@convex-dev/better-auth 0.7.10 → 0.7.12

package/src/component/schema.ts

@@ -10,26 +10,26 @@ const schema = defineSchema({
     name: v.string(),
     email: v.string(),
     emailVerified: v.boolean(),
-    image: v.optional(v.string()),
+    image: v.optional(v.union(v.null(), v.string())),
     createdAt: v.number(),
     updatedAt: v.number(),
-    twoFactorEnabled: v.optional(v.boolean()),
-    isAnonymous: v.optional(v.boolean()),
-    username: v.optional(v.string()),
-    displayUsername: v.optional(v.string()),
-    phoneNumber: v.optional(v.string()),
-    phoneNumberVerified: v.optional(v.boolean()),
-    role: v.optional(v.string()),
-    banned: v.optional(v.boolean()),
-    banReason: v.optional(v.string()),
-    banExpires: v.optional(v.number()),
-    stripeCustomerId: v.optional(v.string()),
-    userId: v.optional(v.string()),
+    twoFactorEnabled: v.optional(v.union(v.null(), v.boolean())),
+    isAnonymous: v.optional(v.union(v.null(), v.boolean())),
+    username: v.optional(v.union(v.null(), v.string())),
+    displayUsername: v.optional(v.union(v.null(), v.string())),
+    phoneNumber: v.optional(v.union(v.null(), v.string())),
+    phoneNumberVerified: v.optional(v.union(v.null(), v.boolean())),
+    role: v.optional(v.union(v.null(), v.string())),
+    banned: v.optional(v.union(v.null(), v.boolean())),
+    banReason: v.optional(v.union(v.null(), v.string())),
+    banExpires: v.optional(v.union(v.null(), v.number())),
+    stripeCustomerId: v.optional(v.union(v.null(), v.string())),
+    userId: v.optional(v.union(v.null(), v.string())),
+    teamId: v.optional(v.union(v.null(), v.string())),
   })
     .index("email_name", ["email","name"])
     .index("name", ["name"])
     .index("userId", ["userId"])
-    .index("email", ["email"])
     .index("username", ["username"])
     .index("phoneNumber", ["phoneNumber"]),
 
@@ -38,11 +38,12 @@ const schema = defineSchema({
     token: v.string(),
     createdAt: v.number(),
     updatedAt: v.number(),
-    ipAddress: v.optional(v.string()),
-    userAgent: v.optional(v.string()),
+    ipAddress: v.optional(v.union(v.null(), v.string())),
+    userAgent: v.optional(v.union(v.null(), v.string())),
     userId: v.string(),
-    impersonatedBy: v.optional(v.string()),
-    activeOrganizationId: v.optional(v.string()),
+    impersonatedBy: v.optional(v.union(v.null(), v.string())),
+    activeOrganizationId: v.optional(v.union(v.null(), v.string())),
+    activeTeamId: v.optional(v.union(v.null(), v.string())),
   })
     .index("expiresAt", ["expiresAt"])
     .index("expiresAt_userId", ["expiresAt","userId"])
@@ -53,13 +54,13 @@ const schema = defineSchema({
     accountId: v.string(),
     providerId: v.string(),
     userId: v.string(),
-    accessToken: v.optional(v.string()),
-    refreshToken: v.optional(v.string()),
-    idToken: v.optional(v.string()),
-    accessTokenExpiresAt: v.optional(v.number()),
-    refreshTokenExpiresAt: v.optional(v.number()),
-    scope: v.optional(v.string()),
-    password: v.optional(v.string()),
+    accessToken: v.optional(v.union(v.null(), v.string())),
+    refreshToken: v.optional(v.union(v.null(), v.string())),
+    idToken: v.optional(v.union(v.null(), v.string())),
+    accessTokenExpiresAt: v.optional(v.union(v.null(), v.number())),
+    refreshTokenExpiresAt: v.optional(v.union(v.null(), v.number())),
+    scope: v.optional(v.union(v.null(), v.string())),
+    password: v.optional(v.union(v.null(), v.string())),
     createdAt: v.number(),
     updatedAt: v.number(),
   })
@@ -72,8 +73,8 @@ const schema = defineSchema({
     identifier: v.string(),
     value: v.string(),
     expiresAt: v.number(),
-    createdAt: v.optional(v.number()),
-    updatedAt: v.optional(v.number()),
+    createdAt: v.optional(v.union(v.null(), v.number())),
+    updatedAt: v.optional(v.union(v.null(), v.number())),
   })
     .index("expiresAt", ["expiresAt"])
     .index("identifier", ["identifier"]),
@@ -86,90 +87,90 @@ const schema = defineSchema({
     .index("userId", ["userId"]),
 
