@hammadj/better-auth 1.5.0-beta.10

package/dist/plugins/email-otp/types.d.mts

@@ -0,0 +1,74 @@
+import { GenericEndpointContext } from "@better-auth/core";
+
+//#region src/plugins/email-otp/types.d.ts
+interface EmailOTPOptions {
+  /**
+   * Function to send email verification.
+   *
+   * It is recommended to not await the email sending to avoid timing attacks.
+   * On serverless platforms, use `waitUntil` or similar to ensure the email is sent.
+   */
+  sendVerificationOTP: (data: {
+    email: string;
+    otp: string;
+    type: "sign-in" | "email-verification" | "forget-password";
+  }, ctx?: GenericEndpointContext | undefined) => Promise<void>;
+  /**
+   * Length of the OTP
+   *
+   * @default 6
+   */
+  otpLength?: number | undefined;
+  /**
+   * Expiry time of the OTP in seconds
+   *
+   * @default 300 (5 minutes)
+   */
+  expiresIn?: number | undefined;
+  /**
+   * Custom function to generate otp
+   */
+  generateOTP?: (data: {
+    email: string;
+    type: "sign-in" | "email-verification" | "forget-password";
+  }, ctx?: GenericEndpointContext) => string | undefined;
+  /**
+   * Send email verification on sign-up
+   *
+   * @Default false
+   */
+  sendVerificationOnSignUp?: boolean | undefined;
+  /**
+   * A boolean value that determines whether to prevent
+   * automatic sign-up when the user is not registered.
+   *
+   * @Default false
+   */
+  disableSignUp?: boolean | undefined;
+  /**
+   * Allowed attempts for the OTP code
+   * @default 3
+   */
+  allowedAttempts?: number | undefined;
+  /**
+   * Store the OTP in your database in a secure way
+   * Note: This will not affect the OTP sent to the user, it will only affect the OTP stored in your database
+   *
+   * @default "plain"
+   */
+  storeOTP?: ("hashed" | "plain" | "encrypted" | {
+    hash: (otp: string) => Promise<string>;
+  } | {
+    encrypt: (otp: string) => Promise<string>;
+    decrypt: (otp: string) => Promise<string>;
+  }) | undefined;
+  /**
+   * Override the default email verification to use email otp instead
+   *
+   * @default false
+   */
+  overrideDefaultEmailVerification?: boolean | undefined;
+}
+//#endregion
+export { EmailOTPOptions };
+//# sourceMappingURL=types.d.mts.map

package/dist/plugins/email-otp/utils.mjs

@@ -0,0 +1,17 @@
+import { createHash } from "@better-auth/utils/hash";
+import { base64Url } from "@better-auth/utils/base64";
+
+//#region src/plugins/email-otp/utils.ts
+const defaultKeyHasher = async (otp) => {
+	const hash = await createHash("SHA-256").digest(new TextEncoder().encode(otp));
+	return base64Url.encode(new Uint8Array(hash), { padding: false });
+};
+function splitAtLastColon(input) {
+	const idx = input.lastIndexOf(":");
+	if (idx === -1) return [input, ""];
+	return [input.slice(0, idx), input.slice(idx + 1)];
+}
+
+//#endregion
+export { defaultKeyHasher, splitAtLastColon };
+//# sourceMappingURL=utils.mjs.map

package/dist/plugins/email-otp/utils.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.mjs","names":[],"sources":["../../../src/plugins/email-otp/utils.ts"],"sourcesContent":["import { base64Url } from \"@better-auth/utils/base64\";\nimport { createHash } from \"@better-auth/utils/hash\";\nexport const defaultKeyHasher = async (otp: string) => {\n\tconst hash = await createHash(\"SHA-256\").digest(\n\t\tnew TextEncoder().encode(otp),\n\t);\n\tconst hashed = base64Url.encode(new Uint8Array(hash), {\n\t\tpadding: false,\n\t});\n\treturn hashed;\n};\n\nexport function splitAtLastColon(input: string): [string, string] {\n\tconst idx = input.lastIndexOf(\":\");\n\tif (idx === -1) {\n\t\treturn [input, \"\"];\n\t}\n\treturn [input.slice(0, idx), input.slice(idx + 1)];\n}\n"],"mappings":";;;;AAEA,MAAa,mBAAmB,OAAO,QAAgB;CACtD,MAAM,OAAO,MAAM,WAAW,UAAU,CAAC,OACxC,IAAI,aAAa,CAAC,OAAO,IAAI,CAC7B;AAID,QAHe,UAAU,OAAO,IAAI,WAAW,KAAK,EAAE,EACrD,SAAS,OACT,CAAC;;AAIH,SAAgB,iBAAiB,OAAiC;CACjE,MAAM,MAAM,MAAM,YAAY,IAAI;AAClC,KAAI,QAAQ,GACX,QAAO,CAAC,OAAO,GAAG;AAEnB,QAAO,CAAC,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,MAAM,MAAM,EAAE,CAAC"}

package/dist/plugins/generic-oauth/client.d.mts

@@ -0,0 +1,19 @@
+import { GENERIC_OAUTH_ERROR_CODES } from "./error-codes.mjs";
+import { GenericOAuthConfig, GenericOAuthOptions } from "./types.mjs";
+import { Auth0Options, auth0 } from "./providers/auth0.mjs";
+import { GumroadOptions, gumroad } from "./providers/gumroad.mjs";
+import { HubSpotOptions, hubspot } from "./providers/hubspot.mjs";
+import { KeycloakOptions, keycloak } from "./providers/keycloak.mjs";
+import { LineOptions, line } from "./providers/line.mjs";
+import { MicrosoftEntraIdOptions, microsoftEntraId } from "./providers/microsoft-entra-id.mjs";
+import { OktaOptions, okta } from "./providers/okta.mjs";
+import { PatreonOptions, patreon } from "./providers/patreon.mjs";
+import { SlackOptions, slack } from "./providers/slack.mjs";
+import "./providers/index.mjs";
+import { BaseOAuthProviderOptions } from "./index.mjs";
+
+//#region src/plugins/generic-oauth/client.d.ts
+declare const genericOAuthClient: () => BetterAuthClientPlugin;
+//#endregion
+export { genericOAuthClient };
+//# sourceMappingURL=client.d.mts.map

package/dist/plugins/generic-oauth/client.mjs

@@ -0,0 +1,14 @@
+import { GENERIC_OAUTH_ERROR_CODES } from "./error-codes.mjs";
+
+//#region src/plugins/generic-oauth/client.ts
+const genericOAuthClient = () => {
+	return {
+		id: "generic-oauth-client",
+		$InferServerPlugin: {},
+		$ERROR_CODES: GENERIC_OAUTH_ERROR_CODES
+	};
+};
+
+//#endregion
+export { genericOAuthClient };
+//# sourceMappingURL=client.mjs.map

