@better-auth/oauth-provider 1.7.0-rc.5 → 1.7.0

package/dist/{oauth-4LGMyr3C.d.mts → oauth-D8xpKR0_.d.mts}

@@ -1,8 +1,12 @@
-import { B as Prompt, E as OAuthConsent, F as OAuthResource, H as Scope, O as OAuthExtensionGrantHandlerInput, R as OAuthTokenResponse, a as GrantType, j as OAuthOptions, k as OAuthMetadataExtensionInput, l as TokenEndpointAuthMethod, n as AuthServerMetadata, o as OAuthClient, u as TokenType, w as OAuthClientRegistrationResponse, y as OAuthClientAdministrativeResponse } from "./oauth-CjcHkAmR.mjs";
-import "better-call";
+import { B as Prompt, E as OAuthConsent, F as OAuthResource, H as Scope, O as OAuthExtensionGrantHandlerInput, R as OAuthTokenResponse, a as GrantType, j as OAuthOptions, k as OAuthMetadataExtensionInput, l as TokenEndpointAuthMethod, n as AuthServerMetadata, o as OAuthClient, u as TokenType, w as OAuthClientRegistrationResponse, y as OAuthClientAdministrativeResponse } from "./oauth-1Ud-hvZY.mjs";
+import * as _$better_call0 from "better-call";
 import * as z from "zod";
+import * as _$jose from "jose";
+import * as _$better_auth_plugins0 from "better-auth/plugins";
 import { DeviceAuthorizationGrant, DeviceAuthorizationPluginOptions } from "better-auth/plugins/device-authorization";
 import { AuthContext, GenericEndpointContext } from "@better-auth/core";
+import * as _$better_auth0 from "better-auth";
+
 //#region src/device-code.d.ts
 /**
  * RFC 8628 device authorization grant type. A registered OAuth client polls the
@@ -58,7 +62,7 @@ declare function buildOAuthDeviceGrant(): {
       };
     };
   };
-  onRequestValidationError: (issues: readonly import("better-auth").StandardSchemaV1.Issue[]) => void;
+  onRequestValidationError: (issues: readonly _$better_auth0.StandardSchemaV1.Issue[]) => void;
   deviceCodeSchemaFields: {
     resources: {
       type: "string[]";
@@ -75,9 +79,12 @@ declare function buildOAuthDeviceGrant(): {
   metadata: (metadataInput: OAuthMetadataExtensionInput) => {
     device_authorization_endpoint: string;
   };
-  authorizeRequest: ({ ctx, request }: {
-    ctx: import("better-auth").GenericEndpointContext;
-    request: import("better-auth/plugins").DeviceAuthorizationRequest & {
+  authorizeRequest: ({
+    ctx,
+    request
+  }: {
+    ctx: _$better_auth0.GenericEndpointContext;
+    request: _$better_auth_plugins0.DeviceAuthorizationRequest & {
       client_secret?: string | undefined;
       client_assertion?: string | undefined;
       client_assertion_type?: string | undefined;
@@ -90,8 +97,10 @@ declare function buildOAuthDeviceGrant(): {
       resources: string[] | null;
     };
   } | undefined>;
-  assertSessionRedemption: ({ deviceCode }: {
-    ctx: import("better-auth").GenericEndpointContext;
+  assertSessionRedemption: ({
+    deviceCode
+  }: {
+    ctx: _$better_auth0.GenericEndpointContext;
     deviceCode: Record<string, unknown>;
   }) => void;
   getVerificationContext: (deviceCode: Record<string, unknown>) => {
@@ -185,7 +194,7 @@ declare function oauthDeviceAuthorization(options?: OAuthDeviceAuthorizationOpti
     };
   };
   endpoints: {
-    deviceCode: import("better-call").StrictEndpoint<"/device/code", {
+    deviceCode: _$better_call0.StrictEndpoint<"/device/code", {
       method: "POST";
       cloneRequest: true;
       body: z.ZodObject<{
@@ -216,9 +225,12 @@ declare function oauthDeviceAuthorization(options?: OAuthDeviceAuthorizationOpti
         }>;
         error_description: z.ZodString;
       }, z.core.$strip>;
-      onValidationError: ({ issues, message }: {
+      onValidationError: ({
+        issues,