   passkey: defineTable({
-    name: v.optional(v.string()),
+    name: v.optional(v.union(v.null(), v.string())),
     publicKey: v.string(),
     userId: v.string(),
     credentialID: v.string(),
     counter: v.number(),
     deviceType: v.string(),
     backedUp: v.boolean(),
-    transports: v.optional(v.string()),
-    createdAt: v.optional(v.number()),
-    aaguid: v.optional(v.string()),
+    transports: v.optional(v.union(v.null(), v.string())),
+    createdAt: v.optional(v.union(v.null(), v.number())),
+    aaguid: v.optional(v.union(v.null(), v.string())),
   })
     .index("credentialID", ["credentialID"])
     .index("userId", ["userId"]),
 
   apikey: defineTable({
-    name: v.optional(v.string()),
-    start: v.optional(v.string()),
-    prefix: v.optional(v.string()),
+    name: v.optional(v.union(v.null(), v.string())),
+    start: v.optional(v.union(v.null(), v.string())),
+    prefix: v.optional(v.union(v.null(), v.string())),
     key: v.string(),
     userId: v.string(),
-    refillInterval: v.optional(v.number()),
-    refillAmount: v.optional(v.number()),
-    lastRefillAt: v.optional(v.number()),
-    enabled: v.optional(v.boolean()),
-    rateLimitEnabled: v.optional(v.boolean()),
-    rateLimitTimeWindow: v.optional(v.number()),
-    rateLimitMax: v.optional(v.number()),
-    requestCount: v.optional(v.number()),
-    remaining: v.optional(v.number()),
-    lastRequest: v.optional(v.number()),
-    expiresAt: v.optional(v.number()),
+    refillInterval: v.optional(v.union(v.null(), v.number())),
+    refillAmount: v.optional(v.union(v.null(), v.number())),
+    lastRefillAt: v.optional(v.union(v.null(), v.number())),
+    enabled: v.optional(v.union(v.null(), v.boolean())),
+    rateLimitEnabled: v.optional(v.union(v.null(), v.boolean())),
+    rateLimitTimeWindow: v.optional(v.union(v.null(), v.number())),
+    rateLimitMax: v.optional(v.union(v.null(), v.number())),
+    requestCount: v.optional(v.union(v.null(), v.number())),
+    remaining: v.optional(v.union(v.null(), v.number())),
+    lastRequest: v.optional(v.union(v.null(), v.number())),
+    expiresAt: v.optional(v.union(v.null(), v.number())),
     createdAt: v.number(),
     updatedAt: v.number(),
-    permissions: v.optional(v.string()),
-    metadata: v.optional(v.string()),
+    permissions: v.optional(v.union(v.null(), v.string())),
+    metadata: v.optional(v.union(v.null(), v.string())),
   })
     .index("key", ["key"])
     .index("userId", ["userId"]),
 
   oauthApplication: defineTable({
-    name: v.optional(v.string()),
-    icon: v.optional(v.string()),
-    metadata: v.optional(v.string()),
-    clientId: v.optional(v.string()),
-    clientSecret: v.optional(v.string()),
-    redirectURLs: v.optional(v.string()),
-    type: v.optional(v.string()),
-    disabled: v.optional(v.boolean()),
-    userId: v.optional(v.string()),
-    createdAt: v.optional(v.number()),
-    updatedAt: v.optional(v.number()),
+    name: v.optional(v.union(v.null(), v.string())),
+    icon: v.optional(v.union(v.null(), v.string())),
+    metadata: v.optional(v.union(v.null(), v.string())),
+    clientId: v.optional(v.union(v.null(), v.string())),
+    clientSecret: v.optional(v.union(v.null(), v.string())),
+    redirectURLs: v.optional(v.union(v.null(), v.string())),
+    type: v.optional(v.union(v.null(), v.string())),
+    disabled: v.optional(v.union(v.null(), v.boolean())),
+    userId: v.optional(v.union(v.null(), v.string())),
+    createdAt: v.optional(v.union(v.null(), v.number())),
+    updatedAt: v.optional(v.union(v.null(), v.number())),
   })
     .index("clientId", ["clientId"]),
 
