@celsoft/platform 0.11.0 → 0.13.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -14,6 +14,7 @@ export declare function createAuth({ db, secret, baseURL, email, requireVerifica
14
14
  baseURL: string;
15
15
  basePath: string;
16
16
  database: (options: import("better-auth").BetterAuthOptions) => import("better-auth").DBAdapter<import("better-auth").BetterAuthOptions>;
17
+ disabledPaths: string[];
17
18
  advanced: {
18
19
  database: {
19
20
  generateId: "uuid";
@@ -1185,6 +1186,2787 @@ export declare function createAuth({ db, secret, baseURL, email, requireVerifica
1185
1186
  };
1186
1187
  }) => Promise<void>;
1187
1188
  }>;
1189
+ }, {
1190
+ id: "jwt";
1191
+ version: string;
1192
+ options: NoInfer<import("better-auth/plugins").JwtOptions>;
1193
+ init(ctx: import("better-auth").AuthContext): {
1194
+ context: {
1195
+ sessionConfig: {
1196
+ cookieCacheSigner: import("better-auth").CookieCacheSigner;
1197
+ updateAge: number;
1198
+ expiresIn: number;
1199
+ freshAge: number;
1200
+ cookieRefreshCache: false | {
1201
+ enabled: true;
1202
+ updateAge: number;
1203
+ };
1204
+ };
1205
+ };
1206
+ } | undefined;
1207
+ endpoints: {
1208
+ getJwks: import("better-auth").StrictEndpoint<string, {
1209
+ method: "GET";
1210
+ metadata: {
1211
+ openapi: {
1212
+ operationId: string;
1213
+ description: string;
1214
+ responses: {
1215
+ "200": {
1216
+ description: string;
1217
+ content: {
1218
+ "application/json": {
1219
+ schema: {
1220
+ type: "object";
1221
+ properties: {
1222
+ keys: {
1223
+ type: string;
1224
+ description: string;
1225
+ items: {
1226
+ type: string;
1227
+ properties: {
1228
+ kid: {
1229
+ type: string;
1230
+ description: string;
1231
+ };
1232
+ kty: {
1233
+ type: string;
1234
+ description: string;
1235
+ };
1236
+ alg: {
1237
+ type: string;
1238
+ description: string;
1239
+ };
1240
+ use: {
1241
+ type: string;
1242
+ description: string;
1243
+ enum: string[];
1244
+ nullable: boolean;
1245
+ };
1246
+ n: {
1247
+ type: string;
1248
+ description: string;
1249
+ nullable: boolean;
1250
+ };
1251
+ e: {
1252
+ type: string;
1253
+ description: string;
1254
+ nullable: boolean;
1255
+ };
1256
+ crv: {
1257
+ type: string;
1258
+ description: string;
1259
+ nullable: boolean;
1260
+ };
1261
+ x: {
1262
+ type: string;
1263
+ description: string;
1264
+ nullable: boolean;
1265
+ };
1266
+ y: {
1267
+ type: string;
1268
+ description: string;
1269
+ nullable: boolean;
1270
+ };
1271
+ };
1272
+ required: string[];
1273
+ };
1274
+ };
1275
+ };
1276
+ required: string[];
1277
+ };
1278
+ };
1279
+ };
1280
+ };
1281
+ };
1282
+ };
1283
+ };
1284
+ }, import("better-auth").JSONWebKeySet>;
1285
+ getToken: import("better-auth").StrictEndpoint<"/token", {
1286
+ method: "GET";
1287
+ requireHeaders: true;
1288
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
1289
+ session: {
1290
+ session: Record<string, any> & {
1291
+ id: string;
1292
+ createdAt: Date;
1293
+ updatedAt: Date;
1294
+ userId: string;
1295
+ expiresAt: Date;
1296
+ token: string;
1297
+ ipAddress?: string | null | undefined;
1298
+ userAgent?: string | null | undefined;
1299
+ };
1300
+ user: Record<string, any> & {
1301
+ id: string;
1302
+ createdAt: Date;
1303
+ updatedAt: Date;
1304
+ email: string;
1305
+ emailVerified: boolean;
1306
+ name: string;
1307
+ image?: string | null | undefined;
1308
+ };
1309
+ };
1310
+ }>>[];
1311
+ metadata: {
1312
+ openapi: {
1313
+ operationId: string;
1314
+ description: string;
1315
+ responses: {
1316
+ 200: {
1317
+ description: string;
1318
+ content: {
1319
+ "application/json": {
1320
+ schema: {
1321
+ type: "object";
1322
+ properties: {
1323
+ token: {
1324
+ type: string;
1325
+ };
1326
+ };
1327
+ };
1328
+ };
1329
+ };
1330
+ };
1331
+ };
1332
+ };
1333
+ };
1334
+ }, {
1335
+ token: string;
1336
+ }>;
1337
+ signJWT: import("better-auth").StrictEndpoint<string, {
1338
+ method: "POST";
1339
+ metadata: {
1340
+ $Infer: {
1341
+ body: {
1342
+ payload: import("better-auth").JWTPayload;
1343
+ overrideOptions?: import("better-auth/plugins").JwtOptions | undefined;
1344
+ };
1345
+ };
1346
+ };
1347
+ body: import("better-auth").ZodObject<{
1348
+ payload: import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodAny>;
1349
+ overrideOptions: import("better-auth").ZodOptional<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodAny>>;
1350
+ }, import("zod/v4/core").$strip>;
1351
+ }, {
1352
+ token: string;
1353
+ }>;
1354
+ verifyJWT: import("better-auth").StrictEndpoint<string, {
1355
+ method: "POST";
1356
+ metadata: {
1357
+ $Infer: {
1358
+ body: {
1359
+ token: string;
1360
+ issuer?: string;
1361
+ };
1362
+ response: {
1363
+ payload: {
1364
+ sub: string;
1365
+ aud: string;
1366
+ [key: string]: any;
1367
+ } | null;
1368
+ };
1369
+ };
1370
+ };
1371
+ body: import("better-auth").ZodObject<{
1372
+ token: import("better-auth").ZodString;
1373
+ issuer: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1374
+ }, import("zod/v4/core").$strip>;
1375
+ }, {
1376
+ payload: (import("better-auth").JWTPayload & Required<Pick<import("better-auth").JWTPayload, "sub" | "aud">>) | null;
1377
+ }>;
1378
+ };
1379
+ hooks: {
1380
+ after: {
1381
+ matcher(context: import("better-auth").HookEndpointContext): boolean;
1382
+ handler: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>;
1383
+ }[];
1384
+ };
1385
+ schema: {
1386
+ jwks: {
1387
+ fields: {
1388
+ publicKey: {
1389
+ type: "string";
1390
+ required: true;
1391
+ };
1392
+ privateKey: {
1393
+ type: "string";
1394
+ required: true;
1395
+ };
1396
+ createdAt: {
1397
+ type: "date";
1398
+ required: true;
1399
+ };
1400
+ expiresAt: {
1401
+ type: "date";
1402
+ required: false;
1403
+ };
1404
+ alg: {
1405
+ type: "string";
1406
+ required: false;
1407
+ };
1408
+ crv: {
1409
+ type: "string";
1410
+ required: false;
1411
+ };
1412
+ };
1413
+ };
1414
+ };
1415
+ }, {
1416
+ id: "oauth-provider";
1417
+ version: string;
1418
+ options: NoInfer<import("@better-auth/oauth-provider").OAuthOptions<import("@better-auth/oauth-provider").Scope[]>>;
1419
+ onRequest: (request: Request, ctx: import("better-auth").AuthContext) => Promise<{
1420
+ response: Response;
1421
+ } | {
1422
+ request: Request;
1423
+ } | void>;
1424
+ init: (ctx: import("better-auth").AuthContext) => Promise<{
1425
+ options: {
1426
+ databaseHooks: {
1427
+ session: {
1428
+ delete: {
1429
+ before(session: {
1430
+ id: string;
1431
+ createdAt: Date;
1432
+ updatedAt: Date;
1433
+ userId: string;
1434
+ expiresAt: Date;
1435
+ token: string;
1436
+ ipAddress?: string | null | undefined;
1437
+ userAgent?: string | null | undefined;
1438
+ } & Record<string, unknown>, hookCtx: import("better-auth").GenericEndpointContext | null): Promise<void>;
1439
+ after(session: {
1440
+ id: string;
1441
+ createdAt: Date;
1442
+ updatedAt: Date;
1443
+ userId: string;
1444
+ expiresAt: Date;
1445
+ token: string;
1446
+ ipAddress?: string | null | undefined;
1447
+ userAgent?: string | null | undefined;
1448
+ } & Record<string, unknown>, hookCtx: import("better-auth").GenericEndpointContext | null): Promise<void>;
1449
+ };
1450
+ };
1451
+ };
1452
+ };
1453
+ }>;
1454
+ hooks: {
1455
+ before: {
1456
+ matcher(ctx: import("better-auth").HookEndpointContext): any;
1457
+ handler: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>;
1458
+ }[];
1459
+ after: {
1460
+ matcher(ctx: import("better-auth").HookEndpointContext): boolean;
1461
+ handler: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
1462
+ redirect: true;
1463
+ url: string;
1464
+ } | undefined>>;
1465
+ }[];
1466
+ };
1467
+ endpoints: {
1468
+ getOAuthServerConfig: import("better-auth").StrictEndpoint<"/.well-known/oauth-authorization-server", {
1469
+ method: "GET";
1470
+ metadata: {
1471
+ SERVER_ONLY: true;
1472
+ };
1473
+ }, import("@better-auth/oauth-provider").AuthServerMetadata>;
1474
+ getOpenIdConfig: import("better-auth").StrictEndpoint<"/.well-known/openid-configuration", {
1475
+ method: "GET";
1476
+ metadata: {
1477
+ SERVER_ONLY: true;
1478
+ };
1479
+ }, {
1480
+ jwks_uri?: string | undefined;
1481
+ userinfo_endpoint: string;
1482
+ acr_values_supported?: string[] | undefined;
1483
+ subject_types_supported: ("public" | "pairwise")[];
1484
+ claims_supported: string[];
1485
+ claims_parameter_supported?: boolean | undefined;
1486
+ end_session_endpoint: string;
1487
+ request_parameter_supported?: boolean | undefined;
1488
+ request_uri_parameter_supported?: boolean | undefined;
1489
+ prompt_values_supported: import("@better-auth/oauth-provider").Prompt[];
1490
+ issuer: string;
1491
+ authorization_endpoint: string;
1492
+ token_endpoint: string;
1493
+ registration_endpoint?: string | undefined;
1494
+ scopes_supported?: string[] | undefined;
1495
+ response_types_supported: "code"[];
1496
+ response_modes_supported: "query"[];
1497
+ grant_types_supported: import("@better-auth/oauth-provider").GrantType[];
1498
+ token_endpoint_auth_methods_supported?: import("@better-auth/oauth-provider").TokenEndpointAuthMethod[] | undefined;
1499
+ token_endpoint_auth_signing_alg_values_supported?: import("better-auth").PrivateKeyJwtSigningAlgorithm[] | undefined;
1500
+ service_documentation?: string | undefined;
1501
+ ui_locales_supported?: string[] | undefined;
1502
+ op_policy_uri?: string | undefined;
1503
+ op_tos_uri?: string | undefined;
1504
+ revocation_endpoint?: string | undefined;
1505
+ revocation_endpoint_auth_methods_supported?: import("@better-auth/oauth-provider").TokenEndpointAuthMethod[] | undefined;
1506
+ revocation_endpoint_auth_signing_alg_values_supported?: import("better-auth").PrivateKeyJwtSigningAlgorithm[] | undefined;
1507
+ introspection_endpoint?: string | undefined;