+        message
+      }: {
         message: string;
-        issues: readonly import("better-call").StandardSchemaV1.Issue[];
+        issues: readonly _$better_call0.StandardSchemaV1.Issue[];
       }) => never;
       metadata: {
         noStore: boolean;
@@ -313,7 +325,7 @@ declare function oauthDeviceAuthorization(options?: OAuthDeviceAuthorizationOpti
       expires_in: number;
       interval: number;
     }>;
-    deviceToken: import("better-call").StrictEndpoint<"/device/token", {
+    deviceToken: _$better_call0.StrictEndpoint<"/device/token", {
       method: "POST";
       body: z.ZodObject<{
         grant_type: z.ZodLiteral<"urn:ietf:params:oauth:grant-type:device_code">;
@@ -382,7 +394,7 @@ declare function oauthDeviceAuthorization(options?: OAuthDeviceAuthorizationOpti
       expires_in: number;
       scope: string;
     }>;
-    deviceVerify: import("better-call").StrictEndpoint<"/device", {
+    deviceVerify: _$better_call0.StrictEndpoint<"/device", {
       method: "GET";
       query: z.ZodObject<{
         user_code: z.ZodString;
@@ -437,7 +449,7 @@ declare function oauthDeviceAuthorization(options?: OAuthDeviceAuthorizationOpti
     } & Partial<{
       resource: string | string[] | undefined;
     }>>;
-    deviceApprove: import("better-call").StrictEndpoint<"/device/approve", {
+    deviceApprove: _$better_call0.StrictEndpoint<"/device/approve", {
       method: "POST";
       body: z.ZodObject<{
         userCode: z.ZodString;
@@ -478,7 +490,7 @@ declare function oauthDeviceAuthorization(options?: OAuthDeviceAuthorizationOpti
     }, {
       success: boolean;
     }>;
-    deviceDeny: import("better-call").StrictEndpoint<"/device/deny", {
+    deviceDeny: _$better_call0.StrictEndpoint<"/device/deny", {
       method: "POST";
       body: z.ZodObject<{
         userCode: z.ZodString;
@@ -525,26 +537,26 @@ declare function oauthDeviceAuthorization(options?: OAuthDeviceAuthorizationOpti
     max: number;
   }[];
   $ERROR_CODES: {
-    USER_NOT_FOUND: import("better-auth").RawError<"USER_NOT_FOUND">;
-    FAILED_TO_CREATE_SESSION: import("better-auth").RawError<"FAILED_TO_CREATE_SESSION">;
-    INVALID_DEVICE_CODE: import("better-auth").RawError<"INVALID_DEVICE_CODE">;
-    EXPIRED_DEVICE_CODE: import("better-auth").RawError<"EXPIRED_DEVICE_CODE">;
-    EXPIRED_USER_CODE: import("better-auth").RawError<"EXPIRED_USER_CODE">;
-    AUTHORIZATION_PENDING: import("better-auth").RawError<"AUTHORIZATION_PENDING">;
-    ACCESS_DENIED: import("better-auth").RawError<"ACCESS_DENIED">;
-    INVALID_USER_CODE: import("better-auth").RawError<"INVALID_USER_CODE">;
-    DEVICE_CODE_ALREADY_PROCESSED: import("better-auth").RawError<"DEVICE_CODE_ALREADY_PROCESSED">;
-    DEVICE_CODE_NOT_CLAIMED: import("better-auth").RawError<"DEVICE_CODE_NOT_CLAIMED">;
-    POLLING_TOO_FREQUENTLY: import("better-auth").RawError<"POLLING_TOO_FREQUENTLY">;
-    INVALID_DEVICE_CODE_STATUS: import("better-auth").RawError<"INVALID_DEVICE_CODE_STATUS">;
-    AUTHENTICATION_REQUIRED: import("better-auth").RawError<"AUTHENTICATION_REQUIRED">;
+    USER_NOT_FOUND: _$better_auth0.RawError<"USER_NOT_FOUND">;
+    FAILED_TO_CREATE_SESSION: _$better_auth0.RawError<"FAILED_TO_CREATE_SESSION">;
+    INVALID_DEVICE_CODE: _$better_auth0.RawError<"INVALID_DEVICE_CODE">;
+    EXPIRED_DEVICE_CODE: _$better_auth0.RawError<"EXPIRED_DEVICE_CODE">;
+    EXPIRED_USER_CODE: _$better_auth0.RawError<"EXPIRED_USER_CODE">;
+    AUTHORIZATION_PENDING: _$better_auth0.RawError<"AUTHORIZATION_PENDING">;
+    ACCESS_DENIED: _$better_auth0.RawError<"ACCESS_DENIED">;