   oauthAccessToken: defineTable({
-    accessToken: v.optional(v.string()),
-    refreshToken: v.optional(v.string()),
-    accessTokenExpiresAt: v.optional(v.number()),
-    refreshTokenExpiresAt: v.optional(v.number()),
-    clientId: v.optional(v.string()),
-    userId: v.optional(v.string()),
-    scopes: v.optional(v.string()),
-    createdAt: v.optional(v.number()),
-    updatedAt: v.optional(v.number()),
+    accessToken: v.optional(v.union(v.null(), v.string())),
+    refreshToken: v.optional(v.union(v.null(), v.string())),
+    accessTokenExpiresAt: v.optional(v.union(v.null(), v.number())),
+    refreshTokenExpiresAt: v.optional(v.union(v.null(), v.number())),
+    clientId: v.optional(v.union(v.null(), v.string())),
+    userId: v.optional(v.union(v.null(), v.string())),
+    scopes: v.optional(v.union(v.null(), v.string())),
+    createdAt: v.optional(v.union(v.null(), v.number())),
+    updatedAt: v.optional(v.union(v.null(), v.number())),
   })
     .index("accessToken", ["accessToken"])
     .index("refreshToken", ["refreshToken"]),
 
   oauthConsent: defineTable({
-    clientId: v.optional(v.string()),
-    userId: v.optional(v.string()),
-    scopes: v.optional(v.string()),
-    createdAt: v.optional(v.number()),
-    updatedAt: v.optional(v.number()),
-    consentGiven: v.optional(v.boolean()),
+    clientId: v.optional(v.union(v.null(), v.string())),
+    userId: v.optional(v.union(v.null(), v.string())),
+    scopes: v.optional(v.union(v.null(), v.string())),
+    createdAt: v.optional(v.union(v.null(), v.number())),
+    updatedAt: v.optional(v.union(v.null(), v.number())),
+    consentGiven: v.optional(v.union(v.null(), v.boolean())),
   })
     .index("clientId_userId", ["clientId","userId"]),
 
   organization: defineTable({
     name: v.string(),
-    slug: v.optional(v.string()),
-    logo: v.optional(v.string()),
+    slug: v.optional(v.union(v.null(), v.string())),
+    logo: v.optional(v.union(v.null(), v.string())),
     createdAt: v.number(),
-    metadata: v.optional(v.string()),
+    metadata: v.optional(v.union(v.null(), v.string())),
   })
     .index("name", ["name"])
     .index("slug", ["slug"]),
@@ -178,28 +179,23 @@ const schema = defineSchema({
     organizationId: v.string(),
     userId: v.string(),
     role: v.string(),
-    teamId: v.optional(v.string()),
     createdAt: v.number(),
   })
     .index("organizationId_userId", ["organizationId","userId"])
-    .index("organizationId", ["organizationId"])
     .index("userId", ["userId"])
-    .index("role", ["role"])
-    .index("teamId", ["teamId"]),
+    .index("role", ["role"]),
 
   invitation: defineTable({
     organizationId: v.string(),
     email: v.string(),
-    role: v.optional(v.string()),
-    teamId: v.optional(v.string()),
+    role: v.optional(v.union(v.null(), v.string())),
+    teamId: v.optional(v.union(v.null(), v.string())),
     status: v.string(),
     expiresAt: v.number(),
     inviterId: v.string(),
   })
     .index("email_organizationId_status", ["email","organizationId","status"])
     .index("organizationId_status", ["organizationId","status"])
-    .index("organizationId", ["organizationId"])
-    .index("email", ["email"])
     .index("role", ["role"])
     .index("teamId", ["teamId"])
     .index("status", ["status"])
@@ -209,17 +205,24 @@ const schema = defineSchema({
     name: v.string(),
     organizationId: v.string(),
     createdAt: v.number(),
-    updatedAt: v.optional(v.number()),
+    updatedAt: v.optional(v.union(v.null(), v.number())),
   })
     .index("organizationId", ["organizationId"]),
 