package/dist/plugins/generic-oauth/client.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.mjs","names":[],"sources":["../../../src/plugins/generic-oauth/client.ts"],"sourcesContent":["import type { BetterAuthClientPlugin } from \"@better-auth/core\";\nimport type { genericOAuth } from \".\";\nimport { GENERIC_OAUTH_ERROR_CODES } from \"./error-codes\";\n\nexport const genericOAuthClient = () => {\n\treturn {\n\t\tid: \"generic-oauth-client\",\n\t\t$InferServerPlugin: {} as ReturnType<typeof genericOAuth>,\n\t\t$ERROR_CODES: GENERIC_OAUTH_ERROR_CODES,\n\t} satisfies BetterAuthClientPlugin;\n};\n\nexport * from \"./error-codes\";\nexport type {\n\tBaseOAuthProviderOptions,\n\tGenericOAuthConfig,\n\tGenericOAuthOptions,\n} from \"./index\";\nexport type * from \"./providers\";\n"],"mappings":";;;AAIA,MAAa,2BAA2B;AACvC,QAAO;EACN,IAAI;EACJ,oBAAoB,EAAE;EACtB,cAAc;EACd"}

package/dist/plugins/generic-oauth/error-codes.d.mts

@@ -0,0 +1,5 @@
+//#region src/plugins/generic-oauth/error-codes.d.ts
+declare const GENERIC_OAUTH_ERROR_CODES: any;
+//#endregion
+export { GENERIC_OAUTH_ERROR_CODES };
+//# sourceMappingURL=error-codes.d.mts.map

package/dist/plugins/generic-oauth/error-codes.mjs

@@ -0,0 +1,15 @@
+import { defineErrorCodes } from "@better-auth/core/utils/error-codes";
+
+//#region src/plugins/generic-oauth/error-codes.ts
+const GENERIC_OAUTH_ERROR_CODES = defineErrorCodes({
+	INVALID_OAUTH_CONFIGURATION: "Invalid OAuth configuration",
+	TOKEN_URL_NOT_FOUND: "Invalid OAuth configuration. Token URL not found.",
+	PROVIDER_CONFIG_NOT_FOUND: "No config found for provider",
+	PROVIDER_ID_REQUIRED: "Provider ID is required",
+	INVALID_OAUTH_CONFIG: "Invalid OAuth configuration.",
+	SESSION_REQUIRED: "Session is required"
+});
+
+//#endregion
+export { GENERIC_OAUTH_ERROR_CODES };
+//# sourceMappingURL=error-codes.mjs.map

package/dist/plugins/generic-oauth/error-codes.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-codes.mjs","names":[],"sources":["../../../src/plugins/generic-oauth/error-codes.ts"],"sourcesContent":["import { defineErrorCodes } from \"@better-auth/core/utils/error-codes\";\n\nexport const GENERIC_OAUTH_ERROR_CODES = defineErrorCodes({\n\tINVALID_OAUTH_CONFIGURATION: \"Invalid OAuth configuration\",\n\tTOKEN_URL_NOT_FOUND: \"Invalid OAuth configuration. Token URL not found.\",\n\tPROVIDER_CONFIG_NOT_FOUND: \"No config found for provider\",\n\tPROVIDER_ID_REQUIRED: \"Provider ID is required\",\n\tINVALID_OAUTH_CONFIG: \"Invalid OAuth configuration.\",\n\tSESSION_REQUIRED: \"Session is required\",\n});\n"],"mappings":";;;AAEA,MAAa,4BAA4B,iBAAiB;CACzD,6BAA6B;CAC7B,qBAAqB;CACrB,2BAA2B;CAC3B,sBAAsB;CACtB,sBAAsB;CACtB,kBAAkB;CAClB,CAAC"}

package/dist/plugins/generic-oauth/index.d.mts

@@ -0,0 +1,34 @@
+import { GenericOAuthConfig, GenericOAuthOptions } from "./types.mjs";
+import { Auth0Options, auth0 } from "./providers/auth0.mjs";
+import { GumroadOptions, gumroad } from "./providers/gumroad.mjs";
+import { HubSpotOptions, hubspot } from "./providers/hubspot.mjs";
+import { KeycloakOptions, keycloak } from "./providers/keycloak.mjs";
+import { LineOptions, line } from "./providers/line.mjs";
+import { MicrosoftEntraIdOptions, microsoftEntraId } from "./providers/microsoft-entra-id.mjs";
+import { OktaOptions, okta } from "./providers/okta.mjs";
+import { PatreonOptions, patreon } from "./providers/patreon.mjs";
+import { SlackOptions, slack } from "./providers/slack.mjs";
+import "./providers/index.mjs";
+
+//#region src/plugins/generic-oauth/index.d.ts
+declare module "@better-auth/core" {
+  interface BetterAuthPluginRegistry<AuthOptions, Options> {
+    "generic-oauth": {
+      creator: typeof genericOAuth;
+    };
+  }
+}
+/**
+ * Base type for OAuth provider options.
+ * Extracts common fields from GenericOAuthConfig and makes clientSecret required.
+ */
+type BaseOAuthProviderOptions = Omit<Pick<GenericOAuthConfig, "clientId" | "clientSecret" | "scopes" | "redirectURI" | "pkce" | "disableImplicitSignUp" | "disableSignUp" | "overrideUserInfo">, "clientSecret"> & {
+  /** OAuth client secret (required for provider options) */clientSecret: string;
+};
+/**
+ * A generic OAuth plugin that can be used to add OAuth support to any provider
+ */
+declare const genericOAuth: (options: GenericOAuthOptions) => BetterAuthPlugin;
+//#endregion
+export { Auth0Options, BaseOAuthProviderOptions, type GenericOAuthConfig, type GenericOAuthOptions, GumroadOptions, HubSpotOptions, KeycloakOptions, LineOptions, MicrosoftEntraIdOptions, OktaOptions, PatreonOptions, SlackOptions, auth0, genericOAuth, gumroad, hubspot, keycloak, line, microsoftEntraId, okta, patreon, slack };
+//# sourceMappingURL=index.d.mts.map

