@hammadj/better-auth 1.5.0-beta.10

package/dist/plugins/phone-number/routes.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.mjs","names":[],"sources":["../../../src/plugins/phone-number/routes.ts"],"sourcesContent":["import { createAuthEndpoint } from \"@better-auth/core/api\";\nimport { APIError, BASE_ERROR_CODES } from \"@better-auth/core/error\";\nimport * as z from \"zod\";\nimport { getSessionFromCtx } from \"../../api\";\nimport { setSessionCookie } from \"../../cookies\";\nimport { generateRandomString } from \"../../crypto/random\";\nimport { parseUserOutput } from \"../../db/schema\";\nimport type { User } from \"../../types\";\nimport { getDate } from \"../../utils/date\";\nimport { PHONE_NUMBER_ERROR_CODES } from \"./error-codes\";\nimport type { PhoneNumberOptions, UserWithPhoneNumber } from \"./types\";\n\nexport type RequiredPhoneNumberOptions = PhoneNumberOptions & {\n\texpiresIn: number;\n\totpLength: number;\n\tphoneNumber: string;\n\tphoneNumberVerified: string;\n\tcode: string;\n\tcreatedAt: string;\n};\n\nconst signInPhoneNumberBodySchema = z.object({\n\tphoneNumber: z.string().meta({\n\t\tdescription: 'Phone number to sign in. Eg: \"+1234567890\"',\n\t}),\n\tpassword: z.string().meta({\n\t\tdescription: \"Password to use for sign in.\",\n\t}),\n\trememberMe: z\n\t\t.boolean()\n\t\t.meta({\n\t\t\tdescription: \"Remember the session. Eg: true\",\n\t\t})\n\t\t.optional(),\n});\n\n/**\n * ### Endpoint\n *\n * POST `/sign-in/phone-number`\n *\n * ### API Methods\n *\n * **server:**\n * `auth.api.signInPhoneNumber`\n *\n * **client:**\n * `authClient.signIn.phoneNumber`\n *\n * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/phone-number#api-method-sign-in-phone-number)\n */\nexport const signInPhoneNumber = (opts: RequiredPhoneNumberOptions) =>\n\tcreateAuthEndpoint(\n\t\t\"/sign-in/phone-number\",\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tbody: signInPhoneNumberBodySchema,\n\t\t\tmetadata: {\n\t\t\t\topenapi: {\n\t\t\t\t\tsummary: \"Sign in with phone number\",\n\t\t\t\t\tdescription: \"Use this endpoint to sign in with phone number\",\n\t\t\t\t\tresponses: {\n\t\t\t\t\t\t200: {\n\t\t\t\t\t\t\tdescription: \"Success\",\n\t\t\t\t\t\t\tcontent: {\n\t\t\t\t\t\t\t\t\"application/json\": {\n\t\t\t\t\t\t\t\t\tschema: {\n\t\t\t\t\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\t\t\t\t\tproperties: {\n\t\t\t\t\t\t\t\t\t\t\tuser: {\n\t\t\t\t\t\t\t\t\t\t\t\t$ref: \"#/components/schemas/User\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\tsession: {\n\t\t\t\t\t\t\t\t\t\t\t\t$ref: \"#/components/schemas/Session\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t400: {\n\t\t\t\t\t\t\tdescription: \"Invalid phone number or password\",\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t\tasync (ctx) => {\n\t\t\tconst { password, phoneNumber } = ctx.body;\n\n\t\t\tif (opts.phoneNumberValidator) {\n\t\t\t\tconst isValidNumber = await opts.phoneNumberValidator(\n\t\t\t\t\tctx.body.phoneNumber,\n\t\t\t\t);\n\t\t\t\tif (!isValidNumber) {\n\t\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\t\"BAD_REQUEST\",\n\t\t\t\t\t\tPHONE_NUMBER_ERROR_CODES.INVALID_PHONE_NUMBER,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tconst user = await ctx.context.adapter.findOne<UserWithPhoneNumber>({\n\t\t\t\tmodel: \"user\",\n\t\t\t\twhere: [\n\t\t\t\t\t{\n\t\t\t\t\t\tfield: \"phoneNumber\",\n\t\t\t\t\t\tvalue: phoneNumber,\n\t\t\t\t\t},\n\t\t\t\t],\n\t\t\t});\n\t\t\tif (!user) {\n\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\"UNAUTHORIZED\",\n\t\t\t\t\tPHONE_NUMBER_ERROR_CODES.INVALID_PHONE_NUMBER_OR_PASSWORD,\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (opts.requireVerification) {\n\t\t\t\tif (!user.phoneNumberVerified) {\n\t\t\t\t\tconst otp = generateOTP(opts.otpLength);\n\t\t\t\t\tawait ctx.context.internalAdapter.createVerificationValue({\n\t\t\t\t\t\tvalue: otp,\n\t\t\t\t\t\tidentifier: phoneNumber,\n\t\t\t\t\t\texpiresAt: getDate(opts.expiresIn, \"sec\"),\n\t\t\t\t\t});\n\t\t\t\t\tif (opts.sendOTP) {\n\t\t\t\t\t\tawait ctx.context.runInBackgroundOrAwait(\n\t\t\t\t\t\t\topts.sendOTP(\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\tphoneNumber,\n\t\t\t\t\t\t\t\t\tcode: otp,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\tctx,\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\t\"UNAUTHORIZED\",\n\t\t\t\t\t\tPHONE_NUMBER_ERROR_CODES.PHONE_NUMBER_NOT_VERIFIED,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst accounts = await ctx.context.internalAdapter.findAccountByUserId(\n\t\t\t\tuser.id,\n\t\t\t);\n\t\t\tconst credentialAccount = accounts.find(\n\t\t\t\t(a) => a.providerId === \"credential\",\n\t\t\t);\n\t\t\tif (!credentialAccount) {\n\t\t\t\tctx.context.logger.error(\"Credential account not found\", {\n\t\t\t\t\tphoneNumber,\n\t\t\t\t});\n\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\"UNAUTHORIZED\",\n\t\t\t\t\tPHONE_NUMBER_ERROR_CODES.INVALID_PHONE_NUMBER_OR_PASSWORD,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst currentPassword = credentialAccount?.password;\n\t\t\tif (!currentPassword) {\n\t\t\t\tctx.context.logger.error(\"Password not found\", { phoneNumber });\n\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\"UNAUTHORIZED\",\n\t\t\t\t\tPHONE_NUMBER_ERROR_CODES.UNEXPECTED_ERROR,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst validPassword = await ctx.context.password.verify({\n\t\t\t\thash: currentPassword,\n\t\t\t\tpassword,\n\t\t\t});\n\t\t\tif (!validPassword) {\n\t\t\t\tctx.context.logger.error(\"Invalid password\");\n\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\"UNAUTHORIZED\",\n\t\t\t\t\tPHONE_NUMBER_ERROR_CODES.INVALID_PHONE_NUMBER_OR_PASSWORD,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst session = await ctx.context.internalAdapter.createSession(\n\t\t\t\tuser.id,\n\t\t\t\tctx.body.rememberMe === false,\n\t\t\t);\n\t\t\tif (!session) {\n\t\t\t\tctx.context.logger.error(\"Failed to create session\");\n\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\"UNAUTHORIZED\",\n\t\t\t\t\tBASE_ERROR_CODES.FAILED_TO_CREATE_SESSION,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tawait setSessionCookie(\n\t\t\t\tctx,\n\t\t\t\t{\n\t\t\t\t\tsession,\n\t\t\t\t\tuser: user,\n\t\t\t\t},\n\t\t\t\tctx.body.rememberMe === false,\n\t\t\t);\n\t\t\treturn ctx.json({\n\t\t\t\ttoken: session.token,\n\t\t\t\tuser: parseUserOutput(ctx.context.options, user),\n\t\t\t});\n\t\t},\n\t);\n\nconst sendPhoneNumberOTPBodySchema = z.object({\n\tphoneNumber: z.string().meta({\n\t\tdescription: 'Phone number to send OTP. Eg: \"+1234567890\"',\n\t}),\n});\n\n/**\n * ### Endpoint\n *\n * POST `/phone-number/send-otp`\n *\n * ### API Methods\n *\n * **server:**\n * `auth.api.sendPhoneNumberOTP`\n *\n * **client:**\n * `authClient.phoneNumber.sendOtp`\n *\n * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/phone-number#api-method-phone-number-send-otp)\n */\nexport const sendPhoneNumberOTP = (opts: RequiredPhoneNumberOptions) =>\n\tcreateAuthEndpoint(\n\t\t\"/phone-number/send-otp\",\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tbody: sendPhoneNumberOTPBodySchema,\n\t\t\tmetadata: {\n\t\t\t\topenapi: {\n\t\t\t\t\tsummary: \"Send OTP to phone number\",\n\t\t\t\t\tdescription: \"Use this endpoint to send OTP to phone number\",\n\t\t\t\t\tresponses: {\n\t\t\t\t\t\t200: {\n\t\t\t\t\t\t\tdescription: \"Success\",\n\t\t\t\t\t\t\tcontent: {\n\t\t\t\t\t\t\t\t\"application/json\": {\n\t\t\t\t\t\t\t\t\tschema: {\n\t\t\t\t\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\t\t\t\t\tproperties: {\n\t\t\t\t\t\t\t\t\t\t\tmessage: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t\tasync (ctx) => {\n\t\t\tif (!opts?.sendOTP) {\n\t\t\t\tctx.context.logger.warn(\"sendOTP not implemented\");\n\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\"NOT_IMPLEMENTED\",\n\t\t\t\t\tPHONE_NUMBER_ERROR_CODES.SEND_OTP_NOT_IMPLEMENTED,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tif (opts.phoneNumberValidator) {\n\t\t\t\tconst isValidNumber = await opts.phoneNumberValidator(\n\t\t\t\t\tctx.body.phoneNumber,\n\t\t\t\t);\n\t\t\t\tif (!isValidNumber) {\n\t\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\t\"BAD_REQUEST\",\n\t\t\t\t\t\tPHONE_NUMBER_ERROR_CODES.INVALID_PHONE_NUMBER,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tconst code = generateOTP(opts.otpLength);\n\t\t\tawait ctx.context.internalAdapter.createVerificationValue({\n\t\t\t\tvalue: `${code}:0`,\n\t\t\t\tidentifier: ctx.body.phoneNumber,\n\t\t\t\texpiresAt: getDate(opts.expiresIn, \"sec\"),\n\t\t\t});\n\t\t\tawait ctx.context.runInBackgroundOrAwait(\n\t\t\t\topts.sendOTP(\n\t\t\t\t\t{\n\t\t\t\t\t\tphoneNumber: ctx.body.phoneNumber,\n\t\t\t\t\t\tcode,\n\t\t\t\t\t},\n\t\t\t\t\tctx,\n\t\t\t\t),\n\t\t\t);\n\t\t\treturn ctx.json({ message: \"code sent\" });\n\t\t},\n\t);\n\nconst verifyPhoneNumberBodySchema = z.object({\n\t/**\n\t * Phone number\n\t */\n\tphoneNumber: z.string().meta({\n\t\tdescription: 'Phone number to verify. Eg: \"+1234567890\"',\n\t}),\n\t/**\n\t * OTP code\n\t */\n\tcode: z.string().meta({\n\t\tdescription: 'OTP code. Eg: \"123456\"',\n\t}),\n\t/**\n\t * Disable session creation after verification\n\t * @default false\n\t */\n\tdisableSession: z\n\t\t.boolean()\n\t\t.meta({\n\t\t\tdescription: \"Disable session creation after verification. Eg: false\",\n\t\t})\n\t\t.optional(),\n\t/**\n\t * This checks if there is a session already\n\t * and updates the phone number with the provided\n\t * phone number\n\t */\n\tupdatePhoneNumber: z\n\t\t.boolean()\n\t\t.meta({\n\t\t\tdescription:\n\t\t\t\t\"Check if there is a session and update the phone number. Eg: true\",\n\t\t})\n\t\t.optional(),\n});\n\n/**\n * ### Endpoint\n *\n * POST `/phone-number/verify`\n *\n * ### API Methods\n *\n * **server:**\n * `auth.api.verifyPhoneNumber`\n *\n * **client:**\n * `authClient.phoneNumber.verify`\n *\n * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/phone-number#api-method-phone-number-verify)\n */\nexport const verifyPhoneNumber = (opts: RequiredPhoneNumberOptions) =>\n\tcreateAuthEndpoint(\n\t\t\"/phone-number/verify\",\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tbody: verifyPhoneNumberBodySchema,\n\t\t\tmetadata: {\n\t\t\t\topenapi: {\n\t\t\t\t\tsummary: \"Verify phone number\",\n\t\t\t\t\tdescription: \"Use this endpoint to verify phone number\",\n\t\t\t\t\tresponses: {\n\t\t\t\t\t\t\"200\": {\n\t\t\t\t\t\t\tdescription: \"Phone number verified successfully\",\n\t\t\t\t\t\t\tcontent: {\n\t\t\t\t\t\t\t\t\"application/json\": {\n\t\t\t\t\t\t\t\t\tschema: {\n\t\t\t\t\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\t\t\t\t\tproperties: {\n\t\t\t\t\t\t\t\t\t\t\tstatus: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"boolean\",\n\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"Indicates if the verification was successful\",\n\t\t\t\t\t\t\t\t\t\t\t\tenum: [true],\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\ttoken: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"Session token if session is created, null if disableSession is true or no session is created\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\tuser: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\tproperties: {\n\t\t\t\t\t\t\t\t\t\t\t\t\tid: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"Unique identifier of the user\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\temail: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tformat: \"email\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"User's email address\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\temailVerified: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"boolean\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"Whether the email is