>;
+        software_statement: z.ZodOptional<z.ZodString>;
+        post_logout_redirect_uris: z.ZodOptional<z.ZodArray<z.ZodURL>>;
+        token_endpoint_auth_method: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+          none: "none";
+          client_secret_basic: "client_secret_basic";
+          client_secret_post: "client_secret_post";
+        }>>>;
+        grant_types: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodEnum<{
+          authorization_code: "authorization_code";
+          client_credentials: "client_credentials";
+          refresh_token: "refresh_token";
+        }>>>>;
+        response_types: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodEnum<{
+          code: "code";
+        }>>>>;
+        type: z.ZodOptional<z.ZodEnum<{
+          web: "web";
+          native: "native";
+          "user-agent-based": "user-agent-based";
+        }>>;
+        subject_type: z.ZodOptional<z.ZodEnum<{
+          public: "public";
+          pairwise: "pairwise";
+        }>>;
+        skip_consent: z.ZodOptional<z.ZodBoolean>;
+      }, z.core.$strip>;
+      metadata: {
+        openapi: {
+          description: string;
+          responses: {
+            "200": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    /** @returns {OauthClient} */type: "object";
+                    properties: {
+                      client_id: {
+                        type: string;
+                        description: string;
+                      };
+                      client_secret: {
+                        type: string;
+                        description: string;
+                      };
+                      client_secret_expires_at: {
+                        type: string;
+                        description: string;
+                      };
+                      scope: {
+                        type: string;
+                        description: string;
+                      };
+                      user_id: {
+                        type: string;
+                        description: string;
+                      };
+                      client_id_issued_at: {
+                        type: string;
+                        description: string;
+                      };
+                      client_name: {
+                        type: string;
+                        description: string;
+                      };
+                      client_uri: {
+                        type: string;
+                        description: string;
+                      };
+                      logo_uri: {
+                        type: string;
+                        description: string;
+                      };
+                      contacts: {
+                        type: string;
+                        items: {
+                          type: string;
+                        };
+                        description: string;
+                      };
+                      tos_uri: {
+                        type: string;
+                        description: string;
+                      };
+                      policy_uri: {
+                        type: string;
+                        description: string;
+                      };
+                      software_id: {
+                        type: string;
+                        description: string;
+                      };
+                      software_version: {
+                        type: string;
+                        description: string;
+                      };
+                      software_statement: {
+                        type: string;
+                        description: string;
+                      };
+                      redirect_uris: {
+                        type: string;
+                        items: {
+                          type: string;
+                          format: string;
+                        };
+                        description: string;
+                      };
+                      post_logout_redirect_uris: {
+                        type: string;
+                        items: {
+                          type: string;
+                          format: string;
+                        };
+                        description: string;
+                      };
+                      token_endpoint_auth_method: {
+                        type: string;
+                        description: string;
+                        enum: string[];
+                      };
+                      grant_types: {
+                        type: string;
+                        items: {
+                          type: string;
+                          enum: string[];
+                        };
+                        description: string;
+                      };
+                      response_types: {
+                        type: string;
+                        items: {
+                          type: string;
+                          enum: string[];
+                        };
+                        description: string;
+                      };
+                      public: {
+                        type: string;
+                        description: string;
+                      };
+                      type: {
+                        type: string;
