@gatwech/core 0.0.10 → 1.0.0-beta.18

package/src/types/init-options.ts

@@ -1,1346 +0,0 @@
-import type { Database as BunDatabase } from "bun:sqlite";
-import type { DatabaseSync } from "node:sqlite";
-import type { CookieOptions } from "better-call";
-import type {
-  Dialect,
-  Kysely,
-  MysqlPool,
-  PostgresPool,
-  SqliteDatabase,
-} from "kysely";
-import type { AuthMiddleware } from "../api";
-import type {
-  Account,
-  DBFieldAttribute,
-  DBPreservedModels,
-  RateLimit,
-  SecondaryStorage,
-  Session,
-  User,
-  Verification,
-} from "../db";
-import type { DBAdapterDebugLogOption, DBAdapterInstance } from "../db/adapter";
-import type { Logger } from "../env";
-import type { SocialProviderList, SocialProviders } from "../social-providers";
-import type { AuthContext, GenericEndpointContext } from "./context";
-import type { LiteralUnion } from "./helper";
-import type { PayvoAuthPlugin } from "./plugin";
-
-type KyselyDatabaseType = "postgres" | "mysql" | "sqlite" | "mssql";
-type OmitId<T extends { id: unknown }> = Omit<T, "id">;
-type Optional<T> = {
-  [P in keyof T]?: T[P] | undefined;
-};
-
-export type GenerateIdFn = (options: {
-  model: LiteralUnion<DBPreservedModels, string>;
-  size?: number | undefined;
-}) => string | false;
-
-export type PayvoAuthRateLimitOptions = {
-  /**
-   * By default, rate limiting is only
-   * enabled on production.
-   */
-  enabled?: boolean | undefined;
-  /**
-   * Default window to use for rate limiting. The value
-   * should be in seconds.
-   *
-   * @default 10 seconds
-   */
-  window?: number | undefined;
-  /**
-   * The default maximum number of requests allowed within the window.
-   *
-   * @default 100 requests
-   */
-  max?: number | undefined;
-  /**
-   * Custom rate limit rules to apply to
-   * specific paths.
-   */
-  customRules?:
-    | {
-        [key: string]:
-          | {
-              /**
-               * The window to use for the custom rule.
-               */
-              window: number;
-              /**
-               * The maximum number of requests allowed within the window.
-               */
-              max: number;
-            }
-          | false
-          | ((request: Request) =>
-              | { window: number; max: number }
-              | false
-              | Promise<
-                  | {
-                      window: number;
-                      max: number;
-                    }
-                  | false
-                >);
-      }
-    | undefined;
-  /**
-   * Storage configuration
-   *
-   * By default, rate limiting is stored in memory. If you passed a
-   * secondary storage, rate limiting will be stored in the secondary
-   * storage.
-   *
-   * @default "memory"
-   */
-  storage?: ("memory" | "database" | "secondary-storage") | undefined;
-  /**
-   * If database is used as storage, the name of the table to
-   * use for rate limiting.
-   *
-   * @default "rateLimit"
-   */
-  modelName?: string | undefined;
-  /**
-   * Custom field names for the rate limit table
-   */
-  fields?: Record<keyof RateLimit, string> | undefined;
-  /**
-   * custom storage configuration.
-   *
-   * NOTE: If custom storage is used storage
-   * is ignored
-   */
-  customStorage?: {
-    get: (key: string) => Promise<RateLimit | undefined>;
-    set: (key: string, value: RateLimit) => Promise<void>;
-  };
-};
-
-export type PayvoAuthAdvancedOptions = {
-  /**
-   * Ip address configuration
-   */
-  ipAddress?:
-    | {
-        /**
-         * List of headers to use for ip address
-         *
-         * Ip address is used for rate limiting and session tracking
-         *
-         * @example ["x-client-ip", "x-forwarded-for", "cf-connecting-ip"]
-         *
-         * @default
-         * @link https://github.com/payvo-auth/payvo-auth/blob/main/packages/payvo-auth/src/utils/get-request-ip.ts#L8
-         */
-        ipAddressHeaders?: string[];
-        /**
-         * Disable ip tracking
-         *
-         * ⚠︎ This is a security risk and it may expose your application to abuse
-         */
-        disableIpTracking?: boolean;
-      }
-    | undefined;
-  /**
-   * Use secure cookies
-   *
-   * @default false
-   */
-  useSecureCookies?: boolean | undefined;
-  /**
-   * Disable trusted origins check
-   *
-   * ⚠︎ This is a security risk and it may expose your application to
-   * CSRF attacks
-   */
-  disableCSRFCheck?: boolean | undefined;
-  /**
-   * Disable origin check
-   *
-   * ⚠︎ This may allow requests from any origin to be processed by
-   * Better Auth. And could lead to security vulnerabilities.
