@better-auth/stripe 1.6.20 → 1.6.22

package/dist/client.d.mts

@@ -1,4 +1,4 @@
-import { l as StripePlan, n as stripe } from "./index-C-c67H8y.mjs";
+import { l as StripePlan, n as stripe } from "./index-ntN1joRP.mjs";
 import * as better_auth0 from "better-auth";
 
 //#region src/error-codes.d.ts

package/dist/client.mjs

@@ -1,4 +1,4 @@
-import { n as STRIPE_ERROR_CODES, t as PACKAGE_VERSION } from "./version-CK8LZgEk.mjs";
+import { n as STRIPE_ERROR_CODES, t as PACKAGE_VERSION } from "./version-DJ9TCkHy.mjs";
 //#region src/client.ts
 const stripeClient = (options) => {
 	return {

package/dist/{index-C-c67H8y.d.mts → index-ntN1joRP.d.mts}

@@ -576,6 +576,8 @@ declare const stripe: <O extends StripeOptions>(options: O) => {
         }>)[];
       }>) => Promise<{
         session: StripeCtxSession;
+      }>) | ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        referenceId: string;
       }>) | ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>))[];
     }, {
       url: string;
@@ -637,6 +639,8 @@ declare const stripe: <O extends StripeOptions>(options: O) => {
         }>)[];
       }>) => Promise<{
         session: StripeCtxSession;
+      }>) | ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        referenceId: string;
       }>) | ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>))[];
     }, {
       url: string;
@@ -683,7 +687,9 @@ declare const stripe: <O extends StripeOptions>(options: O) => {
         }>)[];
       }>) => Promise<{
         session: StripeCtxSession;
-      }>) | ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>))[];
+      }>) | ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        referenceId: string;
+      }>))[];
     }, Stripe.Response<Stripe.Subscription>>;
     listActiveSubscriptions: better_call0.StrictEndpoint<"/subscription/list", {
       method: "GET";
@@ -725,7 +731,9 @@ declare const stripe: <O extends StripeOptions>(options: O) => {
         }>)[];
       }>) => Promise<{
         session: StripeCtxSession;
-      }>) | ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>))[];
+      }>) | ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        referenceId: string;
+      }>))[];
     }, {
       limits: Record<string, unknown> | undefined;
       priceId: string | undefined;
@@ -801,6 +809,8 @@ declare const stripe: <O extends StripeOptions>(options: O) => {
         }>)[];
       }>) => Promise<{
         session: StripeCtxSession;
+      }>) | ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        referenceId: string;
       }>) | ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>))[];
     }, {
       url: string;

package/dist/index.d.mts

@@ -1,2 +1,2 @@
-import { a as CheckoutSessionLocale, c as StripeOptions, d as SubscriptionOptions, f as WithActiveOrganizationId, i as CheckoutSessionLineItem, l as StripePlan, n as stripe, o as CustomerType, p as WithStripeCustomerId, r as AuthorizeReferenceAction, s as StripeCtxSession, t as StripePlugin, u as Subscription } from "./index-C-c67H8y.mjs";
+import { a as CheckoutSessionLocale, c as StripeOptions, d as SubscriptionOptions, f as WithActiveOrganizationId, i as CheckoutSessionLineItem, l as StripePlan, n as stripe, o as CustomerType, p as WithStripeCustomerId, r as AuthorizeReferenceAction, s as StripeCtxSession, t as StripePlugin, u as Subscription } from "./index-ntN1joRP.mjs";
 export { AuthorizeReferenceAction, CheckoutSessionLineItem, CheckoutSessionLocale, CustomerType, StripeCtxSession, StripeOptions, StripePlan, StripePlugin, Subscription, SubscriptionOptions, WithActiveOrganizationId, WithStripeCustomerId, stripe };

