@better-auth/passkey 1.4.8-beta.1 → 1.4.8-beta.3

package/dist/client.d.mts

@@ -1,9 +1,9 @@
-import { i as WebAuthnChallengeValue, n as Passkey, r as PasskeyOptions, t as passkey } from "./index-BMEjtlnp.mjs";
-import * as better_auth4 from "better-auth";
+import { i as WebAuthnChallengeValue, n as Passkey, r as PasskeyOptions, t as passkey } from "./index-BNQEf218.mjs";
 import * as nanostores0 from "nanostores";
 import { atom } from "nanostores";
 import * as _better_fetch_fetch0 from "@better-fetch/fetch";
 import { BetterFetch } from "@better-fetch/fetch";
+import * as better_auth0 from "better-auth";
 import { ClientFetchOption, ClientStore } from "@better-auth/core";
 import { Session, User } from "better-auth/types";
 export * from "@simplewebauthn/server";
@@ -185,7 +185,7 @@ declare const passkeyClient: () => {
       isPending: boolean;
       isRefetching: boolean;
       refetch: (queryParams?: {
-        query?: better_auth4.SessionQueryParams;
+        query?: better_auth0.SessionQueryParams;
       } | undefined) => Promise<void>;
     }> & object;
     $listPasskeys: nanostores0.PreinitializedWritableAtom<any> & object;

package/dist/{index-BMEjtlnp.d.mts → index-BNQEf218.d.mts}

@@ -1,8 +1,8 @@
 import * as _simplewebauthn_server0 from "@simplewebauthn/server";
 import { CredentialDeviceType } from "@simplewebauthn/server";
-import * as better_auth0 from "better-auth";
 import * as better_call0 from "better-call";
 import * as zod0 from "zod";
+import * as better_auth0 from "better-auth";
 import { InferOptionSchema } from "better-auth/types";
 
 //#region src/schema.d.ts
@@ -694,6 +694,7 @@ declare const passkey: (options?: PasskeyOptions | undefined) => {
     readonly UNABLE_TO_CREATE_SESSION: "Unable to create session";
     readonly FAILED_TO_UPDATE_PASSKEY: "Failed to update passkey";
   };
+  options: PasskeyOptions | undefined;
 };
 //#endregion
 export { WebAuthnChallengeValue as i, Passkey as n, PasskeyOptions as r, passkey as t };

package/dist/index.d.mts

@@ -1,2 +1,2 @@
-import { n as Passkey, r as PasskeyOptions, t as passkey } from "./index-BMEjtlnp.mjs";
+import { n as Passkey, r as PasskeyOptions, t as passkey } from "./index-BNQEf218.mjs";
 export { Passkey, PasskeyOptions, passkey };