-   */
-  disableOriginCheck?: boolean | undefined;
-  /**
-   * Configure cookies to be cross subdomains
-   */
-  crossSubDomainCookies?:
-    | {
-        /**
-         * Enable cross subdomain cookies
-         */
-        enabled: boolean;
-        /**
-         * Additional cookies to be shared across subdomains
-         */
-        additionalCookies?: string[];
-        /**
-         * The domain to use for the cookies
-         *
-         * By default, the domain will be the root
-         * domain from the base URL.
-         */
-        domain?: string;
-      }
-    | undefined;
-  /*
-   * Allows you to change default cookie names and attributes
-   *
-   * default cookie names:
-   * - "session_token"
-   * - "session_data"
-   * - "dont_remember"
-   *
-   * plugins can also add additional cookies
-   */
-  cookies?:
-    | {
-        [key: string]: {
-          name?: string;
-          attributes?: CookieOptions;
-        };
-      }
-    | undefined;
-  defaultCookieAttributes?: CookieOptions | undefined;
-  /**
-   * Prefix for cookies. If a cookie name is provided
-   * in cookies config, this will be overridden.
-   *
-   * @default
-   * ```txt
-   * "appName" -> which defaults to "gatwech"
-   * ```
-   */
-  cookiePrefix?: string | undefined;
-  /**
-   * Database configuration.
-   */
-  database?:
-    | {
-        /**
-         * The default number of records to return from the database
-         * when using the `findMany` adapter method.
-         *
-         * @default 100
-         */
-        defaultFindManyLimit?: number;
-        /**
-         * If your database auto increments number ids, set this to `true`.
-         *
-         * Note: If enabled, we will not handle ID generation (including if you use `generateId`), and it would be expected that your database will provide the ID automatically.
-         *
-         * @default false
-         *
-         * @deprecated Please use `generateId` instead. This will be removed in future
-         * releases.
-         */
-        useNumberId?: boolean;
-        /**
-         * Custom generateId function.
-         *
-         * If not provided, random ids will be generated.
-         * If set to false, the database's auto generated id
-         * will be used.
-         *
-         * If set to "serial", the database's auto generated
-         * id will be used.
-         *
-         * If set to "uuid", we generate a random UUID for
-         * the id. If postgres, we use the `gen_random_uuid()
-         * ` function. If mysql or mssql, we use the `uuid()`
-         * function.
-         */
-        generateId?: GenerateIdFn | false | "serial" | "uuid";
-      }
-    | undefined;
-  /**
-   * OAuth configuration
-   */
-  oauthConfig?:
-    | {
-        /**
-         * Skip state cookie check
-         *
-         * ⚠︎ this has security implications and should only be enabled if you know what you are doing.
-         * @default false
-         */
-        skipStateCookieCheck?: boolean;
-        /**
-         * Strategy for storing OAuth state
-         *
-         * - "cookie": Store state in an encrypted cookie (stateless)
-         * - "database": Store state in the database
-         *
-         * @default "cookie"
-         */
-        storeStateStrategy?: "database" | "cookie";
-      }
-    | undefined;
-};
-
-export type PayvoAuthOptions = {
-  /**
-   * The name of the application
-   *
-   * process.env.APP_NAME
-   *
-   * @default "Better Auth"
-   */
-  appName?: string | undefined;
-  /**
-   * Base URL for the Better Auth. This is typically the
-   * root URL where your application server is hosted.
-   * If not explicitly set,
-   * the system will check the following environment variable:
-   *
-   * process.env.PAYVO_AUTH_URL
-   */
-  baseURL?: string | undefined;
-  /**
-   * Base path for the Better Auth. This is typically
-   * the path where the
-   * Better Auth routes are mounted.
