@depup/better-auth__core 1.6.23-depup.2

package/dist/social-providers/wechat.d.mts

@@ -0,0 +1,113 @@
+import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
+//#region src/social-providers/wechat.d.ts
+/**
+ * WeChat user profile information
+ * @see https://developers.weixin.qq.com/doc/oplatform/en/Website_App/WeChat_Login/Wechat_Login.html
+ */
+interface WeChatProfile extends Record<string, any> {
+  /**
+   * User's unique OpenID
+   */
+  openid: string;
+  /**
+   * User's nickname
+   */
+  nickname: string;
+  /**
+   * User's avatar image URL
+   */
+  headimgurl: string;
+  /**
+   * User's privileges
+   */
+  privilege: string[];
+  /**
+   * User's UnionID (unique across the developer's various applications)
+   */
+  unionid?: string;
+  /** @note Email is currently unsupported by WeChat */
+  email?: string;
+}
+interface WeChatOptions extends ProviderOptions<WeChatProfile> {
+  /**
+   * WeChat App ID
+   */
+  clientId: string;
+  /**
+   * WeChat App Secret
+   */
+  clientSecret: string;
+  /**
+   * Platform type for WeChat login
+   * - Currently only supports "WebsiteApp" for WeChat Website Application (网站应用)
+   * @default "WebsiteApp"
+   */
+  platformType?: "WebsiteApp";
+  /**
+   * UI language for the WeChat login page
+   * cn for Simplified Chinese, en for English
+   * @default "cn" if left undefined
+   */
+  lang?: "cn" | "en";
+}
+declare const wechat: (options: WeChatOptions) => {
+  id: "wechat";
+  name: string;
+  createAuthorizationURL({
+    state,
+    scopes,
+    redirectURI
+  }: {
+    state: string;
+    codeVerifier: string;
+    scopes?: string[] | undefined;
+    redirectURI: string;
+    display?: string | undefined;
+    loginHint?: string | undefined;
+  }): URL;
+  validateAuthorizationCode: ({
+    code
+  }: {
+    code: string;
+    redirectURI: string;
+    codeVerifier?: string | undefined;
+    deviceId?: string | undefined;
+  }) => Promise<{
+    tokenType: "Bearer";
+    accessToken: string;
+    refreshToken: string;
+    accessTokenExpiresAt: Date;
+    scopes: string[];
+    openid: string;
+    unionid: string | undefined;
+  }>;
+  refreshAccessToken: ((refreshToken: string) => Promise<OAuth2Tokens>) | ((refreshToken: string) => Promise<{
+    tokenType: "Bearer";
+    accessToken: string;
+    refreshToken: string;
+    accessTokenExpiresAt: Date;
+    scopes: string[];
+  }>);
+  getUserInfo(token: OAuth2Tokens & {
+    user?: {
+      name?: {
+        firstName?: string;
+        lastName?: string;
+      };
+      email?: string;
+    } | undefined;
+  }): Promise<{
+    user: {
+      id: string;
+      name?: string;
+      email?: string | null;
+      image?: string;
+      emailVerified: boolean;
+      [key: string]: any;
+    };
+    data: any;
+  } | null>;
+  options: WeChatOptions;
+};
+//#endregion
+export { WeChatOptions, WeChatProfile, wechat };