+    INVALID_USER_CODE: _$better_auth0.RawError<"INVALID_USER_CODE">;
+    DEVICE_CODE_ALREADY_PROCESSED: _$better_auth0.RawError<"DEVICE_CODE_ALREADY_PROCESSED">;
+    DEVICE_CODE_NOT_CLAIMED: _$better_auth0.RawError<"DEVICE_CODE_NOT_CLAIMED">;
+    POLLING_TOO_FREQUENTLY: _$better_auth0.RawError<"POLLING_TOO_FREQUENTLY">;
+    INVALID_DEVICE_CODE_STATUS: _$better_auth0.RawError<"INVALID_DEVICE_CODE_STATUS">;
+    AUTHENTICATION_REQUIRED: _$better_auth0.RawError<"AUTHENTICATION_REQUIRED">;
   };
   options: {
     grant: DeviceAuthorizationGrant<Readonly<{
       [k: string]: z.core.$ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
     }>, Record<string, unknown>> | undefined;
-    expiresIn: import("better-auth/plugins").TimeString;
-    interval: import("better-auth/plugins").TimeString;
+    expiresIn: _$better_auth_plugins0.TimeString;
+    interval: _$better_auth_plugins0.TimeString;
     deviceCodeLength: number;
     userCodeLength: number;
     generateDeviceCode?: (() => string | Promise<string>) | undefined;
@@ -618,6 +630,15 @@ declare function getIssuer(ctx: GenericEndpointContext, opts: OAuthOptions<Scope
  * authorization-server metadata advertises.
  */
 declare const DEFAULT_OAUTH_SCOPES: readonly ["openid", "profile", "email", "offline_access"];
+type RPInitiatedLogoutFields = {
+  id_token_hint?: string;
+  client_id?: string;
+  post_logout_redirect_uri?: string;
+  state?: string;
+};
+type RPInitiatedLogoutClientInput = RPInitiatedLogoutFields | {
+  query: RPInitiatedLogoutFields;
+};
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
     "oauth-provider": {
@@ -641,12 +662,12 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
   id: "oauth-provider";
   version: string;
   options: NoInfer<O>;
-  onRequest: (request: Request, ctx: import("better-auth").AuthContext) => Promise<{
+  onRequest: (request: Request, ctx: _$better_auth0.AuthContext) => Promise<{
     response: Response;
   } | {
     request: Request;
   } | void>;
-  init: (ctx: import("better-auth").AuthContext) => Promise<{
+  init: (ctx: _$better_auth0.AuthContext) => Promise<{
     options: {
       databaseHooks: {
         session: {
@@ -678,12 +699,12 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
   }>;
   hooks: {
     before: {
-      matcher(ctx: import("better-auth").HookEndpointContext): any;
-      handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
+      matcher(ctx: _$better_auth0.HookEndpointContext): any;
+      handler: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>;
     }[];
     after: {
-      matcher(ctx: import("better-auth").HookEndpointContext): boolean;
-      handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<OAuthRedirectResult | undefined>>;
+      matcher(ctx: _$better_auth0.HookEndpointContext): boolean;
+      handler: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<OAuthRedirectResult | undefined>>;
     }[];
   };
   endpoints: {
@@ -694,7 +715,7 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
      * Provided at /.well-known/oauth-authorization-server/[issuer-path]
      * (root if no issuer-path).
      */
-    getOAuthServerConfig: import("better-call").StrictEndpoint<"/.well-known/oauth-authorization-server", {
+    getOAuthServerConfig: _$better_call0.StrictEndpoint<"/.well-known/oauth-authorization-server", {
       method: "GET";
       metadata: {
         SERVER_ONLY: true;
@@ -707,7 +728,7 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
      * Provided at [issuer-path]/.well-known/openid-configuration
      * (root if no issuer-path).