-   *
-   * @default "/api/v1/auth"
-   */
-  basePath?: string | undefined;
-  /**
-   * The secret to use for encryption,
-   * signing and hashing.
-   *
-   * By default Better Auth will look for
-   * the following environment variables:
-   * process.env.PAYVO_AUTH_SECRET,
-   * process.env.AUTH_SECRET
-   * If none of these environment
-   * variables are set,
-   * it will default to
-   * "payvo-auth-secret-123456789".
-   *
-   * on production if it's not set
-   * it will throw an error.
-   *
-   * you can generate a good secret
-   * using the following command:
-   * @example
-   * ```bash
-   * openssl rand -base64 32
-   * ```
-   */
-  secret?: string | undefined;
-  /**
-   * Database configuration
-   */
-  database?:
-    | (
-        | PostgresPool
-        | MysqlPool
-        | SqliteDatabase
-        | Dialect
-        | DBAdapterInstance
-        | BunDatabase
-        | DatabaseSync
-        | {
-            dialect: Dialect;
-            type: KyselyDatabaseType;
-            /**
-             * casing for table names
-             *
-             * @default "camel"
-             */
-            casing?: "snake" | "camel";
-            /**
-             * Enable debug logs for the adapter
-             *
-             * @default false
-             */
-            debugLogs?: DBAdapterDebugLogOption;
-            /**
-             * Whether to execute multiple operations in a transaction.
-             * If the database doesn't support transactions,
-             * set this to `false` and operations will be executed sequentially.
-             * @default true
-             */
-            transaction?: boolean;
-          }
-        | {
-            /**
-             * Kysely instance
-             */
-            db: Kysely<any>;
-            /**
-             * Database type between postgres, mysql and sqlite
-             */
-            type: KyselyDatabaseType;
-            /**
-             * casing for table names
-             *
-             * @default "camel"
-             */
-            casing?: "snake" | "camel";
-            /**
-             * Enable debug logs for the adapter
-             *
-             * @default false
-             */
-            debugLogs?: DBAdapterDebugLogOption;
-            /**
-             * Whether to execute multiple operations in a transaction.
-             * If the database doesn't support transactions,
-             * set this to `false` and operations will be executed sequentially.
-             * @default true
-             */
-            transaction?: boolean;
-          }
-      )
-    | undefined;
-  /**
-   * Secondary storage configuration
-   *
-   * This is used to store session and rate limit data.
-   */
-  secondaryStorage?: SecondaryStorage | undefined;
-  /**
-   * Email verification configuration
-   */
-  emailVerification?:
-    | {
-        /**
-         * Send a verification email
-         * @param data the data object
-         * @param request the request object
-         */
-        sendVerificationEmail?: (
-          /**
-           * @param user the user to send the
-           * verification email to
-           * @param url the URL to send the verification email to
-           * it contains the token as well
-           * @param token the token to send the verification email to
-           */
-          data: {
-            user: User;
-            url: string;
-            token: string;
-          },
-          /**
-           * The request object
-           */
-          request?: Request
-        ) => Promise<void>;
-        /**
-         * Send a verification email automatically
-         * after sign up
-         *
-         * @default false
-         */
-        sendOnSignUp?: boolean;
-        /**
-         * Send a verification email automatically
-         * on sign in when the user's email is not verified
-         *
-         * @default false
-         */
-        sendOnSignIn?: boolean;
-        /**
-         * Auto signin the user after they verify their email
-         */
-        autoSignInAfterVerification?: boolean;
-        /**
-         * Number of seconds the verification token is
-         * valid for.
-         * @default 3600 seconds (1 hour)
-         */
-        expiresIn?: number;
-        /**
-         * A function that is called when a user verifies their email
-         * @param user the user that verified their email
-         * @param request the request object
-         */
-        onEmailVerification?: (user: User, request?: Request) => Promise<void>;
-        /**
-         * A function that is called when a user's email is updated to verified
-         * @param user the user that verified their email
-         * @param request the request object
-         */
-        afterEmailVerification?: (
-          user: User,
-          request?: Request
-        ) => Promise<void>;
-      }
-    | undefined;
-  /**
-   * Email and password authentication
-   */
-  emailAndPassword?:
-    | {
-        /**
-         * Enable email and password authentication
-         *
-         * @default false
-         */
-        enabled: boolean;
-        /**
-         * Disable email and password sign up
-         *
-         * @default false
-         */
-        disableSignUp?: boolean;
-        /**
-         * Require email verification before a session
-         * can be created for the user.