package/dist/plugins/generic-oauth/index.mjs

@@ -0,0 +1,137 @@
+import { GENERIC_OAUTH_ERROR_CODES } from "./error-codes.mjs";
+import { getUserInfo, oAuth2Callback, oAuth2LinkAccount, signInWithOAuth2 } from "./routes.mjs";
+import { auth0 } from "./providers/auth0.mjs";
+import { gumroad } from "./providers/gumroad.mjs";
+import { hubspot } from "./providers/hubspot.mjs";
+import { keycloak } from "./providers/keycloak.mjs";
+import { line } from "./providers/line.mjs";
+import { microsoftEntraId } from "./providers/microsoft-entra-id.mjs";
+import { okta } from "./providers/okta.mjs";
+import { patreon } from "./providers/patreon.mjs";
+import { slack } from "./providers/slack.mjs";
+import "./providers/index.mjs";
+import { APIError } from "@better-auth/core/error";
+import { createAuthorizationURL, refreshAccessToken, validateAuthorizationCode } from "@better-auth/core/oauth2";
+import { betterFetch } from "@better-fetch/fetch";
+
+//#region src/plugins/generic-oauth/index.ts
+/**
+* A generic OAuth plugin that can be used to add OAuth support to any provider
+*/
+const genericOAuth = (options) => {
+	return {
+		id: "generic-oauth",
+		init: (ctx) => {
+			return { context: { socialProviders: options.config.map((c) => {
+				let finalUserInfoUrl = c.userInfoUrl;
+				return {
+					id: c.providerId,
+					name: c.providerId,
+					async createAuthorizationURL(data) {
+						let finalAuthUrl = c.authorizationUrl;
+						if (!finalAuthUrl && c.discoveryUrl) {
+							const discovery = await betterFetch(c.discoveryUrl, {
+								method: "GET",
+								headers: c.discoveryHeaders
+							});
+							if (discovery.data) {
+								finalAuthUrl = discovery.data.authorization_endpoint;
+								finalUserInfoUrl = finalUserInfoUrl ?? discovery.data.userinfo_endpoint;
+							}
+						}
+						if (!finalAuthUrl) throw APIError.from("BAD_REQUEST", GENERIC_OAUTH_ERROR_CODES.INVALID_OAUTH_CONFIGURATION);
+						return createAuthorizationURL({
+							id: c.providerId,
+							options: {
+								clientId: c.clientId,
+								clientSecret: c.clientSecret,
+								redirectURI: c.redirectURI
+							},
+							authorizationEndpoint: finalAuthUrl,
+							state: data.state,
+							codeVerifier: c.pkce ? data.codeVerifier : void 0,
+							scopes: c.scopes || [],
+							redirectURI: `${ctx.baseURL}/oauth2/callback/${c.providerId}`
+						});
+					},
+					async validateAuthorizationCode(data) {
+						if (c.getToken) return c.getToken(data);
+						let finalTokenUrl = c.tokenUrl;
+						if (c.discoveryUrl) {
+							const discovery = await betterFetch(c.discoveryUrl, {
+								method: "GET",
+								headers: c.discoveryHeaders
+							});
+							if (discovery.data) {
+								finalTokenUrl = discovery.data.token_endpoint;
+								finalUserInfoUrl = discovery.data.userinfo_endpoint;
+							}
+						}
+						if (!finalTokenUrl) throw APIError.from("BAD_REQUEST", GENERIC_OAUTH_ERROR_CODES.TOKEN_URL_NOT_FOUND);
+						return validateAuthorizationCode({
+							headers: c.authorizationHeaders,
+							code: data.code,
+							codeVerifier: data.codeVerifier,
+							redirectURI: data.redirectURI,
+							options: {
+								clientId: c.clientId,
+								clientSecret: c.clientSecret,
+								redirectURI: c.redirectURI
+							},
+							tokenEndpoint: finalTokenUrl,
+							authentication: c.authentication
+						});
+					},
+					async refreshAccessToken(refreshToken) {
+						let finalTokenUrl = c.tokenUrl;
+						if (c.discoveryUrl) {
+							const discovery = await betterFetch(c.discoveryUrl, {
+								method: "GET",
+								headers: c.discoveryHeaders
+							});
+							if (discovery.data) finalTokenUrl = discovery.data.token_endpoint;
+						}
+						if (!finalTokenUrl) throw APIError.from("BAD_REQUEST", GENERIC_OAUTH_ERROR_CODES.TOKEN_URL_NOT_FOUND);
+						return refreshAccessToken({
+							refreshToken,
+							options: {
+								clientId: c.clientId,
+								clientSecret: c.clientSecret
+							},
+							authentication: c.authentication,
+							tokenEndpoint: finalTokenUrl
+						});
+					},
+					async getUserInfo(tokens) {
+						const userInfo = c.getUserInfo ? await c.getUserInfo(tokens) : await getUserInfo(tokens, finalUserInfoUrl);
+						if (!userInfo) return null;
+						const userMap = await c.mapProfileToUser?.(userInfo);
+						return {
+							user: {
+								id: userInfo?.id,
+								email: userInfo?.email,
+								emailVerified: userInfo?.emailVerified,
+								image: userInfo?.image,
+								name: userInfo?.name,
+								...userMap
+							},
+							data: userInfo
+						};
+					},
+					options: { overrideUserInfoOnSignIn: c.overrideUserInfo }
+				};
+			}).concat(ctx.socialProviders) } };
+		},
+		endpoints: {
+			signInWithOAuth2: signInWithOAuth2(options),
+			oAuth2Callback: oAuth2Callback(options),
+			oAuth2LinkAccount: oAuth2LinkAccount(options)
+		},
+		options,
+		$ERROR_CODES: GENERIC_OAUTH_ERROR_CODES
+	};
+};
+
+//#endregion
+export { auth0, genericOAuth, gumroad, hubspot, keycloak, line, microsoftEntraId, okta, patreon, slack };
+//# sourceMappingURL=index.mjs.map

