@depup/better-auth__core 1.6.23-depup.2

package/dist/social-providers/roblox.mjs

@@ -0,0 +1,57 @@
+import { refreshAccessToken } from "../oauth2/refresh-access-token.mjs";
+import { validateAuthorizationCode } from "../oauth2/validate-authorization-code.mjs";
+import { betterFetch } from "@better-fetch/fetch";
+//#region src/social-providers/roblox.ts
+const roblox = (options) => {
+	const tokenEndpoint = "https://apis.roblox.com/oauth/v1/token";
+	return {
+		id: "roblox",
+		name: "Roblox",
+		createAuthorizationURL({ state, scopes, redirectURI }) {
+			const _scopes = options.disableDefaultScope ? [] : ["openid", "profile"];
+			if (options.scope) _scopes.push(...options.scope);
+			if (scopes) _scopes.push(...scopes);
+			return new URL(`https://apis.roblox.com/oauth/v1/authorize?scope=${_scopes.join("+")}&response_type=code&client_id=${options.clientId}&redirect_uri=${encodeURIComponent(options.redirectURI || redirectURI)}&state=${state}&prompt=${options.prompt || "select_account consent"}`);
+		},
+		validateAuthorizationCode: async ({ code, redirectURI }) => {
+			return validateAuthorizationCode({
+				code,
+				redirectURI: options.redirectURI || redirectURI,
+				options,
+				tokenEndpoint,
+				authentication: "post"
+			});
+		},
+		refreshAccessToken: options.refreshAccessToken ? options.refreshAccessToken : async (refreshToken) => {
+			return refreshAccessToken({
+				refreshToken,
+				options: {
+					clientId: options.clientId,
+					clientKey: options.clientKey,
+					clientSecret: options.clientSecret
+				},
+				tokenEndpoint
+			});
+		},
+		async getUserInfo(token) {
+			if (options.getUserInfo) return options.getUserInfo(token);
+			const { data: profile, error } = await betterFetch("https://apis.roblox.com/oauth/v1/userinfo", { headers: { authorization: `Bearer ${token.accessToken}` } });
+			if (error) return null;
+			const userMap = await options.mapProfileToUser?.(profile);
+			return {
+				user: {
+					id: profile.sub,
+					name: profile.nickname || profile.preferred_username || "",
+					image: profile.picture,
+					email: profile.preferred_username || null,
+					emailVerified: false,
+					...userMap
+				},
+				data: { ...profile }
+			};
+		},
+		options
+	};
+};
+//#endregion
+export { roblox };

package/dist/social-providers/salesforce.d.mts

@@ -0,0 +1,79 @@
+import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
+//#region src/social-providers/salesforce.d.ts
+interface SalesforceProfile {
+  sub: string;
+  user_id: string;
+  organization_id: string;
+  preferred_username?: string | undefined;
+  email: string;
+  email_verified?: boolean | undefined;
+  name: string;
+  given_name?: string | undefined;
+  family_name?: string | undefined;
+  zoneinfo?: string | undefined;
+  photos?: {
+    picture?: string;
+    thumbnail?: string;
+  } | undefined;
+}
+interface SalesforceOptions extends ProviderOptions<SalesforceProfile> {
+  clientId: string;
+  environment?: ("sandbox" | "production") | undefined;
+  loginUrl?: string | undefined;
+  /**
+   * Override the redirect URI if auto-detection fails.
+   * Should match the Callback URL configured in your Salesforce Connected App.
+   * @example "http://localhost:3000/api/auth/callback/salesforce"
+   */
+  redirectURI?: string | undefined;
+}
+declare const salesforce: (options: SalesforceOptions) => {
+  id: "salesforce";
+  name: string;
+  createAuthorizationURL({
+    state,
+    scopes,
+    codeVerifier,
+    redirectURI
+  }: {
+    state: string;
+    codeVerifier: string;
+    scopes?: string[] | undefined;
+    redirectURI: string;
+    display?: string | undefined;
+    loginHint?: string | undefined;
+  }): Promise<URL>;
+  validateAuthorizationCode: ({
+    code,
+    codeVerifier,
+    redirectURI
+  }: {
+    code: string;
+    redirectURI: string;
+    codeVerifier?: string | undefined;
+    deviceId?: string | undefined;
+  }) => Promise<OAuth2Tokens>;
+  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+  getUserInfo(token: OAuth2Tokens & {
+    user?: {
+      name?: {
+        firstName?: string;
+        lastName?: string;
+      };
+      email?: string;
+    } | undefined;
+  }): Promise<{
+    user: {
+      id: string;
+      name?: string;
+      email?: string | null;
+      image?: string;
+      emailVerified: boolean;
+      [key: string]: any;
+    };
+    data: any;
+  } | null>;
+  options: SalesforceOptions;
+};
+//#endregion
+export { SalesforceOptions, SalesforceProfile, salesforce };