-         *
-         * if the user is not verified, the user will not be able to sign in
-         * and on sign in attempts, the user will be prompted to verify their email.
-         */
-        requireEmailVerification?: boolean;
-        /**
-         * The maximum length of the password.
-         *
-         * @default 128
-         */
-        maxPasswordLength?: number;
-        /**
-         * The minimum length of the password.
-         *
-         * @default 8
-         */
-        minPasswordLength?: number;
-        /**
-         * send reset password
-         */
-        sendResetPassword?: (
-          /**
-           * @param user the user to send the
-           * reset password email to
-           * @param url the URL to send the reset password email to
-           * @param token the token to send to the user (could be used instead of sending the url
-           * if you need to redirect the user to custom route)
-           */
-          data: { user: User; url: string; token: string },
-          /**
-           * The request object
-           */
-          request?: Request
-        ) => Promise<void>;
-        /**
-         * Number of seconds the reset password token is
-         * valid for.
-         * @default 1 hour (60 * 60)
-         */
-        resetPasswordTokenExpiresIn?: number;
-        /**
-         * A callback function that is triggered
-         * when a user's password is changed successfully.
-         */
-        onPasswordReset?: (
-          data: { user: User },
-          request?: Request
-        ) => Promise<void>;
-        /**
-         * Password hashing and verification
-         *
-         * By default Scrypt is used for password hashing and
-         * verification. You can provide your own hashing and
-         * verification function. if you want to use a
-         * different algorithm.
-         */
-        password?: {
-          hash?: (password: string) => Promise<string>;
-          verify?: (data: {
-            hash: string;
-            password: string;
-          }) => Promise<boolean>;
-        };
-        /**
-         * Automatically sign in the user after sign up
-         *
-         * @default true
-         */
-        autoSignIn?: boolean;
-        /**
-         * Whether to revoke all other sessions when resetting password
-         * @default false
-         */
-        revokeSessionsOnPasswordReset?: boolean;
-      }
-    | undefined;
-  /**
-   * list of social providers
-   */
-  socialProviders?: SocialProviders | undefined;
-  /**
-   * List of Better Auth plugins
-   */
-  plugins?: ([] | PayvoAuthPlugin[]) | undefined;
-  /**
-   * User configuration
-   */
-  user?:
-    | {
-        /**
-         * The model name for the user. Defaults to "user".
-         */
-        modelName?: string;
-        /**
-         * Map fields
-         *
-         * @example
-         * ```ts
-         * {
-         *  userId: "user_id"
-         * }
-         * ```
-         */
-        fields?: Partial<Record<keyof OmitId<User>, string>>;
-        /**
-         * Additional fields for the user
-         */
-        additionalFields?: {
-          [key: string]: DBFieldAttribute;
-        };
-        /**
-         * Changing email configuration
-         */
-        changeEmail?: {
-          /**
-           * Enable changing email
-           * @default false
-           */
-          enabled: boolean;
-          /**
-           * Send a verification email when the user changes their email.
-           * @param data the data object
-           * @param request the request object
-           */
-          sendChangeEmailVerification?: (
-            data: {
-              user: User;
-              newEmail: string;
-              url: string;
-              token: string;
-            },
-            request?: Request
-          ) => Promise<void>;
-        };
-        /**
-         * User deletion configuration
-         */
-        deleteUser?: {
-          /**
-           * Enable user deletion
-           */
-          enabled?: boolean;
-          /**
-           * Send a verification email when the user deletes their account.
-           *
-           * if this is not set, the user will be deleted immediately.
-           * @param data the data object
-           * @param request the request object
-           */
-          sendDeleteAccountVerification?: (
-            data: {
-              user: User;
-              url: string;
-              token: string;
-            },
-            request?: Request
-          ) => Promise<void>;
-          /**
-           * A function that is called before a user is deleted.
-           *
-           * to interrupt with error you can throw `APIError`
-           */
-          beforeDelete?: (user: User, request?: Request) => Promise<void>;
-          /**
-           * A function that is called after a user is deleted.