package/dist/plugins/generic-oauth/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../src/plugins/generic-oauth/index.ts"],"sourcesContent":["import type { AuthContext, BetterAuthPlugin } from \"@better-auth/core\";\nimport { APIError } from \"@better-auth/core/error\";\nimport type { OAuth2Tokens, OAuthProvider } from \"@better-auth/core/oauth2\";\nimport {\n\tcreateAuthorizationURL,\n\trefreshAccessToken,\n\tvalidateAuthorizationCode,\n} from \"@better-auth/core/oauth2\";\nimport { betterFetch } from \"@better-fetch/fetch\";\nimport { GENERIC_OAUTH_ERROR_CODES } from \"./error-codes\";\nimport {\n\tgetUserInfo,\n\toAuth2Callback,\n\toAuth2LinkAccount,\n\tsignInWithOAuth2,\n} from \"./routes\";\nimport type { GenericOAuthConfig, GenericOAuthOptions } from \"./types\";\n\nexport * from \"./providers\";\nexport type { GenericOAuthConfig, GenericOAuthOptions } from \"./types\";\n\ndeclare module \"@better-auth/core\" {\n\tinterface BetterAuthPluginRegistry<AuthOptions, Options> {\n\t\t\"generic-oauth\": {\n\t\t\tcreator: typeof genericOAuth;\n\t\t};\n\t}\n}\n\n/**\n * Base type for OAuth provider options.\n * Extracts common fields from GenericOAuthConfig and makes clientSecret required.\n */\nexport type BaseOAuthProviderOptions = Omit<\n\tPick<\n\t\tGenericOAuthConfig,\n\t\t| \"clientId\"\n\t\t| \"clientSecret\"\n\t\t| \"scopes\"\n\t\t| \"redirectURI\"\n\t\t| \"pkce\"\n\t\t| \"disableImplicitSignUp\"\n\t\t| \"disableSignUp\"\n\t\t| \"overrideUserInfo\"\n\t>,\n\t\"clientSecret\"\n> & {\n\t/** OAuth client secret (required for provider options) */\n\tclientSecret: string;\n};\n\n/**\n * A generic OAuth plugin that can be used to add OAuth support to any provider\n */\nexport const genericOAuth = (options: GenericOAuthOptions) => {\n\treturn {\n\t\tid: \"generic-oauth\",\n\t\tinit: (ctx: AuthContext) => {\n\t\t\tconst genericProviders = options.config.map((c) => {\n\t\t\t\tlet finalUserInfoUrl = c.userInfoUrl;\n\t\t\t\treturn {\n\t\t\t\t\tid: c.providerId,\n\t\t\t\t\tname: c.providerId,\n\t\t\t\t\tasync createAuthorizationURL(data: {\n\t\t\t\t\t\tstate: string;\n\t\t\t\t\t\tcodeVerifier: string;\n\t\t\t\t\t\tscopes?: string[] | undefined;\n\t\t\t\t\t\tredirectURI: string;\n\t\t\t\t\t\tdisplay?: string | undefined;\n\t\t\t\t\t\tloginHint?: string | undefined;\n\t\t\t\t\t}) {\n\t\t\t\t\t\tlet finalAuthUrl = c.authorizationUrl;\n\t\t\t\t\t\tif (!finalAuthUrl && c.discoveryUrl) {\n\t\t\t\t\t\t\tconst discovery = await betterFetch<{\n\t\t\t\t\t\t\t\tauthorization_endpoint: string;\n\t\t\t\t\t\t\t\tuserinfo_endpoint: string;\n\t\t\t\t\t\t\t}>(c.discoveryUrl, {\n\t\t\t\t\t\t\t\tmethod: \"GET\",\n\t\t\t\t\t\t\t\theaders: c.discoveryHeaders,\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\tif (discovery.data) {\n\t\t\t\t\t\t\t\tfinalAuthUrl = discovery.data.authorization_endpoint;\n\t\t\t\t\t\t\t\tfinalUserInfoUrl =\n\t\t\t\t\t\t\t\t\tfinalUserInfoUrl ?? discovery.data.userinfo_endpoint;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\tif (!finalAuthUrl) {\n\t\t\t\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\t\t\t\"BAD_REQUEST\",\n\t\t\t\t\t\t\t\tGENERIC_OAUTH_ERROR_CODES.INVALID_OAUTH_CONFIGURATION,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\t\t\t\t\t\treturn createAuthorizationURL({\n\t\t\t\t\t\t\tid: c.providerId,\n\t\t\t\t\t\t\toptions: {\n\t\t\t\t\t\t\t\tclientId: c.clientId,\n\t\t\t\t\t\t\t\tclientSecret: c.clientSecret,\n\t\t\t\t\t\t\t\tredirectURI: c.redirectURI,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\tauthorizationEndpoint: finalAuthUrl,\n\t\t\t\t\t\t\tstate: data.state,\n\t\t\t\t\t\t\tcodeVerifier: c.pkce ? data.codeVerifier : undefined,\n\t\t\t\t\t\t\tscopes: c.scopes || [],\n\t\t\t\t\t\t\tredirectURI: `${ctx.baseURL}/oauth2/callback/${c.providerId}`,\n\t\t\t\t\t\t});\n\t\t\t\t\t},\n\t\t\t\t\tasync validateAuthorizationCode(data: {\n\t\t\t\t\t\tcode: string;\n\t\t\t\t\t\tredirectURI: string;\n\t\t\t\t\t\tcodeVerifier?: string | undefined;\n\t\t\t\t\t\tdeviceId?: string | undefined;\n\t\t\t\t\t}) {\n\t\t\t\t\t\t// Use custom getToken if provided\n\t\t\t\t\t\tif (c.getToken) {\n\t\t\t\t\t\t\treturn c.getToken(data);\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\t// Standard token exchange flow\n\t\t\t\t\t\tlet finalTokenUrl = c.tokenUrl;\n\t\t\t\t\t\tif (c.discoveryUrl) {\n\t\t\t\t\t\t\tconst discovery = await betterFetch<{\n\t\t\t\t\t\t\t\ttoken_endpoint: string;\n\t\t\t\t\t\t\t\tuserinfo_endpoint: string;\n\t\t\t\t\t\t\t}>(c.discoveryUrl, {\n\t\t\t\t\t\t\t\tmethod: \"GET\",\n\t\t\t\t\t\t\t\theaders: c.discoveryHeaders,\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\tif (discovery.data) {\n\t\t\t\t\t\t\t\tfinalTokenUrl = discovery.data.token_endpoint;\n\t\t\t\t\t\t\t\tfinalUserInfoUrl = discovery.data.userinfo_endpoint;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\tif (!finalTokenUrl) {\n\t\t\t\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\t\t\t\"BAD_REQUEST\",\n\t\t\t\t\t\t\t\tGENERIC_OAUTH_ERROR_CODES.TOKEN_URL_NOT_FOUND,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\t\t\t\t\t\treturn