@better-auth/passkey 1.6.0-beta.0 → 1.6.1

package/dist/index.d.mts

@@ -1,2 +1,2 @@
-import { n as PASSKEY_ERROR_CODES, o as PasskeyOptions, r as Passkey, t as passkey } from "./index-BzKpmgHh.mjs";
+import { n as PASSKEY_ERROR_CODES, o as PasskeyOptions, r as Passkey, t as passkey } from "./index-DD5Lute1.mjs";
 export { PASSKEY_ERROR_CODES, Passkey, PasskeyOptions, passkey };

package/dist/index.mjs

@@ -1,10 +1,10 @@
-import { n as PASSKEY_ERROR_CODES, t as PACKAGE_VERSION } from "./version-B7zkjZSd.mjs";
+import { n as PASSKEY_ERROR_CODES, t as PACKAGE_VERSION } from "./version-oKGpZwN_.mjs";
 import { mergeSchema } from "better-auth/db";
 import { createAuthEndpoint } from "@better-auth/core/api";
 import { APIError } from "@better-auth/core/error";
 import { base64 } from "@better-auth/utils/base64";
 import { generateAuthenticationOptions, generateRegistrationOptions, verifyAuthenticationResponse, verifyRegistrationResponse } from "@simplewebauthn/server";
-import { freshSessionMiddleware, getSessionFromCtx, sessionMiddleware } from "better-auth/api";
+import { freshSessionMiddleware, getSessionFromCtx, requireResourceOwnership, sessionMiddleware } from "better-auth/api";
 import { setSessionCookie } from "better-auth/cookies";
 import { generateRandomString } from "better-auth/crypto";
 import * as z from "zod";
@@ -523,7 +523,13 @@ const listPasskeys = createAuthEndpoint("/passkey/list-user-passkeys", {
 const deletePasskey = createAuthEndpoint("/passkey/delete-passkey", {
 	method: "POST",
 	body: z.object({ id: z.string().meta({ description: "The ID of the passkey to delete. Eg: \"some-passkey-id\"" }) }),
-	use: [sessionMiddleware],
+	use: [sessionMiddleware, requireResourceOwnership({
+		model: "passkey",
+		idParam: "id",
+		idSource: "body",
+		notFoundError: PASSKEY_ERROR_CODES.PASSKEY_NOT_FOUND,
+		forbiddenStatus: "UNAUTHORIZED"
+	})],
 	metadata: { openapi: {
 		description: "Delete a specific passkey",
 		responses: { "200": {
@@ -539,20 +545,11 @@ const deletePasskey = createAuthEndpoint("/passkey/delete-passkey", {
 		} }
 	} }
 }, async (ctx) => {
-	const passkey = await ctx.context.adapter.findOne({
-		model: "passkey",
-		where: [{
-			field: "id",
-			value: ctx.body.id
-		}]
-	});
-	if (!passkey) throw APIError.from("NOT_FOUND", PASSKEY_ERROR_CODES.PASSKEY_NOT_FOUND);
-	if (passkey.userId !== ctx.context.session.user.id) throw new APIError("UNAUTHORIZED");
 	await ctx.context.adapter.delete({
 		model: "passkey",
 		where: [{
 			field: "id",
-			value: passkey.id
+			value: ctx.body.id
 		}]
 	});
 	return ctx.json({ status: true });
@@ -578,7 +575,14 @@ const updatePasskey = createAuthEndpoint("/passkey/update-passkey", {
 		id: z.string().meta({ description: `The ID of the passkey which will be updated. Eg: \"passkey-id\"` }),
 		name: z.string().meta({ description: `The new name which the passkey will be updated to. Eg: \"my-new-passkey-name\"` })
 	}),
-	use: [sessionMiddleware],
+	use: [sessionMiddleware, requireResourceOwnership({
+		model: "passkey",
+		idParam: "id",
+		idSource: "body",
+		notFoundError: PASSKEY_ERROR_CODES.PASSKEY_NOT_FOUND,
+		forbiddenError: PASSKEY_ERROR_CODES.YOU_ARE_NOT_ALLOWED_TO_REGISTER_THIS_PASSKEY,
+		forbiddenStatus: "UNAUTHORIZED"
+	})],
 	metadata: { openapi: {
 		description: "Update a specific passkey's name",
 		responses: { "200": {
@@ -591,15 +595,6 @@ const updatePasskey = createAuthEndpoint("/passkey/update-passkey", {
 		} }
 	} }
 }, async (ctx) => {
-	const passkey = await ctx.context.adapter.findOne({
-		model: "passkey",
-		where: [{
-			field: "id",
-			value: ctx.body.id
-		}]
-	});
-	if (!passkey) throw APIError.from("NOT_FOUND", PASSKEY_ERROR_CODES.PASSKEY_NOT_FOUND);
-	if (passkey.userId !== ctx.context.session.user.id) throw APIError.from("UNAUTHORIZED", PASSKEY_ERROR_CODES.YOU_ARE_NOT_ALLOWED_TO_REGISTER_THIS_PASSKEY);
 	const updatedPasskey = await ctx.context.adapter.update({
 		model: "passkey",
 		where: [{

package/dist/{version-B7zkjZSd.mjs → version-oKGpZwN_.mjs}

@@ -18,6 +18,6 @@ const PASSKEY_ERROR_CODES = defineErrorCodes({
 });
 //#endregion
 //#region src/version.ts
-const PACKAGE_VERSION = "1.6.0-beta.0";
+const PACKAGE_VERSION = "1.6.1";
 //#endregion
 export { PASSKEY_ERROR_CODES as n, PACKAGE_VERSION as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@better-auth/passkey",
-  "version": "1.6.0-beta.0",
+  "version": "1.6.1",
   "description": "Passkey plugin for Better Auth",
   "type": "module",
   "license": "MIT",
@@ -55,16 +55,16 @@
   },
   "devDependencies": {
     "tsdown": "0.21.1",
-    "@better-auth/core": "1.6.0-beta.0",
-    "better-auth": "1.6.0-beta.0"
+    "@better-auth/core": "1.6.1",
+    "better-auth": "1.6.1"
   },
   "peerDependencies": {
     "@better-auth/utils": "0.4.0",
     "@better-fetch/fetch": "1.1.21",
-    "better-call": "2.0.3",
+    "better-call": "1.3.5",
     "nanostores": "^1.0.1",
-    "@better-auth/core": "^1.6.0-beta.0",
-    "better-auth": "^1.6.0-beta.0"
+    "@better-auth/core": "^1.6.1",
+    "better-auth": "^1.6.1"
   },
   "scripts": {
     "build": "tsdown",