package/dist/social-providers/salesforce.mjs

@@ -0,0 +1,87 @@
+import { BetterAuthError } from "../error/index.mjs";
+import { logger } from "../env/logger.mjs";
+import { createAuthorizationURL } from "../oauth2/create-authorization-url.mjs";
+import { refreshAccessToken } from "../oauth2/refresh-access-token.mjs";
+import { validateAuthorizationCode } from "../oauth2/validate-authorization-code.mjs";
+import { betterFetch } from "@better-fetch/fetch";
+//#region src/social-providers/salesforce.ts
+const salesforce = (options) => {
+	const isSandbox = (options.environment ?? "production") === "sandbox";
+	const authorizationEndpoint = options.loginUrl ? `https://${options.loginUrl}/services/oauth2/authorize` : isSandbox ? "https://test.salesforce.com/services/oauth2/authorize" : "https://login.salesforce.com/services/oauth2/authorize";
+	const tokenEndpoint = options.loginUrl ? `https://${options.loginUrl}/services/oauth2/token` : isSandbox ? "https://test.salesforce.com/services/oauth2/token" : "https://login.salesforce.com/services/oauth2/token";
+	const userInfoEndpoint = options.loginUrl ? `https://${options.loginUrl}/services/oauth2/userinfo` : isSandbox ? "https://test.salesforce.com/services/oauth2/userinfo" : "https://login.salesforce.com/services/oauth2/userinfo";
+	return {
+		id: "salesforce",
+		name: "Salesforce",
+		async createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }) {
+			if (!options.clientId || !options.clientSecret) {
+				logger.error("Client Id and Client Secret are required for Salesforce. Make sure to provide them in the options.");
+				throw new BetterAuthError("CLIENT_ID_AND_SECRET_REQUIRED");
+			}
+			if (!codeVerifier) throw new BetterAuthError("codeVerifier is required for Salesforce");
+			const _scopes = options.disableDefaultScope ? [] : [
+				"openid",
+				"email",
+				"profile"
+			];
+			if (options.scope) _scopes.push(...options.scope);
+			if (scopes) _scopes.push(...scopes);
+			return createAuthorizationURL({
+				id: "salesforce",
+				options,
+				authorizationEndpoint,
+				scopes: _scopes,
+				state,
+				codeVerifier,
+				redirectURI: options.redirectURI || redirectURI
+			});
+		},
+		validateAuthorizationCode: async ({ code, codeVerifier, redirectURI }) => {
+			return validateAuthorizationCode({
+				code,
+				codeVerifier,
+				redirectURI: options.redirectURI || redirectURI,
+				options,
+				tokenEndpoint
+			});
+		},
+		refreshAccessToken: options.refreshAccessToken ? options.refreshAccessToken : async (refreshToken) => {
+			return refreshAccessToken({
+				refreshToken,
+				options: {
+					clientId: options.clientId,
+					clientSecret: options.clientSecret
+				},
+				tokenEndpoint
+			});
+		},
+		async getUserInfo(token) {
+			if (options.getUserInfo) return options.getUserInfo(token);
+			try {
+				const { data: user } = await betterFetch(userInfoEndpoint, { headers: { Authorization: `Bearer ${token.accessToken}` } });
+				if (!user) {
+					logger.error("Failed to fetch user info from Salesforce");
+					return null;
+				}
+				const userMap = await options.mapProfileToUser?.(user);
+				return {
+					user: {
+						id: user.user_id,
+						name: user.name,
+						email: user.email,
+						image: user.photos?.picture || user.photos?.thumbnail,
+						emailVerified: user.email_verified ?? false,
+						...userMap
+					},
+					data: user
+				};
+			} catch (error) {
+				logger.error("Failed to fetch user info from Salesforce:", error);
+				return null;
+			}
+		},
+		options
+	};
+};
+//#endregion
+export { salesforce };