validateAuthorizationCode({\n\t\t\t\t\t\t\theaders: c.authorizationHeaders,\n\t\t\t\t\t\t\tcode: data.code,\n\t\t\t\t\t\t\tcodeVerifier: data.codeVerifier,\n\t\t\t\t\t\t\tredirectURI: data.redirectURI,\n\t\t\t\t\t\t\toptions: {\n\t\t\t\t\t\t\t\tclientId: c.clientId,\n\t\t\t\t\t\t\t\tclientSecret: c.clientSecret,\n\t\t\t\t\t\t\t\tredirectURI: c.redirectURI,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\ttokenEndpoint: finalTokenUrl,\n\t\t\t\t\t\t\tauthentication: c.authentication,\n\t\t\t\t\t\t});\n\t\t\t\t\t},\n\t\t\t\t\tasync refreshAccessToken(\n\t\t\t\t\t\trefreshToken: string,\n\t\t\t\t\t): Promise<OAuth2Tokens> {\n\t\t\t\t\t\tlet finalTokenUrl = c.tokenUrl;\n\t\t\t\t\t\tif (c.discoveryUrl) {\n\t\t\t\t\t\t\tconst discovery = await betterFetch<{\n\t\t\t\t\t\t\t\ttoken_endpoint: string;\n\t\t\t\t\t\t\t}>(c.discoveryUrl, {\n\t\t\t\t\t\t\t\tmethod: \"GET\",\n\t\t\t\t\t\t\t\theaders: c.discoveryHeaders,\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\tif (discovery.data) {\n\t\t\t\t\t\t\t\tfinalTokenUrl = discovery.data.token_endpoint;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\tif (!finalTokenUrl) {\n\t\t\t\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\t\t\t\"BAD_REQUEST\",\n\t\t\t\t\t\t\t\tGENERIC_OAUTH_ERROR_CODES.TOKEN_URL_NOT_FOUND,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\t\t\t\t\t\treturn refreshAccessToken({\n\t\t\t\t\t\t\trefreshToken,\n\t\t\t\t\t\t\toptions: {\n\t\t\t\t\t\t\t\tclientId: c.clientId,\n\t\t\t\t\t\t\t\tclientSecret: c.clientSecret,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\tauthentication: c.authentication,\n\t\t\t\t\t\t\ttokenEndpoint: finalTokenUrl,\n\t\t\t\t\t\t});\n\t\t\t\t\t},\n\t\t\t\t\tasync getUserInfo(tokens: OAuth2Tokens) {\n\t\t\t\t\t\tconst userInfo = c.getUserInfo\n\t\t\t\t\t\t\t? await c.getUserInfo(tokens)\n\t\t\t\t\t\t\t: await getUserInfo(tokens, finalUserInfoUrl);\n\t\t\t\t\t\tif (!userInfo) {\n\t\t\t\t\t\t\treturn null;\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\tconst userMap = await c.mapProfileToUser?.(userInfo);\n\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tuser: {\n\t\t\t\t\t\t\t\tid: userInfo?.id,\n\t\t\t\t\t\t\t\temail: userInfo?.email,\n\t\t\t\t\t\t\t\temailVerified: userInfo?.emailVerified,\n\t\t\t\t\t\t\t\timage: userInfo?.image,\n\t\t\t\t\t\t\t\tname: userInfo?.name,\n\t\t\t\t\t\t\t\t...userMap,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\tdata: userInfo,\n\t\t\t\t\t\t};\n\t\t\t\t\t},\n\t\t\t\t\toptions: {\n\t\t\t\t\t\toverrideUserInfoOnSignIn: c.overrideUserInfo,\n\t\t\t\t\t},\n\t\t\t\t} as OAuthProvider;\n\t\t\t});\n\t\t\treturn {\n\t\t\t\tcontext: {\n\t\t\t\t\tsocialProviders: genericProviders.concat(ctx.socialProviders),\n\t\t\t\t},\n\t\t\t};\n\t\t},\n\t\tendpoints: {\n\t\t\tsignInWithOAuth2: signInWithOAuth2(options),\n\t\t\toAuth2Callback: oAuth2Callback(options),\n\t\t\toAuth2LinkAccount: oAuth2LinkAccount(options),\n\t\t},\n\t\toptions,\n\t\t$ERROR_CODES: GENERIC_OAUTH_ERROR_CODES,\n\t} satisfies BetterAuthPlugin;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAsDA,MAAa,gBAAgB,YAAiC;AAC7D,QAAO;EACN,IAAI;EACJ,OAAO,QAAqB;AAyJ3B,UAAO,EACN,SAAS,EACR,iBA1JuB,QAAQ,OAAO,KAAK,MAAM;IAClD,IAAI,mBAAmB,EAAE;AACzB,WAAO;KACN,IAAI,EAAE;KACN,MAAM,EAAE;KACR,MAAM,uBAAuB,MAO1B;MACF,IAAI,eAAe,EAAE;AACrB,UAAI,CAAC,gBAAgB,EAAE,cAAc;OACpC,MAAM,YAAY,MAAM,YAGrB,EAAE,cAAc;QAClB,QAAQ;QACR,SAAS,EAAE;QACX,CAAC;AACF,WAAI,UAAU,MAAM;AACnB,uBAAe,UAAU,KAAK;AAC9B,2BACC,oBAAoB,UAAU,KAAK;;;AAGtC,UAAI,CAAC,aACJ,OAAM,SAAS,KACd,eACA,0BAA0B,4BAC1B;AAEF,aAAO,uBAAuB;OAC7B,IAAI,EAAE;OACN,SAAS;QACR,UAAU,EAAE;QACZ,cAAc,EAAE;QAChB,aAAa,EAAE;QACf;OACD,uBAAuB;OACvB,OAAO,KAAK;OACZ,cAAc,EAAE,OAAO,KAAK,eAAe;OAC3C,QAAQ,EAAE,UAAU,EAAE;OACtB,aAAa,GAAG,IAAI,QAAQ,mBAAmB,EAAE;OACjD,CAAC;;KAEH,MAAM,0BAA0B,MAK7B;AAEF,UAAI,EAAE,SACL,QAAO,EAAE,SAAS,KAAK;MAIxB,IAAI,gBAAgB,EAAE;AACtB,UAAI,EAAE,cAAc;OACnB,MAAM,YAAY,MAAM,YAGrB,EAAE,cAAc;QAClB,QAAQ;QACR,SAAS,EAAE;QACX,CAAC;AACF,WAAI,UAAU,MAAM;AACnB,wBAAgB,UAAU,KAAK;AAC/B,2BAAmB,UAAU,KAAK;;;AAGpC,UAAI,CAAC,cACJ,OAAM,SAAS,KACd,eACA,0BAA0B,oBAC1B;AAEF,aAAO,0BAA0B;OAChC,SAAS,EAAE;OACX,MAAM,KAAK;OACX,cAAc,KAAK;OACnB,aAAa,KAAK;OAClB,SAAS;QACR,UAAU,EAAE;QACZ,cAAc,EAAE;QAChB,aAAa,EAAE;QACf;OACD,eAAe;OACf,gBAAgB,EAAE;OAClB,CAAC;;KAEH,MAAM,mBACL,cACwB;MACxB,IAAI,gBAAgB,EAAE;AACtB,UAAI,EAAE,cAAc;OACnB,MAAM,YAAY,MAAM,YAErB,EAAE,cAAc;QAClB,QAAQ;QACR,SAAS,EAAE;QACX,CAAC;AACF,WAAI,UAAU,KACb,iBAAgB,UAAU,KAAK;;AAGjC,UAAI,CAAC,cACJ,OAAM,SAAS,KACd,eACA,0BAA0B,oBAC1B;AAEF,aAAO,mBAAmB;OACzB;OACA,SAAS;QACR,UAAU,EAAE;QACZ,cAAc,EAAE;QAChB;OACD,gBAAgB,EAAE;OAClB,eAAe;OACf,CAAC;;KAEH,MAAM,YAAY,QAAsB;MACvC,MAAM,WAAW,EAAE,cAChB,MAAM,EAAE,YAAY,OAAO,GAC3B,MAAM,YAAY,QAAQ,iBAAiB;AAC9C,UAAI,CAAC,SACJ,QAAO;MAGR,MAAM,UAAU,MAAM,EAAE,mBAAmB,SAAS;AAEpD,aAAO;OACN,MAAM;QACL,IAAI,UAAU;QACd,OAAO,UAAU;QACjB,eAAe,UAAU;QACzB,OAAO,UAAU;QACjB,MAAM,UAAU;QAChB,GAAG;QACH;OACD,MAAM;OACN;;KAEF,SAAS,EACR,0BAA0B,EAAE,kBAC5B;KACD;KACA,CAGkC,OAAO,IAAI,gBAAgB,EAC7D,EACD;;EAEF,WAAW;GACV,kBAAkB,iBAAiB,QAAQ;GAC3C,gBAAgB,eAAe,QAAQ;GACvC,mBAAmB,kBAAkB,QAAQ;GAC7C;EACD;EACA,cAAc;EACd"}

