@better-auth/sso 1.7.0-rc.3 → 1.7.0-rc.4

package/dist/client.d.mts

@@ -1,4 +1,4 @@
-import { t as SSOPlugin } from "./index-Sxfa9KQp.mjs";
+import { t as SSOPlugin } from "./index-nfENSAuB.mjs";
 import { DBFieldAttribute } from "better-auth/db";
 //#region src/client.d.ts
 interface SSOClientOptions {

package/dist/client.mjs

@@ -1,4 +1,4 @@
-import { t as PACKAGE_VERSION } from "./version-xoFrTW0m.mjs";
+import { t as PACKAGE_VERSION } from "./version-Do0kTnv7.mjs";
 //#region src/client.ts
 const ssoClient = (options) => {
 	return {

package/dist/{index-Sxfa9KQp.d.mts → index-nfENSAuB.d.mts}

@@ -263,7 +263,7 @@ interface BaseSSOUserResolutionInput {
   providerId: string;
   accountKey: {
     issuer: string;
-    providerAccountId: string;
+    accountId: string;
   };
   providerUser: SSOProviderUserProfile;
   providerReference: SSOProviderReference;

package/dist/index.d.mts

@@ -1,2 +1,2 @@
-import { A as SAMLIdentityProviderMetadata, B as SSOUserResolutionContext, C as deriveSAMLIdentityProviderEntityID, D as DEFAULT_MAX_SAML_RESPONSE_SIZE, E as DEFAULT_MAX_SAML_METADATA_SIZE, F as SSOProviderMutationGuardInput, G as DigestAlgorithm, H as AlgorithmValidationOptions, I as SSOProviderReference, K as KeyEncryptionAlgorithm, L as SSOProviderUserProfile, M as SSOOptions, N as SSOProvider, O as OIDCConfig, P as SSOProviderMutationGuardContext, R as SSOSAMLUserResolutionInput, S as SAMLServiceProviderPolicy, T as DEFAULT_CLOCK_SKEW_MS, U as DataEncryptionAlgorithm, V as SSOUserResolutionInput, W as DeprecatedAlgorithmBehavior, _ as REQUIRED_DISCOVERY_FIELDS, a as fetchDiscoveryDocument, b as TimestampValidationOptions, c as normalizeUrl, d as validateDiscoveryUrl, f as DiscoverOIDCConfigParams, g as OIDCDiscoveryDocument, h as HydratedOIDCConfig, i as discoverOIDCConfig, j as SSOOIDCUserResolutionInput, k as SAMLConfig, l as selectTokenEndpointAuthMethod, m as DiscoveryErrorCode, n as sso, o as needsRuntimeDiscovery, p as DiscoveryError, q as SignatureAlgorithm, r as computeDiscoveryUrl, s as normalizeDiscoveryUrls, t as SSOPlugin, u as validateDiscoveryDocument, v as RequiredDiscoveryField, w as deriveSAMLServiceProviderPolicy, x as validateSAMLTimestamp, y as SAMLConditions, z as SSOUserResolution } from "./index-Sxfa9KQp.mjs";
+import { A as SAMLIdentityProviderMetadata, B as SSOUserResolutionContext, C as deriveSAMLIdentityProviderEntityID, D as DEFAULT_MAX_SAML_RESPONSE_SIZE, E as DEFAULT_MAX_SAML_METADATA_SIZE, F as SSOProviderMutationGuardInput, G as DigestAlgorithm, H as AlgorithmValidationOptions, I as SSOProviderReference, K as KeyEncryptionAlgorithm, L as SSOProviderUserProfile, M as SSOOptions, N as SSOProvider, O as OIDCConfig, P as SSOProviderMutationGuardContext, R as SSOSAMLUserResolutionInput, S as SAMLServiceProviderPolicy, T as DEFAULT_CLOCK_SKEW_MS, U as DataEncryptionAlgorithm, V as SSOUserResolutionInput, W as DeprecatedAlgorithmBehavior, _ as REQUIRED_DISCOVERY_FIELDS, a as fetchDiscoveryDocument, b as TimestampValidationOptions, c as normalizeUrl, d as validateDiscoveryUrl, f as DiscoverOIDCConfigParams, g as OIDCDiscoveryDocument, h as HydratedOIDCConfig, i as discoverOIDCConfig, j as SSOOIDCUserResolutionInput, k as SAMLConfig, l as selectTokenEndpointAuthMethod, m as DiscoveryErrorCode, n as sso, o as needsRuntimeDiscovery, p as DiscoveryError, q as SignatureAlgorithm, r as computeDiscoveryUrl, s as normalizeDiscoveryUrls, t as SSOPlugin, u as validateDiscoveryDocument, v as RequiredDiscoveryField, w as deriveSAMLServiceProviderPolicy, x as validateSAMLTimestamp, y as SAMLConditions, z as SSOUserResolution } from "./index-nfENSAuB.mjs";
 export { type AlgorithmValidationOptions, DEFAULT_CLOCK_SKEW_MS, DEFAULT_MAX_SAML_METADATA_SIZE, DEFAULT_MAX_SAML_RESPONSE_SIZE, DataEncryptionAlgorithm, type DeprecatedAlgorithmBehavior, DigestAlgorithm, type DiscoverOIDCConfigParams, DiscoveryError, type DiscoveryErrorCode, type HydratedOIDCConfig, KeyEncryptionAlgorithm, type OIDCConfig, type OIDCDiscoveryDocument, REQUIRED_DISCOVERY_FIELDS, type RequiredDiscoveryField, type SAMLConditions, type SAMLConfig, type SAMLIdentityProviderMetadata, type SAMLServiceProviderPolicy, type SSOOIDCUserResolutionInput, type SSOOptions, SSOPlugin, type SSOProvider, type SSOProviderMutationGuardContext, type SSOProviderMutationGuardInput, type SSOProviderReference, type SSOProviderUserProfile, type SSOSAMLUserResolutionInput, type SSOUserResolution, type SSOUserResolutionContext, type SSOUserResolutionInput, SignatureAlgorithm, type TimestampValidationOptions, computeDiscoveryUrl, deriveSAMLIdentityProviderEntityID, deriveSAMLServiceProviderPolicy, discoverOIDCConfig, fetchDiscoveryDocument, needsRuntimeDiscovery, normalizeDiscoveryUrls, normalizeUrl, selectTokenEndpointAuthMethod, sso, validateDiscoveryDocument, validateDiscoveryUrl, validateSAMLTimestamp };