1508
+ introspection_endpoint_auth_methods_supported?: import("@better-auth/oauth-provider").TokenEndpointAuthMethod[] | undefined;
1509
+ introspection_endpoint_auth_signing_alg_values_supported?: import("better-auth").PrivateKeyJwtSigningAlgorithm[] | undefined;
1510
+ code_challenge_methods_supported: "S256"[];
1511
+ authorization_response_iss_parameter_supported?: boolean | undefined;
1512
+ client_id_metadata_document_supported?: boolean | undefined;
1513
+ backchannel_logout_supported?: boolean | undefined;
1514
+ backchannel_logout_session_supported?: boolean | undefined;
1515
+ dpop_signing_alg_values_supported?: import("better-auth/plugins").JWSAlgorithms[] | undefined;
1516
+ id_token_signing_alg_values_supported: import("better-auth/plugins").JWSAlgorithms[] | ["HS256"];
1517
+ }>;
1518
+ oauth2Authorize: import("better-auth").StrictEndpoint<"/oauth2/authorize", {
1519
+ method: ("GET" | "POST")[];
1520
+ body: import("better-auth").ZodObject<{}, import("zod/v4/core").$loose>;
1521
+ redirectOnError: import("@better-auth/oauth-provider").OAuthRedirectOnError<import("better-auth").GenericEndpointContext, {
1522
+ redirect: true;
1523
+ url: string;
1524
+ }>;
1525
+ metadata: {
1526
+ allowedMediaTypes: string[];
1527
+ openapi: {
1528
+ description: string;
1529
+ parameters: ({
1530
+ name: string;
1531
+ in: "query";
1532
+ required: false;
1533
+ schema: {
1534
+ type: "string";
1535
+ format?: undefined;
1536
+ minimum?: undefined;
1537
+ items?: undefined;
1538
+ };
1539
+ description: string;
1540
+ } | {
1541
+ name: string;
1542
+ in: "query";
1543
+ required: true;
1544
+ schema: {
1545
+ type: "string";
1546
+ format?: undefined;
1547
+ minimum?: undefined;
1548
+ items?: undefined;
1549
+ };
1550
+ description: string;
1551
+ } | {
1552
+ name: string;
1553
+ in: "query";
1554
+ required: false;
1555
+ schema: {
1556
+ type: "string";
1557
+ format: string;
1558
+ minimum?: undefined;
1559
+ items?: undefined;
1560
+ };
1561
+ description: string;
1562
+ } | {
1563
+ name: string;
1564
+ in: "query";
1565
+ required: false;
1566
+ schema: {
1567
+ type: "integer";
1568
+ minimum: number;
1569
+ format?: undefined;
1570
+ items?: undefined;
1571
+ };
1572
+ description: string;
1573
+ } | {
1574
+ name: string;
1575
+ in: "query";
1576
+ required: false;
1577
+ schema: {
1578
+ type: "array";
1579
+ items: {
1580
+ type: "string";
1581
+ };
1582
+ format?: undefined;
1583
+ minimum?: undefined;
1584
+ };
1585
+ description: string;
1586
+ })[];
1587
+ responses: {
1588
+ "302": {
1589
+ description: string;
1590
+ headers: {
1591
+ Location: {
1592
+ description: string;
1593
+ schema: {
1594
+ type: string;
1595
+ format: string;
1596
+ };
1597
+ };
1598
+ };
1599
+ };
1600
+ "400": {
1601
+ description: string;
1602
+ content: {
1603
+ "application/json": {
1604
+ schema: {
1605
+ type: "object";
1606
+ properties: {
1607
+ error: {
1608
+ type: string;
1609
+ };
1610
+ error_description: {
1611
+ type: string;
1612
+ };
1613
+ state: {
1614
+ type: string;
1615
+ };
1616
+ };
1617
+ required: string[];
1618
+ };
1619
+ };
1620
+ };
1621
+ };
1622
+ };
1623
+ };
1624
+ };
1625
+ }, {
1626
+ redirect: true;
1627
+ url: string;
1628
+ }>;
1629
+ oauth2Consent: import("better-auth").StrictEndpoint<"/oauth2/consent", {
1630
+ method: "POST";
1631
+ body: import("better-auth").ZodObject<{
1632
+ accept: import("better-auth").ZodBoolean;
1633
+ scope: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1634
+ claims: import("better-auth").ZodOptional<import("better-auth").ZodUnion<readonly [import("better-auth").ZodString, import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>]>>;
1635
+ oauth_query: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1636
+ }, import("zod/v4/core").$strip>;
1637
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
1638
+ session: {
1639
+ session: Record<string, any> & {
1640
+ id: string;
1641
+ createdAt: Date;
1642
+ updatedAt: Date;
1643
+ userId: string;
1644
+ expiresAt: Date;
1645
+ token: string;
1646
+ ipAddress?: string | null | undefined;
1647
+ userAgent?: string | null | undefined;
1648
+ };
1649
+ user: Record<string, any> & {
1650
+ id: string;
1651
+ createdAt: Date;
1652
+ updatedAt: Date;
1653
+ email: string;
1654
+ emailVerified: boolean;
1655
+ name: string;
1656
+ image?: string | null | undefined;
1657
+ };
1658
+ };
1659
+ }>>[];
1660
+ metadata: {
1661
+ openapi: {
1662
+ description: string;
1663
+ responses: {
1664
+ "200": {
1665
+ description: string;
1666
+ content: {
1667
+ "application/json": {
1668
+ schema: {
1669
+ type: "object";
1670
+ properties: {
1671
+ redirect: {
1672
+ type: string;
1673
+ description: string;
1674
+ enum: boolean[];
1675
+ };
1676
+ url: {
1677
+ type: string;
1678
+ format: string;
1679
+ description: string;
1680
+ };
1681
+ };
1682
+ required: string[];
1683
+ };
1684
+ };
1685
+ };
1686
+ };
1687
+ };
1688
+ };
1689
+ };
1690
+ }, {
1691
+ redirect: true;
1692
+ url: string;
1693
+ } | {
1694
+ redirect: boolean;
1695
+ url: string;
1696
+ }>;
1697
+ oauth2Continue: import("better-auth").StrictEndpoint<"/oauth2/continue", {
1698
+ method: "POST";
1699
+ body: import("better-auth").ZodObject<{
1700
+ selected: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
1701
+ created: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
1702
+ postLogin: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
1703
+ oauth_query: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1704
+ }, import("zod/v4/core").$strip>;
1705
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
1706
+ session: {
1707
+ session: Record<string, any> & {
1708
+ id: string;
1709
+ createdAt: Date;
1710
+ updatedAt: Date;
1711
+ userId: string;
1712
+ expiresAt: Date;
1713
+ token: string;
1714
+ ipAddress?: string | null | undefined;
1715
+ userAgent?: string | null | undefined;
1716
+ };
1717
+ user: Record<string, any> & {
1718
+ id: string;
1719
+ createdAt: Date;
1720
+ updatedAt: Date;
1721
+ email: string;
1722
+ emailVerified: boolean;
1723
+ name: string;
1724
+ image?: string | null | undefined;
1725
+ };
1726
+ };
1727
+ }>>[];
1728
+ metadata: {
1729
+ openapi: {
1730
+ description: string;
1731
+ responses: {
1732
+ "200": {
1733
+ description: string;
1734
+ content: {
1735
+ "application/json": {
1736
+ schema: {
1737
+ type: "object";
1738
+ properties: {
1739
+ redirect: {
1740
+ type: string;
1741
+ description: string;
1742
+ enum: boolean[];
1743
+ };
1744
+ url: {
1745
+ type: string;
1746
+ format: string;
1747
+ description: string;
1748
+ };
1749
+ };
1750
+ required: string[];
1751
+ };
1752
+ };
1753
+ };
1754
+ };
1755
+ };
1756
+ };
1757
+ };
1758
+ }, {
1759
+ redirect: true;
1760
+ url: string;
1761
+ }>;
1762
+ oauth2Token: import("better-auth").StrictEndpoint<"/oauth2/token", {
1763
+ method: "POST";
1764
+ cloneRequest: true;
1765
+ body: import("better-auth").ZodObject<{
1766
+ grant_type: import("better-auth").ZodString;
1767
+ client_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1768
+ client_secret: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1769
+ client_assertion: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1770
+ client_assertion_type: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1771
+ code: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1772
+ code_verifier: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1773
+ redirect_uri: import("better-auth").ZodOptional<import("better-auth").ZodURL>;
1774
+ refresh_token: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1775
+ resource: import("better-auth").ZodOptional<import("better-auth").ZodUnion<readonly [import("better-auth").ZodString, import("better-auth").ZodArray<import("better-auth").ZodString>]>>;
1776
+ scope: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1777
+ }, import("zod/v4/core").$loose>;
1778
+ errorCodesByField: {
1779
+ grant_type: {
1780
+ missing: "invalid_request";
1781
+ invalid: "unsupported_grant_type";
1782
+ };
1783
+ resource: {
1784
+ invalid: "invalid_target";
1785
+ };
1786
+ };
1787
+ metadata: {
1788
+ noStore: boolean;
1789
+ allowedMediaTypes: string[];
1790
+ openapi: {
1791
+ description: string;
1792
+ parameters: {
1793
+ name: string;
1794
+ in: "header";
1795
+ required: false;
1796
+ schema: {
1797
+ type: "string";
1798
+ };
1799
+ description: string;
1800
+ }[];
1801
+ requestBody: {
1802
+ required: boolean;
1803
+ content: {
1804
+ "application/json": {
1805
+ schema: {
1806
+ type: "object";
1807
+ properties: {
1808
+ grant_type: {
1809
+ type: string;
1810
+ description: string;
1811
+ };
1812
+ client_id: {
1813
+ type: string;
1814
+ description: string;
1815
+ };
1816
+ client_secret: {
1817
+ type: string;
1818
+ description: string;
1819
+ };
1820
+ code: {
1821
+ type: string;
1822
+ description: string;
1823
+ };
1824
+ code_verifier: {
1825
+ type: string;
1826
+ description: string;
1827
+ };
1828
+ redirect_uri: {
1829
+ type: string;
1830
+ format: string;
1831
+ description: string;
1832
+ };
1833
+ refresh_token: {
1834
+ type: string;
1835
+ description: string;
1836
+ };
1837
+ resource: {
1838
+ oneOf: ({
1839
+ type: string;
1840
+ description: string;
1841
+ items?: undefined;
1842
+ } | {
1843
+ type: string;
1844
+ items: {
1845
+ type: string;
1846
+ };
1847
+ description: string;
1848
+ })[];
1849
+ description: string;
1850
+ };
1851
+ scope: {
1852
+ type: string;
1853
+ description: string;
1854
+ };
1855
+ };
1856
+ required: string[];
1857
+ };
1858
+ };
1859
+ };
1860
+ };
1861
+ responses: {
1862
+ "200": {
1863
+ description: string;
1864
+ content: {
1865
+ "application/json": {
1866
+ schema: {
1867
+ type: "object";
1868