package/dist/index.mjs

@@ -3,7 +3,6 @@ import { defineErrorCodes } from "@better-auth/core/utils";
 import { createAuthEndpoint } from "@better-auth/core/api";
 import { base64 } from "@better-auth/utils/base64";
 import { generateAuthenticationOptions, generateRegistrationOptions, verifyAuthenticationResponse, verifyRegistrationResponse } from "@simplewebauthn/server";
-import { generateId } from "better-auth";
 import { freshSessionMiddleware, getSessionFromCtx, sessionMiddleware } from "better-auth/api";
 import { setSessionCookie } from "better-auth/cookies";
 import { generateRandomString } from "better-auth/crypto";
@@ -142,14 +141,14 @@ const generatePasskeyRegistrationOptions = (opts, { maxAgeInSeconds, expirationT
 			...ctx.query?.authenticatorAttachment ? { authenticatorAttachment: ctx.query.authenticatorAttachment } : {}
 		}
 	});
-	const id = generateId(32);
+	const verificationToken = generateRandomString(32);
 	const webAuthnCookie = ctx.context.createAuthCookie(opts.advanced.webAuthnChallengeCookie);
-	await ctx.setSignedCookie(webAuthnCookie.name, id, ctx.context.secret, {
+	await ctx.setSignedCookie(webAuthnCookie.name, verificationToken, ctx.context.secret, {
 		...webAuthnCookie.attributes,
 		maxAge: maxAgeInSeconds
 	});
 	await ctx.context.internalAdapter.createVerificationValue({
-		identifier: id,
+		identifier: verificationToken,
 		value: JSON.stringify({
 			expectedChallenge: options.challenge,
 			userData: { id: session.user.id }
@@ -235,14 +234,14 @@ const generatePasskeyAuthenticationOptions = (opts, { maxAgeInSeconds, expiratio
 		expectedChallenge: options.challenge,
 		userData: { id: session?.user.id || "" }
 	};
-	const id = generateId(32);
+	const verificationToken = generateRandomString(32);
 	const webAuthnCookie = ctx.context.createAuthCookie(opts.advanced.webAuthnChallengeCookie);
-	await ctx.setSignedCookie(webAuthnCookie.name, id, ctx.context.secret, {
+	await ctx.setSignedCookie(webAuthnCookie.name, verificationToken, ctx.context.secret, {
 		...webAuthnCookie.attributes,
 		maxAge: maxAgeInSeconds
 	});
 	await ctx.context.internalAdapter.createVerificationValue({
-		identifier: id,
+		identifier: verificationToken,
 		value: JSON.stringify(data),
 		expiresAt: expirationTime
 	});
@@ -272,9 +271,9 @@ const verifyPasskeyRegistration = (options) => createAuthEndpoint("/passkey/veri
 	if (!origin) return ctx.json(null, { status: 400 });
 	const resp = ctx.body.response;
 	const webAuthnCookie = ctx.context.createAuthCookie(options.advanced.webAuthnChallengeCookie);
-	const challengeId = await ctx.getSignedCookie(webAuthnCookie.name, ctx.context.secret);
-	if (!challengeId) throw new APIError("BAD_REQUEST", { message: PASSKEY_ERROR_CODES.CHALLENGE_NOT_FOUND });
-	const data = await ctx.context.internalAdapter.findVerificationValue(challengeId);
+	const verificationToken = await ctx.getSignedCookie(webAuthnCookie.name, ctx.context.secret);
+	if (!verificationToken) throw new APIError("BAD_REQUEST", { message: PASSKEY_ERROR_CODES.CHALLENGE_NOT_FOUND });
+	const data = await ctx.context.internalAdapter.findVerificationValue(verificationToken);
 	if (!data) return ctx.json(null, { status: 400 });
 	const { expectedChallenge, userData } = JSON.parse(data.value);
 	if (userData.id !== ctx.context.session.user.id) throw new APIError("UNAUTHORIZED", { message: PASSKEY_ERROR_CODES.YOU_ARE_NOT_ALLOWED_TO_REGISTER_THIS_PASSKEY });
@@ -305,7 +304,7 @@ const verifyPasskeyRegistration = (options) => createAuthEndpoint("/passkey/veri
 			model: "passkey",
 			data: newPasskey
 		});
-		await ctx.context.internalAdapter.deleteVerificationValue(challengeId);
+		await ctx.context.internalAdapter.deleteVerificationByIdentifier(verificationToken);
 		return ctx.json(newPasskeyRes, { status: 200 });
 	} catch (e) {
 		ctx.context.logger.error("Failed to verify registration", e);
@@ -338,9 +337,9 @@ const verifyPasskeyAuthentication = (options) => createAuthEndpoint("/passkey/ve
 	if (!origin) throw new APIError("BAD_REQUEST", { message: "origin missing" });
 	const resp = ctx.body.response;
 	const webAuthnCookie = ctx.context.createAuthCookie(options.advanced.webAuthnChallengeCookie);
-	const challengeId = await ctx.getSignedCookie(webAuthnCookie.name, ctx.context.secret);
-	if (!challengeId) throw new APIError("BAD_REQUEST", { message: PASSKEY_ERROR_CODES.CHALLENGE_NOT_FOUND });
-	const data = await ctx.context.internalAdapter.findVerificationValue(challengeId);
+	const verificationToken = await ctx.getSignedCookie(webAuthnCookie.name, ctx.context.secret);
+	if (!verificationToken) throw new APIError("BAD_REQUEST", { message: PASSKEY_ERROR_CODES.CHALLENGE_NOT_FOUND });
+	const data = await ctx.context.internalAdapter.findVerificationValue(verificationToken);
 	if (!data) throw new APIError("BAD_REQUEST", { message: PASSKEY_ERROR_CODES.CHALLENGE_NOT_FOUND });
 	const { expectedChallenge } = JSON.parse(data.value);
 	const passkey$1 = await ctx.context.adapter.findOne({
@@ -383,7 +382,7 @@ const verifyPasskeyAuthentication = (options) => createAuthEndpoint("/passkey/ve
 			session: s,
 			user
 		});
-		await ctx.context.internalAdapter.deleteVerificationValue(challengeId);
+		await ctx.context.internalAdapter.deleteVerificationByIdentifier(verificationToken);
 		return ctx.json({ session: s }, { status: 200 });
 	} catch (e) {
 		ctx.context.logger.error("Failed to verify authentication", e);
@@ -630,7 +629,8 @@ const passkey = (options) => {
 			updatePasskey
 		},
 		schema: mergeSchema(schema, options?.schema),
-		$ERROR_CODES: PASSKEY_ERROR_CODES
+		$ERROR_CODES: PASSKEY_ERROR_CODES,
+		options
 	};
 };
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@better-auth/passkey",
-  "version": "1.4.8-beta.1",
+  "version": "1.4.8-beta.3",
   "type": "module",
   "description": "Passkey plugin for Better Auth",
   "main": "dist/index.mjs",
@@ -33,8 +33,8 @@
   },
   "devDependencies": {
     "tsdown": "^0.17.2",
-    "@better-auth/core": "1.4.8-beta.1",
-    "better-auth": "1.4.8-beta.1"
+    "@better-auth/core": "1.4.8-beta.3",
+    "better-auth": "1.4.8-beta.3"
   },
   "dependencies": {
     "@simplewebauthn/browser": "^13.1.2",
@@ -46,8 +46,8 @@
     "@better-fetch/fetch": "1.1.21",
     "better-call": "1.1.5",
     "nanostores": "^1.0.1",
-    "@better-auth/core": "1.4.8-beta.1",
-    "better-auth": "1.4.8-beta.1"
+    "@better-auth/core": "1.4.8-beta.3",
+    "better-auth": "1.4.8-beta.3"
   },
   "files": [
     "dist"