@better-auth/passkey 1.5.6 → 1.6.0-beta.0

package/dist/client.d.mts

@@ -1,4 +1,5 @@
-import { a as WebAuthnChallengeValue, i as PasskeyOptions, n as PASSKEY_ERROR_CODES, r as Passkey, t as passkey } from "./index-B6ZC0I-g.mjs";
+import { a as PasskeyExtensionsResolver, c as PasskeyRegistrationUser, i as PasskeyAuthenticationOptions, l as WebAuthnChallengeValue, n as PASSKEY_ERROR_CODES, o as PasskeyOptions, r as Passkey, s as PasskeyRegistrationOptions, t as passkey } from "./index-BzKpmgHh.mjs";
+import { AuthenticationExtensionsClientInputs, AuthenticationExtensionsClientOutputs, AuthenticationResponseJSON, RegistrationResponseJSON } from "@simplewebauthn/server";
 import * as better_auth_client0 from "better-auth/client";
 import * as nanostores from "nanostores";
 import { atom } from "nanostores";
@@ -22,6 +23,8 @@ declare const getPasskeyActions: ($fetch: BetterFetch, {
      */
     passkey: (opts?: {
       autoFill?: boolean;
+      extensions?: AuthenticationExtensionsClientInputs;
+      returnWebAuthnResponse?: boolean;
       fetchOptions?: ClientFetchOption;
     } | undefined, options?: ClientFetchOption | undefined) => Promise<{
       data: null;
@@ -36,11 +39,32 @@ declare const getPasskeyActions: ($fetch: BetterFetch, {
         user: User;
       };
       error: null;
+    } | {
+      webauthn: {
+        response: AuthenticationResponseJSON;
+        clientExtensionResults: AuthenticationExtensionsClientOutputs;
+      };
+      data: null;
+      error: {
+        message?: string | undefined;
+        status: number;
+        statusText: string;
+      };
+    } | {
+      webauthn: {
+        response: AuthenticationResponseJSON;
+        clientExtensionResults: AuthenticationExtensionsClientOutputs;
+      };
+      data: {
+        session: Session;
+        user: User;
+      };
+      error: null;
     } | {
       data: null;
       error: {
         code: string;
-        message: better_auth0.RawError<"AUTH_CANCELLED">;
+        message: string;
         status: number;
         statusText: string;
       };
@@ -62,12 +86,24 @@ declare const getPasskeyActions: ($fetch: BetterFetch, {
        * platform and cross-platform allowed, with platform preferred.
        */
       authenticatorAttachment?: "platform" | "cross-platform";
+      /**
+       * Optional context for passkey-first registration flows.
+       */
+      context?: string | null;
+      /**
+       * Optional WebAuthn extensions to include during registration.
+       */
+      extensions?: AuthenticationExtensionsClientInputs;
       /**
        * Try to silently create a passkey with the password manager that the user just signed
        * in with.
        * @default false
        */
       useAutoRegister?: boolean;
+      /**
+       * Return WebAuthn response and extension results.
+       */
+      returnWebAuthnResponse?: boolean;
     } | undefined, fetchOpts?: ClientFetchOption | undefined) => Promise<{
       data: null;
       error: {
@@ -79,26 +115,17 @@ declare const getPasskeyActions: ($fetch: BetterFetch, {
       data: Passkey;
       error: null;
     } | {
-      data: null;
-      error: {
-        code: "ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED";
-        message: better_auth0.RawError<"PREVIOUSLY_REGISTERED">;
-        status: number;
-        statusText: string;
-      };
-    } | {
-      data: null;
-      error: {
-        code: "ERROR_CEREMONY_ABORTED";
-        message: better_auth0.RawError<"REGISTRATION_CANCELLED">;
-        status: number;
-        statusText: string;
+      webauthn: {
+        response: RegistrationResponseJSON;
+        clientExtensionResults: AuthenticationExtensionsClientOutputs;
       };
+      data: Passkey;
+      error: null;
     } | {
       data: null;
       error: {
         code: string;
-        message: string | better_auth0.RawError<"UNKNOWN_ERROR">;
+        message: string;
         status: number;
         statusText: string;
       };
@@ -113,6 +140,7 @@ declare const getPasskeyActions: ($fetch: BetterFetch, {
 };
 declare const passkeyClient: () => {
   id: "passkey";
+  version: string;
   $InferServerPlugin: ReturnType<typeof passkey>;
   getActions: ($fetch: BetterFetch, $store: ClientStore) => {
     signIn: {
@@ -121,6 +149,8 @@ declare const passkeyClient: () => {
        */
       passkey: (opts?: {
         autoFill?: boolean;
+        extensions?: AuthenticationExtensionsClientInputs;
+        returnWebAuthnResponse?: boolean;
         fetchOptions?: ClientFetchOption;
       } | undefined, options?: ClientFetchOption | undefined) => Promise<{
         data: null;
@@ -135,11 +165,32 @@ declare const passkeyClient: () => {
           user: User;
         };
         error: null;
+      } | {
+        webauthn: {
+          response: AuthenticationResponseJSON;
+          clientExtensionResults: AuthenticationExtensionsClientOutputs;
+        };
+        data: null;
+        error: {
+          message?: string | undefined;
+          status: number;
+          statusText: string;
+        };
+      } | {
+        webauthn: {
+          response: AuthenticationResponseJSON;
+          clientExtensionResults: AuthenticationExtensionsClientOutputs;
+        };
+        data: {
+          session: Session;
+          user: User;
+        };
+        error: null;
       } | {
         data: null;
         error: {
           code: string;
-          message: better_auth0.RawError<"AUTH_CANCELLED">;
+          message: string;
           status: number;
           statusText: string;
         };
@@ -161,12 +212,24 @@ declare const passkeyClient: () => {
          * platform and cross-platform allowed, with platform preferred.