+ properties: {
1869
+ access_token: {
1870
+ type: string;
1871
+ description: string;
1872
+ };
1873
+ token_type: {
1874
+ type: string;
1875
+ description: string;
1876
+ enum: string[];
1877
+ };
1878
+ expires_in: {
1879
+ type: string;
1880
+ description: string;
1881
+ };
1882
+ refresh_token: {
1883
+ type: string;
1884
+ description: string;
1885
+ };
1886
+ scope: {
1887
+ type: string;
1888
+ description: string;
1889
+ };
1890
+ id_token: {
1891
+ type: string;
1892
+ description: string;
1893
+ };
1894
+ };
1895
+ required: string[];
1896
+ };
1897
+ };
1898
+ };
1899
+ };
1900
+ "400": {
1901
+ description: string;
1902
+ content: {
1903
+ "application/json": {
1904
+ schema: {
1905
+ type: "object";
1906
+ properties: {
1907
+ error: {
1908
+ type: string;
1909
+ };
1910
+ error_description: {
1911
+ type: string;
1912
+ };
1913
+ error_uri: {
1914
+ type: string;
1915
+ };
1916
+ };
1917
+ required: string[];
1918
+ };
1919
+ };
1920
+ };
1921
+ };
1922
+ };
1923
+ };
1924
+ };
1925
+ }, {
1926
+ expires_in: number;
1927
+ access_token: string;
1928
+ expires_at: number;
1929
+ token_type: import("@better-auth/oauth-provider").TokenType;
1930
+ refresh_token: string | undefined;
1931
+ scope: string;
1932
+ id_token: string | undefined;
1933
+ }>;
1934
+ oauth2Introspect: import("better-auth").StrictEndpoint<"/oauth2/introspect", {
1935
+ method: "POST";
1936
+ cloneRequest: true;
1937
+ body: import("better-auth").ZodObject<{
1938
+ client_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1939
+ client_secret: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1940
+ client_assertion: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1941
+ client_assertion_type: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1942
+ token: import("better-auth").ZodString;
1943
+ token_type_hint: import("better-auth").ZodOptional<import("better-auth").ZodString>;
1944
+ }, import("zod/v4/core").$strip>;
1945
+ metadata: {
1946
+ noStore: boolean;
1947
+ allowedMediaTypes: string[];
1948
+ openapi: {
1949
+ description: string;
1950
+ requestBody: {
1951
+ required: boolean;
1952
+ content: {
1953
+ "application/json": {
1954
+ schema: {
1955
+ type: "object";
1956
+ properties: {
1957
+ client_id: {
1958
+ type: string;
1959
+ description: string;
1960
+ };
1961
+ client_secret: {
1962
+ type: string;
1963
+ description: string;
1964
+ };
1965
+ token: {
1966
+ type: string;
1967
+ description: string;
1968
+ };
1969
+ token_type_hint: {
1970
+ type: string;
1971
+ description: string;
1972
+ };
1973
+ };
1974
+ required: string[];
1975
+ };
1976
+ };
1977
+ };
1978
+ };
1979
+ responses: {
1980
+ "200": {
1981
+ description: string;
1982
+ content: {
1983
+ "application/json": {
1984
+ schema: {
1985
+ type: "object";
1986
+ properties: {
1987
+ active: {
1988
+ type: string;
1989
+ description: string;
1990
+ };
1991
+ scope: {
1992
+ type: string;
1993
+ description: string;
1994
+ };
1995
+ client_id: {
1996
+ type: string;
1997
+ description: string;
1998
+ };
1999
+ username: {
2000
+ type: string;
2001
+ description: string;
2002
+ };
2003
+ token_type: {
2004
+ type: string;
2005
+ description: string;
2006
+ };
2007
+ exp: {
2008
+ type: string;
2009
+ description: string;
2010
+ };
2011
+ iat: {
2012
+ type: string;
2013
+ description: string;
2014
+ };
2015
+ nbf: {
2016
+ type: string;
2017
+ description: string;
2018
+ };
2019
+ sub: {
2020
+ type: string;
2021
+ description: string;
2022
+ };
2023
+ aud: {
2024
+ type: string;
2025
+ description: string;
2026
+ };
2027
+ iss: {
2028
+ type: string;
2029
+ description: string;
2030
+ };
2031
+ jti: {
2032
+ type: string;
2033
+ description: string;
2034
+ };
2035
+ };
2036
+ required: string[];
2037
+ };
2038
+ };
2039
+ };
2040
+ };
2041
+ "400": {
2042
+ description: string;
2043
+ content: {
2044
+ "application/json": {
2045
+ schema: {
2046
+ type: "object";
2047
+ properties: {
2048
+ error: {
2049
+ type: string;
2050
+ };
2051
+ error_description: {
2052
+ type: string;
2053
+ };
2054
+ error_uri: {
2055
+ type: string;
2056
+ };
2057
+ };
2058
+ required: string[];
2059
+ };
2060
+ };
2061
+ };
2062
+ };
2063
+ };
2064
+ };
2065
+ };
2066
+ }, import("better-auth").JWTPayload>;
2067
+ oauth2Revoke: import("better-auth").StrictEndpoint<"/oauth2/revoke", {
2068
+ method: "POST";
2069
+ cloneRequest: true;
2070
+ body: import("better-auth").ZodObject<{
2071
+ client_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2072
+ client_secret: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2073
+ client_assertion: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2074
+ client_assertion_type: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2075
+ token: import("better-auth").ZodString;
2076
+ token_type_hint: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2077
+ }, import("zod/v4/core").$strip>;
2078
+ metadata: {
2079
+ allowedMediaTypes: string[];
2080
+ openapi: {
2081
+ description: string;
2082
+ requestBody: {
2083
+ required: boolean;
2084
+ content: {
2085
+ "application/json": {
2086
+ schema: {
2087
+ type: "object";
2088
+ properties: {
2089
+ client_id: {
2090
+ type: string;
2091
+ description: string;
2092
+ };
2093
+ client_secret: {
2094
+ type: string;
2095
+ description: string;
2096
+ };
2097
+ token: {
2098
+ type: string;
2099
+ description: string;
2100
+ };
2101
+ token_type_hint: {
2102
+ type: string;
2103
+ description: string;
2104
+ };
2105
+ };
2106
+ required: string[];
2107
+ };
2108
+ };
2109
+ };
2110
+ };
2111
+ responses: {
2112
+ "200": {
2113
+ description: string;
2114
+ content: {
2115
+ "application/json": {
2116
+ schema: {
2117
+ type: "object";
2118
+ description: string;
2119
+ };
2120
+ };
2121
+ };
2122
+ };
2123
+ "400": {
2124
+ description: string;
2125
+ content: {
2126
+ "application/json": {
2127
+ schema: {
2128
+ type: "object";
2129
+ properties: {
2130
+ error: {
2131
+ type: string;
2132
+ };
2133
+ error_description: {
2134
+ type: string;
2135
+ };
2136
+ error_uri: {
2137
+ type: string;
2138
+ };
2139
+ };
2140
+ required: string[];
2141
+ };
2142
+ };
2143
+ };
2144
+ };
2145
+ };
2146
+ };
2147
+ };
2148
+ }, null | undefined>;
2149
+ oauth2UserInfo: import("better-auth").StrictEndpoint<"/oauth2/userinfo", {
2150
+ method: ("GET" | "POST")[];
2151
+ body: import("better-auth").ZodOptional<import("better-auth").ZodObject<{
2152
+ access_token: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2153
+ }, import("zod/v4/core").$loose>>;
2154
+ metadata: {
2155
+ noStore: boolean;
2156
+ allowedMediaTypes: string[];
2157
+ openapi: {
2158
+ description: string;
2159
+ security: ({
2160
+ bearerAuth: never[];
2161
+ OAuth2?: undefined;
2162
+ } | {
2163
+ OAuth2: string[];
2164
+ bearerAuth?: undefined;
2165
+ })[];
2166
+ parameters: {
2167
+ name: string;
2168
+ in: "header";
2169
+ required: false;
2170
+ schema: {
2171
+ type: "string";
2172
+ };
2173
+ description: string;
2174
+ }[];
2175
+ responses: {
2176
+ "200": {
2177
+ description: string;
2178
+ content: {
2179
+ "application/json": {
2180
+ schema: {
2181
+ type: "object";
2182
+ properties: {
2183
+ sub: {
2184
+ type: string;
2185
+ description: string;
2186
+ };
2187
+ email: {
2188
+ type: string;
2189
+ format: string;
2190
+ nullable: boolean;
2191
+ description: string;
2192
+ };
2193
+ name: {
2194
+ type: string;
2195
+ nullable: boolean;
2196
+ description: string;
2197
+ };
2198
+ picture: {
2199
+ type: string;
2200
+ format: string;
2201
+ nullable: boolean;
2202
+ description: string;
2203
+ };
2204
+ given_name: {
2205
+ type: string;
2206
+ nullable: boolean;
2207
+ description: string;
2208
+ };
2209
+ family_name: {
2210
+ type: string;
2211
+ nullable: boolean;
2212
+ description: string;
2213
+ };
2214
+ email_verified: {
2215
+ type: string;
2216
+ nullable: boolean;
2217
+ description: string;
2218
+ };
2219
+ };
2220
+ required: string[];
2221
+ };
2222
+ };
2223
+ };
2224
+ };
2225
+ "401": {
2226
+ description: string;
2227
+ content: {
2228
+ "application/json": {
2229
+ schema: {
2230
+ type: "object";
2231
+ properties: {
2232
+ error: {
2233
+ type: string;
2234
+ };
2235
+ error_description: {
2236
+ type: string;
2237
+ };
2238
+ };
2239
+ required: string[];
2240
+ };
2241
+ };
2242
+ };
2243
+ };
2244
+ "403": {
2245
+ description: string;
2246
+ content: {
2247
+ "application/json": {
2248
+ schema: {
2249
+ type: "object";
2250
+ properties: {
2251
+ error: {
2252
+ type: string;
2253
+ };
2254
+ error_description: {
2255
+ type: string;
2256
+ };
2257
+ };
2258
+ required: string[];
2259
+ };
2260
+ };
2261
+ };
2262
+ };
2263
+ };
2264
+ };
2265
+ };
2266
+ }, {
2267
+ sub: unknown;
2268
+ }>;
2269
+ oauth2EndSession: import("better-auth").StrictEndpoint<"/oauth2/end-session", {
2270
+ method: ("GET" | "POST")[];
2271
+ body: import("better-auth").ZodOptional<import("better-auth").ZodObject<{
2272
+ id_token_hint: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2273
+ client_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2274
+ post_logout_redirect_uri: import("better-auth").ZodOptional<import("better-auth").ZodURL>;
2275
+ state: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2276
+ }, import("zod/v4/core").$strip>>;
2277
+ query: import("better-auth").ZodOptional<import("better-auth").ZodObject<{
2278
+ id_token_hint: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2279
+ client_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2280
+ post_logout_redirect_uri: import("better-auth").ZodOptional<import("better-auth").ZodURL>;
2281
+ state: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2282
+ }, import("zod/v4/core").$strip>>;
2283
+ metadata: {
2284
+ noStore: boolean;
2285