+                        description: string;
+                        enum: string[];
+                      };
+                      disabled: {
+                        type: string;
+                        description: string;
+                      };
+                    };
+                    required: string[];
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, OAuthClient>;
+    adminCreateOAuthClient: better_call0.StrictEndpoint<"/admin/oauth2/create-client", {
+      method: "POST";
+      body: z.ZodObject<{
+        redirect_uris: z.ZodArray<z.ZodURL>;
+        scope: z.ZodOptional<z.ZodString>;
+        client_name: z.ZodOptional<z.ZodString>;
+        client_uri: z.ZodOptional<z.ZodString>;
+        logo_uri: z.ZodOptional<z.ZodString>;
+        contacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        tos_uri: z.ZodOptional<z.ZodString>;
+        policy_uri: z.ZodOptional<z.ZodString>;
+        software_id: z.ZodOptional<z.ZodString>;
+        software_version: z.ZodOptional<z.ZodString>;
+        software_statement: z.ZodOptional<z.ZodString>;
+        post_logout_redirect_uris: z.ZodOptional<z.ZodArray<z.ZodURL>>;
+        token_endpoint_auth_method: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+          none: "none";
+          client_secret_basic: "client_secret_basic";
+          client_secret_post: "client_secret_post";
+        }>>>;
+        grant_types: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodEnum<{
+          authorization_code: "authorization_code";
+          client_credentials: "client_credentials";
+          refresh_token: "refresh_token";
+        }>>>>;
+        response_types: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodEnum<{
+          code: "code";
+        }>>>>;
+        type: z.ZodOptional<z.ZodEnum<{
+          web: "web";
+          native: "native";
+          "user-agent-based": "user-agent-based";
+        }>>;
+        client_secret_expires_at: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+        skip_consent: z.ZodOptional<z.ZodBoolean>;
+        enable_end_session: z.ZodOptional<z.ZodBoolean>;
+        require_pkce: z.ZodOptional<z.ZodBoolean>;
+        subject_type: z.ZodOptional<z.ZodEnum<{
+          public: "public";
+          pairwise: "pairwise";
+        }>>;
+        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+      }, z.core.$strip>;
+      metadata: {
+        SERVER_ONLY: true;
+        openapi: {
+          description: string;
+          responses: {
+            "200": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      client_id: {
+                        type: string;
+                        description: string;
+                      };
+                      client_secret: {
+                        type: string;
+                        description: string;
+                      };
+                      client_secret_expires_at: {
+                        type: string;
+                        description: string;
+                      };
+                      scope: {
+                        type: string;
+                        description: string;
+                      };
+                      user_id: {
+                        type: string;
+                        description: string;
+                      };
+                      client_id_issued_at: {
+                        type: string;
+                        description: string;
+                      };
+                      client_name: {
+                        type: string;
+                        description: string;
+                      };
+                      client_uri: {
+                        type: string;
+                        description: string;
+                      };
+                      logo_uri: {
+                        type: string;
+                        description: string;
+                      };
+                      contacts: {
+                        type: string;
+                        items: {
+                          type: string;
+                        };
+                        description: string;
+                      };
+                      tos_uri: {
+                        type: string;
+                        description: string;
+                      };
+                      policy_uri: {
+                        type: string;
+                        description: string;
+                      };
+                      software_id: {
+                        type: string;
+                        description: string;
+                      };
+                      software_version: {
+                        type: string;
+                        description: string;
+                      };
+                      software_statement: {
+                        type: string;
+                        description: string;
+                      };
+                      redirect_uris: {
+                        type: string;
+                        items: {
+                          type: string;
+                          format: string;
+                        };
+                        description: string;
+                      };
+                      token_endpoint_auth_method: {
+                        type: string;
