@better-auth/sso 1.4.0-beta.10 → 1.4.0-beta.12

package/dist/{src-DLLHZrD9.cjs → src-BYOa9Nr6.cjs}

@@ -428,6 +428,7 @@ const sso = (options) => {
 					errorCallbackURL: zod_v4.string({}).meta({ description: "The URL to redirect to after login" }).optional(),
 					newUserCallbackURL: zod_v4.string({}).meta({ description: "The URL to redirect to after login if the user is new" }).optional(),
 					scopes: zod_v4.array(zod_v4.string(), {}).meta({ description: "Scopes to request from the provider." }).optional(),
+					loginHint: zod_v4.string({}).meta({ description: "Login hint to send to the identity provider (e.g., email or identifier). If supported, will be sent as 'login_hint'." }).optional(),
 					requestSignUp: zod_v4.boolean({}).meta({ description: "Explicitly request sign-up. Useful when disableImplicitSignUp is true for this provider" }).optional(),
 					providerType: zod_v4.enum(["oidc", "saml"]).optional()
 				}),
@@ -460,6 +461,10 @@ const sso = (options) => {
 							newUserCallbackURL: {
 								type: "string",
 								description: "The URL to redirect to after login if the user is new"
+							},
+							loginHint: {
+								type: "string",
+								description: "Login hint to send to the identity provider (e.g., email or identifier). If supported, sent as 'login_hint'."
 							}
 						},
 						required: ["callbackURL"]
@@ -549,6 +554,7 @@ const sso = (options) => {
 							"profile",
 							"offline_access"
 						],
+						loginHint: ctx.body.loginHint || email,
 						authorizationEndpoint: provider.oidcConfig.authorizationEndpoint
 					});
 					return ctx.json({
@@ -972,7 +978,7 @@ const sso = (options) => {
 					}
 				}
 				await (0, better_auth_cookies.setSessionCookie)(ctx, {
-					session: await ctx.context.internalAdapter.createSession(user.id, ctx),
+					session: await ctx.context.internalAdapter.createSession(user.id),
 					user
 				});
 				const callbackUrl = RelayState || parsedSamlConfig.callbackUrl || ctx.context.baseURL;
@@ -1197,7 +1203,7 @@ const sso = (options) => {
 					}
 				}
 				await (0, better_auth_cookies.setSessionCookie)(ctx, {
-					session: await ctx.context.internalAdapter.createSession(user.id, ctx),
+					session: await ctx.context.internalAdapter.createSession(user.id),
 					user
 				});
 				const callbackUrl = RelayState || parsedSamlConfig.callbackUrl || ctx.context.baseURL;

package/dist/{src-DrA9mJEu.js → src-Z1RpfPZt.js}

@@ -395,6 +395,7 @@ const sso = (options) => {
 					errorCallbackURL: z.string({}).meta({ description: "The URL to redirect to after login" }).optional(),
 					newUserCallbackURL: z.string({}).meta({ description: "The URL to redirect to after login if the user is new" }).optional(),
 					scopes: z.array(z.string(), {}).meta({ description: "Scopes to request from the provider." }).optional(),
+					loginHint: z.string({}).meta({ description: "Login hint to send to the identity provider (e.g., email or identifier). If supported, will be sent as 'login_hint'." }).optional(),
 					requestSignUp: z.boolean({}).meta({ description: "Explicitly request sign-up. Useful when disableImplicitSignUp is true for this provider" }).optional(),
 					providerType: z.enum(["oidc", "saml"]).optional()
 				}),
@@ -427,6 +428,10 @@ const sso = (options) => {
 							newUserCallbackURL: {
 								type: "string",
 								description: "The URL to redirect to after login if the user is new"
+							},
+							loginHint: {
+								type: "string",
+								description: "Login hint to send to the identity provider (e.g., email or identifier). If supported, sent as 'login_hint'."
 							}
 						},
 						required: ["callbackURL"]
@@ -516,6 +521,7 @@ const sso = (options) => {
 							"profile",
 							"offline_access"
 						],
+						loginHint: ctx.body.loginHint || email,
 						authorizationEndpoint: provider.oidcConfig.authorizationEndpoint
 					});
 					return ctx.json({
@@ -939,7 +945,7 @@ const sso = (options) => {
 					}
 				}
 				await setSessionCookie(ctx, {
-					session: await ctx.context.internalAdapter.createSession(user.id, ctx),
+					session: await ctx.context.internalAdapter.createSession(user.id),
 					user
 				});
 				const callbackUrl = RelayState || parsedSamlConfig.callbackUrl || ctx.context.baseURL;
@@ -1164,7 +1170,7 @@ const sso = (options) => {
 					}
 				}
 				await setSessionCookie(ctx, {
-					session: await ctx.context.internalAdapter.createSession(user.id, ctx),
+					session: await ctx.context.internalAdapter.createSession(user.id),
 					user
 				});
 				const callbackUrl = RelayState || parsedSamlConfig.callbackUrl || ctx.context.baseURL;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@better-auth/sso",
   "author": "Bereket Engida",
-  "version": "1.4.0-beta.10",
+  "version": "1.4.0-beta.12",
   "type": "module",
   "main": "dist/index.js",
   "license": "MIT",
@@ -55,14 +55,14 @@
   "devDependencies": {
     "@types/body-parser": "^1.19.6",
     "@types/express": "^5.0.3",
-    "better-call": "1.0.19",
+    "better-call": "1.0.24",
     "body-parser": "^2.2.0",
     "express": "^5.1.0",
     "tsdown": "^0.15.6",
-    "better-auth": "^1.4.0-beta.10"
+    "better-auth": "^1.4.0-beta.12"
   },
   "peerDependencies": {
-    "better-auth": "1.4.0-beta.10"
+    "better-auth": "1.4.0-beta.12"
   },
   "scripts": {
     "test": "vitest",