-           *
-           * This is useful for cleaning up user data
-           */
-          afterDelete?: (user: User, request?: Request) => Promise<void>;
-          /**
-           * The expiration time for the delete token.
-           *
-           * @default 1 day (60 * 60 * 24) in seconds
-           */
-          deleteTokenExpiresIn?: number;
-        };
-      }
-    | undefined;
-  session?:
-    | {
-        /**
-         * The model name for the session.
-         *
-         * @default "session"
-         */
-        modelName?: string;
-        /**
-         * Map fields
-         *
-         * @example
-         * ```ts
-         * {
-         *  userId: "user_id"
-         * }
-         */
-        fields?: Partial<Record<keyof OmitId<Session>, string>>;
-        /**
-         * Expiration time for the session token. The value
-         * should be in seconds.
-         * @default 7 days (60 * 60 * 24 * 7)
-         */
-        expiresIn?: number;
-        /**
-         * How often the session should be refreshed. The value
-         * should be in seconds.
-         * If set 0 the session will be refreshed every time it is used.
-         * @default 1 day (60 * 60 * 24)
-         */
-        updateAge?: number;
-        /**
-         * Disable session refresh so that the session is not updated
-         * regardless of the `updateAge` option.
-         *
-         * @default false
-         */
-        disableSessionRefresh?: boolean;
-        /**
-         * Additional fields for the session
-         */
-        additionalFields?: {
-          [key: string]: DBFieldAttribute;
-        };
-        /**
-         * By default if secondary storage is provided
-         * the session is stored in the secondary storage.
-         *
-         * Set this to true to store the session in the database
-         * as well.
-         *
-         * Reads are always done from the secondary storage.
-         *
-         * @default false
-         */
-        storeSessionInDatabase?: boolean;
-        /**
-         * By default, sessions are deleted from the database when secondary storage
-         * is provided when session is revoked.
-         *
-         * Set this to true to preserve session records in the database,
-         * even if they are deleted from the secondary storage.
-         *
-         * @default false
-         */
-        preserveSessionInDatabase?: boolean;
-        /**
-         * Enable caching session in cookie
-         */
-        cookieCache?: {
-          /**
-           * max age of the cookie
-           * @default 5 minutes (5 * 60)
-           */
-          maxAge?: number;
-          /**
-           * Enable caching session in cookie
-           * @default false
-           */
-          enabled?: boolean;
-          /**
-           * Strategy for encoding/decoding cookie cache
-           *
-           * - "compact": Uses base64url encoding with HMAC-SHA256 signature (compact format, no JWT spec overhead)
-           * - "jwt": Uses JWT with HMAC signature (no encryption, follows JWT spec)
-           * - "jwe": Uses JWE (JSON Web Encryption) with A256CBC-HS512 and HKDF key derivation for secure encrypted tokens
-           *
-           * @default "compact"
-           */
-          strategy?: "compact" | "jwt" | "jwe";
-          /**
-           * Controls stateless cookie cache refresh behavior.
-           *
-           * When enabled, the cookie cache will be automatically refreshed before expiry
-           * WITHOUT querying the database. This is essential for fully stateless or DB-less scenarios.
-           *
-           * - `false`: Disable automatic refresh. Cache is only invalidated when it reaches maxAge expiry.
-           * - `true`: Enable automatic refresh with default settings (refreshes when 80% of maxAge is reached).
-           * - `object`: Custom refresh configuration with either `updateAge` or `shouldRefresh` function
-           *
-           * Note: When the cache expires (reaches maxAge), it will attempt to fetch from database if available.
-           * The refreshCache option is specifically for refreshing BEFORE expiry in a stateless manner.
-           *
-           * @default false
-           */
-          refreshCache?:
-            | boolean
-            | {
-                /**
-                 * Time in seconds before expiry when the cache should be refreshed.
-                 * For example, if maxAge is 300 (5 minutes) and updateAge is 60,
-                 * the cache will be refreshed when it has 60 seconds left before expiry.
-                 *
-                 * @default 20% of maxAge
-                 */
-                updateAge?: number;
-              };
-          /**
-           * Version of the cookie cache
-           *
-           * If a cookie cache version is changed, all existing cookie caches with the old version
-           * will be invalidated.