package/dist/plugins/generic-oauth/providers/auth0.d.mts

@@ -0,0 +1,37 @@
+import { GenericOAuthConfig } from "../types.mjs";
+import { BaseOAuthProviderOptions } from "../index.mjs";
+
+//#region src/plugins/generic-oauth/providers/auth0.d.ts
+interface Auth0Options extends BaseOAuthProviderOptions {
+  /**
+   * Auth0 domain (e.g., dev-xxx.eu.auth0.com)
+   * This will be used to construct the discovery URL.
+   */
+  domain: string;
+}
+/**
+ * Auth0 OAuth provider helper
+ *
+ * @example
+ * ```ts
+ * import { genericOAuth, auth0 } from "better-auth/plugins/generic-oauth";
+ *
+ * export const auth = betterAuth({
+ *   plugins: [
+ *     genericOAuth({
+ *       config: [
+ *         auth0({
+ *           clientId: process.env.AUTH0_CLIENT_ID,
+ *           clientSecret: process.env.AUTH0_CLIENT_SECRET,
+ *           domain: process.env.AUTH0_DOMAIN,
+ *         }),
+ *       ],
+ *     }),
+ *   ],
+ * });
+ * ```
+ */
+declare function auth0(options: Auth0Options): GenericOAuthConfig;
+//#endregion
+export { Auth0Options, auth0 };
+//# sourceMappingURL=auth0.d.mts.map

package/dist/plugins/generic-oauth/providers/auth0.mjs

@@ -0,0 +1,62 @@
+import { betterFetch } from "@better-fetch/fetch";
+
+//#region src/plugins/generic-oauth/providers/auth0.ts
+/**
+* Auth0 OAuth provider helper
+*
+* @example
+* ```ts
+* import { genericOAuth, auth0 } from "better-auth/plugins/generic-oauth";
+*
+* export const auth = betterAuth({
+*   plugins: [
+*     genericOAuth({
+*       config: [
+*         auth0({
+*           clientId: process.env.AUTH0_CLIENT_ID,
+*           clientSecret: process.env.AUTH0_CLIENT_SECRET,
+*           domain: process.env.AUTH0_DOMAIN,
+*         }),
+*       ],
+*     }),
+*   ],
+* });
+* ```
+*/
+function auth0(options) {
+	const defaultScopes = [
+		"openid",
+		"profile",
+		"email"
+	];
+	const domain = options.domain.replace(/^https?:\/\//, "");
+	const discoveryUrl = `https://${domain}/.well-known/openid-configuration`;
+	const getUserInfo = async (tokens) => {
+		const { data: profile, error } = await betterFetch(`https://${domain}/userinfo`, { headers: { Authorization: `Bearer ${tokens.accessToken}` } });
+		if (error || !profile) return null;
+		return {
+			id: profile.sub,
+			name: profile.name ?? profile.nickname ?? void 0,
+			email: profile.email ?? void 0,
+			image: profile.picture,
+			emailVerified: profile.email_verified ?? false
+		};
+	};
+	return {
+		providerId: "auth0",
+		discoveryUrl,
+		clientId: options.clientId,
+		clientSecret: options.clientSecret,
+		scopes: options.scopes ?? defaultScopes,
+		redirectURI: options.redirectURI,
+		pkce: options.pkce,
+		disableImplicitSignUp: options.disableImplicitSignUp,
+		disableSignUp: options.disableSignUp,
+		overrideUserInfo: options.overrideUserInfo,
+		getUserInfo
+	};
+}
+
+//#endregion
+export { auth0 };
+//# sourceMappingURL=auth0.mjs.map