          */
         authenticatorAttachment?: "platform" | "cross-platform";
+        /**
+         * Optional context for passkey-first registration flows.
+         */
+        context?: string | null;
+        /**
+         * Optional WebAuthn extensions to include during registration.
+         */
+        extensions?: AuthenticationExtensionsClientInputs;
         /**
          * Try to silently create a passkey with the password manager that the user just signed
          * in with.
          * @default false
          */
         useAutoRegister?: boolean;
+        /**
+         * Return WebAuthn response and extension results.
+         */
+        returnWebAuthnResponse?: boolean;
       } | undefined, fetchOpts?: ClientFetchOption | undefined) => Promise<{
         data: null;
         error: {
@@ -178,26 +241,17 @@ declare const passkeyClient: () => {
         data: Passkey;
         error: null;
       } | {
-        data: null;
-        error: {
-          code: "ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED";
-          message: better_auth0.RawError<"PREVIOUSLY_REGISTERED">;
-          status: number;
-          statusText: string;
-        };
-      } | {
-        data: null;
-        error: {
-          code: "ERROR_CEREMONY_ABORTED";
-          message: better_auth0.RawError<"REGISTRATION_CANCELLED">;
-          status: number;
-          statusText: string;
+        webauthn: {
+          response: RegistrationResponseJSON;
+          clientExtensionResults: AuthenticationExtensionsClientOutputs;
         };
+        data: Passkey;
+        error: null;
       } | {
         data: null;
         error: {
           code: string;
-          message: string | better_auth0.RawError<"UNKNOWN_ERROR">;
+          message: string;
           status: number;
           statusText: string;
         };
@@ -237,8 +291,10 @@ declare const passkeyClient: () => {
     REGISTRATION_CANCELLED: better_auth0.RawError<"REGISTRATION_CANCELLED">;
     AUTH_CANCELLED: better_auth0.RawError<"AUTH_CANCELLED">;
     UNKNOWN_ERROR: better_auth0.RawError<"UNKNOWN_ERROR">;
+    SESSION_REQUIRED: better_auth0.RawError<"SESSION_REQUIRED">;
+    RESOLVE_USER_REQUIRED: better_auth0.RawError<"RESOLVE_USER_REQUIRED">;
+    RESOLVED_USER_INVALID: better_auth0.RawError<"RESOLVED_USER_INVALID">;
   };
 };
 //#endregion
-export { PASSKEY_ERROR_CODES, Passkey, PasskeyOptions, WebAuthnChallengeValue, getPasskeyActions, passkeyClient };
-//# sourceMappingURL=client.d.mts.map
+export { PASSKEY_ERROR_CODES, Passkey, PasskeyAuthenticationOptions, PasskeyExtensionsResolver, PasskeyOptions, PasskeyRegistrationOptions, PasskeyRegistrationUser, WebAuthnChallengeValue, getPasskeyActions, passkeyClient };

package/dist/client.mjs

@@ -1,8 +1,7 @@
-import { t as PASSKEY_ERROR_CODES } from "./error-codes-DJf-1Ecu.mjs";
+import { n as PASSKEY_ERROR_CODES, t as PACKAGE_VERSION } from "./version-B7zkjZSd.mjs";
 import { WebAuthnError, startAuthentication, startRegistration } from "@simplewebauthn/browser";
 import { useAuthQuery } from "better-auth/client";
 import { atom } from "nanostores";
-
 //#region src/client.ts
 const getPasskeyActions = ($fetch, { $listPasskeys, $store }) => {
 	const signInPasskey = async (opts, options) => {
@@ -12,11 +11,20 @@ const getPasskeyActions = ($fetch, { $listPasskeys, $store }) => {
 		});
 		if (!response.data) return response;
 		try {
+			const mergedExtensions = response.data.extensions || opts?.extensions ? {
+				...response.data.extensions || {},
+				...opts?.extensions || {}
+			} : void 0;
+			const res = await startAuthentication({
+				optionsJSON: {
+					...response.data,
+					extensions: mergedExtensions
+				},
+				useBrowserAutofill: opts?.autoFill
+			});
+			const { clientExtensionResults, ...responseBody } = res;
 			const verified = await $fetch("/passkey/verify-authentication", {
-				body: { response: await startAuthentication({
