@better-auth/passkey 1.7.0-rc.2 → 1.7.0-rc.3

package/dist/client.d.mts

@@ -1,4 +1,4 @@
-import { a as Passkey, c as PasskeyOptions, d as WebAuthnChallengeValue, l as PasskeyRegistrationOptions, n as PASSKEY_ERROR_CODES, o as PasskeyAuthenticationOptions, s as PasskeyExtensionsResolver, t as passkey, u as PasskeyRegistrationUser } from "./index-BKGmXRsk.mjs";
+import { a as Passkey, c as PasskeyOptions, d as WebAuthnChallengeValue, l as PasskeyRegistrationOptions, n as PASSKEY_ERROR_CODES, o as PasskeyAuthenticationOptions, s as PasskeyExtensionsResolver, t as passkey, u as PasskeyRegistrationUser } from "./index-CatEiPwC.mjs";
 import { AuthenticationExtensionsClientInputs, AuthenticationExtensionsClientOutputs, AuthenticationResponseJSON, RegistrationResponseJSON } from "@simplewebauthn/server";
 import { atom } from "nanostores";
 import { ClientFetchOption, ClientStore } from "@better-auth/core";
@@ -6,6 +6,10 @@ import { BetterFetch } from "@better-fetch/fetch";
 import { Session, User } from "better-auth/types";
 export type * from "@simplewebauthn/server";
 //#region src/client.d.ts
+type AddPasskeyResponse = Passkey & {
+  session?: Session;
+  user?: User;
+};
 declare const getPasskeyActions: ($fetch: BetterFetch, { $listPasskeys, $store }: {
   $listPasskeys: ReturnType<typeof atom<any>>;
   $store: ClientStore;
@@ -83,6 +87,10 @@ declare const getPasskeyActions: ($fetch: BetterFetch, { $listPasskeys, $store }
        * Optional context for passkey-first registration flows.
        */
       context?: string | null;
+      /**
+       * Create a session after successfully registering the passkey.
+       */
+      createSession?: boolean;
       /**
        * Optional WebAuthn extensions to include during registration.
        */
@@ -105,14 +113,14 @@ declare const getPasskeyActions: ($fetch: BetterFetch, { $listPasskeys, $store }
         statusText: string;
       };
     } | {
-      data: Passkey;
+      data: AddPasskeyResponse;
       error: null;
     } | {
       webauthn: {
         response: RegistrationResponseJSON;
         clientExtensionResults: AuthenticationExtensionsClientOutputs;
       };
-      data: Passkey;
+      data: AddPasskeyResponse;
       error: null;
     } | {
       data: null;
@@ -209,6 +217,10 @@ declare const passkeyClient: () => {
          * Optional context for passkey-first registration flows.
          */
         context?: string | null;
+        /**
+         * Create a session after successfully registering the passkey.
+         */
+        createSession?: boolean;
         /**
          * Optional WebAuthn extensions to include during registration.
          */
@@ -231,14 +243,14 @@ declare const passkeyClient: () => {
           statusText: string;
         };
       } | {
-        data: Passkey;
+        data: AddPasskeyResponse;
         error: null;
       } | {
         webauthn: {
           response: RegistrationResponseJSON;
           clientExtensionResults: AuthenticationExtensionsClientOutputs;
         };
-        data: Passkey;
+        data: AddPasskeyResponse;
         error: null;
       } | {
         data: null;
@@ -279,6 +291,7 @@ declare const passkeyClient: () => {
     PASSKEY_NOT_FOUND: import("better-auth").RawError<"PASSKEY_NOT_FOUND">;
     AUTHENTICATION_FAILED: import("better-auth").RawError<"AUTHENTICATION_FAILED">;
     UNABLE_TO_CREATE_SESSION: import("better-auth").RawError<"UNABLE_TO_CREATE_SESSION">;
+    USER_NOT_FOUND: import("better-auth").RawError<"USER_NOT_FOUND">;
     FAILED_TO_UPDATE_PASSKEY: import("better-auth").RawError<"FAILED_TO_UPDATE_PASSKEY">;
     PREVIOUSLY_REGISTERED: import("better-auth").RawError<"PREVIOUSLY_REGISTERED">;
     REGISTRATION_CANCELLED: import("better-auth").RawError<"REGISTRATION_CANCELLED">;

