@dreamshive/better-auth-tauri 0.1.0

package/dist/online-manager.js

@@ -0,0 +1,25 @@
+/**
+ * Refetch the session when the network comes back online. Useful after
+ * suspend/resume or a flaky wifi transition — otherwise the session
+ * store would keep showing the cached pre-disconnect state until some
+ * other request tries (and fails) to reach the server.
+ *
+ * Uses the browser's standard `online` event, which the Tauri WebView
+ * exposes the same way Chrome/Safari do. No Tauri plugin needed — the
+ * OS-level network state flows through the webview's navigator.
+ *
+ * Returns an unlisten function.
+ */
+export function setupTauriOnlineManager(store) {
+    if (typeof window === "undefined") {
+        return () => { };
+    }
+    const handleOnline = () => {
+        store.notify("$sessionSignal");
+    };
+    window.addEventListener("online", handleOnline);
+    return () => {
+        window.removeEventListener("online", handleOnline);
+    };
+}
+//# sourceMappingURL=online-manager.js.map

package/dist/online-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"online-manager.js","sourceRoot":"","sources":["../src/online-manager.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAkB;IACxD,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACjC,CAAC,CAAC;IAEF,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEhD,OAAO,GAAG,EAAE;QACV,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACrD,CAAC,CAAC;AACJ,CAAC"}

package/dist/routes.d.ts

@@ -0,0 +1,46 @@
+import * as z from "zod";
+/**
+ * Server-side proxy that plants the OAuth CSRF state cookie in the system
+ * browser's cookie jar *before* redirecting to the provider's authorization
+ * URL. Without this, Better Auth's callback state-vs-cookie check fails in
+ * the Tauri flow because the state cookie was set on the `/sign-in/social`
+ * response inside the Tauri webview — a different cookie jar from the one
+ * the system browser uses for the actual OAuth dance.
+ *
+ * Two modes, matching the Expo plugin:
+ *
+ * 1. `oauthState` query param present → plant it as a plain `oauth_state`
+ *    cookie (10 min TTL). Used when the client already has a stored state
+ *    it wants re-seeded before starting the flow.
+ *
+ * 2. `oauthState` absent → extract the `state` query param from the
+ *    authorization URL and plant it as a signed `state` cookie (5 min
+ *    TTL). This is the common path for a fresh OAuth sign-in.
+ *
+ * Endpoint is hidden from the Better Auth route docs — it's an internal
+ * detail of the Tauri plugin flow.
+ */
+export declare const tauriAuthorizationProxy: import("better-call").StrictEndpoint<"/tauri-authorization-proxy", {
+    method: "GET";
+    query: z.ZodObject<{
+        authorizationURL: z.ZodString;
+        oauthState: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    metadata: {
+        readonly scope: "server";
+    };
+}, {
+    status: ("OK" | "CREATED" | "ACCEPTED" | "NO_CONTENT" | "MULTIPLE_CHOICES" | "MOVED_PERMANENTLY" | "FOUND" | "SEE_OTHER" | "NOT_MODIFIED" | "TEMPORARY_REDIRECT" | "BAD_REQUEST" | "UNAUTHORIZED" | "PAYMENT_REQUIRED" | "FORBIDDEN" | "NOT_FOUND" | "METHOD_NOT_ALLOWED" | "NOT_ACCEPTABLE" | "PROXY_AUTHENTICATION_REQUIRED" | "REQUEST_TIMEOUT" | "CONFLICT" | "GONE" | "LENGTH_REQUIRED" | "PRECONDITION_FAILED" | "PAYLOAD_TOO_LARGE" | "URI_TOO_LONG" | "UNSUPPORTED_MEDIA_TYPE" | "RANGE_NOT_SATISFIABLE" | "EXPECTATION_FAILED" | "I'M_A_TEAPOT" | "MISDIRECTED_REQUEST" | "UNPROCESSABLE_ENTITY" | "LOCKED" | "FAILED_DEPENDENCY" | "TOO_EARLY" | "UPGRADE_REQUIRED" | "PRECONDITION_REQUIRED" | "TOO_MANY_REQUESTS" | "REQUEST_HEADER_FIELDS_TOO_LARGE" | "UNAVAILABLE_FOR_LEGAL_REASONS" | "INTERNAL_SERVER_ERROR" | "NOT_IMPLEMENTED" | "BAD_GATEWAY" | "SERVICE_UNAVAILABLE" | "GATEWAY_TIMEOUT" | "HTTP_VERSION_NOT_SUPPORTED" | "VARIANT_ALSO_NEGOTIATES" | "INSUFFICIENT_STORAGE" | "LOOP_DETECTED" | "NOT_EXTENDED" | "NETWORK_AUTHENTICATION_REQUIRED") | import("better-call").Status;
+    body: ({
+        message?: string;
+        code?: string;
+        cause?: unknown;
+    } & Record<string, any>) | undefined;
+    headers: HeadersInit;
+    statusCode: number;
+    name: string;
+    message: string;
+    stack?: string;
+    cause?: unknown;
+}>;
+//# sourceMappingURL=routes.d.ts.map