verified\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\tname: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"User's name\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\timage: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tformat: \"uri\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"User's profile image URL\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\tphoneNumber: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"User's phone number\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\tphoneNumberVerified: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"boolean\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"Whether the phone number is verified\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\tcreatedAt: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tformat: \"date-time\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"Timestamp when the user was created\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\tupdatedAt: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tformat: \"date-time\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Timestamp when the user was last updated\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\trequired: [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"phoneNumber\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"phoneNumberVerified\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"createdAt\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"updatedAt\",\n\t\t\t\t\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"User object with phone number details, null if no user is created or found\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\trequired: [\"status\"],\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t400: {\n\t\t\t\t\t\t\tdescription: \"Invalid OTP\",\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t\tasync (ctx) => {\n\t\t\tif (opts?.verifyOTP) {\n\t\t\t\t// Use custom verifyOTP if provided\n\t\t\t\tconst isValid = await opts.verifyOTP(\n\t\t\t\t\t{\n\t\t\t\t\t\tphoneNumber: ctx.body.phoneNumber,\n\t\t\t\t\t\tcode: ctx.body.code,\n\t\t\t\t\t},\n\t\t\t\t\tctx,\n\t\t\t\t);\n\n\t\t\t\tif (!isValid) {\n\t\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\t\"BAD_REQUEST\",\n\t\t\t\t\t\tPHONE_NUMBER_ERROR_CODES.INVALID_OTP,\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\t// Clean up verification value\n\t\t\t\tconst otp = await ctx.context.internalAdapter.findVerificationValue(\n\t\t\t\t\tctx.body.phoneNumber,\n\t\t\t\t);\n\t\t\t\tif (otp) {\n\t\t\t\t\tawait ctx.context.internalAdapter.deleteVerificationValue(otp.id);\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// Default internal verification logic\n\t\t\t\tconst otp = await ctx.context.internalAdapter.findVerificationValue(\n\t\t\t\t\tctx.body.phoneNumber,\n\t\t\t\t);\n\n\t\t\t\tif (!otp || otp.expiresAt < new Date()) {\n\t\t\t\t\tif (otp && otp.expiresAt < new Date()) {\n\t\t\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\t\t\"BAD_REQUEST\",\n\t\t\t\t\t\t\tPHONE_NUMBER_ERROR_CODES.OTP_EXPIRED,\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\t\"BAD_REQUEST\",\n\t\t\t\t\t\tPHONE_NUMBER_ERROR_CODES.OTP_NOT_FOUND,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tconst [otpValue, attempts] = otp.value.split(\":\");\n\t\t\t\tconst allowedAttempts = opts?.allowedAttempts || 3;\n\t\t\t\tif (attempts && parseInt(attempts) >= allowedAttempts) {\n\t\t\t\t\tawait ctx.context.internalAdapter.deleteVerificationValue(otp.id);\n\t\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\t\"FORBIDDEN\",\n\t\t\t\t\t\tPHONE_NUMBER_ERROR_CODES.TOO_MANY_ATTEMPTS,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tif (otpValue !== ctx.body.code) {\n\t\t\t\t\tawait ctx.context.internalAdapter.updateVerificationValue(otp.id, {\n\t\t\t\t\t\tvalue: `${otpValue}:${parseInt(attempts || \"0\") + 1}`,\n\t\t\t\t\t});\n\t\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\t\"BAD_REQUEST\",\n\t\t\t\t\t\tPHONE_NUMBER_ERROR_CODES.INVALID_OTP,\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tawait ctx.context.internalAdapter.deleteVerificationValue(otp.id);\n\t\t\t}\n\n\t\t\tif (ctx.body.updatePhoneNumber) {\n\t\t\t\tconst session = await getSessionFromCtx(ctx);\n\t\t\t\tif (!session) {\n\t\t\t\t\tthrow APIError.from(\"UNAUTHORIZED\", BASE_ERROR_CODES.USER_NOT_FOUND);\n\t\t\t\t}\n\t\t\t\tconst existingUser =\n\t\t\t\t\tawait ctx.context.adapter.findMany<UserWithPhoneNumber>({\n\t\t\t\t\t\tmodel: \"user\",\n\t\t\t\t\t\twhere: [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\tfield: \"phoneNumber\",\n\t\t\t\t\t\t\t\tvalue: ctx.body.phoneNumber,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t],\n\t\t\t\t\t});\n\t\t\t\tif (existingUser.length) {\n\t\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\t\"BAD_REQUEST\",\n\t\t\t\t\t\tPHONE_NUMBER_ERROR_CODES.PHONE_NUMBER_EXIST,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tconst user =\n\t\t\t\t\tawait ctx.context.internalAdapter.updateUser<UserWithPhoneNumber>(\n\t\t\t\t\t\tsession.user.id,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t[opts.phoneNumber]: ctx.body.phoneNumber,\n\t\t\t\t\t\t\t[opts.phoneNumberVerified]: true,\n\t\t\t\t\t\t},\n\t\t\t\t\t);\n\t\t\t\treturn ctx.json({\n\t\t\t\t\tstatus: true,\n\t\t\t\t\ttoken: session.session.token,\n\t\t\t\t\tuser: parseUserOutput(ctx.context.options, user),\n\t\t\t\t});\n\t\t\t}\n\n\t\t\tlet user = await ctx.context.adapter.findOne<UserWithPhoneNumber>({\n\t\t\t\tmodel: \"user\",\n\t\t\t\twhere: [\n\t\t\t\t\t{\n\t\t\t\t\t\tvalue: ctx.body.phoneNumber,\n\t\t\t\t\t\tfield: opts.phoneNumber,\n\t\t\t\t\t},\n\t\t\t\t],\n\t\t\t});\n\t\t\tif (!user) {\n\t\t\t\tif (opts?.signUpOnVerification) {\n\t\t\t\t\tuser =\n\t\t\t\t\t\tawait ctx.context.internalAdapter.createUser<UserWithPhoneNumber>({\n\t\t\t\t\t\t\temail: opts.signUpOnVerification.getTempEmail(\n\t\t\t\t\t\t\t\tctx.body.phoneNumber,\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\tname: opts.signUpOnVerification.getTempName\n\t\t\t\t\t\t\t\t? opts.signUpOnVerification.getTempName(ctx.body.phoneNumber)\n\t\t\t\t\t\t\t\t: ctx.body.phoneNumber,\n\t\t\t\t\t\t\t[opts.phoneNumber]: ctx.body.phoneNumber,\n\t\t\t\t\t\t\t[opts.phoneNumberVerified]: true,\n\t\t\t\t\t\t});\n\t\t\t\t\tif (!user) {\n\t\t\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\t\t\"INTERNAL_SERVER_ERROR\",\n\t\t\t\t\t\t\tBASE_ERROR_CODES.FAILED_TO_CREATE_USER,\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tuser =\n\t\t\t\t\tawait ctx.context.internalAdapter.updateUser<UserWithPhoneNumber>(\n\t\t\t\t\t\tuser.id,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t[opts.phoneNumberVerified]: true,\n\t\t\t\t\t\t},\n\t\t\t\t\t);\n\t\t\t}\n\t\t\tif (!user) {\n\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\"INTERNAL_SERVER_ERROR\",\n\t\t\t\t\tBASE_ERROR_CODES.FAILED_TO_UPDATE_USER,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tawait opts?.callbackOnVerification?.(\n\t\t\t\t{\n\t\t\t\t\tphoneNumber: ctx.body.phoneNumber,\n\t\t\t\t\tuser,\n\t\t\t\t},\n\t\t\t\tctx,\n\t\t\t);\n\n\t\t\tif (!ctx.body.disableSession) {\n\t\t\t\tconst session = await ctx.context.internalAdapter.createSession(\n\t\t\t\t\tuser.id,\n\t\t\t\t);\n\t\t\t\tif (!session) {\n\t\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\t\"INTERNAL_SERVER_ERROR\",\n\t\t\t\t\t\tBASE_ERROR_CODES.FAILED_TO_CREATE_SESSION,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tawait setSessionCookie(ctx, {\n\t\t\t\t\tsession,\n\t\t\t\t\tuser,\n\t\t\t\t});\n\t\t\t\treturn ctx.json({\n\t\t\t\t\tstatus: true,\n\t\t\t\t\ttoken: session.token,\n\t\t\t\t\tuser: parseUserOutput(ctx.context.options, user),\n\t\t\t\t});\n\t\t\t}\n\n\t\t\treturn ctx.json({\n\t\t\t\tstatus: true,\n\t\t\t\ttoken: null,\n\t\t\t\tuser: parseUserOutput(ctx.context.options, user),\n\t\t\t});\n\t\t},\n\t);\n\nconst requestPasswordResetPhoneNumberBodySchema = z.object({\n\tphoneNumber: z.string(),\n});\n\nexport const requestPasswordResetPhoneNumber = (\n\topts: RequiredPhoneNumberOptions,\n) =>\n\tcreateAuthEndpoint(\n\t\t\"/phone-number/request-password-reset\",\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tbody: requestPasswordResetPhoneNumberBodySchema,\n\t\t\tmetadata: {\n\t\t\t\topenapi: {\n\t\t\t\t\tdescription: \"Request OTP for password reset via phone number\",\n\t\t\t\t\tresponses: {\n\t\t\t\t\t\t\"200\": {\n\t\t\t\t\t\t\tdescription: \"OTP sent successfully for password reset\",\n\t\t\t\t\t\t\tcontent: {\n\t\t\t\t\t\t\t\t\"application/json\": {\n\t\t\t\t\t\t\t\t\tschema: {\n\t\t\t\t\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\t\t\t\t\tproperties: {\n\t\t\t\t\t\t\t\t\t\t\tstatus: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"boolean\",\n\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"Indicates if the OTP was sent successfully\",\n\t\t\t\t\t\t\t\t\t\t\t\tenum: [true],\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\trequired: [\"status\"],\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t\tasync (ctx) => {\n\t\t\tconst user = await ctx.context.adapter.findOne<UserWithPhoneNumber>({\n\t\t\t\tmodel: \"user\",\n\t\t\t\twhere: [\n\t\t\t\t\t{\n\t\t\t\t\t\tvalue: ctx.body.phoneNumber,\n\t\t\t\t\t\tfield: opts.phoneNumber,\n\t\t\t\t\t},\n\t\t\t\t],\n\t\t\t});\n\t\t\tconst code = generateOTP(opts.otpLength);\n\t\t\tawait ctx.context.internalAdapter.createVerificationValue({\n\t\t\t\tvalue: `${code}:0`,\n\t\t\t\tidentifier: `${ctx.body.phoneNumber}-request-password-reset`,\n\t\t\t\texpiresAt: getDate(opts.expiresIn, \"sec\"),\n\t\t\t});\n\t\t\t// to avoid leaking the existence of the phone number\n\t\t\tif (!user) {\n\t\t\t\treturn ctx.json({\n\t\t\t\t\tstatus: true,\n\t\t\t\t});\n\t\t\t}\n\t\t\tif (opts.sendPasswordResetOTP) {\n\t\t\t\tawait ctx.context.runInBackgroundOrAwait(\n\t\t\t\t\topts.sendPasswordResetOTP(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tphoneNumber: ctx.body.phoneNumber,\n\t\t\t\t\t\t\tcode,\n\t\t\t\t\t\t},\n\t\t\t\t\t\tctx,\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn ctx.json({\n\t\t\t\tstatus: true,\n\t\t\t});\n\t\t},\n\t);\n\nconst resetPasswordPhoneNumberBodySchema = z.object({\n\totp: z.string().meta({\n\t\tdescription: 'The one time password to reset the password. Eg: \"123456\"',\n\t}),\n\tphoneNumber: z.string().meta({\n\t\tdescription:\n\t\t\t'The phone number to the account which intends to reset the password for. Eg: \"+1234567890\"',\n\t}),\n\tnewPassword: z.string().meta({\n\t\tdescription: `The new password. Eg: \"new-and-secure-password\"`,\n\t}),\n});\n\nexport const resetPasswordPhoneNumber = (opts: RequiredPhoneNumberOptions) =>\n\tcreateAuthEndpoint(\n\t\t\"/phone-number/reset-password\",\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tbody: resetPasswordPhoneNumberBodySchema,\n\t\t\tmetadata: {\n\t\t\t\topenapi: {\n\t\t\t\t\tdescription: \"Reset password using phone number OTP\",\n\t\t\t\t\tresponses: {\n\t\t\t\t\t\t\"200\": {\n\t\t\t\t\t\t\tdescription: \"Password reset successfully\",\n\t\t\t\t\t\t\tcontent: {\n\t\t\t\t\t\t\t\t\"application/json\": {\n\t\t\t\t\t\t\t\t\tschema: {\n\t\t\t\t\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\t\t\t\t\tproperties: {\n\t\t\t\t\t\t\t\t\t\t\tstatus: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"boolean\",\n\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"Indicates if the password was reset successfully\",\n\t\t\t\t\t\t\t\t\t\t\t\tenum: [true],\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\trequired: [\"status\"],\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t\tasync (ctx) => {\n\t\t\tconst verification =\n\t\t\t\tawait ctx.context.internalAdapter.findVerificationValue(\n\t\t\t\t\t`${ctx.body.phoneNumber}-request-password-reset`,\n\t\t\t\t);\n\t\t\tif (!verification) {\n\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\"BAD_REQUEST\",\n\t\t\t\t\tPHONE_NUMBER_ERROR_CODES.OTP_NOT_FOUND,\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (verification.expiresAt < new Date()) {\n\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\"BAD_REQUEST\",\n\t\t\t\t\tPHONE_NUMBER_ERROR_CODES.OTP_EXPIRED,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst [otpValue, attempts] = verification.value.split(\":\");\n\t\t\tconst allowedAttempts = opts?.allowedAttempts || 3;\n\t\t\tif (attempts && parseInt(attempts) >= allowedAttempts) {\n\t\t\t\tawait ctx.context.internalAdapter.deleteVerificationValue(\n\t\t\t\t\tverification.id,\n\t\t\t\t);\n\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\"FORBIDDEN\",\n\t\t\t\t\tPHONE_NUMBER_ERROR_CODES.TOO_MANY_ATTEMPTS,\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (ctx.body.otp !