package/dist/plugins/generic-oauth/providers/auth0.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth0.mjs","names":[],"sources":["../../../../src/plugins/generic-oauth/providers/auth0.ts"],"sourcesContent":["import type { OAuth2Tokens, OAuth2UserInfo } from \"@better-auth/core/oauth2\";\nimport { betterFetch } from \"@better-fetch/fetch\";\nimport type { BaseOAuthProviderOptions, GenericOAuthConfig } from \"../index\";\n\nexport interface Auth0Options extends BaseOAuthProviderOptions {\n\t/**\n\t * Auth0 domain (e.g., dev-xxx.eu.auth0.com)\n\t * This will be used to construct the discovery URL.\n\t */\n\tdomain: string;\n}\n\ninterface Auth0Profile {\n\tsub: string;\n\tname?: string;\n\temail?: string;\n\temail_verified?: boolean;\n\tpicture?: string;\n\tnickname?: string;\n\tgiven_name?: string;\n\tfamily_name?: string;\n}\n\n/**\n * Auth0 OAuth provider helper\n *\n * @example\n * ```ts\n * import { genericOAuth, auth0 } from \"better-auth/plugins/generic-oauth\";\n *\n * export const auth = betterAuth({\n *   plugins: [\n *     genericOAuth({\n *       config: [\n *         auth0({\n *           clientId: process.env.AUTH0_CLIENT_ID,\n *           clientSecret: process.env.AUTH0_CLIENT_SECRET,\n *           domain: process.env.AUTH0_DOMAIN,\n *         }),\n *       ],\n *     }),\n *   ],\n * });\n * ```\n */\nexport function auth0(options: Auth0Options): GenericOAuthConfig {\n\tconst defaultScopes = [\"openid\", \"profile\", \"email\"];\n\n\t// Ensure domain doesn't have protocol prefix\n\tconst domain = options.domain.replace(/^https?:\\/\\//, \"\");\n\tconst discoveryUrl = `https://${domain}/.well-known/openid-configuration`;\n\n\tconst getUserInfo = async (\n\t\ttokens: OAuth2Tokens,\n\t): Promise<OAuth2UserInfo | null> => {\n\t\tconst userInfoUrl = `https://${domain}/userinfo`;\n\n\t\tconst { data: profile, error } = await betterFetch<Auth0Profile>(\n\t\t\tuserInfoUrl,\n\t\t\t{\n\t\t\t\theaders: {\n\t\t\t\t\tAuthorization: `Bearer ${tokens.accessToken}`,\n\t\t\t\t},\n\t\t\t},\n\t\t);\n\n\t\tif (error || !profile) {\n\t\t\treturn null;\n\t\t}\n\n\t\treturn {\n\t\t\tid: profile.sub,\n\t\t\tname: profile.name ?? profile.nickname ?? undefined,\n\t\t\temail: profile.email ?? undefined,\n\t\t\timage: profile.picture,\n\t\t\temailVerified: profile.email_verified ?? false,\n\t\t};\n\t};\n\n\treturn {\n\t\tproviderId: \"auth0\",\n\t\tdiscoveryUrl,\n\t\tclientId: options.clientId,\n\t\tclientSecret: options.clientSecret,\n\t\tscopes: options.scopes ?? defaultScopes,\n\t\tredirectURI: options.redirectURI,\n\t\tpkce: options.pkce,\n\t\tdisableImplicitSignUp: options.disableImplicitSignUp,\n\t\tdisableSignUp: options.disableSignUp,\n\t\toverrideUserInfo: options.overrideUserInfo,\n\t\tgetUserInfo,\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AA6CA,SAAgB,MAAM,SAA2C;CAChE,MAAM,gBAAgB;EAAC;EAAU;EAAW;EAAQ;CAGpD,MAAM,SAAS,QAAQ,OAAO,QAAQ,gBAAgB,GAAG;CACzD,MAAM,eAAe,WAAW,OAAO;CAEvC,MAAM,cAAc,OACnB,WACoC;EAGpC,MAAM,EAAE,MAAM,SAAS,UAAU,MAAM,YAFnB,WAAW,OAAO,YAIrC,EACC,SAAS,EACR,eAAe,UAAU,OAAO,eAChC,EACD,CACD;AAED,MAAI,SAAS,CAAC,QACb,QAAO;AAGR,SAAO;GACN,IAAI,QAAQ;GACZ,MAAM,QAAQ,QAAQ,QAAQ,YAAY;GAC1C,OAAO,QAAQ,SAAS;GACxB,OAAO,QAAQ;GACf,eAAe,QAAQ,kBAAkB;GACzC;;AAGF,QAAO;EACN,YAAY;EACZ;EACA,UAAU,QAAQ;EAClB,cAAc,QAAQ;EACtB,QAAQ,QAAQ,UAAU;EAC1B,aAAa,QAAQ;EACrB,MAAM,QAAQ;EACd,uBAAuB,QAAQ;EAC/B,eAAe,QAAQ;EACvB,kBAAkB,QAAQ;EAC1B;EACA"}

package/dist/plugins/generic-oauth/providers/gumroad.d.mts

@@ -0,0 +1,32 @@
+import { GenericOAuthConfig } from "../types.mjs";
+import { BaseOAuthProviderOptions } from "../index.mjs";
+
+//#region src/plugins/generic-oauth/providers/gumroad.d.ts
+interface GumroadOptions extends BaseOAuthProviderOptions {}
+/**
+ * Gumroad OAuth provider helper
+ *
+ * @example
+ * ```ts
+ * import { genericOAuth, gumroad } from "better-auth/plugins/generic-oauth";
+ *
+ * export const auth = betterAuth({
+ *   plugins: [
+ *     genericOAuth({
+ *       config: [
+ *         gumroad({
+ *           clientId: process.env.GUMROAD_CLIENT_ID,
+ *           clientSecret: process.env.GUMROAD_CLIENT_SECRET,
+ *         }),
+ *       ],
+ *     }),
+ *   ],
+ * });
+ * ```
+ *
+ * @see https://app.gumroad.com/oauth
+ */
+declare function gumroad(options: GumroadOptions): GenericOAuthConfig;
+//#endregion
+export { GumroadOptions, gumroad };
+//# sourceMappingURL=gumroad.d.mts.map

package/dist/plugins/generic-oauth/providers/gumroad.mjs

@@ -0,0 +1,60 @@
+import { betterFetch } from "@better-fetch/fetch";
+
+//#region src/plugins/generic-oauth/providers/gumroad.ts
+/**
+* Gumroad OAuth provider helper
+*
+* @example
+* ```ts
+* import { genericOAuth, gumroad } from "better-auth/plugins/generic-oauth";
+*
+* export const auth = betterAuth({
+*   plugins: [
+*     genericOAuth({
+*       config: [
+*         gumroad({
+*           clientId: process.env.GUMROAD_CLIENT_ID,
+*           clientSecret: process.env.GUMROAD_CLIENT_SECRET,
+*         }),
+*       ],
+*     }),
+*   ],
+* });
+* ```
+*
+* @see https://app.gumroad.com/oauth
+*/
+function gumroad(options) {
+	const getUserInfo = async (tokens) => {
+		const { data: profile, error } = await betterFetch("https://api.gumroad.com/v2/user", {
+			method: "GET",
+			headers: { Authorization: `Bearer ${tokens.accessToken}` }
+		});
+		if (error || !profile?.success || !profile.user) return null;
+		return {
+			id: profile.user.user_id,
+			name: profile.user.name,
+			email: profile.user.email,
+			image: profile.user.profile_url,
+			emailVerified: false
+		};
+	};
+	return {
+		providerId: "gumroad",
+		authorizationUrl: "https://gumroad.com/oauth/authorize",
+		tokenUrl: "https://api.gumroad.com/oauth/token",
+		clientId: options.clientId,
+		clientSecret: options.clientSecret,
+		scopes: options.scopes ?? ["view_profile"],
+		redirectURI: options.redirectURI,
+		pkce: options.pkce,
+		disableImplicitSignUp: options.disableImplicitSignUp,
+		disableSignUp: options.disableSignUp,
+		overrideUserInfo: options.overrideUserInfo,
+		getUserInfo
+	};
+}
+
+//#endregion
+export { gumroad };
+//# sourceMappingURL=gumroad.mjs.map

