@convex-dev/better-auth 0.8.0-alpha.9 → 0.8.1

package/src/plugins/convex/index.ts

@@ -2,45 +2,21 @@ import { createAuthMiddleware, sessionMiddleware } from "better-auth/api";
 import {
   BetterAuthPlugin,
   createAuthEndpoint,
-  customSession as customSessionPlugin,
   jwt as jwtPlugin,
   bearer as bearerPlugin,
   oidcProvider as oidcProviderPlugin,
 } from "better-auth/plugins";
-import { BetterAuthOptions } from "better-auth/types";
-import { omit } from "convex-helpers";
-import { z } from "zod";
 
 export const JWT_COOKIE_NAME = "convex_jwt";
 
-export const convex = <O extends BetterAuthOptions>(
+export const convex = (
   opts: {
     jwtExpirationSeconds?: number;
     deleteExpiredSessionsOnLogin?: boolean;
-    options?: O;
+    options?: { basePath?: string };
   } = {}
 ) => {
-  const {
-    jwtExpirationSeconds = 60 * 15,
-    deleteExpiredSessionsOnLogin = false,
-  } = opts;
-  const customSession = customSessionPlugin(async ({ user, session }) => {
-    // Doing terrible things with types because user and session aren't actually
-    // objects and we need plugin inference to work
-    const { userId, ...userData } = omit(
-      user as typeof user & { id: string; userId: string },
-      ["id"]
-    ) as typeof user & {
-      userId: string;
-    };
-    return {
-      user: { ...userData, id: userId },
-      session: {
-        ...(session as typeof session & {}),
-        userId,
-      },
-    };
-  }, opts.options);
+  const { jwtExpirationSeconds = 60 * 15 } = opts;
   const oidcProvider = oidcProviderPlugin({
     loginPage: "/not-used",
     metadata: {
@@ -53,12 +29,8 @@ export const convex = <O extends BetterAuthOptions>(
       issuer: `${process.env.CONVEX_SITE_URL}`,
       audience: "convex",
       expirationTime: `${jwtExpirationSeconds}s`,
-      getSubject: (session) => {
-        // Return the userId from the app user table
-        return session.user.userId;
-      },
       // eslint-disable-next-line @typescript-eslint/no-unused-vars
-      definePayload: ({ user: { id, userId, image, ...user }, session }) => ({
+      definePayload: ({ user: { id, image, ...user }, session }) => ({
         ...user,
         sessionId: session.id,
         iat: Math.floor(new Date().getTime() / 1000),
@@ -77,69 +49,20 @@ export const convex = <O extends BetterAuthOptions>(
   };
   return {
     id: "convex",
+    init: ({ logger, options }) => {
+      if (
+        options.plugins?.every((p) => p.id !== "cross-domain") &&
+        !options.baseURL
+      ) {
+        logger.warn(
+          "Better Auth baseURL is undefined. This is probably a mistake."
+        );
+      }
+    },
     hooks: {
-      before: [
-        {
-          matcher: (ctx) => {
-            return !!ctx.body?.userId;
-          },
-          handler: createAuthMiddleware(async (ctx) => {
-            const user: { id: string } | null =
-              await ctx.context.adapter.findOne({
-                model: "user",
-                where: [
-                  {
-                    field: "userId",
-                    operator: "eq",
-                    value: ctx.body?.userId,
-                  },
-                ],
-              });
-            if (!user) {
-              throw new Error("User not found");
-            }
-            ctx.body.userId = user.id;
-            return {
-              context: ctx,
-            };
-          }),
-        },
-        ...bearer.hooks.before,
-      ],
+      before: [...bearer.hooks.before],
       after: [
         ...oidcProvider.hooks.after,
-        {
-          matcher: (ctx) => {
-            return (
-              deleteExpiredSessionsOnLogin &&
-              (ctx.path?.startsWith("/sign-in") ||
-                ctx.path?.startsWith("/callback"))
-            );
-          },
-          handler: createAuthMiddleware(async (ctx) => {
-            // Delete expired sessions at login
-            const userId = ctx.context.newSession?.user.id;
-            if (!userId) {
-              return;
-            }
-            await ctx.context.adapter.deleteMany({
-              model: "session",
-              where: [
-                {
-                  field: "userId",
-                  operator: "eq",
-                  value: userId,
-                  connector: "AND",
-                },
-                {
-                  operator: "lte",
-                  field: "expiresAt",
-                  value: new Date().getTime(),
-                },
-              ],
-            });
-          }),
-        },
         {
           matcher: (ctx) => {
             return (
@@ -194,61 +117,6 @@ export const convex = <O extends BetterAuthOptions>(
       ],
     },
     endpoints: {
-      getSession: createAuthEndpoint(
-        "/get-session",
-        {
-          method: "GET",
-          query: z.optional(
-            z.object({
-              // If cookie cache is enabled, it will disable the cache
-              // and fetch the session from the database
-              disableCookieCache: z
-                .boolean({
-                  description:
-                    "Disable cookie cache and fetch session from database",
-                })
-                .or(z.string().transform((v) => v === "true"))
-                .optional(),
-              disableRefresh: z
-                .boolean({
-                  description:
-                    "Disable session refresh. Useful for checking session status, without updating the session",
-                })
-                .optional(),
-            })
-          ),
-          metadata: {
-            CUSTOM_SESSION: true,
-            openapi: {
-              description: "Get custom session data",
-              responses: {
-                "200": {
-                  description: "Success",
-                  content: {
-                    "application/json": {
-                      schema: {
-                        type: "array",
-                        nullable: true,
-                        items: {
-                          $ref: "#/components/schemas/Session",
-                        },
-                      },
-                    },
-                  },
-                },
-              },
-            },
-          },
-          requireHeaders: true,
-        },
-        async (ctx) => {
-          const response = await customSession.endpoints.getSession({
-            ...ctx,
-            returnHeaders: false,
-          });
-          return response;
-        }
-      ),
       getOpenIdConfig: createAuthEndpoint(
         "/convex/.well-known/openid-configuration",
         {