      */
-    getOpenIdConfig: import("better-call").StrictEndpoint<"/.well-known/openid-configuration", {
+    getOpenIdConfig: _$better_call0.StrictEndpoint<"/.well-known/openid-configuration", {
       method: "GET";
       metadata: {
         SERVER_ONLY: true;
@@ -732,26 +753,26 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
       response_modes_supported: "query"[];
       grant_types_supported: GrantType[];
       token_endpoint_auth_methods_supported?: TokenEndpointAuthMethod[] | undefined;
-      token_endpoint_auth_signing_alg_values_supported?: import("better-auth").PrivateKeyJwtSigningAlgorithm[] | undefined;
+      token_endpoint_auth_signing_alg_values_supported?: _$better_auth0.PrivateKeyJwtSigningAlgorithm[] | undefined;
       service_documentation?: string | undefined;
       ui_locales_supported?: string[] | undefined;
       op_policy_uri?: string | undefined;
       op_tos_uri?: string | undefined;
       revocation_endpoint?: string | undefined;
       revocation_endpoint_auth_methods_supported?: TokenEndpointAuthMethod[] | undefined;
-      revocation_endpoint_auth_signing_alg_values_supported?: import("better-auth").PrivateKeyJwtSigningAlgorithm[] | undefined;
+      revocation_endpoint_auth_signing_alg_values_supported?: _$better_auth0.PrivateKeyJwtSigningAlgorithm[] | undefined;
       introspection_endpoint?: string | undefined;
       introspection_endpoint_auth_methods_supported?: TokenEndpointAuthMethod[] | undefined;
-      introspection_endpoint_auth_signing_alg_values_supported?: import("better-auth").PrivateKeyJwtSigningAlgorithm[] | undefined;
+      introspection_endpoint_auth_signing_alg_values_supported?: _$better_auth0.PrivateKeyJwtSigningAlgorithm[] | undefined;
       code_challenge_methods_supported: "S256"[];
       authorization_response_iss_parameter_supported?: boolean | undefined;
       client_id_metadata_document_supported?: boolean | undefined;
       backchannel_logout_supported?: boolean | undefined;
       backchannel_logout_session_supported?: boolean | undefined;
-      dpop_signing_alg_values_supported?: import("better-auth/plugins").JWSAlgorithms[] | undefined;
-      id_token_signing_alg_values_supported: import("better-auth/plugins").JWSAlgorithms[] | ["HS256"];
+      dpop_signing_alg_values_supported?: _$better_auth_plugins0.JWSAlgorithms[] | undefined;
+      id_token_signing_alg_values_supported: _$better_auth_plugins0.JWSAlgorithms[] | ["HS256"];
     }>;
-    oauth2Authorize: import("better-call").StrictEndpoint<"/oauth2/authorize", {
+    oauth2Authorize: _$better_call0.StrictEndpoint<"/oauth2/authorize", {
       method: ("GET" | "POST")[];
       body: z.ZodObject<{}, z.core.$loose>;
       redirectOnError: OAuthRedirectOnError<GenericEndpointContext, OAuthRedirectResult>;
@@ -856,7 +877,7 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         };
       };
     }, OAuthRedirectResult>;
-    oauth2Consent: import("better-call").StrictEndpoint<"/oauth2/consent", {
+    oauth2Consent: _$better_call0.StrictEndpoint<"/oauth2/consent", {
       method: "POST";
       body: z.ZodObject<{
         accept: z.ZodBoolean;
@@ -864,7 +885,7 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         claims: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>]>>;
         oauth_query: z.ZodOptional<z.ZodString>;
       }, z.core.$strip>;
-      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -916,7 +937,7 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
       redirect: boolean;
       url: string;
     }>;
-    oauth2Continue: import("better-call").StrictEndpoint<"/oauth2/continue", {
+    oauth2Continue: _$better_call0.StrictEndpoint<"/oauth2/continue", {
       method: "POST";
       body: z.ZodObject<{
         selected: z.ZodOptional<z.ZodBoolean>;
@@ -924,7 +945,7 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         postLogin: z.ZodOptional<z.ZodBoolean>;
         oauth_query: z.ZodOptional<z.ZodString>;
       }, z.core.$strip>;
-      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -973,7 +994,7 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         };
       };
     }, OAuthRedirectResult>;
-    oauth2Token: import("better-call").StrictEndpoint<"/oauth2/token", {
+    oauth2Token: _$better_call0.StrictEndpoint<"/oauth2/token", {
       method: "POST";
       cloneRequest: true;
       body: z.ZodObject<{