-           *
-           * It can be a string or a function that returns a string or a promise that returns a string.
-           * If it's a function, it will be called with the session and user data
-           *
-           * @default "1"
-           */
-          version?:
-            | string
-            | ((
-                session: Session & Record<string, any>,
-                user: User & Record<string, any>
-              ) => string)
-            | ((
-                session: Session & Record<string, any>,
-                user: User & Record<string, any>
-              ) => Promise<string>);
-        };
-        /**
-         * The age of the session to consider it fresh.
-         *
-         * This is used to check if the session is fresh
-         * for sensitive operations. (e.g. deleting an account)
-         *
-         * If the session is not fresh, the user should be prompted
-         * to sign in again.
-         *
-         * If set to 0, the session will be considered fresh every time. (⚠︎ not recommended)
-         *
-         * @default 1 day (60 * 60 * 24)
-         */
-        freshAge?: number;
-      }
-    | undefined;
-  account?:
-    | {
-        /**
-         * The model name for the account. Defaults to "account".
-         */
-        modelName?: string;
-        /**
-         * Map fields
-         */
-        fields?: Partial<Record<keyof OmitId<Account>, string>>;
-        /**
-         * Additional fields for the account
-         */
-        additionalFields?: {
-          [key: string]: DBFieldAttribute;
-        };
-        /**
-         * When enabled (true), the user account data (accessToken, idToken, refreshToken, etc.)
-         * will be updated on sign in with the latest data from the provider.
-         *
-         * @default true
-         */
-        updateAccountOnSignIn?: boolean;
-        /**
-         * Configuration for account linking.
-         */
-        accountLinking?: {
-          /**
-           * Enable account linking
-           *
-           * @default true
-           */
-          enabled?: boolean;
-          /**
-           * List of trusted providers
-           */
-          trustedProviders?: Array<
-            LiteralUnion<SocialProviderList[number] | "email-password", string>
-          >;
-          /**
-           * If enabled (true), this will allow users to manually linking accounts with different email addresses than the main user.
-           *
-           * @default false
-           *
-           * ⚠️ Warning: enabling this might lead to account takeovers, so proceed with caution.
-           */
-          allowDifferentEmails?: boolean;
-          /**
-           * If enabled (true), this will allow users to unlink all accounts.
-           *
-           * @default false
-           */
-          allowUnlinkingAll?: boolean;
-          /**
-           * If enabled (true), this will update the user information based on the newly linked account
-           *
-           * @default false
-           */
-          updateUserInfoOnLink?: boolean;
-        };
-        /**
-         * Encrypt OAuth tokens
-         *
-         * By default, OAuth tokens (access tokens, refresh tokens, ID tokens) are stored in plain text in the database.
-         * This poses a security risk if your database is compromised, as attackers could gain access to user accounts
-         * on external services.
-         *
-         * When enabled, tokens are encrypted using AES-256-GCM before storage, providing protection against:
-         * - Database breaches and unauthorized access to raw token data
-         * - Internal threats from database administrators or compromised credentials
-         * - Token exposure in database backups and logs
-         * @default false
-         */
-        encryptOAuthTokens?: boolean;
-      }
-    | undefined;
-  /**
-   * Verification configuration
-   */
-  verification?:
-    | {
-        /**
-         * Change the modelName of the verification table
-         */
-        modelName?: string;
-        /**
-         * Map verification fields
-         */
-        fields?: Partial<Record<keyof OmitId<Verification>, string>>;
-        /**
-         * disable cleaning up expired values when a verification value is
-         * fetched
-         */
-        disableCleanup?: boolean;
-      }
-    | undefined;
-  /**
-   * List of trusted origins.
-   */
-  trustedOrigins?:
-    | (string[] | ((request: Request) => string[] | Promise<string[]>))
-    | undefined;
-  /**
-   * Rate limiting configuration
-   */
-  rateLimit?: PayvoAuthRateLimitOptions | undefined;
-  /**
-   * Advanced options
-   */
-  advanced?:
-    | (PayvoAuthAdvancedOptions & {
-        /**
-         * @deprecated Please use `database.generateId` instead.