+  teamMember: defineTable({
+    teamId: v.string(),
+    userId: v.string(),
+    createdAt: v.optional(v.union(v.null(), v.number())),
+  })
+    .index("userId", ["userId"]),
+
   ssoProvider: defineTable({
     issuer: v.string(),
-    oidcConfig: v.optional(v.string()),
-    samlConfig: v.optional(v.string()),
-    userId: v.optional(v.string()),
+    oidcConfig: v.optional(v.union(v.null(), v.string())),
+    samlConfig: v.optional(v.union(v.null(), v.string())),
+    userId: v.optional(v.union(v.null(), v.string())),
     providerId: v.string(),
-    organizationId: v.optional(v.string()),
+    organizationId: v.optional(v.union(v.null(), v.string())),
     domain: v.string(),
   })
     .index("organizationId", ["organizationId"])
@@ -236,22 +239,31 @@ const schema = defineSchema({
   subscription: defineTable({
     plan: v.string(),
     referenceId: v.string(),
-    stripeCustomerId: v.optional(v.string()),
-    stripeSubscriptionId: v.optional(v.string()),
-    status: v.optional(v.string()),
-    periodStart: v.optional(v.number()),
-    periodEnd: v.optional(v.number()),
-    cancelAtPeriodEnd: v.optional(v.boolean()),
-    seats: v.optional(v.number()),
+    stripeCustomerId: v.optional(v.union(v.null(), v.string())),
+    stripeSubscriptionId: v.optional(v.union(v.null(), v.string())),
+    status: v.optional(v.union(v.null(), v.string())),
+    periodStart: v.optional(v.union(v.null(), v.number())),
+    periodEnd: v.optional(v.union(v.null(), v.number())),
+    cancelAtPeriodEnd: v.optional(v.union(v.null(), v.boolean())),
+    seats: v.optional(v.union(v.null(), v.number())),
   })
     .index("stripeSubscriptionId", ["stripeSubscriptionId"])
     .index("stripeCustomerId", ["stripeCustomerId"])
     .index("referenceId", ["referenceId"]),
 
+  walletAddress: defineTable({
+    userId: v.string(),
+    address: v.string(),
+    chainId: v.number(),
+    isPrimary: v.optional(v.union(v.null(), v.boolean())),
+    createdAt: v.number(),
+  })
+    .index("userId", ["userId"]),
+
   rateLimit: defineTable({
-    key: v.optional(v.string()),
-    count: v.optional(v.number()),
-    lastRequest: v.optional(v.number()),
+    key: v.optional(v.union(v.null(), v.string())),
+    count: v.optional(v.union(v.null(), v.number())),
+    lastRequest: v.optional(v.union(v.null(), v.number())),
   })
     .index("key", ["key"]),
 
@@ -359,9 +371,6 @@ export const specialFields = {
     },
     role: {
       sortable: true
-    },
-    teamId: {
-      sortable: true
     }
   },
   invitation: {
@@ -398,6 +407,14 @@ export const specialFields = {
       }
     }
   },
+  teamMember: {
+    userId: {
+      references: {
+        model: "user",
+        field: "id"
+      }
+    }
+  },
   ssoProvider: {
     userId: {
       references: {
@@ -408,5 +425,13 @@ export const specialFields = {
     providerId: {
       unique: true
     }
+  },
+  walletAddress: {
+    userId: {
+      references: {
+        model: "user",
+        field: "id"
+      }
+    }
   }
 };

package/src/nextjs/index.ts

@@ -11,8 +11,29 @@ export const getToken = async (
   const auth = createAuth({} as any);
   const createCookie = createCookieGetter(auth.options);
   const cookie = createCookie(JWT_COOKIE_NAME);
-  const token = cookieStore.get(cookie.name);
-  return token?.value;
+  const tokenCookie = cookieStore.get(cookie.name);
+
+  // Warn if there's a secure cookie mismatch between Convex and Next.js
+  if (!tokenCookie?.value) {
+    const isSecure = cookie.name.startsWith("__Secure-");
+    const insecureCookieName = cookie.name.replace("__Secure-", "");
+    const insecureCookie = cookieStore.get(insecureCookieName);
+    const secureCookieName = isSecure
+      ? cookie.name
+      : `__Secure-${insecureCookieName}`;
+    const secureCookie = cookieStore.get(secureCookieName);
+    if (isSecure && insecureCookie) {
+      console.warn(
+        `Looking for secure cookie ${cookie.name} but found insecure cookie ${insecureCookie.name}`
+      );
+    }
+    if (!isSecure && secureCookie) {
+      console.warn(
+        `Looking for insecure cookie ${cookie.name} but found secure cookie ${secureCookie.name}`
+      );
+    }
+  }
+  return tokenCookie?.value;
 };
 
 const handler = (request: Request, opts?: { convexSiteUrl?: string }) => {

package/src/react-start/index.ts

@@ -3,6 +3,7 @@ import { createCookieGetter } from "better-auth/cookies";
 import { betterFetch } from "@better-fetch/fetch";
 import { GenericActionCtx } from "convex/server";
 import { JWT_COOKIE_NAME } from "../plugins/convex";
+import { oneLine } from "common-tags";
 