package/dist/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;eA0C8G,CAAC;YAAkB,CAAC;aAAmB,CAAC;;;;;;;;EADzL,CAAC"}

package/dist/routes.js

@@ -0,0 +1,51 @@
+import { APIError, createAuthEndpoint } from "better-auth/api";
+import { HIDE_METADATA } from "better-auth";
+import * as z from "zod";
+/**
+ * Server-side proxy that plants the OAuth CSRF state cookie in the system
+ * browser's cookie jar *before* redirecting to the provider's authorization
+ * URL. Without this, Better Auth's callback state-vs-cookie check fails in
+ * the Tauri flow because the state cookie was set on the `/sign-in/social`
+ * response inside the Tauri webview — a different cookie jar from the one
+ * the system browser uses for the actual OAuth dance.
+ *
+ * Two modes, matching the Expo plugin:
+ *
+ * 1. `oauthState` query param present → plant it as a plain `oauth_state`
+ *    cookie (10 min TTL). Used when the client already has a stored state
+ *    it wants re-seeded before starting the flow.
+ *
+ * 2. `oauthState` absent → extract the `state` query param from the
+ *    authorization URL and plant it as a signed `state` cookie (5 min
+ *    TTL). This is the common path for a fresh OAuth sign-in.
+ *
+ * Endpoint is hidden from the Better Auth route docs — it's an internal
+ * detail of the Tauri plugin flow.
+ */
+export const tauriAuthorizationProxy = createAuthEndpoint("/tauri-authorization-proxy", {
+    method: "GET",
+    query: z.object({
+        authorizationURL: z.string(),
+        oauthState: z.string().optional(),
+    }),
+    metadata: HIDE_METADATA,
+}, async (ctx) => {
+    const { oauthState, authorizationURL } = ctx.query;
+    if (oauthState) {
+        const oauthStateCookie = ctx.context.createAuthCookie("oauth_state", {
+            maxAge: 600,
+        });
+        ctx.setCookie(oauthStateCookie.name, oauthState, oauthStateCookie.attributes);
+        return ctx.redirect(authorizationURL);
+    }
+    const state = new URL(authorizationURL).searchParams.get("state");
+    if (!state) {
+        throw new APIError("BAD_REQUEST", {
+            message: "authorizationURL is missing required `state` query parameter",
+        });
+    }
+    const stateCookie = ctx.context.createAuthCookie("state", { maxAge: 300 });
+    await ctx.setSignedCookie(stateCookie.name, state, ctx.context.secret, stateCookie.attributes);
+    return ctx.redirect(authorizationURL);
+});
+//# sourceMappingURL=routes.js.map

package/dist/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CACvD,4BAA4B,EAC5B;IACE,MAAM,EAAE,KAAK;IACb,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAClC,CAAC;IACF,QAAQ,EAAE,aAAa;CACxB,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;IACZ,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;IAEnD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,gBAAgB,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,aAAa,EAAE;YACnE,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,CACX,gBAAgB,CAAC,IAAI,EACrB,UAAU,EACV,gBAAgB,CAAC,UAAU,CAC5B,CAAC;QACF,OAAO,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE;YAChC,OAAO,EAAE,8DAA8D;SACxE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3E,MAAM,GAAG,CAAC,eAAe,CACvB,WAAW,CAAC,IAAI,EAChB,KAAK,EACL,GAAG,CAAC,OAAO,CAAC,MAAM,EAClB,WAAW,CAAC,UAAU,CACvB,CAAC;IACF,OAAO,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;AACxC,CAAC,CACF,CAAC"}

package/dist/utils.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Detects whether the current runtime is a Tauri webview.
+ * During `vite dev` / `nuxt dev` in a normal browser, the Tauri IPC
+ * globals are absent — the client plugin should no-op its desktop
+ * branches in that case so the same code works in both environments.
+ */
+export declare function isTauriRuntime(): boolean;
+/**
+ * Build a deep-link URL from a scheme + path.
+ * `createSchemeURL("/auth/callback", "sokudo")` → `"sokudo://auth/callback"`
+ */
+export declare function createSchemeURL(path: string, scheme: string): string;
+/**
+ * Origin equivalent for a custom scheme, e.g. `sokudo://`.
+ * Used for the `tauri-origin` header so the server can validate the request
+ * came from a trusted Tauri app build.
+ */
+export declare function getOrigin(scheme: string): string;
+/** Forgiving JSON.parse that never throws. */
+export declare function safeJSONParse<T = unknown>(input: string | null | undefined): T | null;
+//# sourceMappingURL=utils.d.ts.map