package/dist/plugins/generic-oauth/providers/gumroad.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"gumroad.mjs","names":[],"sources":["../../../../src/plugins/generic-oauth/providers/gumroad.ts"],"sourcesContent":["import type { OAuth2Tokens, OAuth2UserInfo } from \"@better-auth/core/oauth2\";\nimport { betterFetch } from \"@better-fetch/fetch\";\nimport type { BaseOAuthProviderOptions, GenericOAuthConfig } from \"../index\";\n\nexport interface GumroadOptions extends BaseOAuthProviderOptions {}\n\ninterface GumroadUser {\n\tuser_id: string;\n\tname: string;\n\temail: string;\n\tprofile_url: string;\n}\n\ninterface GumroadProfile {\n\tsuccess: boolean;\n\tuser: GumroadUser;\n}\n\n/**\n * Gumroad OAuth provider helper\n *\n * @example\n * ```ts\n * import { genericOAuth, gumroad } from \"better-auth/plugins/generic-oauth\";\n *\n * export const auth = betterAuth({\n *   plugins: [\n *     genericOAuth({\n *       config: [\n *         gumroad({\n *           clientId: process.env.GUMROAD_CLIENT_ID,\n *           clientSecret: process.env.GUMROAD_CLIENT_SECRET,\n *         }),\n *       ],\n *     }),\n *   ],\n * });\n * ```\n *\n * @see https://app.gumroad.com/oauth\n */\nexport function gumroad(options: GumroadOptions): GenericOAuthConfig {\n\tconst getUserInfo = async (\n\t\ttokens: OAuth2Tokens,\n\t): Promise<OAuth2UserInfo | null> => {\n\t\tconst { data: profile, error } = await betterFetch<GumroadProfile>(\n\t\t\t\"https://api.gumroad.com/v2/user\",\n\t\t\t{\n\t\t\t\tmethod: \"GET\",\n\t\t\t\theaders: {\n\t\t\t\t\tAuthorization: `Bearer ${tokens.accessToken}`,\n\t\t\t\t},\n\t\t\t},\n\t\t);\n\n\t\tif (error || !profile?.success || !profile.user) {\n\t\t\treturn null;\n\t\t}\n\n\t\treturn {\n\t\t\tid: profile.user.user_id,\n\t\t\tname: profile.user.name,\n\t\t\temail: profile.user.email,\n\t\t\timage: profile.user.profile_url,\n\t\t\temailVerified: false,\n\t\t};\n\t};\n\n\tconst defaultScopes = [\"view_profile\"];\n\n\treturn {\n\t\tproviderId: \"gumroad\",\n\t\tauthorizationUrl: \"https://gumroad.com/oauth/authorize\",\n\t\ttokenUrl: \"https://api.gumroad.com/oauth/token\",\n\t\tclientId: options.clientId,\n\t\tclientSecret: options.clientSecret,\n\t\tscopes: options.scopes ?? defaultScopes,\n\t\tredirectURI: options.redirectURI,\n\t\tpkce: options.pkce,\n\t\tdisableImplicitSignUp: options.disableImplicitSignUp,\n\t\tdisableSignUp: options.disableSignUp,\n\t\toverrideUserInfo: options.overrideUserInfo,\n\t\tgetUserInfo,\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAyCA,SAAgB,QAAQ,SAA6C;CACpE,MAAM,cAAc,OACnB,WACoC;EACpC,MAAM,EAAE,MAAM,SAAS,UAAU,MAAM,YACtC,mCACA;GACC,QAAQ;GACR,SAAS,EACR,eAAe,UAAU,OAAO,eAChC;GACD,CACD;AAED,MAAI,SAAS,CAAC,SAAS,WAAW,CAAC,QAAQ,KAC1C,QAAO;AAGR,SAAO;GACN,IAAI,QAAQ,KAAK;GACjB,MAAM,QAAQ,KAAK;GACnB,OAAO,QAAQ,KAAK;GACpB,OAAO,QAAQ,KAAK;GACpB,eAAe;GACf;;AAKF,QAAO;EACN,YAAY;EACZ,kBAAkB;EAClB,UAAU;EACV,UAAU,QAAQ;EAClB,cAAc,QAAQ;EACtB,QAAQ,QAAQ,UARK,CAAC,eAAe;EASrC,aAAa,QAAQ;EACrB,MAAM,QAAQ;EACd,uBAAuB,QAAQ;EAC/B,eAAe,QAAQ;EACvB,kBAAkB,QAAQ;EAC1B;EACA"}

package/dist/plugins/generic-oauth/providers/hubspot.d.mts

@@ -0,0 +1,37 @@
+import { GenericOAuthConfig } from "../types.mjs";
+import { BaseOAuthProviderOptions } from "../index.mjs";
+
+//#region src/plugins/generic-oauth/providers/hubspot.d.ts
+interface HubSpotOptions extends BaseOAuthProviderOptions {
+  /**
+   * OAuth scopes to request.
+   * @default ["oauth"]
+   */
+  scopes?: string[];
+}
+/**
+ * HubSpot OAuth provider helper
+ *
+ * @example
+ * ```ts
+ * import { genericOAuth, hubspot } from "better-auth/plugins/generic-oauth";
+ *
+ * export const auth = betterAuth({
+ *   plugins: [
+ *     genericOAuth({
+ *       config: [
+ *         hubspot({
+ *           clientId: process.env.HUBSPOT_CLIENT_ID,
+ *           clientSecret: process.env.HUBSPOT_CLIENT_SECRET,
+ *           scopes: ["oauth", "contacts"],
+ *         }),
+ *       ],
+ *     }),
+ *   ],
+ * });
+ * ```
+ */
+declare function hubspot(options: HubSpotOptions): GenericOAuthConfig;
+//#endregion
+export { HubSpotOptions, hubspot };
+//# sourceMappingURL=hubspot.d.mts.map