package/dist/social-providers/slack.d.mts

@@ -0,0 +1,83 @@
+import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
+//#region src/social-providers/slack.d.ts
+interface SlackProfile extends Record<string, any> {
+  ok: boolean;
+  sub: string;
+  "https://slack.com/user_id": string;
+  "https://slack.com/team_id": string;
+  email: string;
+  email_verified: boolean;
+  date_email_verified: number;
+  name: string;
+  picture: string;
+  given_name: string;
+  family_name: string;
+  locale: string;
+  "https://slack.com/team_name": string;
+  "https://slack.com/team_domain": string;
+  "https://slack.com/user_image_24": string;
+  "https://slack.com/user_image_32": string;
+  "https://slack.com/user_image_48": string;
+  "https://slack.com/user_image_72": string;
+  "https://slack.com/user_image_192": string;
+  "https://slack.com/user_image_512": string;
+  "https://slack.com/team_image_34": string;
+  "https://slack.com/team_image_44": string;
+  "https://slack.com/team_image_68": string;
+  "https://slack.com/team_image_88": string;
+  "https://slack.com/team_image_102": string;
+  "https://slack.com/team_image_132": string;
+  "https://slack.com/team_image_230": string;
+  "https://slack.com/team_image_default": boolean;
+}
+interface SlackOptions extends ProviderOptions<SlackProfile> {
+  clientId: string;
+}
+declare const slack: (options: SlackOptions) => {
+  id: "slack";
+  name: string;
+  createAuthorizationURL({
+    state,
+    scopes,
+    redirectURI
+  }: {
+    state: string;
+    codeVerifier: string;
+    scopes?: string[] | undefined;
+    redirectURI: string;
+    display?: string | undefined;
+    loginHint?: string | undefined;
+  }): URL;
+  validateAuthorizationCode: ({
+    code,
+    redirectURI
+  }: {
+    code: string;
+    redirectURI: string;
+    codeVerifier?: string | undefined;
+    deviceId?: string | undefined;
+  }) => Promise<OAuth2Tokens>;
+  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+  getUserInfo(token: OAuth2Tokens & {
+    user?: {
+      name?: {
+        firstName?: string;
+        lastName?: string;
+      };
+      email?: string;
+    } | undefined;
+  }): Promise<{
+    user: {
+      id: string;
+      name?: string;
+      email?: string | null;
+      image?: string;
+      emailVerified: boolean;
+      [key: string]: any;
+    };
+    data: any;
+  } | null>;
+  options: SlackOptions;
+};
+//#endregion
+export { SlackOptions, SlackProfile, slack };

package/dist/social-providers/slack.mjs

@@ -0,0 +1,66 @@
+import { refreshAccessToken } from "../oauth2/refresh-access-token.mjs";
+import { validateAuthorizationCode } from "../oauth2/validate-authorization-code.mjs";
+import { betterFetch } from "@better-fetch/fetch";
+//#region src/social-providers/slack.ts
+const slack = (options) => {
+	const tokenEndpoint = "https://slack.com/api/openid.connect.token";
+	return {
+		id: "slack",
+		name: "Slack",
+		createAuthorizationURL({ state, scopes, redirectURI }) {
+			const _scopes = options.disableDefaultScope ? [] : [
+				"openid",
+				"profile",
+				"email"
+			];
+			if (scopes) _scopes.push(...scopes);
+			if (options.scope) _scopes.push(...options.scope);
+			const url = new URL("https://slack.com/openid/connect/authorize");
+			url.searchParams.set("scope", _scopes.join(" "));
+			url.searchParams.set("response_type", "code");
+			url.searchParams.set("client_id", options.clientId);
+			url.searchParams.set("redirect_uri", options.redirectURI || redirectURI);
+			url.searchParams.set("state", state);
+			return url;
+		},
+		validateAuthorizationCode: async ({ code, redirectURI }) => {
+			return validateAuthorizationCode({
+				code,
+				redirectURI,
+				options,
+				tokenEndpoint
+			});
+		},
+		refreshAccessToken: options.refreshAccessToken ? options.refreshAccessToken : async (refreshToken) => {
+			return refreshAccessToken({
+				refreshToken,
+				options: {
+					clientId: options.clientId,
+					clientKey: options.clientKey,
+					clientSecret: options.clientSecret
+				},
+				tokenEndpoint
+			});
+		},
+		async getUserInfo(token) {
+			if (options.getUserInfo) return options.getUserInfo(token);
+			const { data: profile, error } = await betterFetch("https://slack.com/api/openid.connect.userInfo", { headers: { authorization: `Bearer ${token.accessToken}` } });
+			if (error) return null;
+			const userMap = await options.mapProfileToUser?.(profile);
+			return {
+				user: {
+					id: profile["https://slack.com/user_id"],
+					name: profile.name || "",
+					email: profile.email,
+					emailVerified: profile.email_verified,
+					image: profile.picture || profile["https://slack.com/user_image_512"],
+					...userMap
+				},
+				data: profile
+			};
+		},
+		options
+	};
+};
+//#endregion
+export { slack };