package/dist/social-providers/wechat.mjs

@@ -0,0 +1,81 @@
+import { betterFetch } from "@better-fetch/fetch";
+//#region src/social-providers/wechat.ts
+const wechat = (options) => {
+	return {
+		id: "wechat",
+		name: "WeChat",
+		createAuthorizationURL({ state, scopes, redirectURI }) {
+			const _scopes = options.disableDefaultScope ? [] : ["snsapi_login"];
+			options.scope && _scopes.push(...options.scope);
+			scopes && _scopes.push(...scopes);
+			const url = new URL("https://open.weixin.qq.com/connect/qrconnect");
+			url.searchParams.set("scope", _scopes.join(","));
+			url.searchParams.set("response_type", "code");
+			url.searchParams.set("appid", options.clientId);
+			url.searchParams.set("redirect_uri", options.redirectURI || redirectURI);
+			url.searchParams.set("state", state);
+			url.searchParams.set("lang", options.lang || "cn");
+			url.hash = "wechat_redirect";
+			return url;
+		},
+		validateAuthorizationCode: async ({ code }) => {
+			const { data: tokenData, error } = await betterFetch("https://api.weixin.qq.com/sns/oauth2/access_token?" + new URLSearchParams({
+				appid: options.clientId,
+				secret: options.clientSecret,
+				code,
+				grant_type: "authorization_code"
+			}).toString(), { method: "GET" });
+			if (error || !tokenData || tokenData.errcode) throw new Error(`Failed to validate authorization code: ${tokenData?.errmsg || error?.message || "Unknown error"}`);
+			return {
+				tokenType: "Bearer",
+				accessToken: tokenData.access_token,
+				refreshToken: tokenData.refresh_token,
+				accessTokenExpiresAt: new Date(Date.now() + tokenData.expires_in * 1e3),
+				scopes: tokenData.scope.split(","),
+				openid: tokenData.openid,
+				unionid: tokenData.unionid
+			};
+		},
+		refreshAccessToken: options.refreshAccessToken ? options.refreshAccessToken : async (refreshToken) => {
+			const { data: tokenData, error } = await betterFetch("https://api.weixin.qq.com/sns/oauth2/refresh_token?" + new URLSearchParams({
+				appid: options.clientId,
+				grant_type: "refresh_token",
+				refresh_token: refreshToken
+			}).toString(), { method: "GET" });
+			if (error || !tokenData || tokenData.errcode) throw new Error(`Failed to refresh access token: ${tokenData?.errmsg || error?.message || "Unknown error"}`);
+			return {
+				tokenType: "Bearer",
+				accessToken: tokenData.access_token,
+				refreshToken: tokenData.refresh_token,
+				accessTokenExpiresAt: new Date(Date.now() + tokenData.expires_in * 1e3),
+				scopes: tokenData.scope.split(",")
+			};
+		},
+		async getUserInfo(token) {
+			if (options.getUserInfo) return options.getUserInfo(token);
+			const openid = token.openid;
+			if (!openid) return null;
+			const { data: profile, error } = await betterFetch("https://api.weixin.qq.com/sns/userinfo?" + new URLSearchParams({
+				access_token: token.accessToken || "",
+				openid,
+				lang: "zh_CN"
+			}).toString(), { method: "GET" });
+			if (error || !profile || profile.errcode) return null;
+			const userMap = await options.mapProfileToUser?.(profile);
+			return {
+				user: {
+					id: profile.unionid || profile.openid || openid,
+					name: profile.nickname,
+					email: profile.email || `${profile.unionid || profile.openid || openid}@wechat.invalid`,
+					image: profile.headimgurl,
+					emailVerified: false,
+					...userMap
+				},
+				data: profile
+			};
+		},
+		options
+	};
+};
+//#endregion
+export { wechat };