@@ -1145,7 +1166,7 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
       scope: string;
       id_token: string | undefined;
     }>;
-    oauth2Introspect: import("better-call").StrictEndpoint<"/oauth2/introspect", {
+    oauth2Introspect: _$better_call0.StrictEndpoint<"/oauth2/introspect", {
       method: "POST";
       cloneRequest: true;
       body: z.ZodObject<{
@@ -1277,8 +1298,8 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
           };
         };
       };
-    }, import("jose").JWTPayload>;
-    oauth2Revoke: import("better-call").StrictEndpoint<"/oauth2/revoke", {
+    }, _$jose.JWTPayload>;
+    oauth2Revoke: _$better_call0.StrictEndpoint<"/oauth2/revoke", {
       method: "POST";
       cloneRequest: true;
       body: z.ZodObject<{
@@ -1360,7 +1381,7 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         };
       };
     }, null | undefined>;
-    oauth2UserInfo: import("better-call").StrictEndpoint<"/oauth2/userinfo", {
+    oauth2UserInfo: _$better_call0.StrictEndpoint<"/oauth2/userinfo", {
       method: ("GET" | "POST")[];
       body: z.ZodOptional<z.ZodObject<{
         access_token: z.ZodOptional<z.ZodString>;
@@ -1480,15 +1501,27 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
     }, {
       sub: unknown;
     }>;
-    oauth2EndSession: import("better-call").StrictEndpoint<"/oauth2/end-session", {
-      method: "GET";
-      query: z.ZodObject<{
-        id_token_hint: z.ZodString;
+    oauth2EndSession: _$better_call0.StrictEndpoint<"/oauth2/end-session", {
+      method: ("GET" | "POST")[];
+      body: z.ZodOptional<z.ZodObject<{
+        id_token_hint: z.ZodOptional<z.ZodString>;
         client_id: z.ZodOptional<z.ZodString>;
         post_logout_redirect_uri: z.ZodOptional<z.ZodURL>;
         state: z.ZodOptional<z.ZodString>;
-      }, z.core.$strip>;
+      }, z.core.$strip>>;
+      query: z.ZodOptional<z.ZodObject<{
+        id_token_hint: z.ZodOptional<z.ZodString>;
+        client_id: z.ZodOptional<z.ZodString>;
+        post_logout_redirect_uri: z.ZodOptional<z.ZodURL>;
+        state: z.ZodOptional<z.ZodString>;
+      }, z.core.$strip>>;
       metadata: {
+        noStore: boolean;
+        allowedMediaTypes: string[];
+        $Infer: {
+          body: RPInitiatedLogoutClientInput;
+          query: RPInitiatedLogoutFields;
+        };
         openapi: {
           description: string;
           responses: {
@@ -1511,13 +1544,29 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
                     };
                   };
                 };
+                "text/html": {
+                  schema: {
+                    type: "string";
+                  };
+                };
               };
             };
           };
         };
       };
-    }, OAuthRedirectResult | undefined>;
-    registerOAuthClient: import("better-call").StrictEndpoint<"/oauth2/register", {
+    }, Response | OAuthRedirectResult | null>;
+    oauth2EndSessionConfirmation: _$better_call0.StrictEndpoint<"/oauth2/end-session/confirm", {
+      method: "POST";
+      body: z.ZodObject<{
+        action: z.ZodLiteral<"confirm">;
+      }, z.core.$strip>;
+      metadata: {
+        noStore: boolean;
+        allowedMediaTypes: string[];
+        scope: "http";
+      };
+    }, Response | OAuthRedirectResult | null>;
+    registerOAuthClient: _$better_call0.StrictEndpoint<"/oauth2/register", {
       method: "POST";
       body: z.ZodObject<{
         redirect_uris: z.ZodOptional<z.ZodArray<z.ZodURL>>;
@@ -1572,8 +1621,7 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
               content: {
                 "application/json": {
                   schema: {
-                    /** @returns {OauthClient} */
-                    type: "object";
+                    /** @returns {OauthClient} */type: "object";
                     properties: {
                       client_id: {
                         type: string;
@@ -1709,7 +1757,7 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         };
       };
     }, OAuthClientRegistrationResponse>;
-    adminCreateOAuthClient: import("better-call").StrictEndpoint<"/admin/oauth2/create-client", {
+    adminCreateOAuthClient: _$better_call0.StrictEndpoint<"/admin/oauth2/create-client", {
       method: "POST";
       body: z.ZodObject<{
         redirect_uris: z.ZodOptional<z.ZodArray<z.ZodURL>>;