package/dist/social-providers/spotify.d.mts

@@ -0,0 +1,63 @@
+import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
+//#region src/social-providers/spotify.d.ts
+interface SpotifyProfile {
+  id: string;
+  display_name: string;
+  email: string;
+  images: {
+    url: string;
+  }[];
+}
+interface SpotifyOptions extends ProviderOptions<SpotifyProfile> {
+  clientId: string;
+}
+declare const spotify: (options: SpotifyOptions) => {
+  id: "spotify";
+  name: string;
+  createAuthorizationURL({
+    state,
+    scopes,
+    codeVerifier,
+    redirectURI
+  }: {
+    state: string;
+    codeVerifier: string;
+    scopes?: string[] | undefined;
+    redirectURI: string;
+    display?: string | undefined;
+    loginHint?: string | undefined;
+  }): Promise<URL>;
+  validateAuthorizationCode: ({
+    code,
+    codeVerifier,
+    redirectURI
+  }: {
+    code: string;
+    redirectURI: string;
+    codeVerifier?: string | undefined;
+    deviceId?: string | undefined;
+  }) => Promise<OAuth2Tokens>;
+  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+  getUserInfo(token: OAuth2Tokens & {
+    user?: {
+      name?: {
+        firstName?: string;
+        lastName?: string;
+      };
+      email?: string;
+    } | undefined;
+  }): Promise<{
+    user: {
+      id: string;
+      name?: string;
+      email?: string | null;
+      image?: string;
+      emailVerified: boolean;
+      [key: string]: any;
+    };
+    data: any;
+  } | null>;
+  options: SpotifyOptions;
+};
+//#endregion
+export { SpotifyOptions, SpotifyProfile, spotify };

package/dist/social-providers/spotify.mjs

@@ -0,0 +1,69 @@
+import { createAuthorizationURL } from "../oauth2/create-authorization-url.mjs";
+import { refreshAccessToken } from "../oauth2/refresh-access-token.mjs";
+import { validateAuthorizationCode } from "../oauth2/validate-authorization-code.mjs";
+import { betterFetch } from "@better-fetch/fetch";
+//#region src/social-providers/spotify.ts
+const spotify = (options) => {
+	const tokenEndpoint = "https://accounts.spotify.com/api/token";
+	return {
+		id: "spotify",
+		name: "Spotify",
+		createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }) {
+			const _scopes = options.disableDefaultScope ? [] : ["user-read-email"];
+			if (options.scope) _scopes.push(...options.scope);
+			if (scopes) _scopes.push(...scopes);
+			return createAuthorizationURL({
+				id: "spotify",
+				options,
+				authorizationEndpoint: "https://accounts.spotify.com/authorize",
+				scopes: _scopes,
+				state,
+				codeVerifier,
+				redirectURI
+			});
+		},
+		validateAuthorizationCode: async ({ code, codeVerifier, redirectURI }) => {
+			return validateAuthorizationCode({
+				code,
+				codeVerifier,
+				redirectURI,
+				options,
+				tokenEndpoint
+			});
+		},
+		refreshAccessToken: options.refreshAccessToken ? options.refreshAccessToken : async (refreshToken) => {
+			return refreshAccessToken({
+				refreshToken,
+				options: {
+					clientId: options.clientId,
+					clientKey: options.clientKey,
+					clientSecret: options.clientSecret
+				},
+				tokenEndpoint
+			});
+		},
+		async getUserInfo(token) {
+			if (options.getUserInfo) return options.getUserInfo(token);
+			const { data: profile, error } = await betterFetch("https://api.spotify.com/v1/me", {
+				method: "GET",
+				headers: { Authorization: `Bearer ${token.accessToken}` }
+			});
+			if (error) return null;
+			const userMap = await options.mapProfileToUser?.(profile);
+			return {
+				user: {
+					id: profile.id,
+					name: profile.display_name,
+					email: profile.email,
+					image: profile.images[0]?.url,
+					emailVerified: false,
+					...userMap
+				},
+				data: profile
+			};
+		},
+		options
+	};
+};
+//#endregion
+export { spotify };