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { n as STRIPE_ERROR_CODES, t as PACKAGE_VERSION } from "./version-CK8LZgEk.mjs";
+import { n as STRIPE_ERROR_CODES, t as PACKAGE_VERSION } from "./version-DJ9TCkHy.mjs";
 import { APIError, HIDE_METADATA } from "better-auth";
 import { defu } from "defu";
 import { createAuthEndpoint, createAuthMiddleware } from "@better-auth/core/api";
@@ -451,7 +451,8 @@ async function onSubscriptionDeleted(ctx, options, event) {
 const stripeSessionMiddleware = createAuthMiddleware({ use: [sessionMiddleware] }, async (ctx) => {
 	return { session: ctx.context.session };
 });
-const referenceMiddleware = (subscriptionOptions, action) => createAuthMiddleware(async (ctx) => {
+const referenceMiddleware = (options, action) => createAuthMiddleware(async (ctx) => {
+	const subscriptionOptions = options.subscription;
 	const ctxSession = ctx.context.session;
 	if (!ctxSession) throw APIError$1.from("UNAUTHORIZED", STRIPE_ERROR_CODES.UNAUTHORIZED);
 	const customerType = ctx.body?.customerType || ctx.query?.customerType;
@@ -469,10 +470,10 @@ const referenceMiddleware = (subscriptionOptions, action) => createAuthMiddlewar
 			referenceId,
 			action
 		}, ctx)) throw APIError$1.from("UNAUTHORIZED", STRIPE_ERROR_CODES.UNAUTHORIZED);
-		return;
+		return { referenceId };
 	}
-	if (!explicitReferenceId) return;
-	if (explicitReferenceId === ctxSession.user.id) return;
+	const referenceId = explicitReferenceId || ctxSession.user.id;
+	if (!explicitReferenceId || explicitReferenceId === ctxSession.user.id) return { referenceId };
 	if (!subscriptionOptions.authorizeReference) {
 		ctx.context.logger.error(`Passing referenceId into a subscription action isn't allowed if subscription.authorizeReference isn't defined in your stripe plugin config.`);
 		throw APIError$1.from("BAD_REQUEST", STRIPE_ERROR_CODES.REFERENCE_ID_NOT_ALLOWED);
@@ -480,9 +481,10 @@ const referenceMiddleware = (subscriptionOptions, action) => createAuthMiddlewar
 	if (!await subscriptionOptions.authorizeReference({
 		user: ctxSession.user,
 		session: ctxSession.session,
-		referenceId: explicitReferenceId,
+		referenceId,
 		action
 	}, ctx)) throw APIError$1.from("UNAUTHORIZED", STRIPE_ERROR_CODES.UNAUTHORIZED);
+	return { referenceId };
 });
 //#endregion
 //#region src/routes.ts
@@ -520,21 +522,6 @@ function getUrl(ctx, url) {
 	return `${ctx.context.options.baseURL}${url.startsWith("/") ? url : `/${url}`}`;
 }
 /**
-* Determines the reference ID based on customer type.
-* - `user` (default): uses userId
-* - `organization`: uses activeOrganizationId from session
-* @internal
-*/
-function getReferenceId(ctxSession, customerType, options) {
-	const { user, session } = ctxSession;
-	if ((customerType || "user") === "organization") {
-		if (!options.organization?.enabled) throw APIError$1.from("BAD_REQUEST", STRIPE_ERROR_CODES.ORGANIZATION_SUBSCRIPTION_NOT_ENABLED);
-		if (!session.activeOrganizationId) throw APIError$1.from("BAD_REQUEST", STRIPE_ERROR_CODES.ORGANIZATION_NOT_FOUND);
-		return session.activeOrganizationId;
-	}
-	return user.id;
-}
-/**
 * Retrieve the subscription a row points to, or `null` if it no longer exists
 * (`resource_missing`) so callers can treat the row as stale.
 * @internal
@@ -592,7 +579,7 @@ const upgradeSubscription = (options) => {
 		metadata: { openapi: { operationId: "upgradeSubscription" } },
 		use: [
 			stripeSessionMiddleware,
-			referenceMiddleware(subscriptionOptions, "upgrade-subscription"),
+			referenceMiddleware(options, "upgrade-subscription"),
 			originCheck((c) => {
 				return [
 					c.body.successUrl,
@@ -604,7 +591,7 @@ const upgradeSubscription = (options) => {
 	}, async (ctx) => {
 		const { user, session } = ctx.context.session;
 		const customerType = ctx.body.customerType || "user";
-		const referenceId = ctx.body.referenceId || getReferenceId(ctx.context.session, customerType, options);
+		const referenceId = ctx.context.referenceId;
 		if (!user.emailVerified && subscriptionOptions.requireEmailVerification) throw APIError$1.from("BAD_REQUEST", STRIPE_ERROR_CODES.EMAIL_VERIFICATION_REQUIRED);
 		const plan = await getPlanByName(options, ctx.body.plan);
 		if (!plan) throw APIError$1.from("BAD_REQUEST", STRIPE_ERROR_CODES.SUBSCRIPTION_PLAN_NOT_FOUND);
@@ -1097,19 +1084,17 @@ const cancelSubscriptionBodySchema = z.object({
 */
 const cancelSubscription = (options) => {
 	const client = options.stripeClient;
-	const subscriptionOptions = options.subscription;
 	return createAuthEndpoint("/subscription/cancel", {
 		method: "POST",
 		body: cancelSubscriptionBodySchema,
 		metadata: { openapi: { operationId: "cancelSubscription" } },
 		use: [
 			stripeSessionMiddleware,
-			referenceMiddleware(subscriptionOptions, "cancel-subscription"),
+			referenceMiddleware(options, "cancel-subscription"),
 			originCheck((ctx) => ctx.body.returnUrl)
 		]
 	}, async (ctx) => {
-		const customerType = ctx.body.customerType || "user";
-		const referenceId = ctx.body.referenceId || getReferenceId(ctx.context.session, customerType, options);
+		const referenceId = ctx.context.referenceId;
 		let subscription = ctx.body.subscriptionId ? await ctx.context.adapter.findOne({
 			model: "subscription",
 			where: [{
@@ -1184,15 +1169,13 @@ const restoreSubscriptionBodySchema = z.object({
 });
 const restoreSubscription = (options) => {
 	const client = options.stripeClient;
-	const subscriptionOptions = options.subscription;
 	return createAuthEndpoint("/subscription/restore", {
 		method: "POST",
 		body: restoreSubscriptionBodySchema,
 		metadata: { openapi: { operationId: "restoreSubscription" } },
-		use: [stripeSessionMiddleware, referenceMiddleware(subscriptionOptions, "restore-subscription")]
+		use: [stripeSessionMiddleware, referenceMiddleware(options, "restore-subscription")]
 	}, async (ctx) => {
-		const customerType = ctx.body.customerType || "user";
-		const referenceId = ctx.body.referenceId || getReferenceId(ctx.context.session, customerType, options);
+		const referenceId = ctx.context.referenceId;
 		let subscription = ctx.body.subscriptionId ? await ctx.context.adapter.findOne({
 			model: "subscription",
 			where: [{
@@ -1287,15 +1270,13 @@ const listActiveSubscriptionsQuerySchema = z.optional(z.object({
 * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/stripe#api-method-subscription-list)
 */
 const listActiveSubscriptions = (options) => {
-	const subscriptionOptions = options.subscription;
 	return createAuthEndpoint("/subscription/list", {
 		method: "GET",
 		query: listActiveSubscriptionsQuerySchema,
 		metadata: { openapi: { operationId: "listActiveSubscriptions" } },
-		use: [stripeSessionMiddleware, referenceMiddleware(subscriptionOptions, "list-subscription")]
+		use: [stripeSessionMiddleware, referenceMiddleware(options, "list-subscription")]
 	}, async (ctx) => {
-		const customerType = ctx.query?.customerType || "user";
-		const referenceId = ctx.query?.referenceId || getReferenceId(ctx.context.session, customerType, options);
+		const referenceId = ctx.context.referenceId;
 		const subscriptions = await ctx.context.adapter.findMany({
 			model: "subscription",
 			where: [{
@@ -1412,20 +1393,19 @@ const createBillingPortalBodySchema = z.object({
 });
 const createBillingPortal = (options) => {
 	const client = options.stripeClient;
-	const subscriptionOptions = options.subscription;
 	return createAuthEndpoint("/subscription/billing-portal", {
 		method: "POST",
 		body: createBillingPortalBodySchema,
 		metadata: { openapi: { operationId: "createBillingPortal" } },
 		use: [
 			stripeSessionMiddleware,
-			referenceMiddleware(subscriptionOptions, "billing-portal"),
+			referenceMiddleware(options, "billing-portal"),
 			originCheck((ctx) => ctx.body.returnUrl)
 		]
 	}, async (ctx) => {
 		const { user } = ctx.context.session;
 		const customerType = ctx.body.customerType || "user";
-		const referenceId = ctx.body.referenceId || getReferenceId(ctx.context.session, customerType, options);
+		const referenceId = ctx.context.referenceId;
 		let customerId;
 		if (customerType === "organization") {
 			customerId = (await ctx.context.adapter.findOne({