+ allowedMediaTypes: string[];
2286
+ $Infer: {
2287
+ body: {
2288
+ id_token_hint?: string;
2289
+ client_id?: string;
2290
+ post_logout_redirect_uri?: string;
2291
+ state?: string;
2292
+ } | {
2293
+ query: {
2294
+ id_token_hint?: string;
2295
+ client_id?: string;
2296
+ post_logout_redirect_uri?: string;
2297
+ state?: string;
2298
+ };
2299
+ };
2300
+ query: {
2301
+ id_token_hint?: string;
2302
+ client_id?: string;
2303
+ post_logout_redirect_uri?: string;
2304
+ state?: string;
2305
+ };
2306
+ };
2307
+ openapi: {
2308
+ description: string;
2309
+ responses: {
2310
+ "200": {
2311
+ description: string;
2312
+ content: {
2313
+ "application/json": {
2314
+ schema: {
2315
+ type: "object";
2316
+ properties: {
2317
+ redirect_uri: {
2318
+ type: string;
2319
+ format: string;
2320
+ description: string;
2321
+ };
2322
+ message: {
2323
+ type: string;
2324
+ description: string;
2325
+ };
2326
+ };
2327
+ };
2328
+ };
2329
+ "text/html": {
2330
+ schema: {
2331
+ type: "string";
2332
+ };
2333
+ };
2334
+ };
2335
+ };
2336
+ };
2337
+ };
2338
+ };
2339
+ }, Response | {
2340
+ redirect: true;
2341
+ url: string;
2342
+ } | null>;
2343
+ oauth2EndSessionConfirmation: import("better-auth").StrictEndpoint<"/oauth2/end-session/confirm", {
2344
+ method: "POST";
2345
+ body: import("better-auth").ZodObject<{
2346
+ action: import("better-auth").ZodLiteral<"confirm">;
2347
+ }, import("zod/v4/core").$strip>;
2348
+ metadata: {
2349
+ noStore: boolean;
2350
+ allowedMediaTypes: string[];
2351
+ scope: "http";
2352
+ };
2353
+ }, Response | {
2354
+ redirect: true;
2355
+ url: string;
2356
+ } | null>;
2357
+ registerOAuthClient: import("better-auth").StrictEndpoint<"/oauth2/register", {
2358
+ method: "POST";
2359
+ body: import("better-auth").ZodObject<{
2360
+ redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
2361
+ scope: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2362
+ client_name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2363
+ client_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2364
+ logo_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2365
+ contacts: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2366
+ tos_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2367
+ policy_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2368
+ software_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2369
+ software_version: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2370
+ software_statement: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2371
+ post_logout_redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
2372
+ backchannel_logout_uri: import("better-auth").ZodOptional<import("better-auth").ZodURL>;
2373
+ backchannel_logout_session_required: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2374
+ token_endpoint_auth_method: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2375
+ jwks: import("better-auth").ZodOptional<import("better-auth").ZodObject<{
2376
+ keys: import("better-auth").ZodArray<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>>;
2377
+ }, import("zod/v4/core").$strip>>;
2378
+ jwks_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2379
+ grant_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2380
+ response_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodEnum<{
2381
+ code: "code";
2382
+ }>>>;
2383
+ application_type: import("better-auth").ZodOptional<import("better-auth").ZodEnum<{
2384
+ web: "web";
2385
+ native: "native";
2386
+ }>>;
2387
+ subject_type: import("better-auth").ZodOptional<import("better-auth").ZodEnum<{
2388
+ public: "public";
2389
+ pairwise: "pairwise";
2390
+ }>>;
2391
+ dpop_bound_access_tokens: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2392
+ resources: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2393
+ skip_consent: import("better-auth").ZodOptional<import("better-auth").ZodNever>;
2394
+ }, import("zod/v4/core").$strip>;
2395
+ errorCodesByField: {
2396
+ redirect_uris: "invalid_redirect_uri";
2397
+ post_logout_redirect_uris: "invalid_redirect_uri";
2398
+ software_statement: "invalid_software_statement";
2399
+ resources: "invalid_target";
2400
+ };
2401
+ defaultError: "invalid_client_metadata";
2402
+ metadata: {
2403
+ noStore: boolean;
2404
+ openapi: {
2405
+ description: string;
2406
+ responses: {
2407
+ "201": {
2408
+ description: string;
2409
+ content: {
2410
+ "application/json": {
2411
+ schema: {
2412
+ type: "object";
2413
+ properties: {
2414
+ client_id: {
2415
+ type: string;
2416
+ description: string;
2417
+ };
2418
+ client_secret: {
2419
+ type: string;
2420
+ description: string;
2421
+ };
2422
+ client_secret_expires_at: {
2423
+ type: string;
2424
+ description: string;
2425
+ };
2426
+ scope: {
2427
+ type: string;
2428
+ description: string;
2429
+ };
2430
+ user_id: {
2431
+ type: string;
2432
+ description: string;
2433
+ };
2434
+ client_id_issued_at: {
2435
+ type: string;
2436
+ description: string;
2437
+ };
2438
+ client_name: {
2439
+ type: string;
2440
+ description: string;
2441
+ };
2442
+ client_uri: {
2443
+ type: string;
2444
+ description: string;
2445
+ };
2446
+ logo_uri: {
2447
+ type: string;
2448
+ description: string;
2449
+ };
2450
+ contacts: {
2451
+ type: string;
2452
+ items: {
2453
+ type: string;
2454
+ };
2455
+ description: string;
2456
+ };
2457
+ tos_uri: {
2458
+ type: string;
2459
+ description: string;
2460
+ };
2461
+ policy_uri: {
2462
+ type: string;
2463
+ description: string;
2464
+ };
2465
+ software_id: {
2466
+ type: string;
2467
+ description: string;
2468
+ };
2469
+ software_version: {
2470
+ type: string;
2471
+ description: string;
2472
+ };
2473
+ software_statement: {
2474
+ type: string;
2475
+ description: string;
2476
+ };
2477
+ redirect_uris: {
2478
+ type: string;
2479
+ items: {
2480
+ type: string;
2481
+ format: string;
2482
+ };
2483
+ description: string;
2484
+ };
2485
+ post_logout_redirect_uris: {
2486
+ type: string;
2487
+ items: {
2488
+ type: string;
2489
+ format: string;
2490
+ };
2491
+ description: string;
2492
+ };
2493
+ backchannel_logout_uri: {
2494
+ type: string;
2495
+ format: string;
2496
+ description: string;
2497
+ };
2498
+ backchannel_logout_session_required: {
2499
+ type: string;
2500
+ description: string;
2501
+ };
2502
+ token_endpoint_auth_method: {
2503
+ type: string;
2504
+ description: string;
2505
+ };
2506
+ grant_types: {
2507
+ type: string;
2508
+ items: {
2509
+ type: string;
2510
+ };
2511
+ description: string;
2512
+ };
2513
+ response_types: {
2514
+ type: string;
2515
+ items: {
2516
+ type: string;
2517
+ enum: string[];
2518
+ };
2519
+ description: string;
2520
+ };
2521
+ application_type: {
2522
+ type: string;
2523
+ description: string;
2524
+ enum: string[];
2525
+ };
2526
+ resources: {
2527
+ type: string;
2528
+ items: {
2529
+ type: string;
2530
+ format: string;
2531
+ };
2532
+ description: string;
2533
+ };
2534
+ disabled: {
2535
+ type: string;
2536
+ description: string;
2537
+ };
2538
+ };
2539
+ required: string[];
2540
+ };
2541
+ };
2542
+ };
2543
+ };
2544
+ };
2545
+ };
2546
+ };
2547
+ }, import("@better-auth/oauth-provider").OAuthClientRegistrationResponse>;
2548
+ adminCreateOAuthClient: import("better-auth").StrictEndpoint<"/admin/oauth2/create-client", {
2549
+ method: "POST";
2550
+ body: import("better-auth").ZodObject<{
2551
+ redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
2552
+ scope: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2553
+ client_name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2554
+ client_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2555
+ logo_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2556
+ contacts: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2557
+ tos_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2558
+ policy_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2559
+ software_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2560
+ software_version: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2561
+ software_statement: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2562
+ post_logout_redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
2563
+ backchannel_logout_uri: import("better-auth").ZodOptional<import("better-auth").ZodURL>;
2564
+ backchannel_logout_session_required: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2565
+ token_endpoint_auth_method: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2566
+ application_type: import("better-auth").ZodOptional<import("better-auth").ZodEnum<{
2567
+ web: "web";
2568
+ native: "native";
2569
+ }>>;
2570
+ jwks: import("better-auth").ZodOptional<import("better-auth").ZodObject<{
2571
+ keys: import("better-auth").ZodArray<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>>;
2572
+ }, import("zod/v4/core").$strip>>;
2573
+ jwks_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2574
+ grant_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2575
+ client_credentials_scopes: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2576
+ resources: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2577
+ response_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodEnum<{
2578
+ code: "code";
2579
+ }>>>;
2580
+ client_secret_expires_at: import("better-auth").ZodDefault<import("better-auth").ZodOptional<import("better-auth").ZodUnion<readonly [import("better-auth").ZodString, import("better-auth").ZodNumber]>>>;
2581
+ skip_consent: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2582
+ enable_end_session: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2583
+ require_pkce: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2584