+                        description: string;
+                        enum: string[];
+                      };
+                      grant_types: {
+                        type: string;
+                        items: {
+                          type: string;
+                          enum: string[];
+                        };
+                        description: string;
+                      };
+                      response_types: {
+                        type: string;
+                        items: {
+                          type: string;
+                          enum: string[];
+                        };
+                        description: string;
+                      };
+                      public: {
+                        type: string;
+                        description: string;
+                      };
+                      type: {
+                        type: string;
+                        description: string;
+                        enum: string[];
+                      };
+                      disabled: {
+                        type: string;
+                        description: string;
+                      };
+                      require_pkce: {
+                        type: string;
+                        description: string;
+                        default: boolean;
+                      };
+                      metadata: {
+                        type: string;
+                        additionalProperties: boolean;
+                        nullable: boolean;
+                        description: string;
+                      };
+                    };
+                    required: string[];
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, OAuthClient>;
+    createOAuthClient: better_call0.StrictEndpoint<"/oauth2/create-client", {
+      method: "POST";
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+      body: z.ZodObject<{
+        redirect_uris: z.ZodArray<z.ZodURL>;
+        scope: z.ZodOptional<z.ZodString>;
+        client_name: z.ZodOptional<z.ZodString>;
+        client_uri: z.ZodOptional<z.ZodString>;
+        logo_uri: z.ZodOptional<z.ZodString>;
+        contacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        tos_uri: z.ZodOptional<z.ZodString>;
+        policy_uri: z.ZodOptional<z.ZodString>;
+        software_id: z.ZodOptional<z.ZodString>;
+        software_version: z.ZodOptional<z.ZodString>;
+        software_statement: z.ZodOptional<z.ZodString>;
+        post_logout_redirect_uris: z.ZodOptional<z.ZodArray<z.ZodURL>>;
+        token_endpoint_auth_method: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+          none: "none";
+          client_secret_basic: "client_secret_basic";
+          client_secret_post: "client_secret_post";
+        }>>>;
+        grant_types: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodEnum<{
+          authorization_code: "authorization_code";
+          client_credentials: "client_credentials";
+          refresh_token: "refresh_token";
+        }>>>>;
+        response_types: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodEnum<{
+          code: "code";
+        }>>>>;
+        type: z.ZodOptional<z.ZodEnum<{
+          web: "web";
+          native: "native";
+          "user-agent-based": "user-agent-based";
+        }>>;
+      }, z.core.$strip>;
+      metadata: {
+        openapi: {
+          description: string;
+          responses: {
+            "200": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      client_id: {
+                        type: string;
+                        description: string;
+                      };
+                      client_secret: {
+                        type: string;
+                        description: string;
+                      };
+                      client_secret_expires_at: {
+                        type: string;
+                        description: string;
+                      };
+                      scope: {
+                        type: string;
+                        description: string;
+                      };
+                      user_id: {
+                        type: string;
+                        description: string;
+                      };
+                      client_id_issued_at: {
+                        type: string;
+                        description: string;
+                      };
+                      client_name: {
+                        type: string;
+                        description: string;
+                      };
+                      client_uri: {
+                        type: string;
+                        description: string;
+                      };
+                      logo_uri: {
+                        type: string;
+                        description: string;
+                      };
+                      contacts: {
+                        type: string;
+                        items: {
+                          type: string;
+                        };
+                        description: string;
+                      };
+                      tos_uri: {
+                        type: string;
+                        description: string;
+                      };
+                      policy_uri: {