-         */
-        generateId?: never;
-      })
-    | undefined;
-  logger?: Logger | undefined;
-  /**
-   * allows you to define custom hooks that can be
-   * executed during lifecycle of core database
-   * operations.
-   */
-  databaseHooks?:
-    | {
-        /**
-         * User hooks
-         */
-        user?: {
-          create?: {
-            /**
-             * Hook that is called before a user is created.
-             * if the hook returns false, the user will not be created.
-             * If the hook returns an object, it'll be used instead of the original data
-             */
-            before?: (
-              user: User & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<
-              | boolean
-              | void
-              | {
-                  data: Optional<User> & Record<string, any>;
-                }
-            >;
-            /**
-             * Hook that is called after a user is created.
-             */
-            after?: (
-              user: User & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<void>;
-          };
-          update?: {
-            /**
-             * Hook that is called before a user is updated.
-             * if the hook returns false, the user will not be updated.
-             * If the hook returns an object, it'll be used instead of the original data
-             */
-            before?: (
-              user: Partial<User> & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<
-              | boolean
-              | void
-              | {
-                  data: Optional<User & Record<string, any>>;
-                }
-            >;
-            /**
-             * Hook that is called after a user is updated.
-             */
-            after?: (
-              user: User & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<void>;
-          };
-          delete?: {
-            /**
-             * Hook that is called before a user is deleted.
-             * if the hook returns false, the user will not be deleted.
-             */
-            before?: (
-              user: User & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<boolean | void>;
-            /**
-             * Hook that is called after a user is deleted.
-             */
-            after?: (
-              user: User & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<void>;
-          };
-        };
-        /**
-         * Session Hook
-         */
-        session?: {
-          create?: {
-            /**
-             * Hook that is called before a session is created.
-             * if the hook returns false, the session will not be created.
-             * If the hook returns an object, it'll be used instead of the original data
-             */
-            before?: (
-              session: Session & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<
-              | boolean
-              | void
-              | {
-                  data: Optional<Session> & Record<string, any>;
-                }
-            >;
-            /**
-             * Hook that is called after a session is created.
-             */
-            after?: (
-              session: Session & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<void>;
-          };
-          /**
-           * Update hook
-           */
-          update?: {
-            /**
-             * Hook that is called before a user is updated.
-             * if the hook returns false, the session will not be updated.
-             * If the hook returns an object, it'll be used instead of the original data
-             */
-            before?: (
-              session: Partial<Session> & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<
-              | boolean
-              | void
-              | {
-                  data: Optional<Session & Record<string, any>>;
-                }
-            >;
-            /**
-             * Hook that is called after a session is updated.
-             */
-            after?: (
-              session: Session & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<void>;
-          };
-          delete?: {
-            /**
-             * Hook that is called before a session is deleted.
-             * if the hook returns false, the session will not be deleted.
-             */
-            before?: (
-              session: Session & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<boolean | void>;
-            /**
-             * Hook that is called after a session is deleted.
-             */
-            after?: (
-              session: Session & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<void>;
-          };
-        };
-        /**
-         * Account Hook
-         */
-        account?: {
-          create?: {
-            /**
-             * Hook that is called before a account is created.
-             * If the hook returns false, the account will not be created.
-             * If the hook returns an object, it'll be used instead of the original data
-             */
-            before?: (
-              account: Account,
-              context?: GenericEndpointContext
-            ) => Promise<
-              | boolean
-              | void
-              | {
-                  data: Optional<Account> & Record<string, any>;
-                }
-            >;
-            /**
-             * Hook that is called after a account is created.
-             */
-            after?: (
-              account: Account,
-              context?: GenericEndpointContext
-            ) => Promise<void>;
-          };
-          /**
-           * Update hook
-           */
-          update?: {
-            /**
-             * Hook that is called before a account is update.
-             * If the hook returns false, the user will not be updated.
-             * If the hook returns an object, it'll be used instead of the original data
-             */
-            before?: (
-              account: Partial<Account> & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<
-              | boolean
-              | void
-              | {
-                  data: Optional<Account & Record<string, any>>;
-                }
-            >;
-            /**
-             * Hook that is called after a account is updated.
-             */
-            after?: (
-              account: Account & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<void>;
-          };
-          delete?: {
-            /**
-             * Hook that is called before an account is deleted.
-             * if the hook returns false, the account will not be deleted.