package/src/plugins/cross-domain/index.ts

@@ -129,7 +129,7 @@ export const crossDomain = ({ siteUrl }: { siteUrl: string }) => {
             // Mostly copied from the one-time-token plugin
             const session = ctx.context.newSession;
             if (!session) {
-              console.error("No session found");
+              ctx.context.logger.error("No session found");
               return;
             }
             const token = generateRandomString(32);
@@ -141,7 +141,7 @@ export const crossDomain = ({ siteUrl }: { siteUrl: string }) => {
             });
             const redirectTo = ctx.context.responseHeaders?.get("location");
             if (!redirectTo) {
-              console.error("No redirect to found");
+              ctx.context.logger.error("No redirect to found");
               return;
             }
             const url = new URL(redirectTo);

package/src/react-start/index.ts

@@ -1,38 +1,72 @@
 import { betterAuth } from "better-auth";
 import { createCookieGetter } from "better-auth/cookies";
 import { betterFetch } from "@better-fetch/fetch";
-import { GenericActionCtx } from "convex/server";
+import {
+  FunctionReference,
+  FunctionReturnType,
+  GenericActionCtx,
+} from "convex/server";
 import { JWT_COOKIE_NAME } from "../plugins/convex";
-import { oneLine } from "common-tags";
+import { ConvexHttpClient } from "convex/browser";
 
-export const getCookieName = async (
-  createAuth: (ctx: GenericActionCtx<any>) => ReturnType<typeof betterAuth>
+export const getCookieName = (
+  createAuth: (ctx: any) => ReturnType<typeof betterAuth>
 ) => {
-  const auth = createAuth({} as any);
-  const createCookie = createCookieGetter(auth.options);
+  const createCookie = createCookieGetter(createAuth({} as any).options);
   const cookie = createCookie(JWT_COOKIE_NAME);
   return cookie.name;
 };
 