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { t as PACKAGE_VERSION } from "./version-xoFrTW0m.mjs";
+import { t as PACKAGE_VERSION } from "./version-Do0kTnv7.mjs";
 import { APIError, addOAuthServerContext, createAuthEndpoint, createAuthMiddleware, getSessionFromCtx, sessionMiddleware } from "better-auth/api";
 import { XMLParser, XMLValidator } from "fast-xml-parser";
 import { X509Certificate } from "node:crypto";
@@ -2944,7 +2944,7 @@ async function processSAMLResponse(ctx, params, options) {
 	};
 	const accountKey = {
 		issuer,
-		providerAccountId: userInfo.id
+		accountId: userInfo.id
 	};
 	const isTrustedProvider = "domainVerified" in provider && !!provider.domainVerified && validateEmailDomain(userInfo.email, provider.domain);
 	const callbackUrl = redirectCandidates.some(Boolean) ? samlRedirectUrl : ctx.context.baseURL;
@@ -2983,7 +2983,7 @@ async function processSAMLResponse(ctx, params, options) {
 				account: {
 					providerId,
 					issuer: accountKey.issuer,
-					providerAccountId: accountKey.providerAccountId,
+					accountId: accountKey.accountId,
 					accessToken: "",
 					refreshToken: ""
 				},
@@ -3030,7 +3030,7 @@ async function processSAMLResponse(ctx, params, options) {
 		profile: {
 			providerType: "saml",
 			providerId,
-			providerAccountId: userInfo.id,
+			accountId: userInfo.id,
 			email: userInfo.email,
 			emailVerified: userInfo.emailVerified,
 			rawAttributes: attributes
@@ -3891,7 +3891,7 @@ async function handleOIDCCallback(ctx, options, providerId, stateData, parsedPro
 	};
 	const accountKey = {
 		issuer: verifiedIdToken && readStringClaim(verifiedIdToken.payload, "iss") || provider.issuer,
-		providerAccountId: userInfoId
+		accountId: userInfoId
 	};
 	const isTrustedProvider = "domainVerified" in provider && provider.domainVerified === true && validateEmailDomain(userInfoEmail, provider.domain);
 	let linked;
@@ -3935,7 +3935,7 @@ async function handleOIDCCallback(ctx, options, providerId, stateData, parsedPro
 					accessToken: tokenResponse.accessToken,
 					refreshToken: tokenResponse.refreshToken,
 					issuer: accountKey.issuer,
-					providerAccountId: userInfoId,
+					accountId: userInfoId,
 					providerId: provider.providerId,
 					accessTokenExpiresAt: tokenResponse.accessTokenExpiresAt,
 					refreshTokenExpiresAt: tokenResponse.refreshTokenExpiresAt,
@@ -3993,7 +3993,7 @@ async function handleOIDCCallback(ctx, options, providerId, stateData, parsedPro
 		profile: {
 			providerType: "oidc",
 			providerId: provider.providerId,
-			providerAccountId: userInfoId,
+			accountId: userInfoId,
 			email: userInfoEmail,
 			emailVerified: Boolean(userInfo.emailVerified),
 			rawAttributes: userInfo

package/dist/{version-xoFrTW0m.mjs → version-Do0kTnv7.mjs}

@@ -1,5 +1,5 @@
 //#endregion
 //#region src/version.ts
-const PACKAGE_VERSION = "1.7.0-rc.3";
+const PACKAGE_VERSION = "1.7.0-rc.4";
 //#endregion
 export { PACKAGE_VERSION as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@better-auth/sso",
-  "version": "1.7.0-rc.3",
+  "version": "1.7.0-rc.4",
   "description": "SSO plugin for Better Auth",
   "type": "module",
   "license": "MIT",
@@ -67,21 +67,21 @@
     "@types/body-parser": "^1.19.6",
     "@types/express": "^5.0.6",
     "better-call": "1.3.7",
-    "body-parser": "^2.2.2",
+    "body-parser": "^2.3.0",
     "express": "^5.2.1",
     "kysely": "^0.28.17 || ^0.29.0",
     "oauth2-mock-server": "^9.0.0",
     "tsdown": "0.22.7",
-    "@better-auth/core": "1.7.0-rc.3",
-    "better-auth": "1.7.0-rc.3",
-    "@better-auth/kysely-adapter": "1.7.0-rc.3"
+    "better-auth": "1.7.0-rc.4",
+    "@better-auth/core": "1.7.0-rc.4",
+    "@better-auth/kysely-adapter": "1.7.0-rc.4"
   },
   "peerDependencies": {
     "@better-auth/utils": "0.4.2",
     "@better-fetch/fetch": "1.3.1",
     "better-call": "1.3.7",
-    "@better-auth/core": "^1.7.0-rc.3",
-    "better-auth": "^1.7.0-rc.3"
+    "@better-auth/core": "^1.7.0-rc.4",
+    "better-auth": "^1.7.0-rc.4"
   },
   "scripts": {
     "build": "tsdown",