package/src/index.ts

@@ -922,6 +922,13 @@ export const sso = (options?: SSOOptions) => {
 								description: "Scopes to request from the provider.",
 							})
 							.optional(),
+						loginHint: z
+							.string({})
+							.meta({
+								description:
+									"Login hint to send to the identity provider (e.g., email or identifier). If supported, will be sent as 'login_hint'.",
+							})
+							.optional(),
 						requestSignUp: z
 							.boolean({})
 							.meta({
@@ -970,6 +977,11 @@ export const sso = (options?: SSOOptions) => {
 													description:
 														"The URL to redirect to after login if the user is new",
 												},
+												loginHint: {
+													type: "string",
+													description:
+														"Login hint to send to the identity provider (e.g., email or identifier). If supported, sent as 'login_hint'.",
+												},
 											},
 											required: ["callbackURL"],
 										},
@@ -1146,6 +1158,7 @@ export const sso = (options?: SSOOptions) => {
 									"profile",
 									"offline_access",
 								],
+							loginHint: ctx.body.loginHint || email,
 							authorizationEndpoint: provider.oidcConfig.authorizationEndpoint!,
 						});
 						return ctx.json({
@@ -1865,7 +1878,7 @@ export const sso = (options?: SSOOptions) => {
 
 					// Create session and set cookie
 					let session: Session =
-						await ctx.context.internalAdapter.createSession(user.id, ctx);
+						await ctx.context.internalAdapter.createSession(user.id);
 					await setSessionCookie(ctx, { session, user });
 
 					// Redirect to callback URL
@@ -2224,7 +2237,7 @@ export const sso = (options?: SSOOptions) => {
 					}
 
 					let session: Session =
-						await ctx.context.internalAdapter.createSession(user.id, ctx);
+						await ctx.context.internalAdapter.createSession(user.id);
 					await setSessionCookie(ctx, { session, user });
 
 					const callbackUrl =

package/src/oidc.test.ts

@@ -208,6 +208,7 @@ describe("SSO", async () => {
 		expect(res.url).toContain(
 			"redirect_uri=http%3A%2F%2Flocalhost%3A3000%2Fapi%2Fauth%2Fsso%2Fcallback%2Ftest",
 		);
+		expect(res.url).toContain("login_hint=my-email%40localhost.com");
 		const { callbackURL } = await simulateOAuthFlow(res.url, headers);
 		expect(callbackURL).toContain("/dashboard");
 	});
@@ -235,6 +236,7 @@ describe("SSO", async () => {
 		const headers = new Headers();
 		const res = await authClient.signIn.sso({
 			providerId: "test",
+			loginHint: "user@example.com",
 			callbackURL: "/dashboard",
 			fetchOptions: {
 				throw: true,
@@ -245,6 +247,7 @@ describe("SSO", async () => {
 		expect(res.url).toContain(
 			"redirect_uri=http%3A%2F%2Flocalhost%3A3000%2Fapi%2Fauth%2Fsso%2Fcallback%2Ftest",
 		);
+		expect(res.url).toContain("login_hint=user%40example.com");
 
 		const { callbackURL } = await simulateOAuthFlow(res.url, headers);
 		expect(callbackURL).toContain("/dashboard");