== otpValue) {\n\t\t\t\tawait ctx.context.internalAdapter.updateVerificationValue(\n\t\t\t\t\tverification.id,\n\t\t\t\t\t{\n\t\t\t\t\t\tvalue: `${otpValue}:${parseInt(attempts || \"0\") + 1}`,\n\t\t\t\t\t},\n\t\t\t\t);\n\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\"BAD_REQUEST\",\n\t\t\t\t\tPHONE_NUMBER_ERROR_CODES.INVALID_OTP,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst user = await ctx.context.adapter.findOne<User>({\n\t\t\t\tmodel: \"user\",\n\t\t\t\twhere: [\n\t\t\t\t\t{\n\t\t\t\t\t\tfield: \"phoneNumber\",\n\t\t\t\t\t\tvalue: ctx.body.phoneNumber,\n\t\t\t\t\t},\n\t\t\t\t],\n\t\t\t});\n\t\t\tif (!user) {\n\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\"BAD_REQUEST\",\n\t\t\t\t\tPHONE_NUMBER_ERROR_CODES.UNEXPECTED_ERROR,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst minLength = ctx.context.password.config.minPasswordLength;\n\t\t\tconst maxLength = ctx.context.password.config.maxPasswordLength;\n\t\t\tif (ctx.body.newPassword.length < minLength) {\n\t\t\t\tthrow APIError.from(\"BAD_REQUEST\", BASE_ERROR_CODES.PASSWORD_TOO_SHORT);\n\t\t\t}\n\t\t\tif (ctx.body.newPassword.length > maxLength) {\n\t\t\t\tthrow APIError.from(\"BAD_REQUEST\", BASE_ERROR_CODES.PASSWORD_TOO_LONG);\n\t\t\t}\n\t\t\tconst hashedPassword = await ctx.context.password.hash(\n\t\t\t\tctx.body.newPassword,\n\t\t\t);\n\t\t\tawait ctx.context.internalAdapter.updatePassword(user.id, hashedPassword);\n\t\t\tawait ctx.context.internalAdapter.deleteVerificationValue(\n\t\t\t\tverification.id,\n\t\t\t);\n\n\t\t\tif (ctx.context.options.emailAndPassword?.revokeSessionsOnPasswordReset) {\n\t\t\t\tawait ctx.context.internalAdapter.deleteSessions(user.id);\n\t\t\t}\n\n\t\t\treturn ctx.json({\n\t\t\t\tstatus: true,\n\t\t\t});\n\t\t},\n\t);\n\nfunction generateOTP(size: number) {\n\treturn generateRandomString(size, \"0-9\");\n}\n"],"mappings":";;;;;;;;;;;;AAqBA,MAAM,8BAA8B,EAAE,OAAO;CAC5C,aAAa,EAAE,QAAQ,CAAC,KAAK,EAC5B,aAAa,gDACb,CAAC;CACF,UAAU,EAAE,QAAQ,CAAC,KAAK,EACzB,aAAa,gCACb,CAAC;CACF,YAAY,EACV,SAAS,CACT,KAAK,EACL,aAAa,kCACb,CAAC,CACD,UAAU;CACZ,CAAC;;;;;;;;;;;;;;;;AAiBF,MAAa,qBAAqB,SACjC,mBACC,yBACA;CACC,QAAQ;CACR,MAAM;CACN,UAAU,EACT,SAAS;EACR,SAAS;EACT,aAAa;EACb,WAAW;GACV,KAAK;IACJ,aAAa;IACb,SAAS,EACR,oBAAoB,EACnB,QAAQ;KACP,MAAM;KACN,YAAY;MACX,MAAM,EACL,MAAM,6BACN;MACD,SAAS,EACR,MAAM,gCACN;MACD;KACD,EACD,EACD;IACD;GACD,KAAK,EACJ,aAAa,oCACb;GACD;EACD,EACD;CACD,EACD,OAAO,QAAQ;CACd,MAAM,EAAE,UAAU,gBAAgB,IAAI;AAEtC,KAAI,KAAK,sBAIR;MAAI,CAHkB,MAAM,KAAK,qBAChC,IAAI,KAAK,YACT,CAEA,OAAM,SAAS,KACd,eACA,yBAAyB,qBACzB;;CAIH,MAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAA6B;EACnE,OAAO;EACP,OAAO,CACN;GACC,OAAO;GACP,OAAO;GACP,CACD;EACD,CAAC;AACF,KAAI,CAAC,KACJ,OAAM,SAAS,KACd,gBACA,yBAAyB,iCACzB;AAEF,KAAI,KAAK,qBACR;MAAI,CAAC,KAAK,qBAAqB;GAC9B,MAAM,MAAM,YAAY,KAAK,UAAU;AACvC,SAAM,IAAI,QAAQ,gBAAgB,wBAAwB;IACzD,OAAO;IACP,YAAY;IACZ,WAAW,QAAQ,KAAK,WAAW,MAAM;IACzC,CAAC;AACF,OAAI,KAAK,QACR,OAAM,IAAI,QAAQ,uBACjB,KAAK,QACJ;IACC;IACA,MAAM;IACN,EACD,IACA,CACD;AAEF,SAAM,SAAS,KACd,gBACA,yBAAyB,0BACzB;;;CAMH,MAAM,qBAHW,MAAM,IAAI,QAAQ,gBAAgB,oBAClD,KAAK,GACL,EACkC,MACjC,MAAM,EAAE,eAAe,aACxB;AACD,KAAI,CAAC,mBAAmB;AACvB,MAAI,QAAQ,OAAO,MAAM,gCAAgC,EACxD,aACA,CAAC;AACF,QAAM,SAAS,KACd,gBACA,yBAAyB,iCACzB;;CAEF,MAAM,kBAAkB,mBAAmB;AAC3C,KAAI,CAAC,iBAAiB;AACrB,MAAI,QAAQ,OAAO,MAAM,sBAAsB,EAAE,aAAa,CAAC;AAC/D,QAAM,SAAS,KACd,gBACA,yBAAyB,iBACzB;;AAMF,KAAI,CAJkB,MAAM,IAAI,QAAQ,SAAS,OAAO;EACvD,MAAM;EACN;EACA,CAAC,EACkB;AACnB,MAAI,QAAQ,OAAO,MAAM,mBAAmB;AAC5C,QAAM,SAAS,KACd,gBACA,yBAAyB,iCACzB;;CAEF,MAAM,UAAU,MAAM,IAAI,QAAQ,gBAAgB,cACjD,KAAK,IACL,IAAI,KAAK,eAAe,MACxB;AACD,KAAI,CAAC,SAAS;AACb,MAAI,QAAQ,OAAO,MAAM,2BAA2B;AACpD,QAAM,SAAS,KACd,gBACA,iBAAiB,yBACjB;;AAGF,OAAM,iBACL,KACA;EACC;EACM;EACN,EACD,IAAI,KAAK,eAAe,MACxB;AACD,QAAO,IAAI,KAAK;EACf,OAAO,QAAQ;EACf,MAAM,gBAAgB,IAAI,QAAQ,SAAS,KAAK;EAChD,CAAC;EAEH;AAEF,MAAM,+BAA+B,EAAE,OAAO,EAC7C,aAAa,EAAE,QAAQ,CAAC,KAAK,EAC5B,aAAa,iDACb,CAAC,EACF,CAAC;;;;;;;;;;;;;;;;AAiBF,MAAa,sBAAsB,SAClC,mBACC,0BACA;CACC,QAAQ;CACR,MAAM;CACN,UAAU,EACT,SAAS;EACR,SAAS;EACT,aAAa;EACb,WAAW,EACV,KAAK;GACJ,aAAa;GACb,SAAS,EACR,oBAAoB,EACnB,QAAQ;IACP,MAAM;IACN,YAAY,EACX,SAAS,EACR,MAAM,UACN,EACD;IACD,EACD,EACD;GACD,EACD;EACD,EACD;CACD,EACD,OAAO,QAAQ;AACd,KAAI,CAAC,MAAM,SAAS;AACnB,MAAI,QAAQ,OAAO,KAAK,0BAA0B;AAClD,QAAM,SAAS,KACd,mBACA,yBAAyB,yBACzB;;AAGF,KAAI,KAAK,sBAIR;MAAI,CAHkB,MAAM,KAAK,qBAChC,IAAI,KAAK,YACT,CAEA,OAAM,SAAS,KACd,eACA,yBAAyB,qBACzB;;CAIH,MAAM,OAAO,YAAY,KAAK,UAAU;AACxC,OAAM,IAAI,QAAQ,gBAAgB,wBAAwB;EACzD,OAAO,GAAG,KAAK;EACf,YAAY,IAAI,KAAK;EACrB,WAAW,QAAQ,KAAK,WAAW,MAAM;EACzC,CAAC;AACF,OAAM,IAAI,QAAQ,uBACjB,KAAK,QACJ;EACC,aAAa,IAAI,KAAK;EACtB;EACA,EACD,IACA,CACD;AACD,QAAO,IAAI,KAAK,EAAE,SAAS,aAAa,CAAC;EAE1C;AAEF,MAAM,8BAA8B,EAAE,OAAO;CAI5C,aAAa,EAAE,QAAQ,CAAC,KAAK,EAC5B,aAAa,+CACb,CAAC;CAIF,MAAM,EAAE,QAAQ,CAAC,KAAK,EACrB,aAAa,4BACb,CAAC;CAKF,gBAAgB,EACd,SAAS,CACT,KAAK,EACL,aAAa,0DACb,CAAC,CACD,UAAU;CAMZ,mBAAmB,EACjB,SAAS,CACT,KAAK,EACL,aACC,qEACD,CAAC,CACD,UAAU;CACZ,CAAC;;;;;;;;;;;;;;;;AAiBF,MAAa,qBAAqB,SACjC,mBACC,wBACA;CACC,QAAQ;CACR,MAAM;CACN,UAAU,EACT,SAAS;EACR,SAAS;EACT,aAAa;EACb,WAAW;GACV,OAAO;IACN,aAAa;IACb,SAAS,EACR,oBAAoB,EACnB,QAAQ;KACP,MAAM;KACN,YAAY;MACX,QAAQ;OACP,MAAM;OACN,aACC;OACD,MAAM,CAAC,KAAK;OACZ;MACD,OAAO;OACN,MAAM;OACN,UAAU;OACV,aACC;OACD;MACD,MAAM;OACL,MAAM;OACN,UAAU;OACV,YAAY;QACX,IAAI;SACH,MAAM;SACN,aAAa;SACb;QACD,OAAO;SACN,MAAM;SACN,QAAQ;SACR,UAAU;SACV,aAAa;SACb;QACD,eAAe;SACd,MAAM;SACN,UAAU;SACV,aAAa;SACb;QACD,MAAM;SACL,MAAM;SACN,UAAU;SACV,aAAa;SACb;QACD,OAAO;SACN,MAAM;SACN,QAAQ;SACR,UAAU;SACV,aAAa;SACb;QACD,aAAa;SACZ,MAAM;SACN,aAAa;SACb;QACD,qBAAqB;SACpB,MAAM;SACN,aAAa;SACb;QACD,WAAW;SACV,MAAM;SACN,QAAQ;SACR,aAAa;SACb;QACD,WAAW;SACV,MAAM;SACN,QAAQ;SACR,aACC;SACD;QACD;OACD,UAAU;QACT;QACA;QACA;QACA;QACA;QACA;OACD,aACC;OACD;MACD;KACD,UAAU,CAAC,SAAS;KACpB,EACD,EACD;IACD;GACD,KAAK,EACJ,aAAa,eACb;GACD;EACD,EACD;CACD,EACD,OAAO,QAAQ;AACd,KAAI,MAAM,WAAW;AAUpB,MAAI,CARY,MAAM,KAAK,UAC1B;GACC,aAAa,IAAI,KAAK;GACtB,MAAM,IAAI,KAAK;GACf,EACD,IACA,CAGA,OAAM,SAAS,KACd,eACA,yBAAyB,YACzB;EAIF,MAAM,MAAM,MAAM,IAAI,QAAQ,gBAAgB,sBAC7C,IAAI,KAAK,YACT;AACD,MAAI,IACH,OAAM,IAAI,QAAQ,gBAAgB,wBAAwB,IAAI,GAAG;QAE5D;EAEN,MAAM,MAAM,MAAM,IAAI,QAAQ,gBAAgB,sBAC7C,IAAI,KAAK,YACT;AAED,MAAI,CAAC,OAAO,IAAI,4BAAY,IAAI,MAAM,EAAE;AACvC,OAAI,OAAO,IAAI,4BAAY,IAAI,MAAM,CACpC,OAAM,SAAS,KACd,eACA,yBAAyB,YACzB;AAEF,SAAM,SAAS,KACd,eACA,yBAAyB,cACzB;;EAEF,MAAM,CAAC,UAAU,YAAY,IAAI,MAAM,MAAM,IAAI;EACjD,MAAM,kBAAkB,MAAM,mBAAmB;AACjD,MAAI,YAAY,SAAS,SAAS,IAAI,iBAAiB;AACtD,SAAM,IAAI,QAAQ,gBAAgB,wBAAwB,IAAI,GAAG;AACjE,SAAM,SAAS,KACd,aACA,yBAAyB,kBACzB;;AAEF,MAAI,aAAa,IAAI,KAAK,MAAM;AAC/B,SAAM,IAAI,QAAQ,gBAAgB,wBAAwB,IAAI,IAAI,EACjE,OAAO,GAAG,SAAS,GAAG,SAAS,YAAY,IAAI,GAAG,KAClD,CAAC;AACF,SAAM,SAAS,KACd,eACA,yBAAyB,YACzB;;AAGF,QAAM,IAAI,QAAQ,gBAAgB,wBAAwB,IAAI,GAAG;;AAGlE,KAAI,IAAI,KAAK,mBAAmB;EAC/B,MAAM,UAAU,MAAM,kBAAkB,IAAI;AAC5C,MAAI,CAAC,QACJ,OAAM,SAAS,KAAK,gBAAgB,iBAAiB,eAAe;AAYrE,OATC,MAAM,IAAI,QAAQ,QAAQ,SAA8B;GACvD,OAAO;GACP,OAAO,CACN;IACC,OAAO;IACP,OAAO,IAAI,KAAK;IAChB,CACD;GACD,CAAC,EACc,OAChB,OAAM,SAAS,KACd,eACA,yBAAyB,mBACzB;EAEF,MAAM,OACL,MAAM,IAAI,QAAQ,gBAAgB,WACjC,QAAQ,KAAK,IACb;IACE,KAAK,cAAc,IAAI,KAAK;IAC5B,KAAK,sBAAsB;GAC5B,CACD;AACF,SAAO,IAAI,KAAK;GACf,QAAQ;GACR,OAAO,QAAQ,QAAQ;GACvB,MAAM,gBAAgB,IAAI,QAAQ,SAAS,KAAK;GAChD,CAAC;;CAGH,IAAI,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAA6B;EACjE,OAAO;EACP,OAAO,CACN;GACC,OAAO,IAAI,KAAK;GAChB,OAAO,KAAK;GACZ,CACD;EACD,CAAC;AACF,KAAI,CAAC,MACJ;MAAI,MAAM,sBAAsB;AAC/B,UACC,MAAM,IAAI,QAAQ,gBAAgB,WAAgC;IACjE,OAAO,KAAK,qBAAqB,aAChC,IAAI,KAAK,YACT;IACD,MAAM,KAAK,qBAAqB,cAC7B,KAAK,qBAAqB,YAAY,IAAI,KAAK,YAAY,GAC3D,IAAI,KAAK;KACX,KAAK,cAAc,IAAI,KAAK;KAC5B,KAAK,sBAAsB;IAC5B,CAAC;AACH,OAAI,CAAC,KACJ,OAAM,SAAS,KACd,yBACA,iBAAiB,sBACjB;;OAIH,QACC,MAAM,IAAI,QAAQ,gBAAgB,WACjC,KAAK,IACL,GACE,KAAK,sBAAsB,MAC5B,CACD;AAEH,KAAI,CAAC,KACJ,OAAM,SAAS,KACd,yBACA,iBAAiB,sBACjB;AAGF,OAAM,MAAM,yBACX;EACC,aAAa,IAAI,KAAK;EACtB;EACA,EACD,IACA;AAED,KAAI,CAAC,IAAI,KAAK,gBAAgB;EAC7B,MAAM,UAAU,MAAM,IAAI,QAAQ,gBAAgB,cACjD,KAAK,GACL;AACD,MAAI,CAAC,QACJ,OAAM,SAAS,KACd,yBACA,iBAAiB,yBACjB;AAEF,QAAM,iBAAiB,KAAK;GAC3B;GACA;GACA,CAAC;AACF,SAAO,IAAI,KAAK;GACf,QAAQ;GACR,OAAO,QAAQ;GACf,MAAM,gBAAgB,IAAI,QAAQ,SAAS,KAAK;GAChD,CAAC;;AAGH,QAAO,IAAI,KAAK;EACf,QAAQ;EACR,OAAO;EACP,MAAM,gBAAgB,IAAI,QAAQ,SAAS,KAAK;EAChD,CAAC;EAEH;AAEF,MAAM,4CAA4C,EAAE,OAAO,EAC1D,aAAa,EAAE,QAAQ,EACvB,CAAC;AAEF,MAAa,mCACZ,SAEA,mBACC,wCACA;CACC,QAAQ;CACR,MAAM;CACN,UAAU,EACT,SAAS;EACR,aAAa;EACb,WAAW,EACV,OAAO;GACN,aAAa;GACb,SAAS,EACR,oBAAoB,EACnB,QAAQ;IACP,MAAM;IACN,YAAY,EACX,QAAQ;KACP,MAAM;KACN,aACC;KACD,MAAM,CAAC,KAAK;KACZ,EACD;IACD,UAAU,CAAC,SAAS;IACpB,EACD,EACD;GACD,EACD;EACD,EACD;CACD,EACD,OAAO,QAAQ;CACd,MAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAA6B;EACnE,OAAO;EACP,OAAO,CACN;GACC,OAAO,IAAI,KAAK;GAChB,OAAO,KAAK;GACZ,CACD;EACD,CAAC;CACF,MAAM,OAAO,YAAY,KAAK,UAAU;AACxC,OAAM,IAAI,QAAQ,gBAAgB,wBAAwB;EACzD,OAAO,GAAG,KAAK;EACf,YAAY,GAAG,IAAI,KAAK,YAAY;EACpC,WAAW,QAAQ,KAAK,WAAW,MAAM;EACzC,CAAC;AAEF,KAAI,CAAC,KACJ,QAAO,IAAI,KAAK,EACf,QAAQ,MACR,CAAC;AAEH,KAAI,KAAK,qBACR,OAAM,IAAI,QAAQ,uBACjB,KAAK,qBACJ;EACC,aAAa,IAAI,KAAK;EACtB;EACA,EACD,IACA,CACD;AAEF,QAAO,IAAI,KAAK,EACf,QAAQ,MACR,CAAC;EAEH;AAEF,MAAM,qCAAqC,EAAE,OAAO;CACnD,KAAK,EAAE,QAAQ,CAAC,KAAK,EACpB,aAAa,+DACb,CAAC;CACF,aAAa,EAAE,QAAQ,CAAC,KAAK,EAC5B,aACC,gGACD,CAAC;CACF,aAAa,EAAE,QAAQ,CAAC,KAAK,EAC5B,aAAa,mDACb,CAAC;CACF,CAAC;AAEF,MAAa,4BAA4B,SACxC,mBACC,gCACA;CACC,QAAQ;CACR,MAAM;CACN,UAAU,EACT,SAAS;EACR,aAAa;EACb,WAAW,EACV,OAAO;GACN,aAAa;GACb,SAAS,EACR,oBAAoB,EACnB,QAAQ;IACP,MAAM;IACN,YAAY,EACX,QAAQ;KACP,MAAM;KACN,aACC;KACD,MAAM,CAAC,KAAK;KACZ,EACD;IACD,UAAU,CAAC,SAAS;IACpB,EACD,EACD;GACD,EACD;EACD,EACD;CACD,EACD,OAAO,QAAQ;CACd,MAAM,eACL,MAAM,IAAI,QAAQ,gBAAgB,sBACjC,GAAG,IAAI,KAAK,YAAY,yBACxB;AACF,KAAI,CAAC,aACJ,OAAM,SAAS,KACd,eACA,yBAAyB,cACzB;AAEF,KAAI,aAAa,4BAAY,IAAI,MAAM,CACtC,OAAM,SAAS,KACd,eACA,yBAAyB,YACzB;CAEF,MAAM,CAAC,UAAU,YAAY,aAAa,MAAM,MAAM,IAAI;CAC1D,MAAM,kBAAkB,MAAM,mBAAmB;AACjD,KAAI,YAAY,SAAS,SAAS,IAAI,iBAAiB;AACtD,QAAM,IAAI,QAAQ,gBAAgB,wBACjC,aAAa,GACb;AACD,QAAM,SAAS,KACd,aACA,yBAAyB,kBACzB;;AAEF,KAAI,IAAI,KAAK,QAAQ,UAAU;AAC9B,QAAM,IAAI,QAAQ,gBAAgB,wBACjC,aAAa,IACb,EACC,OAAO,GAAG,SAAS,GAAG,SAAS,YAAY,IAAI,GAAG,KAClD,CACD;AACD,QAAM,SAAS,KACd,eACA,yBAAyB,YACzB;;CAEF,MAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACpD,OAAO;EACP,OAAO,CACN;GACC,OAAO;GACP,OAAO,IAAI,KAAK;GAChB,CACD;EACD,CAAC;AACF,KAAI,CAAC,KACJ,OAAM,SAAS,KACd,eACA,yBAAyB,iBACzB;CAEF,MAAM,YAAY,IAAI,QAAQ,SAAS,OAAO;CAC9C,MAAM,YAAY,IAAI,QAAQ,SAAS,OAAO;AAC9C,KAAI,IAAI,KAAK,YAAY,SAAS,UACjC,OAAM,SAAS,KAAK,eAAe,iBAAiB,mBAAmB;AAExE,KAAI,IAAI,KAAK,YAAY,SAAS,UACjC,OAAM,SAAS,KAAK,eAAe,iBAAiB,kBAAkB;CAEvE,MAAM,iBAAiB,MAAM,IAAI,QAAQ,SAAS,KACjD,IAAI,KAAK,YACT;AACD,OAAM,IAAI,QAAQ,gBAAgB,eAAe,KAAK,IAAI,eAAe;AACzE,OAAM,IAAI,QAAQ,gBAAgB,wBACjC,aAAa,GACb;AAED,KAAI,IAAI,QAAQ,QAAQ,kBAAkB,8BACzC,OAAM,IAAI,QAAQ,gBAAgB,eAAe,KAAK,GAAG;AAG1D,QAAO,IAAI,KAAK,EACf,QAAQ,MACR,CAAC;EAEH;AAEF,SAAS,YAAY,MAAc;AAClC,QAAO,qBAAqB,MAAM,MAAM"}

