@better-auth/stripe 1.2.6-beta.7 → 1.2.7

package/.turbo/turbo-build.log

@@ -1,17 +1,17 @@
 
-> @better-auth/stripe@1.2.6-beta.7 build /home/runner/work/better-auth/better-auth/packages/stripe
+> @better-auth/stripe@1.2.7 build /home/runner/work/better-auth/better-auth/packages/stripe
 > unbuild
 
 [info] Automatically detected entries: src/index, src/client [esm] [cjs] [dts]
 [info] Building stripe
 [success] Build succeeded for stripe
-[log]   dist/index.cjs (total size: 36.5 kB, chunk size: 36.5 kB, exports: stripe)
+[log]   dist/index.cjs (total size: 37 kB, chunk size: 37 kB, exports: stripe)
 
-[log]   dist/client.cjs (total size: 160 B, chunk size: 160 B, exports: stripeClient)
+[log]   dist/client.cjs (total size: 224 B, chunk size: 224 B, exports: stripeClient)
 
-[log]   dist/index.mjs (total size: 36.2 kB, chunk size: 36.2 kB, exports: stripe)
+[log]   dist/index.mjs (total size: 36.7 kB, chunk size: 36.7 kB, exports: stripe)
 
-[log]   dist/client.mjs (total size: 133 B, chunk size: 133 B, exports: stripeClient)
+[log]   dist/client.mjs (total size: 197 B, chunk size: 197 B, exports: stripeClient)
 
-Σ Total dist size (byte size): 198 kB
+Σ Total dist size (byte size): 200 kB
 [log]

package/dist/client.cjs

@@ -3,7 +3,10 @@
 const stripeClient = (options) => {
   return {
     id: "stripe-client",
-    $InferServerPlugin: {}
+    $InferServerPlugin: {},
+    pathMethods: {
+      "/subscription/restore": "POST"
+    }
   };
 };
 

package/dist/client.d.cts

@@ -20,6 +20,9 @@ declare const stripeClient: <O extends {
         stripeClient: any;
         stripeWebhookSecret: string;
     }>>;
+    pathMethods: {
+        "/subscription/restore": "POST";
+    };
 };
 
 export { stripeClient };

package/dist/client.d.mts

@@ -20,6 +20,9 @@ declare const stripeClient: <O extends {
         stripeClient: any;
         stripeWebhookSecret: string;
     }>>;
+    pathMethods: {
+        "/subscription/restore": "POST";
+    };
 };
 
 export { stripeClient };

package/dist/client.d.ts

@@ -20,6 +20,9 @@ declare const stripeClient: <O extends {
         stripeClient: any;
         stripeWebhookSecret: string;
     }>>;
+    pathMethods: {
+        "/subscription/restore": "POST";
+    };
 };
 
 export { stripeClient };

package/dist/client.mjs

@@ -1,7 +1,10 @@
 const stripeClient = (options) => {
   return {
     id: "stripe-client",
-    $InferServerPlugin: {}
+    $InferServerPlugin: {},
+    pathMethods: {
+      "/subscription/restore": "POST"
+    }
   };
 };
 

package/dist/index.cjs

@@ -36,7 +36,7 @@ async function onCheckoutSessionCompleted(ctx, options, event) {
     const priceId = subscription.items.data[0]?.price.id;
     const plan = await getPlanByPriceId(options, priceId);
     if (plan) {
-      const referenceId = checkoutSession?.metadata?.referenceId;
+      const referenceId = checkoutSession?.client_reference_id || checkoutSession?.metadata?.referenceId;
       const subscriptionId = checkoutSession?.metadata?.subscriptionId;
       const seats = subscription.items.data[0].quantity;
       if (referenceId && subscriptionId) {
@@ -306,6 +306,14 @@ const stripe = (options) => {
       throw new api.APIError("UNAUTHORIZED");
     }
     const referenceId = ctx.body?.referenceId || ctx.query?.referenceId || session.user.id;
+    if (ctx.body?.referenceId && !options.subscription?.authorizeReference) {
+      betterAuth.logger.error(
+        `Passing referenceId into a subscription action isn't allowed if subscription.authorizeReference isn't defined in your stripe plugin config.`
+      );
+      throw new api.APIError("BAD_REQUEST", {
+        message: "Reference id is not allowed. Read server logs for more details."
+      });
+    }
     const isAuthorized = ctx.body?.referenceId ? await options.subscription?.authorizeReference?.({
       user: session.user,
       session: session.session,
@@ -809,9 +817,12 @@ const stripe = (options) => {
           });
         }
         const activeSubscription = await client.subscriptions.list({
-          customer: subscription.stripeCustomerId,
-          status: "active"
-        }).then((res) => res.data[0]);
+          customer: subscription.stripeCustomerId
+        }).then(
+          (res) => res.data.filter(
+            (sub) => sub.status === "active" || sub.status === "trialing"
+          )[0]
+        );
         if (!activeSubscription) {
           throw ctx.error("BAD_REQUEST", {
             message: STRIPE_ERROR_CODES.SUBSCRIPTION_NOT_FOUND