-             */
-            before?: (
-              account: Account & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<boolean | void>;
-            /**
-             * Hook that is called after an account is deleted.
-             */
-            after?: (
-              account: Account & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<void>;
-          };
-        };
-        /**
-         * Verification Hook
-         */
-        verification?: {
-          create?: {
-            /**
-             * Hook that is called before a verification is created.
-             * if the hook returns false, the verification will not be created.
-             * If the hook returns an object, it'll be used instead of the original data
-             */
-            before?: (
-              verification: Verification & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<
-              | boolean
-              | void
-              | {
-                  data: Optional<Verification> & Record<string, any>;
-                }
-            >;
-            /**
-             * Hook that is called after a verification is created.
-             */
-            after?: (
-              verification: Verification & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<void>;
-          };
-          update?: {
-            /**
-             * Hook that is called before a verification is updated.
-             * if the hook returns false, the verification will not be updated.
-             * If the hook returns an object, it'll be used instead of the original data
-             */
-            before?: (
-              verification: Partial<Verification> & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<
-              | boolean
-              | void
-              | {
-                  data: Optional<Verification & Record<string, any>>;
-                }
-            >;
-            /**
-             * Hook that is called after a verification is updated.
-             */
-            after?: (
-              verification: Verification & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<void>;
-          };
-          delete?: {
-            /**
-             * Hook that is called before a verification is deleted.
-             * if the hook returns false, the verification will not be deleted.
-             */
-            before?: (
-              verification: Verification & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<boolean | void>;
-            /**
-             * Hook that is called after a verification is deleted.
-             */
-            after?: (
-              verification: Verification & Record<string, unknown>,
-              context?: GenericEndpointContext
-            ) => Promise<void>;
-          };
-        };
-      }
-    | undefined;
-  /**
-   * API error handling
-   */
-  onAPIError?:
-    | {
-        /**
-         * Throw an error on API error
-         *
-         * @default false
-         */
-        throw?: boolean;
-        /**
-         * Custom error handler
-         *
-         * @param error
-         * @param ctx - Auth context
-         */
-        onError?: (error: unknown, ctx: AuthContext) => void | Promise<void>;
-        /**
-         * The URL to redirect to on error
-         *
-         * When errorURL is provided, the error will be added to the URL as a query parameter
-         * and the user will be redirected to the errorURL.
-         *
-         * @default - "/api/v1/auth/error"
-         */
-        errorURL?: string;
-        /**
-         * Configure the default error page provided by Better-Auth
-         * Start your dev server and go to /api/v1/auth/error to see the error page.
-         */
-        customizeDefaultErrorPage?: {
-          colors?: {
-            background?: string;
-            foreground?: string;
-            primary?: string;
-            primaryForeground?: string;
-            mutedForeground?: string;
-            border?: string;
-            destructive?: string;
-            titleBorder?: string;
-            titleColor?: string;
-            gridColor?: string;
-            cardBackground?: string;
-            cornerBorder?: string;
-          };
-          size?: {
-            radiusSm?: string;
-            radiusMd?: string;
-            radiusLg?: string;
-            textSm?: string;
-            text2xl?: string;
-            text4xl?: string;
-            text6xl?: string;
-          };
-          font?: {
-            defaultFamily?: string;
-            monoFamily?: string;
-          };
-          disableTitleBorder?: boolean;
-          disableCornerDecorations?: boolean;
-          disableBackgroundGrid?: boolean;
-        };
-      }
-    | undefined;
-  /**
-   * Hooks
-   */
-  hooks?:
-    | {
-        /**
-         * Before a request is processed
-         */
-        before?: AuthMiddleware;
-        /**
-         * After a request is processed
-         */
-        after?: AuthMiddleware;
-      }
-    | undefined;
-  /**
-   * Disabled paths
-   *
-   * Paths you want to disable.
-   */
-  disabledPaths?: string[] | undefined;
-  /**
-   * Telemetry configuration
-   */
-  telemetry?:
-    | {
-        /**
-         * Enable telemetry collection
-         *
-         * @default false
-         */
-        enabled?: boolean;
-        /**
-         * Enable debug mode
-         *
-         * @default false
-         */
-        debug?: boolean;
-      }
-    | undefined;
-};