package/dist/social-providers/zoom.d.mts

@@ -0,0 +1,163 @@
+import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
+//#region src/social-providers/zoom.d.ts
+type LoginType = 0 /** Facebook OAuth */ | 1 /** Google OAuth */ | 24 /** Apple OAuth */ | 27 /** Microsoft OAuth */ | 97 /** Mobile device */ | 98 /** RingCentral OAuth */ | 99 /** API user */ | 100 /** Zoom Work email */ | 101;
+/** Single Sign-On (SSO) */
+type AccountStatus = "pending" | "active" | "inactive";
+type PronounOption = 1 /** Ask the user every time */ | 2 /** Always display */ | 3;
+/** Do not display */
+interface PhoneNumber {
+  /** The country code of the phone number (Example: "+1") */
+  code: string;
+  /** The country of the phone number (Example: "US") */
+  country: string;
+  /** The label for the phone number (Example: "Mobile") */
+  label: string;
+  /** The phone number itself (Example: "800000000") */
+  number: string;
+  /** Whether the phone number has been verified (Example: true) */
+  verified: boolean;
+}
+/**
+ * See the full documentation below:
+ * https://developers.zoom.us/docs/api/users/#tag/users/GET/users/{userId}
+ */
+interface ZoomProfile extends Record<string, any> {
+  /** The user's account ID (Example: "q6gBJVO5TzexKYTb_I2rpg") */
+  account_id: string;
+  /** The user's account number (Example: 10009239) */
+  account_number: number;
+  /** The user's cluster (Example: "us04") */
+  cluster: string;
+  /** The user's CMS ID. Only enabled for Kaltura integration (Example: "KDcuGIm1QgePTO8WbOqwIQ") */
+  cms_user_id: string;
+  /** The user's cost center (Example: "cost center") */
+  cost_center: string;
+  /** User create time (Example: "2018-10-31T04:32:37Z") */
+  created_at: string;
+  /** Department (Example: "Developers") */
+  dept: string;
+  /** User's display name (Example: "Jill Chill") */
+  display_name: string;
+  /** User's email address (Example: "jchill@example.com") */
+  email: string;
+  /** User's first name (Example: "Jill") */
+  first_name: string;
+  /** IDs of the web groups that the user belongs to (Example: ["RSMaSp8sTEGK0_oamiA2_w"]) */
+  group_ids: string[];
+  /** User ID (Example: "zJKyaiAyTNC-MWjiWC18KQ") */
+  id: string;
+  /** IM IDs of the groups that the user belongs to (Example: ["t-_-d56CSWG-7BF15LLrOw"]) */
+  im_group_ids: string[];
+  /** The user's JID (Example: "jchill@example.com") */
+  jid: string;
+  /** The user's job title (Example: "API Developer") */
+  job_title: string;
+  /** Default language for the Zoom Web Portal (Example: "en-US") */
+  language: string;
+  /** User last login client version (Example: "5.9.6.4993(mac)") */
+  last_client_version: string;
+  /** User last login time (Example: "2021-05-05T20:40:30Z") */
+  last_login_time: string;
+  /** User's last name (Example: "Chill") */
+  last_name: string;
+  /** The time zone of the user (Example: "Asia/Shanghai") */
+  timezone: string;
+  /** User's location (Example: "Paris") */
+  location: string;
+  /** The user's login method (Example: 101) */
+  login_types: LoginType[];
+  /** User's personal meeting URL (Example: "example.com") */
+  personal_meeting_url: string;
+  /** The URL for user's profile picture (Example: "example.com") */
+  pic_url: string;
+  /** Personal Meeting ID (PMI) (Example: 3542471135) */
+  pmi: number;
+  /** Unique identifier of the user's assigned role (Example: "0") */
+  role_id: string;
+  /** User's role name (Example: "Admin") */
+  role_name: string;
+  /** Status of user's account (Example: "pending") */
+  status: AccountStatus;
+  /** Use the personal meeting ID (PMI) for instant meetings (Example: false) */
+  use_pmi: boolean;
+  /** The time and date when the user was created (Example: "2018-10-31T04:32:37Z") */
+  user_created_at: string;
+  /** Displays whether user is verified or not (Example: 1) */
+  verified: number;
+  /** The user's Zoom Workplace plan option (Example: 64) */
+  zoom_one_type: number;
+  /** The user's company (Example: "Jill") */
+  company?: string | undefined;
+  /** Custom attributes that have been assigned to the user (Example: [{ "key": "cbf_cywdkexrtqc73f97gd4w6g", "name": "A1", "value": "1" }]) */
+  custom_attributes?: {
+    key: string;
+    name: string;
+    value: string;
+  }[] | undefined;
+  /** The employee's unique ID. This field only returns when SAML single sign-on (SSO) is enabled. The `login_type` value is `101` (SSO) (Example: "HqDyI037Qjili1kNsSIrIg") */
+  employee_unique_id?: string | undefined;
+  /** The manager for the user (Example: "thill@example.com") */
+  manager?: string | undefined;
+  /** The phone number's ISO country code (Example: "+1") */
+  phone_numbers?: PhoneNumber[] | undefined;
+  /** The user's plan type (Example: "1") */
+  plan_united_type?: string | undefined;
+  /** The user's pronouns (Example: "3123") */
+  pronouns?: string | undefined;
+  /** The user's display pronouns setting (Example: 1) */
+  pronouns_option?: PronounOption | undefined;
+  /** Personal meeting room URL, if the user has one (Example: "example.com") */
+  vanity_url?: string | undefined;
+}
+interface ZoomOptions extends ProviderOptions<ZoomProfile> {
+  clientId: string;
+  pkce?: boolean | undefined;
+}
+declare const zoom: (userOptions: ZoomOptions) => {
+  id: "zoom";
+  name: string;
+  createAuthorizationURL: ({
+    state,
+    redirectURI,
+    codeVerifier
+  }: {
+    state: string;
+    codeVerifier: string;
+    scopes?: string[] | undefined;
+    redirectURI: string;
+    display?: string | undefined;
+    loginHint?: string | undefined;
+  }) => Promise<URL>;
+  validateAuthorizationCode: ({
+    code,
+    redirectURI,
+    codeVerifier
+  }: {
+    code: string;
+    redirectURI: string;
+    codeVerifier?: string | undefined;
+    deviceId?: string | undefined;
+  }) => Promise<OAuth2Tokens>;
+  refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+  getUserInfo(token: OAuth2Tokens & {
+    user?: {
+      name?: {
+        firstName?: string;
+        lastName?: string;
+      };
+      email?: string;
+    } | undefined;
+  }): Promise<{
+    user: {
+      id: string;
+      name?: string;
+      email?: string | null;
+      image?: string;
+      emailVerified: boolean;
+      [key: string]: any;
+    };
+    data: any;
+  } | null>;
+};
+//#endregion
+export { AccountStatus, LoginType, PhoneNumber, PronounOption, ZoomOptions, ZoomProfile, zoom };

package/dist/social-providers/zoom.mjs

@@ -0,0 +1,69 @@
+import { generateCodeChallenge } from "../oauth2/utils.mjs";
+import { refreshAccessToken } from "../oauth2/refresh-access-token.mjs";
+import { validateAuthorizationCode } from "../oauth2/validate-authorization-code.mjs";
+import { betterFetch } from "@better-fetch/fetch";
+//#region src/social-providers/zoom.ts
+const zoom = (userOptions) => {
+	const options = {
+		pkce: true,
+		...userOptions
+	};
+	return {
+		id: "zoom",
+		name: "Zoom",
+		createAuthorizationURL: async ({ state, redirectURI, codeVerifier }) => {
+			const params = new URLSearchParams({
+				response_type: "code",
+				redirect_uri: options.redirectURI ? options.redirectURI : redirectURI,
+				client_id: options.clientId,
+				state
+			});
+			if (options.pkce) {
+				const codeChallenge = await generateCodeChallenge(codeVerifier);
+				params.set("code_challenge_method", "S256");
+				params.set("code_challenge", codeChallenge);
+			}
+			const url = new URL("https://zoom.us/oauth/authorize");
+			url.search = params.toString();
+			return url;
+		},
+		validateAuthorizationCode: async ({ code, redirectURI, codeVerifier }) => {
+			return validateAuthorizationCode({
+				code,
+				redirectURI: options.redirectURI || redirectURI,
+				codeVerifier,
+				options,
+				tokenEndpoint: "https://zoom.us/oauth/token",
+				authentication: "post"
+			});
+		},
+		refreshAccessToken: options.refreshAccessToken ? options.refreshAccessToken : async (refreshToken) => refreshAccessToken({
+			refreshToken,
+			options: {
+				clientId: options.clientId,
+				clientKey: options.clientKey,
+				clientSecret: options.clientSecret
+			},
+			tokenEndpoint: "https://zoom.us/oauth/token"
+		}),
+		async getUserInfo(token) {
+			if (options.getUserInfo) return options.getUserInfo(token);
+			const { data: profile, error } = await betterFetch("https://api.zoom.us/v2/users/me", { headers: { authorization: `Bearer ${token.accessToken}` } });
+			if (error) return null;
+			const userMap = await options.mapProfileToUser?.(profile);
+			return {
+				user: {
+					id: profile.id,
+					name: profile.display_name,
+					image: profile.pic_url,
+					email: profile.email,
+					emailVerified: Boolean(profile.verified),
+					...userMap
+				},
+				data: { ...profile }
+			};
+		}
+	};
+};
+//#endregion
+export { zoom };