package/dist/index.mjs

@@ -34,7 +34,7 @@ async function onCheckoutSessionCompleted(ctx, options, event) {
     const priceId = subscription.items.data[0]?.price.id;
     const plan = await getPlanByPriceId(options, priceId);
     if (plan) {
-      const referenceId = checkoutSession?.metadata?.referenceId;
+      const referenceId = checkoutSession?.client_reference_id || checkoutSession?.metadata?.referenceId;
       const subscriptionId = checkoutSession?.metadata?.subscriptionId;
       const seats = subscription.items.data[0].quantity;
       if (referenceId && subscriptionId) {
@@ -304,6 +304,14 @@ const stripe = (options) => {
       throw new APIError("UNAUTHORIZED");
     }
     const referenceId = ctx.body?.referenceId || ctx.query?.referenceId || session.user.id;
+    if (ctx.body?.referenceId && !options.subscription?.authorizeReference) {
+      logger.error(
+        `Passing referenceId into a subscription action isn't allowed if subscription.authorizeReference isn't defined in your stripe plugin config.`
+      );
+      throw new APIError("BAD_REQUEST", {
+        message: "Reference id is not allowed. Read server logs for more details."
+      });
+    }
     const isAuthorized = ctx.body?.referenceId ? await options.subscription?.authorizeReference?.({
       user: session.user,
       session: session.session,
@@ -807,9 +815,12 @@ const stripe = (options) => {
           });
         }
         const activeSubscription = await client.subscriptions.list({
-          customer: subscription.stripeCustomerId,
-          status: "active"
-        }).then((res) => res.data[0]);
+          customer: subscription.stripeCustomerId
+        }).then(
+          (res) => res.data.filter(
+            (sub) => sub.status === "active" || sub.status === "trialing"
+          )[0]
+        );
         if (!activeSubscription) {
           throw ctx.error("BAD_REQUEST", {
             message: STRIPE_ERROR_CODES.SUBSCRIPTION_NOT_FOUND

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@better-auth/stripe",
   "author": "Bereket Engida",
-  "version": "1.2.6-beta.7",
+  "version": "1.2.7",
   "main": "dist/index.cjs",
   "license": "MIT",
   "keywords": [
@@ -35,14 +35,14 @@
   },
   "dependencies": {
     "zod": "^3.24.1",
-    "better-auth": "^1.2.6-beta.7"
+    "better-auth": "^1.2.7"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.12",
     "better-sqlite3": "^11.6.0",
     "vitest": "^1.6.0",
     "stripe": "^17.7.0",
-    "better-call": "^1.0.7"
+    "better-call": "^1.0.8"
   },
   "scripts": {
     "test": "vitest",

package/src/client.ts

@@ -27,5 +27,8 @@ export const stripeClient = <
 						}
 			>
 		>,
+		pathMethods: {
+			"/subscription/restore": "POST",
+		},
 	} satisfies BetterAuthClientPlugin;
 };

package/src/hooks.ts

@@ -20,7 +20,9 @@ export async function onCheckoutSessionCompleted(
 		const priceId = subscription.items.data[0]?.price.id;
 		const plan = await getPlanByPriceId(options, priceId as string);
 		if (plan) {
-			const referenceId = checkoutSession?.metadata?.referenceId;
+			const referenceId =
+				checkoutSession?.client_reference_id ||
+				checkoutSession?.metadata?.referenceId;
 			const subscriptionId = checkoutSession?.metadata?.subscriptionId;
 			const seats = subscription.items.data[0].quantity;
 			if (referenceId && subscriptionId) {