+                        type: string;
+                        description: string;
+                      };
+                      software_id: {
+                        type: string;
+                        description: string;
+                      };
+                      software_version: {
+                        type: string;
+                        description: string;
+                      };
+                      software_statement: {
+                        type: string;
+                        description: string;
+                      };
+                      redirect_uris: {
+                        type: string;
+                        items: {
+                          type: string;
+                          format: string;
+                        };
+                        description: string;
+                      };
+                      token_endpoint_auth_method: {
+                        type: string;
+                        description: string;
+                        enum: string[];
+                      };
+                      grant_types: {
+                        type: string;
+                        items: {
+                          type: string;
+                          enum: string[];
+                        };
+                        description: string;
+                      };
+                      response_types: {
+                        type: string;
+                        items: {
+                          type: string;
+                          enum: string[];
+                        };
+                        description: string;
+                      };
+                      public: {
+                        type: string;
+                        description: string;
+                      };
+                      type: {
+                        type: string;
+                        description: string;
+                        enum: string[];
+                      };
+                      disabled: {
+                        type: string;
+                        description: string;
+                      };
+                      metadata: {
+                        type: string;
+                        additionalProperties: boolean;
+                        nullable: boolean;
+                        description: string;
+                      };
+                    };
+                    required: string[];
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, OAuthClient>;
+    getOAuthClient: better_call0.StrictEndpoint<"/oauth2/get-client", {
+      method: "GET";
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+      query: z.ZodObject<{
+        client_id: z.ZodString;
+      }, z.core.$strip>;
+      metadata: {
+        openapi: {
+          description: string;
+        };
+      };
+    }, OAuthClient>;
+    getOAuthClientPublic: better_call0.StrictEndpoint<"/oauth2/public-client", {
+      method: "GET";
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+      query: z.ZodObject<{
+        client_id: z.ZodString;
+      }, z.core.$strip>;
+      metadata: {
+        openapi: {
+          description: string;
+        };
+      };
+    }, OAuthClient>;
+    getOAuthClientPublicPrelogin: better_call0.StrictEndpoint<"/oauth2/public-client-prelogin", {
+      method: "POST";
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>)[];
+      body: z.ZodObject<{
+        client_id: z.ZodString;
+        oauth_query: z.ZodOptional<z.ZodString>;
+      }, z.core.$strip>;
+      metadata: {
+        openapi: {
+          description: string;
+        };
+      };
+    }, OAuthClient>;
+    getOAuthClients: better_call0.StrictEndpoint<"/oauth2/get-clients", {
+      method: "GET";
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+      metadata: {
+        openapi: {
+          description: string;
+        };
+      };
+    }, OAuthClient[] | null>;
+    adminUpdateOAuthClient: better_call0.StrictEndpoint<"/admin/oauth2/update-client", {
+      method: "PATCH";
+      body: z.ZodObject<{
+        client_id: z.ZodString;
+        update: z.ZodObject<{
+          redirect_uris: z.ZodOptional<z.ZodArray<z.ZodURL>>;
+          scope: z.ZodOptional<z.ZodString>;
+          client_name: z.ZodOptional<z.ZodString>;
+          client_uri: z.ZodOptional<z.ZodString>;
+          logo_uri: z.ZodOptional<z.ZodString>;
+          contacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+          tos_uri: z.ZodOptional<z.ZodString>;
+          policy_uri: z.ZodOptional<z.ZodString>;
+          software_id: z.ZodOptional<z.ZodString>;
+          software_version: z.ZodOptional<z.ZodString>;
+          software_statement: z.ZodOptional<z.ZodString>;
+          post_logout_redirect_uris: z.ZodOptional<z.ZodArray<z.ZodURL>>;
+          grant_types: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            authorization_code: "authorization_code";
+            client_credentials: "client_credentials";
+            refresh_token: "refresh_token";
+          }>>>;
+          response_types: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            code: "code";
+          }>>>;
+          type: z.ZodOptional<z.ZodEnum<{
+            web: "web";
+            native: "native";
+            "user-agent-based": "user-agent-based";