-const requireConvexSiteUrl = (
-  opts: { convexSiteUrl: string; verbose?: boolean },
-  calledFrom: string
+export const setupFetchClient = async (
+  createAuth: (ctx: any) => ReturnType<typeof betterAuth>
 ) => {
-  if (!opts.convexSiteUrl) {
-    throw new Error(`${calledFrom}: opts.convexSiteUrl is required`);
-  }
-  if (opts.verbose) {
-    console.log(`${calledFrom}: opts.convexSiteUrl: ${opts.convexSiteUrl}`);
-  }
-  return opts.convexSiteUrl;
+  const { getCookie } = await import("@tanstack/react-start/server");
+  const createClient = () => {
+    const sessionCookieName = getCookieName(createAuth);
+    const token = getCookie(sessionCookieName);
+    const client = new ConvexHttpClient(process.env.VITE_CONVEX_URL!);
+    if (token) {
+      client.setAuth(token);
+    }
+    return client;
+  };
+  return {
+    fetchQuery<
+      Query extends FunctionReference<"query">,
+      FuncRef extends FunctionReference<any, any>,
+    >(
+      query: Query,
+      args: FuncRef["_args"]
+    ): Promise<FunctionReturnType<Query>> {
+      return createClient().query(query, args);
+    },
+    fetchMutation<
+      Mutation extends FunctionReference<"mutation">,
+      FuncRef extends FunctionReference<any, any>,
+    >(
+      mutation: Mutation,
+      args: FuncRef["_args"]
+    ): Promise<FunctionReturnType<Mutation>> {
+      return createClient().mutation(mutation, args);
+    },
+    fetchAction<
+      Action extends FunctionReference<"action">,
+      FuncRef extends FunctionReference<any, any>,
+    >(
+      action: Action,
+      args: FuncRef["_args"]
+    ): Promise<FunctionReturnType<Action>> {
+      return createClient().action(action, args);
+    },
+  };
 };
 
 export const fetchSession = async <
   T extends (ctx: GenericActionCtx<any>) => ReturnType<typeof betterAuth>,
 >(
   request: Request,
-  opts: {
-    convexSiteUrl: string;
+  opts?: {
+    convexSiteUrl?: string;
     verbose?: boolean;
   }
 ) => {
@@ -41,7 +75,10 @@ export const fetchSession = async <
   if (!request) {
     throw new Error("No request found");
   }
-  const convexSiteUrl = requireConvexSiteUrl(opts, "fetchSession");
+  const convexSiteUrl = opts?.convexSiteUrl ?? process.env.VITE_CONVEX_SITE_URL;
+  if (!convexSiteUrl) {
+    throw new Error("VITE_CONVEX_SITE_URL is not set");
+  }
   const { data: session } = await betterFetch<Session>(
     "/api/auth/get-session",
     {
@@ -56,36 +93,31 @@ export const fetchSession = async <
   };
 };
 
+export const getAuth = async (
+  request: Request,
+  getCookie: (name: string) => string | null,
+  createAuth: (ctx: any) => ReturnType<typeof betterAuth>,
+  opts?: { convexSiteUrl?: string }
+) => {
+  const sessionCookieName = getCookieName(createAuth);
+  const token = getCookie(sessionCookieName);
+  const { session } = await fetchSession(request, opts);
+  return {
+    userId: session?.user.id,
+    token,
+  };
+};
+
 export const reactStartHandler = (
   request: Request,
-  opts: { convexSiteUrl: string; verbose?: boolean }
+  opts?: { convexSiteUrl?: string; verbose?: boolean }
 ) => {
   const requestUrl = new URL(request.url);
-  const convexSiteUrl = requireConvexSiteUrl(opts, "reactStartHandler");
+  const convexSiteUrl = opts?.convexSiteUrl ?? process.env.VITE_CONVEX_SITE_URL;
+  if (!convexSiteUrl) {
+    throw new Error("VITE_CONVEX_SITE_URL is not set");
+  }
   const nextUrl = `${convexSiteUrl}${requestUrl.pathname}${requestUrl.search}`;
   request.headers.set("accept-encoding", "application/json");
   return fetch(nextUrl, new Request(request, { redirect: "manual" }));
 };
-
-export const reactStartHelpers = (
-  createAuth: (ctx: GenericActionCtx<any>) => ReturnType<typeof betterAuth>,
-  opts: { convexSiteUrl: string; verbose?: boolean }
-) => {
-  if (!opts.convexSiteUrl) {
-    throw new Error("opts.convexSiteUrl is required");
-  }
-  if (opts.convexSiteUrl.endsWith(".convex.cloud")) {
-    throw new Error(
-      oneLine(`
-        opts.convexSiteUrl ends with .convex.cloud, which is your cloud URL.
-        Use your Convex site URL instead.
-        https://docs.convex.dev/production/environment-variables#system-environment-variables
-      `)
-    );
-  }
-  return {
-    fetchSession: (request: Request) => fetchSession(request, opts),
-    reactStartHandler: (request: Request) => reactStartHandler(request, opts),
-    getCookieName: () => getCookieName(createAuth),
-  };
-};