+ dpop_bound_access_tokens: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2585
+ subject_type: import("better-auth").ZodOptional<import("better-auth").ZodEnum<{
2586
+ public: "public";
2587
+ pairwise: "pairwise";
2588
+ }>>;
2589
+ metadata: import("better-auth").ZodOptional<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>>;
2590
+ }, import("zod/v4/core").$strip>;
2591
+ metadata: {
2592
+ noStore: boolean;
2593
+ SERVER_ONLY: true;
2594
+ openapi: {
2595
+ description: string;
2596
+ responses: {
2597
+ "201": {
2598
+ description: string;
2599
+ content: {
2600
+ "application/json": {
2601
+ schema: {
2602
+ type: "object";
2603
+ properties: {
2604
+ client_id: {
2605
+ type: string;
2606
+ description: string;
2607
+ };
2608
+ client_secret: {
2609
+ type: string;
2610
+ description: string;
2611
+ };
2612
+ client_secret_expires_at: {
2613
+ type: string;
2614
+ description: string;
2615
+ };
2616
+ scope: {
2617
+ type: string;
2618
+ description: string;
2619
+ };
2620
+ client_credentials_scopes: {
2621
+ type: string;
2622
+ items: {
2623
+ type: string;
2624
+ };
2625
+ description: string;
2626
+ };
2627
+ user_id: {
2628
+ type: string;
2629
+ description: string;
2630
+ };
2631
+ client_id_issued_at: {
2632
+ type: string;
2633
+ description: string;
2634
+ };
2635
+ client_name: {
2636
+ type: string;
2637
+ description: string;
2638
+ };
2639
+ client_uri: {
2640
+ type: string;
2641
+ description: string;
2642
+ };
2643
+ logo_uri: {
2644
+ type: string;
2645
+ description: string;
2646
+ };
2647
+ contacts: {
2648
+ type: string;
2649
+ items: {
2650
+ type: string;
2651
+ };
2652
+ description: string;
2653
+ };
2654
+ tos_uri: {
2655
+ type: string;
2656
+ description: string;
2657
+ };
2658
+ policy_uri: {
2659
+ type: string;
2660
+ description: string;
2661
+ };
2662
+ software_id: {
2663
+ type: string;
2664
+ description: string;
2665
+ };
2666
+ software_version: {
2667
+ type: string;
2668
+ description: string;
2669
+ };
2670
+ software_statement: {
2671
+ type: string;
2672
+ description: string;
2673
+ };
2674
+ redirect_uris: {
2675
+ type: string;
2676
+ items: {
2677
+ type: string;
2678
+ format: string;
2679
+ };
2680
+ description: string;
2681
+ };
2682
+ token_endpoint_auth_method: {
2683
+ type: string;
2684
+ description: string;
2685
+ };
2686
+ grant_types: {
2687
+ type: string;
2688
+ items: {
2689
+ type: string;
2690
+ };
2691
+ description: string;
2692
+ };
2693
+ response_types: {
2694
+ type: string;
2695
+ items: {
2696
+ type: string;
2697
+ enum: string[];
2698
+ };
2699
+ description: string;
2700
+ };
2701
+ application_type: {
2702
+ type: string;
2703
+ description: string;
2704
+ enum: string[];
2705
+ };
2706
+ resources: {
2707
+ type: string;
2708
+ items: {
2709
+ type: string;
2710
+ format: string;
2711
+ };
2712
+ description: string;
2713
+ };
2714
+ disabled: {
2715
+ type: string;
2716
+ description: string;
2717
+ };
2718
+ require_pkce: {
2719
+ type: string;
2720
+ description: string;
2721
+ default: boolean;
2722
+ };
2723
+ metadata: {
2724
+ type: string;
2725
+ additionalProperties: boolean;
2726
+ nullable: boolean;
2727
+ description: string;
2728
+ };
2729
+ };
2730
+ required: string[];
2731
+ };
2732
+ };
2733
+ };
2734
+ };
2735
+ };
2736
+ };
2737
+ };
2738
+ }, import("@better-auth/oauth-provider").OAuthClientAdministrativeResponse>;
2739
+ createOAuthClient: import("better-auth").StrictEndpoint<"/oauth2/create-client", {
2740
+ method: "POST";
2741
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
2742
+ session: {
2743
+ session: Record<string, any> & {
2744
+ id: string;
2745
+ createdAt: Date;
2746
+ updatedAt: Date;
2747
+ userId: string;
2748
+ expiresAt: Date;
2749
+ token: string;
2750
+ ipAddress?: string | null | undefined;
2751
+ userAgent?: string | null | undefined;
2752
+ };
2753
+ user: Record<string, any> & {
2754
+ id: string;
2755
+ createdAt: Date;
2756
+ updatedAt: Date;
2757
+ email: string;
2758
+ emailVerified: boolean;
2759
+ name: string;
2760
+ image?: string | null | undefined;
2761
+ };
2762
+ };
2763
+ }>>[];
2764
+ body: import("better-auth").ZodObject<{
2765
+ redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
2766
+ scope: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2767
+ client_name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2768
+ client_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2769
+ logo_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2770
+ contacts: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2771
+ tos_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2772
+ policy_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2773
+ software_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2774
+ software_version: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2775
+ software_statement: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2776
+ post_logout_redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
2777
+ backchannel_logout_uri: import("better-auth").ZodOptional<import("better-auth").ZodURL>;
2778
+ backchannel_logout_session_required: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2779
+ token_endpoint_auth_method: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2780
+ application_type: import("better-auth").ZodOptional<import("better-auth").ZodEnum<{
2781
+ web: "web";
2782
+ native: "native";
2783
+ }>>;
2784
+ jwks: import("better-auth").ZodOptional<import("better-auth").ZodObject<{
2785
+ keys: import("better-auth").ZodArray<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>>;
2786
+ }, import("zod/v4/core").$strip>>;
2787
+ jwks_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
2788
+ grant_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
2789
+ response_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodEnum<{
2790
+ code: "code";
2791
+ }>>>;
2792
+ dpop_bound_access_tokens: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
2793
+ }, import("zod/v4/core").$strip>;
2794
+ metadata: {
2795
+ noStore: boolean;
2796
+ openapi: {
2797
+ description: string;
2798
+ responses: {
2799
+ "201": {
2800
+ description: string;
2801
+ content: {
2802
+ "application/json": {
2803
+ schema: {
2804
+ type: "object";
2805
+ properties: {
2806
+ client_id: {
2807
+ type: string;
2808
+ description: string;
2809
+ };
2810
+ client_secret: {
2811
+ type: string;
2812
+ description: string;
2813
+ };
2814
+ client_secret_expires_at: {
2815
+ type: string;
2816
+ description: string;
2817
+ };
2818
+ scope: {
2819
+ type: string;
2820
+ description: string;
2821
+ };
2822
+ user_id: {
2823
+ type: string;
2824
+ description: string;
2825
+ };
2826
+ client_id_issued_at: {
2827
+ type: string;
2828
+ description: string;
2829
+ };
2830
+ client_name: {
2831
+ type: string;
2832
+ description: string;
2833
+ };
2834
+ client_uri: {
2835
+ type: string;
2836
+ description: string;
2837
+ };
2838
+ logo_uri: {
2839
+ type: string;
2840
+ description: string;
2841
+ };
2842
+ contacts: {
2843
+ type: string;
2844
+ items: {
2845
+ type: string;
2846
+ };
2847
+ description: string;
2848
+ };
2849
+ tos_uri: {
2850
+ type: string;
2851
+ description: string;
2852
+ };
2853
+ policy_uri: {
2854
+ type: string;
2855
+ description: string;
2856
+ };
2857
+ software_id: {
2858
+ type: string;
2859
+ description: string;
2860
+ };
2861
+ software_version: {
2862
+ type: string;
2863
+ description: string;
2864
+ };
2865
+ software_statement: {
2866
+ type: string;
2867
+ description: string;
2868
+ };
2869
+ redirect_uris: {
2870
+ type: string;
2871
+ items: {
2872
+ type: string;
2873
+ format: string;
2874
+ };
2875
+ description: string;
2876
+ };
2877
+ token_endpoint_auth_method: {
2878
+ type: string;
2879
+ description: string;
2880
+ };
2881
+ grant_types: {
2882
+ type: string;
2883
+ items: {
2884
+ type: string;
2885
+ };
2886
+ description: string;
2887
+ };
2888
+ response_types: {
2889
+ type: string;
2890
+ items: {
2891
+ type: string;
2892
+ enum: string[];
2893
+ };
2894
+ description: string;
2895
+ };
2896
+ application_type: {
2897
+ type: string;
2898
+ description: string;
2899
+ enum: string[];
2900
+ };
2901
+ resources: {
2902
+ type: string;
2903
+ items: {
2904
+ type: string;
2905
+ format: string;
2906
+ };
2907
+ description: string;
2908
+ };
2909
+ disabled: {
2910
+ type: string;
2911
+ description: string;
2912
+ };
2913
+ metadata: {
2914
+ type: string;
2915
+ additionalProperties: boolean;
2916
+ nullable: boolean;
2917
+ description: string;
2918
+ };
2919
+ };
2920
+ required: string[];
2921
+ };
2922
+ };
2923
+ };
2924
+ };
2925
+ };
2926
+ };
2927
+ };
2928
+ }, import("@better-auth/oauth-provider").OAuthClientRegistrationResponse>;
2929
+ getOAuthClient: import("better-auth").StrictEndpoint<"/oauth2/get-client", {
2930
+ method: "GET";
2931
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
2932
+ session: {
2933
+ session: Record<string, any> & {
2934
+ id: string;
2935
+ createdAt: Date;
2936
+ updatedAt: Date;
2937
+ userId: string;
2938
+ expiresAt: Date;
2939
+ token: string;
2940
+ ipAddress?: string | null | undefined;
2941
+ userAgent?: string | null | undefined;
2942
+ };
2943
+ user: Record<string, any> & {
2944
+ id: string;
2945
+ createdAt: Date;
2946
+ updatedAt: Date;
2947
+ email: string;
2948
+ emailVerified: boolean;
2949
+ name: string;
2950
+ image?: string | null | undefined;
2951
+ };
2952
+ };
2953
+ }>>[];
2954
+ query: import("better-auth").ZodObject<{
2955
+ client_id: import("better-auth").ZodString;
2956
+ }, import("zod/v4/core").$strip>;
2957
+ metadata: {
2958
+ openapi: {
2959
+ description: string;
2960
+ };
2961
+ };
2962
+ }, import("@better-auth/oauth-provider").OAuthClient>;
2963