+          }>>;
+          client_secret_expires_at: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+          skip_consent: z.ZodOptional<z.ZodBoolean>;
+          enable_end_session: z.ZodOptional<z.ZodBoolean>;
+          metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strip>;
+      }, z.core.$strip>;
+      metadata: {
+        SERVER_ONLY: true;
+        openapi: {
+          description: string;
+        };
+      };
+    }, OAuthClient>;
+    updateOAuthClient: better_call0.StrictEndpoint<"/oauth2/update-client", {
+      method: "POST";
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+      body: z.ZodObject<{
+        client_id: z.ZodString;
+        update: z.ZodObject<{
+          redirect_uris: z.ZodOptional<z.ZodArray<z.ZodURL>>;
+          scope: z.ZodOptional<z.ZodString>;
+          client_name: z.ZodOptional<z.ZodString>;
+          client_uri: z.ZodOptional<z.ZodString>;
+          logo_uri: z.ZodOptional<z.ZodString>;
+          contacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+          tos_uri: z.ZodOptional<z.ZodString>;
+          policy_uri: z.ZodOptional<z.ZodString>;
+          software_id: z.ZodOptional<z.ZodString>;
+          software_version: z.ZodOptional<z.ZodString>;
+          software_statement: z.ZodOptional<z.ZodString>;
+          post_logout_redirect_uris: z.ZodOptional<z.ZodArray<z.ZodURL>>;
+          grant_types: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            authorization_code: "authorization_code";
+            client_credentials: "client_credentials";
+            refresh_token: "refresh_token";
+          }>>>;
+          response_types: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            code: "code";
+          }>>>;
+          type: z.ZodOptional<z.ZodEnum<{
+            web: "web";
+            native: "native";
+            "user-agent-based": "user-agent-based";
+          }>>;
+        }, z.core.$strip>;
+      }, z.core.$strip>;
+      metadata: {
+        openapi: {
+          description: string;
+        };
+      };
+    }, OAuthClient>;
+    rotateClientSecret: better_call0.StrictEndpoint<"/oauth2/client/rotate-secret", {
+      method: "POST";
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+      body: z.ZodObject<{
+        client_id: z.ZodString;
+      }, z.core.$strip>;
+      metadata: {
+        openapi: {
+          description: string;
+        };
+      };
+    }, OAuthClient>;
+    deleteOAuthClient: better_call0.StrictEndpoint<"/oauth2/delete-client", {
+      method: "POST";
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+      body: z.ZodObject<{
+        client_id: z.ZodString;
+      }, z.core.$strip>;
+      metadata: {
+        openapi: {
+          description: string;
+        };
+      };
+    }, void>;
+    getOAuthConsent: better_call0.StrictEndpoint<"/oauth2/get-consent", {
+      method: "GET";
+      query: z.ZodObject<{
+        id: z.ZodString;
+      }, z.core.$strip>;
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+      metadata: {
+        openapi: {
+          description: string;
+        };
+      };
+    }, OAuthConsent<Scope[]>>;
+    getOAuthConsents: better_call0.StrictEndpoint<"/oauth2/get-consents", {
+      method: "GET";
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+      metadata: {
+        openapi: {
+          description: string;
+        };
+      };
+    }, OAuthConsent<Scope[]>[]>;
+    updateOAuthConsent: better_call0.StrictEndpoint<"/oauth2/update-consent", {
+      method: "POST";
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+      body: z.ZodObject<{
+        id: z.ZodString;
+        update: z.ZodObject<{
+          scopes: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>;
+      }, z.core.$strip>;
+      metadata: {
+        openapi: {
+          description: string;
+        };
+      };
+    }, OAuthConsent<Scope[]> | null>;
+    deleteOAuthConsent: better_call0.StrictEndpoint<"/oauth2/delete-consent", {
+      method: "POST";
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+      body: z.ZodObject<{
+        id: z.ZodString;
+      }, z.core.$strip>;
+      metadata: {
+        openapi: {
+          description: string;
+        };
+      };
+    }, void>;
+  };
+  schema: {
+    oauthClient: {
+      modelName: string;
+      fields: {
+        clientId: {
+          type: "string";
+          unique: true;
+          required: true;
+        };
+        clientSecret: {
+          type: "string";
+          required: false;
+        };
+        disabled: {
+          type: "boolean";
+          defaultValue: false;
+          required: false;
+        };
+        skipConsent: {
+          type: "boolean";
+          required: false;
+        };
+        enableEndSession: {
+          type: "boolean";
+          required: false;
+        };
+        subjectType: {
+          type: "string";
+          required: false;
+        };
+        scopes: {
+          type: "string[]";
+          required: false;
+        };
+        userId: {
+          type: "string";
+          required: false;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        createdAt: {
+          type: "date";
+          required: false;
+        };
+        updatedAt: {
+          type: "date";