package/dist/client.mjs

@@ -1,4 +1,4 @@
-import { n as PASSKEY_ERROR_CODES, t as PACKAGE_VERSION } from "./version-Dv6dkT5m.mjs";
+import { n as PASSKEY_ERROR_CODES, t as PACKAGE_VERSION } from "./version-02cV8Fcg.mjs";
 import { WebAuthnError, startAuthentication, startRegistration } from "@simplewebauthn/browser";
 import { useAuthQuery } from "better-auth/client";
 import { atom } from "nanostores";
@@ -95,13 +95,15 @@ const getPasskeyActions = ($fetch, { $listPasskeys, $store }) => {
 				...fetchOpts,
 				body: {
 					response: responseBody,
-					name: opts?.name
+					name: opts?.name,
+					...opts?.createSession && { createSession: true }
 				},
 				method: "POST",
 				throw: false
 			});
 			if (!verified.data) return verified;
 			$listPasskeys.set(Math.random());
+			if (verified.data.session) $store.notify("$sessionSignal");
 			if (opts?.returnWebAuthnResponse) return {
 				...verified,
 				webauthn: {

package/dist/{index-BKGmXRsk.d.mts → index-CatEiPwC.d.mts}

@@ -229,6 +229,7 @@ declare const PASSKEY_ERROR_CODES: {
   PASSKEY_NOT_FOUND: import("better-auth").RawError<"PASSKEY_NOT_FOUND">;
   AUTHENTICATION_FAILED: import("better-auth").RawError<"AUTHENTICATION_FAILED">;
   UNABLE_TO_CREATE_SESSION: import("better-auth").RawError<"UNABLE_TO_CREATE_SESSION">;
+  USER_NOT_FOUND: import("better-auth").RawError<"USER_NOT_FOUND">;
   FAILED_TO_UPDATE_PASSKEY: import("better-auth").RawError<"FAILED_TO_UPDATE_PASSKEY">;
   PREVIOUSLY_REGISTERED: import("better-auth").RawError<"PREVIOUSLY_REGISTERED">;
   REGISTRATION_CANCELLED: import("better-auth").RawError<"REGISTRATION_CANCELLED">;
@@ -490,6 +491,7 @@ declare const passkey: (options?: PasskeyOptions | undefined) => {
       body: import("zod").ZodObject<{
         response: import("zod").ZodAny;
         name: import("zod").ZodOptional<import("zod").ZodString>;
+        createSession: import("zod").ZodOptional<import("zod").ZodBoolean>;
       }, import("zod/v4/core").$strip>;
       use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
         session: {
@@ -524,7 +526,20 @@ declare const passkey: (options?: PasskeyOptions | undefined) => {
               content: {
                 "application/json": {
                   schema: {
-                    $ref: string;
+                    readonly type: "object";
+                    readonly allOf: readonly [{
+                      readonly $ref: "#/components/schemas/Passkey";
+                    }, {
+                      readonly type: "object";
+                      readonly properties: {
+                        readonly session: {
+                          readonly $ref: "#/components/schemas/Session";
+                        };
+                        readonly user: {
+                          readonly $ref: "#/components/schemas/User";
+                        };
+                      };
+                    }];
                   };
                 };
               };
@@ -815,6 +830,7 @@ declare const passkey: (options?: PasskeyOptions | undefined) => {
     PASSKEY_NOT_FOUND: import("better-auth").RawError<"PASSKEY_NOT_FOUND">;
     AUTHENTICATION_FAILED: import("better-auth").RawError<"AUTHENTICATION_FAILED">;
     UNABLE_TO_CREATE_SESSION: import("better-auth").RawError<"UNABLE_TO_CREATE_SESSION">;
+    USER_NOT_FOUND: import("better-auth").RawError<"USER_NOT_FOUND">;
     FAILED_TO_UPDATE_PASSKEY: import("better-auth").RawError<"FAILED_TO_UPDATE_PASSKEY">;
     PREVIOUSLY_REGISTERED: import("better-auth").RawError<"PREVIOUSLY_REGISTERED">;
     REGISTRATION_CANCELLED: import("better-auth").RawError<"REGISTRATION_CANCELLED">;

package/dist/index.d.mts

@@ -1,2 +1,2 @@
-import { a as Passkey, c as PasskeyOptions, i as getAuthenticatorName, n as PASSKEY_ERROR_CODES, r as commonAuthenticatorNames, t as passkey } from "./index-BKGmXRsk.mjs";
+import { a as Passkey, c as PasskeyOptions, i as getAuthenticatorName, n as PASSKEY_ERROR_CODES, r as commonAuthenticatorNames, t as passkey } from "./index-CatEiPwC.mjs";
 export { PASSKEY_ERROR_CODES, type Passkey, type PasskeyOptions, commonAuthenticatorNames, getAuthenticatorName, passkey };