+ getOAuthClientPublic: import("better-auth").StrictEndpoint<"/oauth2/public-client", {
2964
+ method: "GET";
2965
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
2966
+ session: {
2967
+ session: Record<string, any> & {
2968
+ id: string;
2969
+ createdAt: Date;
2970
+ updatedAt: Date;
2971
+ userId: string;
2972
+ expiresAt: Date;
2973
+ token: string;
2974
+ ipAddress?: string | null | undefined;
2975
+ userAgent?: string | null | undefined;
2976
+ };
2977
+ user: Record<string, any> & {
2978
+ id: string;
2979
+ createdAt: Date;
2980
+ updatedAt: Date;
2981
+ email: string;
2982
+ emailVerified: boolean;
2983
+ name: string;
2984
+ image?: string | null | undefined;
2985
+ };
2986
+ };
2987
+ }>>[];
2988
+ query: import("better-auth").ZodObject<{
2989
+ client_id: import("better-auth").ZodString;
2990
+ }, import("zod/v4/core").$strip>;
2991
+ metadata: {
2992
+ openapi: {
2993
+ description: string;
2994
+ };
2995
+ };
2996
+ }, import("@better-auth/oauth-provider").OAuthClient>;
2997
+ getOAuthClientPublicPrelogin: import("better-auth").StrictEndpoint<"/oauth2/public-client-prelogin", {
2998
+ method: "POST";
2999
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>[];
3000
+ body: import("better-auth").ZodObject<{
3001
+ client_id: import("better-auth").ZodString;
3002
+ oauth_query: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3003
+ }, import("zod/v4/core").$strip>;
3004
+ metadata: {
3005
+ openapi: {
3006
+ description: string;
3007
+ };
3008
+ };
3009
+ }, import("@better-auth/oauth-provider").OAuthClient>;
3010
+ getOAuthClients: import("better-auth").StrictEndpoint<"/oauth2/get-clients", {
3011
+ method: "GET";
3012
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
3013
+ session: {
3014
+ session: Record<string, any> & {
3015
+ id: string;
3016
+ createdAt: Date;
3017
+ updatedAt: Date;
3018
+ userId: string;
3019
+ expiresAt: Date;
3020
+ token: string;
3021
+ ipAddress?: string | null | undefined;
3022
+ userAgent?: string | null | undefined;
3023
+ };
3024
+ user: Record<string, any> & {
3025
+ id: string;
3026
+ createdAt: Date;
3027
+ updatedAt: Date;
3028
+ email: string;
3029
+ emailVerified: boolean;
3030
+ name: string;
3031
+ image?: string | null | undefined;
3032
+ };
3033
+ };
3034
+ }>>[];
3035
+ metadata: {
3036
+ openapi: {
3037
+ description: string;
3038
+ };
3039
+ };
3040
+ }, import("@better-auth/oauth-provider").OAuthClient[] | null>;
3041
+ adminUpdateOAuthClient: import("better-auth").StrictEndpoint<"/admin/oauth2/update-client", {
3042
+ method: "PATCH";
3043
+ body: import("better-auth").ZodObject<{
3044
+ client_id: import("better-auth").ZodString;
3045
+ update: import("better-auth").ZodObject<{
3046
+ redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
3047
+ scope: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3048
+ client_name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3049
+ client_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3050
+ logo_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3051
+ contacts: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
3052
+ tos_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3053
+ policy_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3054
+ software_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3055
+ software_version: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3056
+ software_statement: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3057
+ post_logout_redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
3058
+ backchannel_logout_uri: import("better-auth").ZodOptional<import("better-auth").ZodURL>;
3059
+ backchannel_logout_session_required: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
3060
+ application_type: import("better-auth").ZodOptional<import("better-auth").ZodEnum<{
3061
+ web: "web";
3062
+ native: "native";
3063
+ }>>;
3064
+ grant_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
3065
+ client_credentials_scopes: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
3066
+ response_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodEnum<{
3067
+ code: "code";
3068
+ }>>>;
3069
+ client_secret_expires_at: import("better-auth").ZodOptional<import("better-auth").ZodUnion<readonly [import("better-auth").ZodString, import("better-auth").ZodNumber]>>;
3070
+ skip_consent: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
3071
+ enable_end_session: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
3072
+ disabled: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
3073
+ dpop_bound_access_tokens: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
3074
+ metadata: import("better-auth").ZodOptional<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>>;
3075
+ }, import("zod/v4/core").$strip>;
3076
+ }, import("zod/v4/core").$strip>;
3077
+ metadata: {
3078
+ SERVER_ONLY: true;
3079
+ openapi: {
3080
+ description: string;
3081
+ };
3082
+ };
3083
+ }, import("@better-auth/oauth-provider").OAuthClientAdministrativeResponse>;
3084
+ updateOAuthClient: import("better-auth").StrictEndpoint<"/oauth2/update-client", {
3085
+ method: "POST";
3086
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
3087
+ session: {
3088
+ session: Record<string, any> & {
3089
+ id: string;
3090
+ createdAt: Date;
3091
+ updatedAt: Date;
3092
+ userId: string;
3093
+ expiresAt: Date;
3094
+ token: string;
3095
+ ipAddress?: string | null | undefined;
3096
+ userAgent?: string | null | undefined;
3097
+ };
3098
+ user: Record<string, any> & {
3099
+ id: string;
3100
+ createdAt: Date;
3101
+ updatedAt: Date;
3102
+ email: string;
3103
+ emailVerified: boolean;
3104
+ name: string;
3105
+ image?: string | null | undefined;
3106
+ };
3107
+ };
3108
+ }>>[];
3109
+ body: import("better-auth").ZodObject<{
3110
+ client_id: import("better-auth").ZodString;
3111
+ update: import("better-auth").ZodObject<{
3112
+ redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
3113
+ scope: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3114
+ client_name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3115
+ client_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3116
+ logo_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3117
+ contacts: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
3118
+ tos_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3119
+ policy_uri: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3120
+ software_id: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3121
+ software_version: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3122
+ software_statement: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3123
+ post_logout_redirect_uris: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodURL>>;
3124
+ backchannel_logout_uri: import("better-auth").ZodOptional<import("better-auth").ZodURL>;
3125
+ backchannel_logout_session_required: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
3126
+ application_type: import("better-auth").ZodOptional<import("better-auth").ZodEnum<{
3127
+ web: "web";
3128
+ native: "native";
3129
+ }>>;
3130
+ grant_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodString>>;
3131
+ response_types: import("better-auth").ZodOptional<import("better-auth").ZodArray<import("better-auth").ZodEnum<{
3132
+ code: "code";
3133
+ }>>>;
3134
+ }, import("zod/v4/core").$strip>;
3135
+ }, import("zod/v4/core").$strip>;
3136
+ metadata: {
3137
+ openapi: {
3138
+ description: string;
3139
+ };
3140
+ };
3141
+ }, import("@better-auth/oauth-provider").OAuthClientRegistrationResponse>;
3142
+ rotateClientSecret: import("better-auth").StrictEndpoint<"/oauth2/client/rotate-secret", {
3143
+ method: "POST";
3144
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
3145
+ session: {
3146
+ session: Record<string, any> & {
3147
+ id: string;
3148
+ createdAt: Date;
3149
+ updatedAt: Date;
3150
+ userId: string;
3151
+ expiresAt: Date;
3152
+ token: string;
3153
+ ipAddress?: string | null | undefined;
3154
+ userAgent?: string | null | undefined;
3155
+ };
3156
+ user: Record<string, any> & {
3157
+ id: string;
3158
+ createdAt: Date;
3159
+ updatedAt: Date;
3160
+ email: string;
3161
+ emailVerified: boolean;
3162
+ name: string;
3163
+ image?: string | null | undefined;
3164
+ };
3165
+ };
3166
+ }>>[];
3167
+ body: import("better-auth").ZodObject<{
3168
+ client_id: import("better-auth").ZodString;
3169
+ }, import("zod/v4/core").$strip>;
3170
+ metadata: {
3171
+ noStore: boolean;
3172
+ openapi: {
3173
+ description: string;
3174
+ };
3175
+ };
3176
+ }, import("@better-auth/oauth-provider").OAuthClient>;
3177
+ rotateClientKeys: import("better-auth").StrictEndpoint<"/oauth2/client/rotate-keys", {
3178
+ method: "POST";
3179
+ body: import("better-auth").ZodObject<{
3180
+ client_assertion: import("better-auth").ZodString;
3181
+ client_assertion_type: import("better-auth").ZodString;
3182
+ jwks: import("better-auth").ZodObject<{
3183
+ keys: import("better-auth").ZodArray<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>>;
3184
+ }, import("zod/v4/core").$strip>;
3185
+ }, import("zod/v4/core").$strip>;
3186
+ errorCodesByField: {
3187
+ client_assertion: "invalid_client";
3188
+ client_assertion_type: "invalid_client";
3189
+ jwks: "invalid_client_metadata";
3190
+ };
3191
+ metadata: {
3192
+ noStore: boolean;
3193
+ openapi: {
3194
+ description: string;
3195
+ };
3196
+ };
3197
+ }, {
3198
+ client_id: string;
3199
+ jwks: {
3200
+ keys: Record<string, unknown>[];
3201
+ };
3202
+ }>;
3203
+ deleteOAuthClient: import("better-auth").StrictEndpoint<"/oauth2/delete-client", {
3204
+ method: "POST";
3205
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
3206
+ session: {
3207
+ session: Record<string, any> & {