+          required: false;
+        };
+        name: {
+          type: "string";
+          required: false;
+        };
+        uri: {
+          type: "string";
+          required: false;
+        };
+        icon: {
+          type: "string";
+          required: false;
+        };
+        contacts: {
+          type: "string[]";
+          required: false;
+        };
+        tos: {
+          type: "string";
+          required: false;
+        };
+        policy: {
+          type: "string";
+          required: false;
+        };
+        softwareId: {
+          type: "string";
+          required: false;
+        };
+        softwareVersion: {
+          type: "string";
+          required: false;
+        };
+        softwareStatement: {
+          type: "string";
+          required: false;
+        };
+        redirectUris: {
+          type: "string[]";
+          required: true;
+        };
+        postLogoutRedirectUris: {
+          type: "string[]";
+          required: false;
+        };
+        tokenEndpointAuthMethod: {
+          type: "string";
+          required: false;
+        };
+        grantTypes: {
+          type: "string[]";
+          required: false;
+        };
+        responseTypes: {
+          type: "string[]";
+          required: false;
+        };
+        public: {
+          type: "boolean";
+          required: false;
+        };
+        type: {
+          type: "string";
+          required: false;
+        };
+        requirePKCE: {
+          type: "boolean";
+          required: false;
+        };
+        referenceId: {
+          type: "string";
+          required: false;
+        };
+        metadata: {
+          type: "json";
+          required: false;
+        };
+      };
+    };
+    oauthRefreshToken: {
+      fields: {
+        token: {
+          type: "string";
+          required: true;
+        };
+        clientId: {
+          type: "string";
+          required: true;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        sessionId: {
+          type: "string";
+          required: false;
+          references: {
+            model: string;
+            field: string;
+            onDelete: "set null";
+          };
+        };
+        userId: {
+          type: "string";
+          required: true;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        referenceId: {
+          type: "string";
+          required: false;
+        };
+        expiresAt: {
+          type: "date";
+        };
+        createdAt: {
+          type: "date";
+        };
+        revoked: {
+          type: "date";
+          required: false;
+        };
+        authTime: {
+          type: "date";
+          required: false;
+        };
+        scopes: {
+          type: "string[]";
+          required: true;
+        };
+      };
+    };
+    oauthAccessToken: {
+      modelName: string;
+      fields: {
+        token: {
+          type: "string";
+          unique: true;
+        };
+        clientId: {
+          type: "string";
+          required: true;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        sessionId: {
+          type: "string";
+          required: false;
+          references: {
+            model: string;
+            field: string;
+            onDelete: "set null";
+          };
+        };
+        userId: {
+          type: "string";
+          required: false;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        referenceId: {
+          type: "string";
+          required: false;
+        };
+        refreshId: {
+          type: "string";
+          required: false;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        expiresAt: {
+          type: "date";
+        };
+        createdAt: {
+          type: "date";
+        };
+        scopes: {
+          type: "string[]";
+          required: true;
+        };
+      };
+    };
+    oauthConsent: {
+      modelName: string;
+      fields: {
+        clientId: {
+          type: "string";
+          required: true;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        userId: {
+          type: "string";
+          required: false;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        referenceId: {
+          type: "string";
+          required: false;
+        };
+        scopes: {
+          type: "string[]";
+          required: true;
+        };
+        createdAt: {
+          type: "date";
+        };
+        updatedAt: {
+          type: "date";
+        };
+      };
+    };
+  };
+  rateLimit: ({
+    pathMatcher: (path: string) => path is "/oauth2/token";
+    window: number;
+    max: number;
+  } | {
+    pathMatcher: (path: string) => path is "/oauth2/authorize";
+    window: number;
+    max: number;
+  } | {
+    pathMatcher: (path: string) => path is "/oauth2/introspect";
+    window: number;
+    max: number;
+  } | {
+    pathMatcher: (path: string) => path is "/oauth2/revoke";
+    window: number;
+    max: number;
+  } | {
+    pathMatcher: (path: string) => path is "/oauth2/register";
+    window: number;
+    max: number;
+  } | {
+    pathMatcher: (path: string) => path is "/oauth2/userinfo";
+    window: number;
+    max: number;
+  })[];
+};
+//#endregion
+export { oauthProvider as n, getOAuthProviderState as t };