package/dist/index.mjs

@@ -1,6 +1,7 @@
-import { n as PASSKEY_ERROR_CODES, t as PACKAGE_VERSION } from "./version-Dv6dkT5m.mjs";
+import { n as PASSKEY_ERROR_CODES, t as PACKAGE_VERSION } from "./version-02cV8Fcg.mjs";
 import { mergeSchema } from "better-auth/db";
 import { createAuthEndpoint } from "@better-auth/core/api";
+import { getCurrentAdapter, runWithTransaction } from "@better-auth/core/context";
 import { APIError } from "@better-auth/core/error";
 import { base64 } from "@better-auth/utils/base64";
 import { generateAuthenticationOptions, generateRegistrationOptions, verifyAuthenticationResponse, verifyRegistrationResponse } from "@simplewebauthn/server";
@@ -302,8 +303,19 @@ const generatePasskeyAuthenticationOptions = (opts, { maxAgeInSeconds }) => crea
 });
 const verifyPasskeyRegistrationBodySchema = z.object({
 	response: z.any(),
-	name: z.string().trim().meta({ description: "Name of the passkey" }).optional()
+	name: z.string().trim().meta({ description: "Name of the passkey" }).optional(),
+	createSession: z.boolean().meta({ description: "Create a session after registering the passkey" }).optional()
 });
+const passkeyRegistrationResponseSchema = {
+	type: "object",
+	allOf: [{ $ref: "#/components/schemas/Passkey" }, {
+		type: "object",
+		properties: {
+			session: { $ref: "#/components/schemas/Session" },
+			user: { $ref: "#/components/schemas/User" }
+		}
+	}]
+};
 const verifyPasskeyRegistration = (options) => {
 	const requireSession = options.registration?.requireSession ?? true;
 	return createAuthEndpoint("/passkey/verify-registration", {
@@ -316,7 +328,7 @@ const verifyPasskeyRegistration = (options) => {
 			responses: {
 				200: {
 					description: "Success",
-					content: { "application/json": { schema: { $ref: "#/components/schemas/Passkey" } } }
+					content: { "application/json": { schema: passkeyRegistrationResponseSchema } }
 				},
 				400: { description: "Bad request" }
 			}
@@ -345,47 +357,70 @@ const verifyPasskeyRegistration = (options) => {
 			const { verified, registrationInfo } = verification;
 			if (!verified || !registrationInfo) throw APIError.from("BAD_REQUEST", PASSKEY_ERROR_CODES.FAILED_TO_VERIFY_REGISTRATION);
 			const { aaguid, credentialDeviceType, credentialBackedUp, credential } = registrationInfo;
-			const resolvedUser = {
-				id: userData.id,
-				name: userData.name || userData.id,
-				displayName: userData.displayName
+			const persistRegistration = async () => {
+				const resolvedUser = {
+					id: userData.id,
+					name: userData.name || userData.id,
+					displayName: userData.displayName
+				};
+				let targetUserId = resolvedUser.id;
+				let resolvedName = ctx.body.name || void 0;
+				if (options.registration?.afterVerification) {
+					const result = await options.registration.afterVerification({
+						ctx,
+						verification,
+						user: resolvedUser,
+						clientData: resp,
+						context
+					});
+					if (result?.userId) {
+						if (typeof result.userId !== "string" || !result.userId) throw APIError.from("BAD_REQUEST", PASSKEY_ERROR_CODES.RESOLVED_USER_INVALID);
+						if (session?.user?.id && result.userId !== session.user.id) throw APIError.from("UNAUTHORIZED", PASSKEY_ERROR_CODES.YOU_ARE_NOT_ALLOWED_TO_REGISTER_THIS_PASSKEY);
+						targetUserId = result.userId;
+					}
+					if (!resolvedName) resolvedName = result?.name?.trim() || void 0;
+				}
+				if (!targetUserId) throw APIError.from("BAD_REQUEST", PASSKEY_ERROR_CODES.RESOLVED_USER_INVALID);
+				const user = ctx.body.createSession ? await ctx.context.internalAdapter.findUserById(targetUserId) : null;
+				if (ctx.body.createSession && !user) throw APIError.from("INTERNAL_SERVER_ERROR", PASSKEY_ERROR_CODES.USER_NOT_FOUND);
+				const pubKey = base64.encode(credential.publicKey);
+				const passkey = await (await getCurrentAdapter(ctx.context.adapter)).create({
+					model: "passkey",
+					data: {
+						name: resolvedName,
+						userId: targetUserId,
+						credentialID: credential.id,
+						publicKey: pubKey,
+						counter: credential.counter,
+						deviceType: credentialDeviceType,
+						transports: resp.response.transports?.join(",") ?? "",
+						backedUp: credentialBackedUp,
+						createdAt: /* @__PURE__ */ new Date(),
+						aaguid
+					}
+				});
+				if (!user) return { passkey };
+				const createdSession = await ctx.context.internalAdapter.createSession(targetUserId, void 0, void 0, void 0, { deferSecondaryStorageWrites: true });
+				if (!createdSession) throw APIError.from("INTERNAL_SERVER_ERROR", PASSKEY_ERROR_CODES.UNABLE_TO_CREATE_SESSION);
+				return {
+					passkey,
+					session: createdSession,
+					user
+				};
 			};
-			let targetUserId = resolvedUser.id;
-			let resolvedName = ctx.body.name || void 0;
-			if (options.registration?.afterVerification) {
-				const result = await options.registration.afterVerification({
-					ctx,
-					verification,
-					user: resolvedUser,
-					clientData: resp,
-					context
+			const registration = ctx.body.createSession ? await runWithTransaction(ctx.context.adapter, persistRegistration) : await persistRegistration();
+			if (registration.session && registration.user) {
+				await setSessionCookie(ctx, {
+					session: registration.session,
+					user: registration.user
 				});
-				if (result?.userId) {
-					if (typeof result.userId !== "string" || !result.userId) throw APIError.from("BAD_REQUEST", PASSKEY_ERROR_CODES.RESOLVED_USER_INVALID);
-					if (session?.user?.id && result.userId !== session.user.id) throw APIError.from("UNAUTHORIZED", PASSKEY_ERROR_CODES.YOU_ARE_NOT_ALLOWED_TO_REGISTER_THIS_PASSKEY);
-					targetUserId = result.userId;
-				}
-				if (!resolvedName) resolvedName = result?.name?.trim() || void 0;
+				return ctx.json({
+					...registration.passkey,
+					session: registration.session,
+					user: registration.user
+				}, { status: 200 });
 			}
-			if (!targetUserId) throw APIError.from("BAD_REQUEST", PASSKEY_ERROR_CODES.RESOLVED_USER_INVALID);
-			const pubKey = base64.encode(credential.publicKey);
-			const newPasskey = {
-				name: resolvedName,
-				userId: targetUserId,
-				credentialID: credential.id,
-				publicKey: pubKey,
-				counter: credential.counter,
-				deviceType: credentialDeviceType,
-				transports: resp.response.transports?.join(",") ?? "",
-				backedUp: credentialBackedUp,
-				createdAt: /* @__PURE__ */ new Date(),
-				aaguid
-			};
-			const newPasskeyRes = await ctx.context.adapter.create({
-				model: "passkey",
-				data: newPasskey
-			});
-			return ctx.json(newPasskeyRes, { status: 200 });
+			return ctx.json(registration.passkey, { status: 200 });
 		} catch (e) {
 			if (e instanceof APIError) throw e;
 			ctx.context.logger.error("Failed to verify registration", e);