3208
+ id: string;
3209
+ createdAt: Date;
3210
+ updatedAt: Date;
3211
+ userId: string;
3212
+ expiresAt: Date;
3213
+ token: string;
3214
+ ipAddress?: string | null | undefined;
3215
+ userAgent?: string | null | undefined;
3216
+ };
3217
+ user: Record<string, any> & {
3218
+ id: string;
3219
+ createdAt: Date;
3220
+ updatedAt: Date;
3221
+ email: string;
3222
+ emailVerified: boolean;
3223
+ name: string;
3224
+ image?: string | null | undefined;
3225
+ };
3226
+ };
3227
+ }>>[];
3228
+ body: import("better-auth").ZodObject<{
3229
+ client_id: import("better-auth").ZodString;
3230
+ }, import("zod/v4/core").$strip>;
3231
+ metadata: {
3232
+ openapi: {
3233
+ description: string;
3234
+ };
3235
+ };
3236
+ }, void>;
3237
+ getOAuthConsent: import("better-auth").StrictEndpoint<"/oauth2/get-consent", {
3238
+ method: "GET";
3239
+ query: import("better-auth").ZodObject<{
3240
+ id: import("better-auth").ZodString;
3241
+ }, import("zod/v4/core").$strip>;
3242
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
3243
+ session: {
3244
+ session: Record<string, any> & {
3245
+ id: string;
3246
+ createdAt: Date;
3247
+ updatedAt: Date;
3248
+ userId: string;
3249
+ expiresAt: Date;
3250
+ token: string;
3251
+ ipAddress?: string | null | undefined;
3252
+ userAgent?: string | null | undefined;
3253
+ };
3254
+ user: Record<string, any> & {
3255
+ id: string;
3256
+ createdAt: Date;
3257
+ updatedAt: Date;
3258
+ email: string;
3259
+ emailVerified: boolean;
3260
+ name: string;
3261
+ image?: string | null | undefined;
3262
+ };
3263
+ };
3264
+ }>>[];
3265
+ metadata: {
3266
+ openapi: {
3267
+ description: string;
3268
+ };
3269
+ };
3270
+ }, import("@better-auth/oauth-provider").OAuthConsent<import("@better-auth/oauth-provider").Scope[]>>;
3271
+ getOAuthConsents: import("better-auth").StrictEndpoint<"/oauth2/get-consents", {
3272
+ method: "GET";
3273
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
3274
+ session: {
3275
+ session: Record<string, any> & {
3276
+ id: string;
3277
+ createdAt: Date;
3278
+ updatedAt: Date;
3279
+ userId: string;
3280
+ expiresAt: Date;
3281
+ token: string;
3282
+ ipAddress?: string | null | undefined;
3283
+ userAgent?: string | null | undefined;
3284
+ };
3285
+ user: Record<string, any> & {
3286
+ id: string;
3287
+ createdAt: Date;
3288
+ updatedAt: Date;
3289
+ email: string;
3290
+ emailVerified: boolean;
3291
+ name: string;
3292
+ image?: string | null | undefined;
3293
+ };
3294
+ };
3295
+ }>>[];
3296
+ metadata: {
3297
+ openapi: {
3298
+ description: string;
3299
+ };
3300
+ };
3301
+ }, import("@better-auth/oauth-provider").OAuthConsent<import("@better-auth/oauth-provider").Scope[]>[]>;
3302
+ updateOAuthConsent: import("better-auth").StrictEndpoint<"/oauth2/update-consent", {
3303
+ method: "POST";
3304
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
3305
+ session: {
3306
+ session: Record<string, any> & {
3307
+ id: string;
3308
+ createdAt: Date;
3309
+ updatedAt: Date;
3310
+ userId: string;
3311
+ expiresAt: Date;
3312
+ token: string;
3313
+ ipAddress?: string | null | undefined;
3314
+ userAgent?: string | null | undefined;
3315
+ };
3316
+ user: Record<string, any> & {
3317
+ id: string;
3318
+ createdAt: Date;
3319
+ updatedAt: Date;
3320
+ email: string;
3321
+ emailVerified: boolean;
3322
+ name: string;
3323
+ image?: string | null | undefined;
3324
+ };
3325
+ };
3326
+ }>>[];
3327
+ body: import("better-auth").ZodObject<{
3328
+ id: import("better-auth").ZodString;
3329
+ update: import("better-auth").ZodObject<{
3330
+ scopes: import("better-auth").ZodArray<import("better-auth").ZodString>;
3331
+ }, import("zod/v4/core").$strip>;
3332
+ }, import("zod/v4/core").$strip>;
3333
+ metadata: {
3334
+ openapi: {
3335
+ description: string;
3336
+ };
3337
+ };
3338
+ }, import("@better-auth/oauth-provider").OAuthConsent<import("@better-auth/oauth-provider").Scope[]> | null>;
3339
+ deleteOAuthConsent: import("better-auth").StrictEndpoint<"/oauth2/delete-consent", {
3340
+ method: "POST";
3341
+ use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
3342
+ session: {
3343
+ session: Record<string, any> & {
3344
+ id: string;
3345
+ createdAt: Date;
3346
+ updatedAt: Date;
3347
+ userId: string;
3348
+ expiresAt: Date;
3349
+ token: string;
3350
+ ipAddress?: string | null | undefined;
3351
+ userAgent?: string | null | undefined;
3352
+ };
3353
+ user: Record<string, any> & {
3354
+ id: string;
3355
+ createdAt: Date;
3356
+ updatedAt: Date;
3357
+ email: string;
3358
+ emailVerified: boolean;
3359
+ name: string;
3360
+ image?: string | null | undefined;
3361
+ };
3362
+ };
3363
+ }>>[];
3364
+ body: import("better-auth").ZodObject<{
3365
+ id: import("better-auth").ZodString;
3366
+ }, import("zod/v4/core").$strip>;
3367
+ metadata: {
3368
+ openapi: {
3369
+ description: string;
3370
+ };
3371
+ };
3372
+ }, void>;
3373
+ adminCreateOAuthResource: import("better-auth").StrictEndpoint<"/admin/oauth2/resources", {
3374
+ method: "POST";
3375
+ body: import("better-auth").ZodObject<{
3376
+ identifier: import("better-auth").ZodNonOptional<import("better-auth").ZodOptional<import("better-auth").ZodString>>;
3377
+ name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3378
+ accessTokenTtl: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodNumber>>;
3379
+ refreshTokenTtl: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodNumber>>;
3380
+ signingAlgorithm: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodEnum<{
3381
+ RS256: "RS256";
3382
+ PS256: "PS256";
3383
+ ES256: "ES256";
3384
+ ES512: "ES512";
3385
+ EdDSA: "EdDSA";
3386
+ }>>>;
3387
+ signingKeyId: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodString>>;
3388
+ allowedScopes: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodArray<import("better-auth").ZodString>>>;
3389
+ customClaims: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>>>;
3390
+ dpopBoundAccessTokensRequired: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
3391
+ disabled: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
3392
+ metadata: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>>>;
3393
+ }, import("zod/v4/core").$strip>;
3394
+ metadata: {
3395
+ SERVER_ONLY: true;
3396
+ };
3397
+ }, import("@better-auth/oauth-provider").OAuthResource>;
3398
+ adminListOAuthResources: import("better-auth").StrictEndpoint<"/admin/oauth2/resources", {
3399
+ method: "GET";
3400
+ metadata: {
3401
+ SERVER_ONLY: true;
3402
+ };
3403
+ }, import("@better-auth/oauth-provider").OAuthResource[]>;
3404
+ adminGetOAuthResource: import("better-auth").StrictEndpoint<"/admin/oauth2/resources/:identifier", {
3405
+ method: "GET";
3406
+ metadata: {
3407
+ SERVER_ONLY: true;
3408
+ };
3409
+ }, import("@better-auth/oauth-provider").OAuthResource>;
3410
+ adminUpdateOAuthResource: import("better-auth").StrictEndpoint<"/admin/oauth2/resources/:identifier", {
3411
+ method: "PATCH";
3412
+ body: import("better-auth").ZodObject<{
3413
+ identifier: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3414
+ name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
3415
+ accessTokenTtl: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodNumber>>;
3416
+ refreshTokenTtl: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodNumber>>;
3417
+ signingAlgorithm: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodEnum<{
3418
+ RS256: "RS256";
3419
+ PS256: "PS256";
3420
+ ES256: "ES256";
3421
+ ES512: "ES512";
3422
+ EdDSA: "EdDSA";
3423
+ }>>>;
3424
+ signingKeyId: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodString>>;
3425
+ allowedScopes: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodArray<import("better-auth").ZodString>>>;
3426
+ customClaims: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>>>;
3427
+ dpopBoundAccessTokensRequired: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
3428
+ disabled: import("better-auth").ZodOptional<import("better-auth").ZodBoolean>;
3429
+ metadata: import("better-auth").ZodOptional<import("better-auth").ZodNullable<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodUnknown>>>;
3430
+ }, import("zod/v4/core").$strip>;
3431
+ metadata: {
3432
+ SERVER_ONLY: true;
3433
+ };
3434
+ }, import("@better-auth/oauth-provider").OAuthResource>;
3435
+ adminDeleteOAuthResource: import("better-auth").StrictEndpoint<"/admin/oauth2/resources/:identifier", {
3436
+ method: "DELETE";
3437
+ metadata: {
3438
+ SERVER_ONLY: true;
3439
+ };
3440
+ }, {
3441
+ deleted: boolean;
3442
+ }>;
3443
+ adminLinkClientResource: import("better-auth").StrictEndpoint<"/admin/oauth2/resources/:identifier/clients/:client_id", {
3444
+ method: "POST";
3445
+ metadata: {
3446
+ SERVER_ONLY: true;
3447
+ };
3448
+ }, {
3449
+ linked: boolean;
3450
+ }>;
3451
+ adminUnlinkClientResource: import("better-auth").StrictEndpoint<"/admin/oauth2/resources/:identifier/clients/:client_id", {
3452
+ method: "DELETE";
3453
+ metadata: {
3454
+ SERVER_ONLY: true;
3455
+ };
3456
+ }, {
3457
+ unlinked: boolean;
3458
+ }>;
3459
+ };
3460
+ schema: {
3461
+ oauthClient: {
3462
+ modelName: string;
3463
+ fields: {
3464
+ clientId: {
3465
+ type: "string";
3466
+ unique: true;
3467
+ required: true;
3468
+ };
3469
+ clientSecret: {
3470
+ type: "string";
3471
+ required: false;
3472
+ };
3473
+ clientDiscoveryId: {
3474
+ type: "string";
3475
+ required: false;
3476
+ };
3477
+ disabled: {
3478
+ type: "boolean";
3479
+ defaultValue: false;
3480
+ required: false;
3481
+ };
3482
+ skipConsent: {
3483
+ type: "boolean";
3484
+ required: false;
3485
+ };
3486
+ enableEndSession: {
3487
+ type: "boolean";
3488
+ required: false;
3489
+ };
3490
+ subjectType: {
3491
+ type: "string";
3492
+ required: false;
3493