package/dist/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,OAAO,CAOxC;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAGpE;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,8CAA8C;AAC9C,wBAAgB,aAAa,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,CAAC,GAAG,IAAI,CAOrF"}

package/dist/utils.js

@@ -0,0 +1,41 @@
+/**
+ * Detects whether the current runtime is a Tauri webview.
+ * During `vite dev` / `nuxt dev` in a normal browser, the Tauri IPC
+ * globals are absent — the client plugin should no-op its desktop
+ * branches in that case so the same code works in both environments.
+ */
+export function isTauriRuntime() {
+    if (typeof window === "undefined")
+        return false;
+    return ("__TAURI_INTERNALS__" in window ||
+        "__TAURI__" in window ||
+        "__TAURI_METADATA__" in window);
+}
+/**
+ * Build a deep-link URL from a scheme + path.
+ * `createSchemeURL("/auth/callback", "sokudo")` → `"sokudo://auth/callback"`
+ */
+export function createSchemeURL(path, scheme) {
+    const normalized = path.startsWith("/") ? path.slice(1) : path;
+    return `${scheme}://${normalized}`;
+}
+/**
+ * Origin equivalent for a custom scheme, e.g. `sokudo://`.
+ * Used for the `tauri-origin` header so the server can validate the request
+ * came from a trusted Tauri app build.
+ */
+export function getOrigin(scheme) {
+    return `${scheme}://`;
+}
+/** Forgiving JSON.parse that never throws. */
+export function safeJSONParse(input) {
+    if (!input)
+        return null;
+    try {
+        return JSON.parse(input);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=utils.js.map

package/dist/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,CACL,qBAAqB,IAAI,MAAM;QAC/B,WAAW,IAAI,MAAM;QACrB,oBAAoB,IAAI,MAAM,CAC/B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,MAAc;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,OAAO,GAAG,MAAM,MAAM,UAAU,EAAE,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,OAAO,GAAG,MAAM,KAAK,CAAC;AACxB,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,aAAa,CAAc,KAAgC;IACzE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAM,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const PACKAGE_VERSION = "0.1.0";
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,eAAe,UAAU,CAAC"}

package/dist/version.js

@@ -0,0 +1,2 @@
+export const PACKAGE_VERSION = "0.1.0";
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC"}

package/package.json

@@ -0,0 +1,81 @@
+{
+  "name": "@dreamshive/better-auth-tauri",
+  "version": "0.1.0",
+  "description": "Better Auth plugin for Tauri desktop apps — handles OAuth via the system browser with deep-link callbacks, cookie bridging via URL, and secure token storage hooks.",
+  "license": "MIT",
+  "author": "Rully Ardiansyah",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/DreamsHive/better-auth-tauri.git"
+  },
+  "homepage": "https://github.com/DreamsHive/better-auth-tauri#readme",
+  "bugs": {
+    "url": "https://github.com/DreamsHive/better-auth-tauri/issues"
+  },
+  "type": "module",
+  "sideEffects": false,
+  "keywords": [
+    "better-auth",
+    "tauri",
+    "oauth",
+    "auth",
+    "desktop",
+    "deep-link"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "import": "./dist/client.js",
+      "default": "./dist/client.js"
+    }
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "src",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "dev": "tsc -p tsconfig.build.json --watch",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "clean": "rm -rf dist",
+    "prepublishOnly": "bun run clean && bun run build && bun run typecheck && bun run test"
+  },
+  "dependencies": {
+    "zod": "^3.24.0 || ^4.0.0"
+  },
+  "peerDependencies": {
+    "@tauri-apps/plugin-deep-link": "^2.0.0",
+    "@tauri-apps/plugin-shell": "^2.0.0",
+    "better-auth": "^1.6.0"
+  },
+  "peerDependenciesMeta": {
+    "@tauri-apps/plugin-deep-link": {
+      "optional": true
+    },
+    "@tauri-apps/plugin-shell": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@tauri-apps/plugin-deep-link": "^2.0.0",
+    "@tauri-apps/plugin-shell": "^2.0.0",
+    "@types/node": "^20.0.0",
+    "better-auth": "^1.6.5",
+    "typescript": "^5.7.0",
+    "vitest": "^2.1.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}