package/dist/{version-Dv6dkT5m.mjs → version-02cV8Fcg.mjs}

@@ -7,6 +7,7 @@ const PASSKEY_ERROR_CODES = defineErrorCodes({
 	PASSKEY_NOT_FOUND: "Passkey not found",
 	AUTHENTICATION_FAILED: "Authentication failed",
 	UNABLE_TO_CREATE_SESSION: "Unable to create session",
+	USER_NOT_FOUND: "User not found",
 	FAILED_TO_UPDATE_PASSKEY: "Failed to update passkey",
 	PREVIOUSLY_REGISTERED: "Previously registered",
 	REGISTRATION_CANCELLED: "Registration cancelled",
@@ -18,6 +19,6 @@ const PASSKEY_ERROR_CODES = defineErrorCodes({
 });
 //#endregion
 //#region src/version.ts
-const PACKAGE_VERSION = "1.7.0-rc.2";
+const PACKAGE_VERSION = "1.7.0-rc.3";
 //#endregion
 export { PASSKEY_ERROR_CODES as n, PACKAGE_VERSION as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@better-auth/passkey",
-  "version": "1.7.0-rc.2",
+  "version": "1.7.0-rc.3",
   "description": "Passkey plugin for Better Auth",
   "type": "module",
   "license": "MIT",
@@ -56,16 +56,16 @@
   "devDependencies": {
     "nanostores": "^1.3.0",
     "tsdown": "0.22.7",
-    "@better-auth/core": "1.7.0-rc.2",
-    "better-auth": "1.7.0-rc.2"
+    "@better-auth/core": "1.7.0-rc.3",
+    "better-auth": "1.7.0-rc.3"
   },
   "peerDependencies": {
     "@better-auth/utils": "0.4.2",
     "@better-fetch/fetch": "1.3.1",
     "better-call": "1.3.7",
     "nanostores": "^1.0.1",
-    "@better-auth/core": "^1.7.0-rc.2",
-    "better-auth": "^1.7.0-rc.2"
+    "@better-auth/core": "^1.7.0-rc.3",
+    "better-auth": "^1.7.0-rc.3"
   },
   "scripts": {
     "build": "tsdown",