package/dist/plugins/phone-number/schema.d.mts

@@ -0,0 +1,5 @@
+//#region src/plugins/phone-number/schema.d.ts
+declare const schema: BetterAuthPluginDBSchema;
+//#endregion
+export { schema };
+//# sourceMappingURL=schema.d.mts.map

package/dist/plugins/phone-number/schema.mjs

@@ -0,0 +1,20 @@
+//#region src/plugins/phone-number/schema.ts
+const schema = { user: { fields: {
+	phoneNumber: {
+		type: "string",
+		required: false,
+		unique: true,
+		sortable: true,
+		returned: true
+	},
+	phoneNumberVerified: {
+		type: "boolean",
+		required: false,
+		returned: true,
+		input: false
+	}
+} } };
+
+//#endregion
+export { schema };
+//# sourceMappingURL=schema.mjs.map

package/dist/plugins/phone-number/schema.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.mjs","names":[],"sources":["../../../src/plugins/phone-number/schema.ts"],"sourcesContent":["import type { BetterAuthPluginDBSchema } from \"@better-auth/core/db\";\n\nexport const schema = {\n\tuser: {\n\t\tfields: {\n\t\t\tphoneNumber: {\n\t\t\t\ttype: \"string\",\n\t\t\t\trequired: false,\n\t\t\t\tunique: true,\n\t\t\t\tsortable: true,\n\t\t\t\treturned: true,\n\t\t\t},\n\t\t\tphoneNumberVerified: {\n\t\t\t\ttype: \"boolean\",\n\t\t\t\trequired: false,\n\t\t\t\treturned: true,\n\t\t\t\tinput: false,\n\t\t\t},\n\t\t},\n\t},\n} satisfies BetterAuthPluginDBSchema;\n"],"mappings":";AAEA,MAAa,SAAS,EACrB,MAAM,EACL,QAAQ;CACP,aAAa;EACZ,MAAM;EACN,UAAU;EACV,QAAQ;EACR,UAAU;EACV,UAAU;EACV;CACD,qBAAqB;EACpB,MAAM;EACN,UAAU;EACV,UAAU;EACV,OAAO;EACP;CACD,EACD,EACD"}

package/dist/plugins/phone-number/types.d.mts

@@ -0,0 +1,118 @@
+import { User } from "../../types/models.mjs";
+import { InferOptionSchema } from "../../types/plugins.mjs";
+import "../../types/index.mjs";
+import { schema } from "./schema.mjs";
+import { Awaitable, GenericEndpointContext } from "@better-auth/core";
+
+//#region src/plugins/phone-number/types.d.ts
+interface UserWithPhoneNumber extends User {
+  phoneNumber: string;
+  phoneNumberVerified: boolean;
+}
+interface PhoneNumberOptions {
+  /**
+   * Length of the OTP code
+   * @default 6
+   */
+  otpLength?: number | undefined;
+  /**
+   * Send OTP code to the user
+   *
+   * @param phoneNumber
+   * @param code
+   * @returns
+   */
+  sendOTP: (data: {
+    phoneNumber: string;
+    code: string;
+  }, ctx?: GenericEndpointContext | undefined) => Awaitable<void>;
+  /**
+   * Custom OTP verification function
+   *
+   * If provided, this function will be called instead of the internal verification logic.
+   * This is useful when using SMS providers that handle their own OTP generation and verification.
+   *
+   * @param data - Contains phone number and OTP code
+   * @param request - The request object
+   * @returns true if OTP is valid, false otherwise
+   */
+  verifyOTP?: ((data: {
+    phoneNumber: string;
+    code: string;
+  }, ctx?: GenericEndpointContext) => Awaitable<boolean>) | undefined;
+  /**
+   * a callback to send otp on user requesting to reset their password
+   *
+   * @param data - contains phone number and code
+   * @param request - the request object
+   * @returns
+   */
+  sendPasswordResetOTP?: ((data: {
+    phoneNumber: string;
+    code: string;
+  }, ctx?: GenericEndpointContext) => Awaitable<void>) | undefined;
+  /**
+   * Expiry time of the OTP code in seconds
+   * @default 300
+   */
+  expiresIn?: number | undefined;
+  /**
+   * Function to validate phone number
+   *
+   * by default any string is accepted
+   */
+  phoneNumberValidator?: ((phoneNumber: string) => Awaitable<boolean>) | undefined;
+  /**
+   * Require a phone number verification before signing in
+   *
+   * @default false
+   */
+  requireVerification?: boolean | undefined;
+  /**
+   * Callback when phone number is verified
+   */
+  callbackOnVerification?: ((data: {
+    phoneNumber: string;
+    user: UserWithPhoneNumber;
+  }, ctx?: GenericEndpointContext) => Awaitable<void>) | undefined;
+  /**
+   * Sign up user after phone number verification
+   *
+   * the user will be signed up with the temporary email
+   * and the phone number will be updated after verification
+   */
+  signUpOnVerification?: {
+    /**
+     * When a user signs up, a temporary email will be need to be created
+     * to sign up the user. This function should return a temporary email
+     * for the user given the phone number
+     *
+     * @param phoneNumber
+     * @returns string (temporary email)
+     */
+    getTempEmail: (phoneNumber: string) => string;
+    /**
+     * When a user signs up, a temporary name will be need to be created
+     * to sign up the user. This function should return a temporary name
+     * for the user given the phone number
+     *
+     * @param phoneNumber
+     * @returns string (temporary name)
+     *
+     * @default phoneNumber - the phone number will be used as the name
+     */
+    getTempName?: (phoneNumber: string) => string;
+  } | undefined;
+  /**
+   * Custom schema for the admin plugin
+   */
+  schema?: InferOptionSchema<typeof schema> | undefined;
+  /**
+   * Allowed attempts for the OTP code
+   * @default 3
+   */
+  allowedAttempts?: number | undefined;
+}
+//#endregion
+export { PhoneNumberOptions, UserWithPhoneNumber };
+//# sourceMappingURL=types.d.mts.map