+ };
3494
+ scopes: {
3495
+ type: "string[]";
3496
+ required: false;
3497
+ };
3498
+ clientCredentialsScopes: {
3499
+ type: "string[]";
3500
+ required: false;
3501
+ defaultValue: never[];
3502
+ };
3503
+ userId: {
3504
+ type: "string";
3505
+ required: false;
3506
+ references: {
3507
+ model: string;
3508
+ field: string;
3509
+ };
3510
+ index: true;
3511
+ };
3512
+ createdAt: {
3513
+ type: "date";
3514
+ required: false;
3515
+ };
3516
+ updatedAt: {
3517
+ type: "date";
3518
+ required: false;
3519
+ };
3520
+ name: {
3521
+ type: "string";
3522
+ required: false;
3523
+ };
3524
+ uri: {
3525
+ type: "string";
3526
+ required: false;
3527
+ };
3528
+ icon: {
3529
+ type: "string";
3530
+ required: false;
3531
+ };
3532
+ contacts: {
3533
+ type: "string[]";
3534
+ required: false;
3535
+ };
3536
+ tos: {
3537
+ type: "string";
3538
+ required: false;
3539
+ };
3540
+ policy: {
3541
+ type: "string";
3542
+ required: false;
3543
+ };
3544
+ softwareId: {
3545
+ type: "string";
3546
+ required: false;
3547
+ };
3548
+ softwareVersion: {
3549
+ type: "string";
3550
+ required: false;
3551
+ };
3552
+ softwareStatement: {
3553
+ type: "string";
3554
+ required: false;
3555
+ };
3556
+ redirectUris: {
3557
+ type: "string[]";
3558
+ required: true;
3559
+ };
3560
+ postLogoutRedirectUris: {
3561
+ type: "string[]";
3562
+ required: false;
3563
+ };
3564
+ backchannelLogoutUri: {
3565
+ type: "string";
3566
+ required: false;
3567
+ };
3568
+ backchannelLogoutSessionRequired: {
3569
+ type: "boolean";
3570
+ required: false;
3571
+ };
3572
+ tokenEndpointAuthMethod: {
3573
+ type: "string";
3574
+ required: false;
3575
+ };
3576
+ applicationType: {
3577
+ type: "string";
3578
+ required: false;
3579
+ };
3580
+ jwks: {
3581
+ type: "string";
3582
+ required: false;
3583
+ };
3584
+ jwksUri: {
3585
+ type: "string";
3586
+ required: false;
3587
+ };
3588
+ grantTypes: {
3589
+ type: "string[]";
3590
+ required: false;
3591
+ };
3592
+ responseTypes: {
3593
+ type: "string[]";
3594
+ required: false;
3595
+ };
3596
+ requirePKCE: {
3597
+ type: "boolean";
3598
+ required: false;
3599
+ };
3600
+ dpopBoundAccessTokens: {
3601
+ type: "boolean";
3602
+ required: false;
3603
+ defaultValue: false;
3604
+ };
3605
+ referenceId: {
3606
+ type: "string";
3607
+ required: false;
3608
+ };
3609
+ metadata: {
3610
+ type: "json";
3611
+ required: false;
3612
+ };
3613
+ };
3614
+ };
3615
+ oauthResource: {
3616
+ modelName: string;
3617
+ fields: {
3618
+ identifier: {
3619
+ type: "string";
3620
+ required: true;
3621
+ unique: true;
3622
+ };
3623
+ name: {
3624
+ type: "string";
3625
+ required: true;
3626
+ };
3627
+ accessTokenTtl: {
3628
+ type: "number";
3629
+ required: false;
3630
+ };
3631
+ refreshTokenTtl: {
3632
+ type: "number";
3633
+ required: false;
3634
+ };
3635
+ signingAlgorithm: {
3636
+ type: "string";
3637
+ required: false;
3638
+ };
3639
+ signingKeyId: {
3640
+ type: "string";
3641
+ required: false;
3642
+ };
3643
+ allowedScopes: {
3644
+ type: "string[]";
3645
+ required: false;
3646
+ };
3647
+ customClaims: {
3648
+ type: "json";
3649
+ required: false;
3650
+ };
3651
+ dpopBoundAccessTokensRequired: {
3652
+ type: "boolean";
3653
+ required: false;
3654
+ defaultValue: false;
3655
+ };
3656
+ disabled: {
3657
+ type: "boolean";
3658
+ required: false;
3659
+ defaultValue: false;
3660
+ };
3661
+ createdAt: {
3662
+ type: "date";
3663
+ required: false;
3664
+ };
3665
+ updatedAt: {
3666
+ type: "date";
3667
+ required: false;
3668
+ };
3669
+ policyVersion: {
3670
+ type: "number";
3671
+ required: false;
3672
+ defaultValue: number;
3673
+ };
3674
+ metadata: {
3675
+ type: "json";
3676
+ required: false;
3677
+ };
3678
+ };
3679
+ };
3680
+ oauthClientResource: {
3681
+ modelName: string;
3682
+ fields: {
3683
+ clientId: {
3684
+ type: "string";
3685
+ required: true;
3686
+ references: {
3687
+ model: string;
3688
+ field: string;
3689
+ onDelete: "cascade";
3690
+ };
3691
+ index: true;
3692
+ };
3693
+ resourceId: {
3694
+ type: "string";
3695
+ required: true;
3696
+ references: {
3697
+ model: string;
3698
+ field: string;
3699
+ onDelete: "cascade";
3700
+ };
3701
+ index: true;
3702
+ };
3703
+ metadata: {
3704
+ type: "json";
3705
+ required: false;
3706
+ };
3707
+ createdAt: {
3708
+ type: "date";
3709
+ required: false;
3710
+ };
3711
+ };
3712
+ indexes: {
3713
+ fields: [string, string];
3714
+ unique: true;
3715
+ }[];
3716
+ };
3717
+ oauthRefreshToken: {
3718
+ fields: {
3719
+ token: {
3720
+ type: "string";
3721
+ required: true;
3722
+ unique: true;
3723
+ };
3724
+ clientId: {
3725
+ type: "string";
3726
+ required: true;
3727
+ references: {
3728
+ model: string;
3729
+ field: string;
3730
+ };
3731
+ index: true;
3732
+ };
3733
+ sessionId: {
3734
+ type: "string";
3735
+ required: false;
3736
+ references: {
3737
+ model: string;
3738
+ field: string;
3739
+ onDelete: "set null";
3740
+ };
3741
+ index: true;
3742
+ };
3743
+ userId: {
3744
+ type: "string";
3745
+ required: true;
3746
+ references: {
3747
+ model: string;
3748
+ field: string;
3749
+ };
3750
+ index: true;
3751
+ };
3752
+ referenceId: {
3753
+ type: "string";
3754
+ required: false;
3755
+ };
3756
+ authorizationCodeId: {
3757
+ type: "string";
3758
+ required: false;
3759
+ index: true;
3760
+ };
3761
+ resources: {
3762
+ type: "string[]";
3763
+ required: false;
3764
+ };
3765
+ requestedUserInfoClaims: {
3766
+ type: "string[]";
3767
+ required: false;
3768
+ };
3769
+ expiresAt: {
3770
+ type: "date";
3771
+ };
3772
+ createdAt: {
3773
+ type: "date";
3774
+ };
3775
+ revoked: {
3776
+ type: "date";
3777
+ required: false;
3778
+ };
3779
+ rotatedAt: {
3780
+ type: "date";
3781
+ required: false;
3782
+ };
3783
+ rotationReplayResponse: {
3784
+ type: "string";
3785
+ required: false;
3786
+ };
3787
+ rotationReplayExpiresAt: {
3788
+ type: "date";
3789
+ required: false;
3790
+ };
3791
+ authTime: {
3792
+ type: "date";
3793
+ required: false;
3794
+ };
3795
+ confirmation: {
3796
+ type: "json";
3797
+ required: false;
3798
+ };
3799
+ scopes: {
3800
+ type: "string[]";
3801
+ required: true;
3802
+ };
3803
+ };
3804
+ };
3805
+ oauthAccessToken: {
3806
+ modelName: string;
3807
+ fields: {
3808
+ token: {
3809
+ type: "string";
3810
+ unique: true;
3811
+ };
3812
+ clientId: {
3813
+ type: "string";
3814
+ required: true;
3815
+ references: {
3816
+ model: string;
3817
+ field: string;
3818
+ };
3819
+ index: true;
3820
+ };
3821
+ sessionId: {
3822
+ type: "string";
3823
+ required: false;
3824
+ references: {
3825
+ model: string;
3826
+ field: string;
3827
+ onDelete: "set null";
3828
+ };
3829
+ index: true;
3830
+ };
3831
+ userId: {
3832
+ type: "string";
3833
+ required: false;
3834
+ references: {
3835
+ model: string;
3836
+ field: string;
3837
+ };
3838
+ index: true;
3839
+ };
3840
+ referenceId: {
3841
+ type: "string";
3842
+ required: false;
3843
+ };
3844
+ authorizationCodeId: {
3845
+ type: "string";
3846
+ required: false;
3847
+ index: true;
3848
+ };
3849
+ resources: {
3850
+ type: "string[]";
3851
+ required: false;
3852
+ };
3853
+ requestedUserInfoClaims: {
3854
+ type: "string[]";
3855
+ required: false;
3856
+ };
3857
+ refreshId: {
3858
+ type: "string";
3859
+ required: false;
3860
+ references: {
3861
+ model: string;
3862
+ field: string;
3863
+ };
3864
+ index: true;
3865
+ };
3866
+ expiresAt: {
3867
+ type: "date";
3868
+ };
3869
+ createdAt: {
3870
+ type: "date";
3871
+ };
3872
+ revoked: {
3873
+ type: "date";
3874
+ required: false;
3875
+ };
3876
+ confirmation: {
3877
+ type: "json";
3878
+ required: false;
3879
+ };
3880
+ scopes: {
3881
+ type: "string[]";
3882
+ required: true;
3883
+ };
3884
+ };
3885
+ };
3886
+ oauthConsent: {
3887
+ modelName: string;
3888
+ fields: {
3889
+ clientId: {
3890
+ type: "string";
3891
+ required: true;
3892
+ references: {
3893
+ model: string;
3894
+ field: string;
3895
+ };
3896
+ index: true;
3897
+ };
3898
+ userId: {
3899
+ type: "string";
3900
+ required: false;
3901
+ references: {
3902
+ model: string;
3903
+ field: string;
3904
+ };
3905
+ index: true;
3906
+ };
3907
+ referenceId: {
3908
+ type: "string";
3909
+ required: false;
3910
+ };
3911
+ resources: {
3912
+ type: "string[]";
3913
+ required: false;
3914
+ };
3915
+ requestedUserInfoClaims: {
3916
+ type: "string[]";
3917
+ required: false;
3918
+ };
3919
+ scopes: {
3920
+ type: "string[]";
3921
+ required: true;
3922
+ };
3923
+ createdAt: {
3924
+ type: "date";
3925
+ };
3926
+ updatedAt: {
3927
+ type: "date";
3928
+ };
3929
+ };
3930
+ };
3931
+ oauthClientAssertion: {
3932
+ modelName: string;
3933
+ fields: {
3934
+ expiresAt: {
3935
+ type: "date";
3936
+ required: true;
3937
+ };
3938
+ };
3939
+ };
3940
+ };
3941
+ rateLimit: ({
3942
+ pathMatcher: (path: string) => path is "/oauth2/token";
3943
+ window: number;
3944
+ max: number;
3945
+ } | {
3946
+ pathMatcher: (path: string) => path is "/oauth2/authorize";
3947
+ window: number;
3948
+ max: number;
3949
+ } | {
3950
+ pathMatcher: (path: string) => path is "/oauth2/introspect";
3951
+ window: number;
3952
+ max: number;
3953
+ } | {
3954
+ pathMatcher: (path: string) => path is "/oauth2/revoke";
3955
+ window: number;
3956
+ max: number;
3957
+ } | {
3958
+ pathMatcher: (path: string) => path is "/oauth2/register";
3959
+ window: number;
3960
+ max: number;
3961
+ } | {
3962
+ pathMatcher: (path: string) => path is "/oauth2/client/rotate-keys";
3963
+ window: number;
3964
+ max: number;
3965
+ } | {
3966
+ pathMatcher: (path: string) => path is "/oauth2/userinfo";
3967
+ window: number;
3968
+ max: number;
3969
+ })[];
1188
3970
  }];
1189
3971
  }>;
1190
3972
  export type Auth = ReturnType<typeof createAuth>;