 export const getCookieName = async (
   createAuth: (ctx: GenericActionCtx<any>) => ReturnType<typeof betterAuth>
@@ -70,6 +71,18 @@ export const reactStartHelpers = (
   createAuth: (ctx: GenericActionCtx<any>) => ReturnType<typeof betterAuth>,
   opts: { convexSiteUrl: string; verbose?: boolean }
 ) => {
+  if (!opts.convexSiteUrl) {
+    throw new Error("opts.convexSiteUrl is required");
+  }
+  if (opts.convexSiteUrl.endsWith(".convex.cloud")) {
+    throw new Error(
+      oneLine(`
+        opts.convexSiteUrl ends with .convex.cloud, which is your cloud URL.
+        Use your Convex site URL instead.
+        https://docs.convex.dev/production/environment-variables#system-environment-variables
+      `)
+    );
+  }
   return {
     fetchSession: (request: Request) => fetchSession(request, opts),
     reactStartHandler: (request: Request) => reactStartHandler(request, opts),

package/dist/commonjs/client/cors.d.ts

@@ -1,77 +0,0 @@
-/**
- * This file defines a CorsHttpRouter class that extends Convex's HttpRouter.
- * It provides CORS (Cross-Origin Resource Sharing) support for HTTP routes.
- *
- * The CorsHttpRouter:
- * 1. Allows specifying allowed origins for CORS.
- * 2. Overrides the route method to add CORS headers to all non-OPTIONS requests.
- * 3. Automatically adds an OPTIONS route to handle CORS preflight requests.
- * 4. Uses the handleCors helper function to apply CORS headers consistently.
- *
- * This router simplifies the process of making Convex HTTP endpoints
- * accessible to web applications hosted on different domains while
- * maintaining proper CORS configuration.
- */
-import { HttpRouter, type RouteSpec } from "convex/server";
-export declare const DEFAULT_EXPOSED_HEADERS: string[];
-export type CorsConfig = {
-    /**
-     * Whether to allow credentials in the request.
-     * When true, the request can include cookies and authentication headers.
-     * @default false
-     */
-    allowCredentials?: boolean;
-    /**
-     * An array of allowed origins: what domains are allowed to make requests.
-     * For example, ["https://example.com"] would only allow requests from
-     * https://example.com.
-     * You can also use wildcards to allow all subdomains of a given domain.
-     * E.g. ["*.example.com"] would allow requests from:
-     * - https://subdomain.example.com
-     * - https://example.com
-     * @default ["*"]
-     */
-    allowedOrigins?: string[] | ((req: Request) => Promise<string[]>);
-    /**
-     * An array of allowed headers: what headers are allowed to be sent in
-     * the request.
-     * @default ["Content-Type"]
-     */
-    allowedHeaders?: string[];
-    /**
-     * An array of exposed headers: what headers are allowed to be sent in
-     * the response.
-     * Note: if you pass in an empty array, it will not expose any headers.
-     * If you want to extend the default exposed headers, you can do so by
-     * passing in [...DEFAULT_EXPOSED_HEADERS, ...yourHeaders].
-     * @default {@link DEFAULT_EXPOSED_HEADERS}
-     */
-    exposedHeaders?: string[];
-    /**
-     * The maximum age of the preflight request in seconds.
-     * @default 86400 (1 day)
-     */
-    browserCacheMaxAge?: number;
-    /**
-     * Whether to block requests from origins that are not in the allowedOrigins list.
-     * @default true
-     */
-    enforceAllowOrigins?: boolean;
-    /**
-     * Whether to log debugging information about CORS requests.
-     * @default false
-     */
-    debug?: boolean;
-};
-type RouteSpecWithCors = RouteSpec & CorsConfig;
-/**
- * Factory function to create a router that adds CORS support to routes.
- * @param allowedOrigins An array of allowed origins for CORS.
- * @returns A function to use instead of http.route when you want CORS.
- */
-export declare const corsRouter: (http: HttpRouter, corsConfig?: CorsConfig) => {
-    http: HttpRouter;
-    route: (routeSpec: RouteSpecWithCors) => void;
-};
-export default corsRouter;
-//# sourceMappingURL=cors.d.ts.map

package/dist/commonjs/client/cors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../../src/client/cors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAIL,UAAU,EAIV,KAAK,SAAS,EAGf,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,uBAAuB,UAInC,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAClE;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,KAAK,iBAAiB,GAAG,SAAS,GAAG,UAAU,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,UAAU,GAAI,MAAM,UAAU,EAAE,aAAa,UAAU;;uBAK7C,iBAAiB,KAAG,IAAI;CAsD9C,CAAC;AA+DF,eAAe,UAAU,CAAC"}