package/src/index.ts

@@ -66,6 +66,16 @@ export const stripe = <O extends StripeOptions>(options: O) => {
 			}
 			const referenceId =
 				ctx.body?.referenceId || ctx.query?.referenceId || session.user.id;
+
+			if (ctx.body?.referenceId && !options.subscription?.authorizeReference) {
+				logger.error(
+					`Passing referenceId into a subscription action isn't allowed if subscription.authorizeReference isn't defined in your stripe plugin config.`,
+				);
+				throw new APIError("BAD_REQUEST", {
+					message:
+						"Reference id is not allowed. Read server logs for more details.",
+				});
+			}
 			const isAuthorized = ctx.body?.referenceId
 				? await options.subscription?.authorizeReference?.({
 						user: session.user,
@@ -671,9 +681,13 @@ export const stripe = <O extends StripeOptions>(options: O) => {
 				const activeSubscription = await client.subscriptions
 					.list({
 						customer: subscription.stripeCustomerId,
-						status: "active",
 					})
-					.then((res) => res.data[0]);
+					.then(
+						(res) =>
+							res.data.filter(
+								(sub) => sub.status === "active" || sub.status === "trialing",
+							)[0],
+					);
 				if (!activeSubscription) {
 					throw ctx.error("BAD_REQUEST", {
 						message: STRIPE_ERROR_CODES.SUBSCRIPTION_NOT_FOUND,

package/src/stripe.test.ts

@@ -244,19 +244,15 @@ describe("stripe", async () => {
 	});
 
 	it("should handle subscription webhook events", async () => {
-		const testSubscriptionId = "sub_123456";
-		const testReferenceId = "user_123";
-		await ctx.adapter.create({
+		const { id: testReferenceId } = await ctx.adapter.create({
 			model: "user",
 			data: {
-				id: testReferenceId,
 				email: "test@email.com",
 			},
 		});
-		await ctx.adapter.create({
+		const { id: testSubscriptionId } = await ctx.adapter.create({
 			model: "subscription",
 			data: {
-				id: testSubscriptionId,
 				referenceId: testReferenceId,
 				stripeCustomerId: "cus_mock123",
 				status: "active",
@@ -354,22 +350,19 @@ describe("stripe", async () => {
 		});
 	});
 
+	const { id: userId } = await ctx.adapter.create({
+		model: "user",
+		data: {
+			email: "delete-test@email.com",
+		},
+	});
+
 	it("should handle subscription deletion webhook", async () => {
-		const userId = "test_user";
 		const subId = "test_sub_delete";
 
-		await ctx.adapter.create({
-			model: "user",
-			data: {
-				id: userId,
-				email: "delete-test@email.com",
-			},
-		});
-
 		await ctx.adapter.create({
 			model: "subscription",
 			data: {
-				id: subId,
 				referenceId: userId,
 				stripeCustomerId: "cus_delete_test",
 				status: "active",
@@ -502,7 +495,6 @@ describe("stripe", async () => {
 		};
 
 		const mockSubscription = {
-			id: "sub_123",
 			status: "active",
 			items: {
 				data: [{ price: { id: process.env.STRIPE_PRICE_ID_1 } }],
@@ -533,11 +525,10 @@ describe("stripe", async () => {
 			plugins: [stripe(eventTestOptions)],
 		});
 
-		await ctx.adapter.create({
+		const { id: testSubscriptionId } = await ctx.adapter.create({
 			model: "subscription",
 			data: {
-				id: "sub_123",
-				referenceId: "user_123",
+				referenceId: userId,
 				stripeCustomerId: "cus_123",
 				stripeSubscriptionId: "sub_123",
 				status: "incomplete",
@@ -571,7 +562,7 @@ describe("stripe", async () => {
 			type: "customer.subscription.updated",
 			data: {
 				object: {
-					id: "sub_123",
+					id: testSubscriptionId,
 					customer: "cus_123",
 					status: "active",
 					items: {
@@ -609,7 +600,7 @@ describe("stripe", async () => {
 			type: "customer.subscription.updated",
 			data: {
 				object: {
-					id: "sub_123",
+					id: testSubscriptionId,
 					customer: "cus_123",
 					status: "active",
 					cancel_at_period_end: true,
@@ -645,7 +636,7 @@ describe("stripe", async () => {
 			type: "customer.subscription.updated",
 			data: {
 				object: {
-					id: "sub_123",
+					id: testSubscriptionId,
 					customer: "cus_123",
 					status: "active",
 					cancel_at_period_end: true,
@@ -680,12 +671,12 @@ describe("stripe", async () => {
 			type: "customer.subscription.deleted",
 			data: {
 				object: {
-					id: "sub_123",
+					id: testSubscriptionId,
 					customer: "cus_123",
 					status: "canceled",
 					metadata: {
-						referenceId: "user_123",
-						subscriptionId: "sub_123",
+						referenceId: userId,
+						subscriptionId: testSubscriptionId,
 					},
 				},
 			},