@@ -1899,9 +1947,9 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         };
       };
     }, OAuthClientAdministrativeResponse>;
-    createOAuthClient: import("better-call").StrictEndpoint<"/oauth2/create-client", {
+    createOAuthClient: _$better_call0.StrictEndpoint<"/oauth2/create-client", {
       method: "POST";
-      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -2089,9 +2137,9 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         };
       };
     }, OAuthClientRegistrationResponse>;
-    getOAuthClient: import("better-call").StrictEndpoint<"/oauth2/get-client", {
+    getOAuthClient: _$better_call0.StrictEndpoint<"/oauth2/get-client", {
       method: "GET";
-      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -2123,9 +2171,9 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         };
       };
     }, OAuthClient>;
-    getOAuthClientPublic: import("better-call").StrictEndpoint<"/oauth2/public-client", {
+    getOAuthClientPublic: _$better_call0.StrictEndpoint<"/oauth2/public-client", {
       method: "GET";
-      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -2157,9 +2205,9 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         };
       };
     }, OAuthClient>;
-    getOAuthClientPublicPrelogin: import("better-call").StrictEndpoint<"/oauth2/public-client-prelogin", {
+    getOAuthClientPublicPrelogin: _$better_call0.StrictEndpoint<"/oauth2/public-client-prelogin", {
       method: "POST";
-      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>[];
+      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>[];
       body: z.ZodObject<{
         client_id: z.ZodString;
         oauth_query: z.ZodOptional<z.ZodString>;
@@ -2170,9 +2218,9 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         };
       };
     }, OAuthClient>;
-    getOAuthClients: import("better-call").StrictEndpoint<"/oauth2/get-clients", {
+    getOAuthClients: _$better_call0.StrictEndpoint<"/oauth2/get-clients", {
       method: "GET";
-      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -2201,7 +2249,7 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         };
       };
     }, OAuthClient[] | null>;
-    adminUpdateOAuthClient: import("better-call").StrictEndpoint<"/admin/oauth2/update-client", {
+    adminUpdateOAuthClient: _$better_call0.StrictEndpoint<"/admin/oauth2/update-client", {
       method: "PATCH";
       body: z.ZodObject<{
         client_id: z.ZodString;
@@ -2243,9 +2291,9 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         };
       };
     }, OAuthClientAdministrativeResponse>;
-    updateOAuthClient: import("better-call").StrictEndpoint<"/oauth2/update-client", {
+    updateOAuthClient: _$better_call0.StrictEndpoint<"/oauth2/update-client", {
       method: "POST";
-      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -2301,9 +2349,9 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         };
       };
     }, OAuthClientRegistrationResponse>;
-    rotateClientSecret: import("better-call").StrictEndpoint<"/oauth2/client/rotate-secret", {
+    rotateClientSecret: _$better_call0.StrictEndpoint<"/oauth2/client/rotate-secret", {
       method: "POST";
-      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -2336,9 +2384,9 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         };
       };
     }, OAuthClient>;
-    deleteOAuthClient: import("better-call").StrictEndpoint<"/oauth2/delete-client", {
+    deleteOAuthClient: _$better_call0.StrictEndpoint<"/oauth2/delete-client", {
       method: "POST";
-      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -2370,12 +2418,12 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         };
       };
     }, void>;
-    getOAuthConsent: import("better-call").StrictEndpoint<"/oauth2/get-consent", {
+    getOAuthConsent: _$better_call0.StrictEndpoint<"/oauth2/get-consent", {
       method: "GET";
       query: z.ZodObject<{
         id: z.ZodString;
       }, z.core.$strip>;
-      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -2404,9 +2452,9 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         };
       };
     }, OAuthConsent<Scope[]>>;
-    getOAuthConsents: import("better-call").StrictEndpoint<"/oauth2/get-consents", {
+    getOAuthConsents: _$better_call0.StrictEndpoint<"/oauth2/get-consents", {
       method: "GET";