package/dist/{version-CK8LZgEk.mjs → version-DJ9TCkHy.mjs}

@@ -27,6 +27,6 @@ const STRIPE_ERROR_CODES = defineErrorCodes({
 });
 //#endregion
 //#region src/version.ts
-const PACKAGE_VERSION = "1.6.20";
+const PACKAGE_VERSION = "1.6.22";
 //#endregion
 export { STRIPE_ERROR_CODES as n, PACKAGE_VERSION as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@better-auth/stripe",
-  "version": "1.6.20",
+  "version": "1.6.22",
   "description": "Stripe plugin for Better Auth",
   "type": "module",
   "license": "MIT",
@@ -55,17 +55,17 @@
     "zod": "^4.3.6"
   },
   "devDependencies": {
-    "better-call": "1.3.6",
+    "better-call": "1.3.7",
     "stripe": "^22.0.1",
     "tsdown": "0.21.1",
-    "@better-auth/core": "1.6.20",
-    "better-auth": "1.6.20"
+    "@better-auth/core": "1.6.22",
+    "better-auth": "1.6.22"
   },
   "peerDependencies": {
-    "better-call": "1.3.6",
+    "better-call": "1.3.7",
     "stripe": "^18 || ^19 || ^20 || ^21 || ^22",
-    "@better-auth/core": "^1.6.20",
-    "better-auth": "^1.6.20"
+    "@better-auth/core": "^1.6.22",
+    "better-auth": "^1.6.22"
   },
   "scripts": {
     "build": "tsdown",