package/dist/commonjs/client/cors.d.ts

@@ -1,77 +0,0 @@
-/**
- * This file defines a CorsHttpRouter class that extends Convex's HttpRouter.
- * It provides CORS (Cross-Origin Resource Sharing) support for HTTP routes.
- *
- * The CorsHttpRouter:
- * 1. Allows specifying allowed origins for CORS.
- * 2. Overrides the route method to add CORS headers to all non-OPTIONS requests.
- * 3. Automatically adds an OPTIONS route to handle CORS preflight requests.
- * 4. Uses the handleCors helper function to apply CORS headers consistently.
- *
- * This router simplifies the process of making Convex HTTP endpoints
- * accessible to web applications hosted on different domains while
- * maintaining proper CORS configuration.
- */
-import { HttpRouter, type RouteSpec } from "convex/server";
-export declare const DEFAULT_EXPOSED_HEADERS: string[];
-export type CorsConfig = {
-    /**
-     * Whether to allow credentials in the request.
-     * When true, the request can include cookies and authentication headers.
-     * @default false
-     */
-    allowCredentials?: boolean;
-    /**
-     * An array of allowed origins: what domains are allowed to make requests.
-     * For example, ["https://example.com"] would only allow requests from
-     * https://example.com.
-     * You can also use wildcards to allow all subdomains of a given domain.
-     * E.g. ["*.example.com"] would allow requests from:
-     * - https://subdomain.example.com
-     * - https://example.com
-     * @default ["*"]
-     */
-    allowedOrigins?: string[] | ((req: Request) => Promise<string[]>);
-    /**
-     * An array of allowed headers: what headers are allowed to be sent in
-     * the request.
-     * @default ["Content-Type"]
-     */
-    allowedHeaders?: string[];
-    /**
-     * An array of exposed headers: what headers are allowed to be sent in
-     * the response.
-     * Note: if you pass in an empty array, it will not expose any headers.
-     * If you want to extend the default exposed headers, you can do so by
-     * passing in [...DEFAULT_EXPOSED_HEADERS, ...yourHeaders].
-     * @default {@link DEFAULT_EXPOSED_HEADERS}
-     */
-    exposedHeaders?: string[];
-    /**
-     * The maximum age of the preflight request in seconds.
-     * @default 86400 (1 day)
-     */
-    browserCacheMaxAge?: number;
-    /**
-     * Whether to block requests from origins that are not in the allowedOrigins list.
-     * @default true
-     */
-    enforceAllowOrigins?: boolean;
-    /**
-     * Whether to log debugging information about CORS requests.
-     * @default false
-     */
-    debug?: boolean;
-};
-type RouteSpecWithCors = RouteSpec & CorsConfig;
-/**
- * Factory function to create a router that adds CORS support to routes.
- * @param allowedOrigins An array of allowed origins for CORS.
- * @returns A function to use instead of http.route when you want CORS.
- */
-export declare const corsRouter: (http: HttpRouter, corsConfig?: CorsConfig) => {
-    http: HttpRouter;
-    route: (routeSpec: RouteSpecWithCors) => void;
-};
-export default corsRouter;
-//# sourceMappingURL=cors.d.ts.map

package/dist/commonjs/client/cors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../../src/client/cors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAIL,UAAU,EAIV,KAAK,SAAS,EAGf,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,uBAAuB,UAInC,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAClE;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,KAAK,iBAAiB,GAAG,SAAS,GAAG,UAAU,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,UAAU,GAAI,MAAM,UAAU,EAAE,aAAa,UAAU;;uBAK7C,iBAAiB,KAAG,IAAI;CAsD9C,CAAC;AA+DF,eAAe,UAAU,CAAC"}