-      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -2435,9 +2483,9 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         };
       };
     }, OAuthConsent<Scope[]>[]>;
-    updateOAuthConsent: import("better-call").StrictEndpoint<"/oauth2/update-consent", {
+    updateOAuthConsent: _$better_call0.StrictEndpoint<"/oauth2/update-consent", {
       method: "POST";
-      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -2472,9 +2520,9 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         };
       };
     }, OAuthConsent<Scope[]> | null>;
-    deleteOAuthConsent: import("better-call").StrictEndpoint<"/oauth2/delete-consent", {
+    deleteOAuthConsent: _$better_call0.StrictEndpoint<"/oauth2/delete-consent", {
       method: "POST";
-      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -2506,7 +2554,7 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         };
       };
     }, void>;
-    adminCreateOAuthResource: import("better-call").StrictEndpoint<"/admin/oauth2/resources", {
+    adminCreateOAuthResource: _$better_call0.StrictEndpoint<"/admin/oauth2/resources", {
       method: "POST";
       body: z.ZodObject<{
         identifier: z.ZodNonOptional<z.ZodOptional<z.ZodString>>;
@@ -2531,19 +2579,19 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         SERVER_ONLY: true;
       };
     }, OAuthResource>;
-    adminListOAuthResources: import("better-call").StrictEndpoint<"/admin/oauth2/resources", {
+    adminListOAuthResources: _$better_call0.StrictEndpoint<"/admin/oauth2/resources", {
       method: "GET";
       metadata: {
         SERVER_ONLY: true;
       };
     }, OAuthResource[]>;
-    adminGetOAuthResource: import("better-call").StrictEndpoint<"/admin/oauth2/resources/:identifier", {
+    adminGetOAuthResource: _$better_call0.StrictEndpoint<"/admin/oauth2/resources/:identifier", {
       method: "GET";
       metadata: {
         SERVER_ONLY: true;
       };
     }, OAuthResource>;
-    adminUpdateOAuthResource: import("better-call").StrictEndpoint<"/admin/oauth2/resources/:identifier", {
+    adminUpdateOAuthResource: _$better_call0.StrictEndpoint<"/admin/oauth2/resources/:identifier", {
       method: "PATCH";
       body: z.ZodObject<{
         identifier: z.ZodOptional<z.ZodString>;
@@ -2568,7 +2616,7 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
         SERVER_ONLY: true;
       };
     }, OAuthResource>;
-    adminDeleteOAuthResource: import("better-call").StrictEndpoint<"/admin/oauth2/resources/:identifier", {
+    adminDeleteOAuthResource: _$better_call0.StrictEndpoint<"/admin/oauth2/resources/:identifier", {
       method: "DELETE";
       metadata: {
         SERVER_ONLY: true;
@@ -2576,7 +2624,7 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
     }, {
       deleted: boolean;
     }>;
-    adminLinkClientResource: import("better-call").StrictEndpoint<"/admin/oauth2/resources/:identifier/clients/:client_id", {
+    adminLinkClientResource: _$better_call0.StrictEndpoint<"/admin/oauth2/resources/:identifier/clients/:client_id", {
       method: "POST";
       metadata: {
         SERVER_ONLY: true;
@@ -2584,7 +2632,7 @@ declare const oauthProvider: <O extends OAuthOptions<Scope[]>>(options: O) => {
     }, {
       linked: boolean;
     }>;
-    adminUnlinkClientResource: import("better-call").StrictEndpoint<"/admin/oauth2/resources/:identifier/clients/:client_id", {
+    adminUnlinkClientResource: _$better_call0.StrictEndpoint<"/admin/oauth2/resources/:identifier/clients/:client_id", {
       method: "DELETE";
       metadata: {
         SERVER_ONLY: true;

package/dist/{resource-challenge-CiJTlsEh.mjs → resource-challenge-Damwi0Or.mjs}

@@ -2,7 +2,7 @@ import { isAPIError } from "better-auth/api";
 import { APIError as APIError$1 } from "better-call";
 import { DPOP_SIGNING_ALGORITHMS, isInsufficientScopeError } from "better-auth/oauth2";
 //#region src/resource-challenge.ts
-const DPOP_CHALLENGE_ERRORS = /* @__PURE__ */ new Set(["invalid_dpop_proof"]);
+const DPOP_CHALLENGE_ERRORS = new Set(["invalid_dpop_proof"]);
 const OAUTH_SCOPE_TOKEN_PATTERN = /^[\x21\x23-\x5b\x5d-\x7e]+$/;
 const ERROR_DESCRIPTION_PATTERN = /^[\x20-\x21\x23-\x5b\x5d-\x7e]+$/;
 function quoteAuthParam(value) {

package/dist/rolldown-runtime-wcPFST8Q.mjs

@@ -0,0 +1,13 @@
+//#region \0rolldown/runtime.js
+var __defProp = Object.defineProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+//#endregion
+export { __exportAll as t };