package/dist/social-providers/tiktok.d.mts

@@ -0,0 +1,168 @@
+import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
+//#region src/social-providers/tiktok.d.ts
+/**
+ * [More info](https://developers.tiktok.com/doc/tiktok-api-v2-get-user-info/)
+ */
+interface TiktokProfile extends Record<string, any> {
+  data: {
+    user: {
+      /**
+       * The unique identification of the user in the current application.Open id
+       * for the client.
+       *
+       * To return this field, add `fields=open_id` in the user profile request's query parameter.
+       */
+      open_id: string;
+      /**
+       * The unique identification of the user across different apps for the same developer.
+       * For example, if a partner has X number of clients,
+       * it will get X number of open_id for the same TikTok user,
+       * but one persistent union_id for the particular user.
+       *
+       * To return this field, add `fields=union_id` in the user profile request's query parameter.
+       */
+      union_id?: string | undefined;
+      /**
+       * User's profile image.
+       *
+       * To return this field, add `fields=avatar_url` in the user profile request's query parameter.
+       */
+      avatar_url?: string | undefined;
+      /**
+       * User`s profile image in 100x100 size.
+       *
+       * To return this field, add `fields=avatar_url_100` in the user profile request's query parameter.
+       */
+      avatar_url_100?: string | undefined;
+      /**
+       * User's profile image with higher resolution
+       *
+       * To return this field, add `fields=avatar_url_100` in the user profile request's query parameter.
+       */
+      avatar_large_url: string;
+      /**
+       * User's profile name
+       *
+       * To return this field, add `fields=display_name` in the user profile request's query parameter.
+       */
+      display_name: string;
+      /**
+       * User's username.
+       *
+       * To return this field, add `fields=username` in the user profile request's query parameter.
+       */
+      username: string; /** @note Email is currently unsupported by TikTok  */
+      email?: string | undefined;
+      /**
+       * User's bio description if there is a valid one.
+       *
+       * To return this field, add `fields=bio_description` in the user profile request's query parameter.
+       */
+      bio_description?: string | undefined;
+      /**
+       * The link to user's TikTok profile page.
+       *
+       * To return this field, add `fields=profile_deep_link` in the user profile request's query parameter.
+       */
+      profile_deep_link?: string | undefined;
+      /**
+       * Whether TikTok has provided a verified badge to the account after confirming
+       * that it belongs to the user it represents.
+       *
+       * To return this field, add `fields=is_verified` in the user profile request's query parameter.
+       */
+      is_verified?: boolean | undefined;
+      /**
+       * User's followers count.
+       *
+       * To return this field, add `fields=follower_count` in the user profile request's query parameter.
+       */
+      follower_count?: number | undefined;
+      /**
+       * The number of accounts that the user is following.
+       *
+       * To return this field, add `fields=following_count` in the user profile request's query parameter.
+       */
+      following_count?: number | undefined;
+      /**
+       * The total number of likes received by the user across all of their videos.
+       *
+       * To return this field, add `fields=likes_count` in the user profile request's query parameter.
+       */
+      likes_count?: number | undefined;
+      /**
+       * The total number of publicly posted videos by the user.
+       *
+       * To return this field, add `fields=video_count` in the user profile request's query parameter.
+       */
+      video_count?: number | undefined;
+    };
+  };
+  error?: {
+    /**
+     * The error category in string.
+     */
+    code?: string;
+    /**
+     * The error message in string.
+     */
+    message?: string;
+    /**
+     * The error message in string.
+     */
+    log_id?: string;
+  } | undefined;
+}
+interface TiktokOptions extends ProviderOptions {
+  clientId?: never | undefined;
+  clientSecret: string;
+  clientKey: string;
+}
+declare const tiktok: (options: TiktokOptions) => {
+  id: "tiktok";
+  name: string;
+  createAuthorizationURL({
+    state,
+    scopes,
+    redirectURI
+  }: {
+    state: string;
+    codeVerifier: string;
+    scopes?: string[] | undefined;
+    redirectURI: string;
+    display?: string | undefined;
+    loginHint?: string | undefined;
+  }): URL;
+  validateAuthorizationCode: ({
+    code,
+    redirectURI
+  }: {
+    code: string;
+    redirectURI: string;
+    codeVerifier?: string | undefined;
+    deviceId?: string | undefined;
+  }) => Promise<OAuth2Tokens>;
+  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+  getUserInfo(token: OAuth2Tokens & {
+    user?: {
+      name?: {
+        firstName?: string;
+        lastName?: string;
+      };
+      email?: string;
+    } | undefined;
+  }): Promise<{
+    user: {
+      id: string;
+      name?: string;
+      email?: string | null;
+      image?: string;
+      emailVerified: boolean;
+      [key: string]: any;
+    };
+    data: any;
+  } | null>;
+  options: TiktokOptions;
+};
+//#endregion
+export { TiktokOptions, TiktokProfile, tiktok };