-					optionsJSON: response.data,
-					useBrowserAutofill: opts?.autoFill
-				}) },
+				body: { response: responseBody },
 				...opts?.fetchOptions,
 				...options,
 				method: "POST",
@@ -24,6 +32,13 @@ const getPasskeyActions = ($fetch, { $listPasskeys, $store }) => {
 			});
 			$listPasskeys.set(Math.random());
 			$store.notify("$sessionSignal");
+			if (opts?.returnWebAuthnResponse) return {
+				...verified,
+				webauthn: {
+					response: res,
+					clientExtensionResults
+				}
+			};
 			return verified;
 		} catch (err) {
 			console.error(`[Better Auth] Error verifying passkey`, err);
@@ -31,7 +46,7 @@ const getPasskeyActions = ($fetch, { $listPasskeys, $store }) => {
 				data: null,
 				error: {
 					code: "AUTH_CANCELLED",
-					message: PASSKEY_ERROR_CODES.AUTH_CANCELLED,
+					message: PASSKEY_ERROR_CODES.AUTH_CANCELLED.message,
 					status: 400,
 					statusText: "BAD_REQUEST"
 				}
@@ -43,21 +58,30 @@ const getPasskeyActions = ($fetch, { $listPasskeys, $store }) => {
 			method: "GET",
 			query: {
 				...opts?.authenticatorAttachment && { authenticatorAttachment: opts.authenticatorAttachment },
-				...opts?.name && { name: opts.name }
+				...opts?.name && { name: opts.name },
+				...opts?.context && { context: opts.context }
 			},
 			throw: false
 		});
 		if (!options.data) return options;
 		try {
+			const mergedExtensions = options.data.extensions || opts?.extensions ? {
+				...options.data.extensions || {},
+				...opts?.extensions || {}
+			} : void 0;
 			const res = await startRegistration({
-				optionsJSON: options.data,
+				optionsJSON: {
+					...options.data,
+					extensions: mergedExtensions
+				},
 				useAutoRegister: opts?.useAutoRegister
 			});
+			const { clientExtensionResults, ...responseBody } = res;
 			const verified = await $fetch("/passkey/verify-registration", {
 				...opts?.fetchOptions,
 				...fetchOpts,
 				body: {
-					response: res,
+					response: responseBody,
 					name: opts?.name
 				},
 				method: "POST",
@@ -65,6 +89,13 @@ const getPasskeyActions = ($fetch, { $listPasskeys, $store }) => {
 			});
 			if (!verified.data) return verified;
 			$listPasskeys.set(Math.random());
+			if (opts?.returnWebAuthnResponse) return {
+				...verified,
+				webauthn: {
+					response: res,
+					clientExtensionResults
+				}
+			};
 			return verified;
 		} catch (e) {
 			if (e instanceof WebAuthnError) {
@@ -72,7 +103,7 @@ const getPasskeyActions = ($fetch, { $listPasskeys, $store }) => {
 					data: null,
 					error: {
 						code: e.code,
-						message: PASSKEY_ERROR_CODES.PREVIOUSLY_REGISTERED,
+						message: PASSKEY_ERROR_CODES.PREVIOUSLY_REGISTERED.message,
 						status: 400,
 						statusText: "BAD_REQUEST"
 					}
@@ -81,7 +112,7 @@ const getPasskeyActions = ($fetch, { $listPasskeys, $store }) => {
 					data: null,
 					error: {
 						code: e.code,
-						message: PASSKEY_ERROR_CODES.REGISTRATION_CANCELLED,
+						message: PASSKEY_ERROR_CODES.REGISTRATION_CANCELLED.message,
 						status: 400,
 						statusText: "BAD_REQUEST"
 					}
@@ -100,7 +131,7 @@ const getPasskeyActions = ($fetch, { $listPasskeys, $store }) => {
 				data: null,
 				error: {
 					code: "UNKNOWN_ERROR",
-					message: e instanceof Error ? e.message : PASSKEY_ERROR_CODES.UNKNOWN_ERROR,
+					message: e instanceof Error ? e.message : PASSKEY_ERROR_CODES.UNKNOWN_ERROR.message,
 					status: 500,
 					statusText: "INTERNAL_SERVER_ERROR"
 				}
@@ -117,6 +148,7 @@ const passkeyClient = () => {
 	const $listPasskeys = atom();
 	return {
 		id: "passkey",
+		version: PACKAGE_VERSION,
 		$InferServerPlugin: {},
 		getActions: ($fetch, $store) => getPasskeyActions($fetch, {
 			$listPasskeys,
@@ -144,7 +176,5 @@ const passkeyClient = () => {
 		$ERROR_CODES: PASSKEY_ERROR_CODES
 	};
 };
-
 //#endregion
 export { PASSKEY_ERROR_CODES, getPasskeyActions, passkeyClient };
-//# sourceMappingURL=client.mjs.map