package/dist/plugins/siwe/client.d.mts

@@ -0,0 +1,5 @@
+//#region src/plugins/siwe/client.d.ts
+declare const siweClient: () => BetterAuthClientPlugin;
+//#endregion
+export { siweClient };
+//# sourceMappingURL=client.d.mts.map

package/dist/plugins/siwe/client.mjs

@@ -0,0 +1,11 @@
+//#region src/plugins/siwe/client.ts
+const siweClient = () => {
+	return {
+		id: "siwe",
+		$InferServerPlugin: {}
+	};
+};
+
+//#endregion
+export { siweClient };
+//# sourceMappingURL=client.mjs.map

package/dist/plugins/siwe/client.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.mjs","names":[],"sources":["../../../src/plugins/siwe/client.ts"],"sourcesContent":["import type { BetterAuthClientPlugin } from \"@better-auth/core\";\nimport type { siwe } from \".\";\n\nexport const siweClient = () => {\n\treturn {\n\t\tid: \"siwe\",\n\t\t$InferServerPlugin: {} as ReturnType<typeof siwe>,\n\t} satisfies BetterAuthClientPlugin;\n};\n"],"mappings":";AAGA,MAAa,mBAAmB;AAC/B,QAAO;EACN,IAAI;EACJ,oBAAoB,EAAE;EACtB"}

package/dist/plugins/siwe/error-codes.mjs

@@ -0,0 +1,13 @@
+import { defineErrorCodes } from "@better-auth/core/utils/error-codes";
+
+//#region src/plugins/siwe/error-codes.ts
+const SIWE_ERROR_CODES = defineErrorCodes({
+	INVALID_OR_EXPIRED_NONCE: "Invalid or expired nonce",
+	INVALID_SIWE_SIGNATURE: "Invalid SIWE signature",
+	WALLET_ALREADY_LINKED: "Wallet already linked to another user",
+	SESSION_CREATION_FAILED: "Failed to create session"
+});
+
+//#endregion
+export { SIWE_ERROR_CODES };
+//# sourceMappingURL=error-codes.mjs.map

package/dist/plugins/siwe/error-codes.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-codes.mjs","names":[],"sources":["../../../src/plugins/siwe/error-codes.ts"],"sourcesContent":["import { defineErrorCodes } from \"@better-auth/core/utils/error-codes\";\n\nexport const SIWE_ERROR_CODES = defineErrorCodes({\n\tINVALID_OR_EXPIRED_NONCE: \"Invalid or expired nonce\",\n\tINVALID_SIWE_SIGNATURE: \"Invalid SIWE signature\",\n\tWALLET_ALREADY_LINKED: \"Wallet already linked to another user\",\n\tSESSION_CREATION_FAILED: \"Failed to create session\",\n});\n"],"mappings":";;;AAEA,MAAa,mBAAmB,iBAAiB;CAChD,0BAA0B;CAC1B,wBAAwB;CACxB,uBAAuB;CACvB,yBAAyB;CACzB,CAAC"}

package/dist/plugins/siwe/index.d.mts

@@ -0,0 +1,26 @@
+import { InferOptionSchema } from "../../types/plugins.mjs";
+import "../../types/index.mjs";
+import { schema } from "./schema.mjs";
+import { ENSLookupArgs, ENSLookupResult, SIWEVerifyMessageArgs } from "./types.mjs";
+
+//#region src/plugins/siwe/index.d.ts
+declare module "@better-auth/core" {
+  interface BetterAuthPluginRegistry<AuthOptions, Options> {
+    siwe: {
+      creator: typeof siwe;
+    };
+  }
+}
+interface SIWEPluginOptions {
+  domain: string;
+  emailDomainName?: string | undefined;
+  anonymous?: boolean | undefined;
+  getNonce: () => Promise<string>;
+  verifyMessage: (args: SIWEVerifyMessageArgs) => Promise<boolean>;
+  ensLookup?: ((args: ENSLookupArgs) => Promise<ENSLookupResult>) | undefined;
+  schema?: InferOptionSchema<typeof schema> | undefined;
+}
+declare const siwe: (options: SIWEPluginOptions) => BetterAuthPlugin;
+//#endregion
+export { SIWEPluginOptions, siwe };
+//# sourceMappingURL=index.d.mts.map

package/dist/plugins/siwe/index.mjs

@@ -0,0 +1,261 @@
+import { getOrigin } from "../../utils/url.mjs";
+import { mergeSchema } from "../../db/schema.mjs";
+import { setSessionCookie } from "../../cookies/index.mjs";
+import { getSessionFromCtx } from "../../api/routes/session.mjs";
+import { APIError } from "../../api/index.mjs";
+import { toChecksumAddress } from "../../utils/hashing.mjs";
+import { SIWE_ERROR_CODES } from "./error-codes.mjs";
+import { schema } from "./schema.mjs";
+import { createAuthEndpoint } from "@better-auth/core/api";
+import * as z from "zod";
+
+//#region src/plugins/siwe/index.ts
+const walletAddressSchema = z.string().regex(/^0[xX][a-fA-F0-9]{40}$/i).length(42);
+const chainIdSchema = z.number().int().positive().max(2147483647).optional().default(1);
+const getSiweNonceBodySchema = z.object({
+	walletAddress: walletAddressSchema,
+	chainId: chainIdSchema
+});
+const verifySiweMessageBodyBaseSchema = z.object({
+	message: z.string().min(1),
+	signature: z.string().min(1),
+	walletAddress: walletAddressSchema,
+	chainId: chainIdSchema,
+	email: z.email().optional()
+});
+const createWalletAccountId = (walletAddress, chainId) => `${walletAddress}:${chainId}`;
+const createWalletVerificationIdentifier = (walletAddress, chainId) => `siwe:${createWalletAccountId(walletAddress, chainId)}`;
+const parseWalletAccountId = (accountId) => {
+	const [address, chainIdStr] = accountId.split(":");
+	const chainId = parseInt(chainIdStr ?? "", 10);
+	if (!address || Number.isNaN(chainId)) return null;
+	return {
+		address,
+		chainId
+	};
+};
+const verifySiweMessageOrThrow = async (options, args) => {
+	try {
+		if (!await options.verifyMessage({
+			message: args.message,
+			signature: args.signature,
+			address: args.address,
+			chainId: args.chainId,
+			cacao: {
+				h: { t: "caip122" },
+				p: {
+					domain: options.domain,
+					aud: options.domain,
+					nonce: args.nonce,
+					iss: options.domain,
+					version: "1"
+				},
+				s: {
+					t: "eip191",
+					s: args.signature
+				}
+			}
+		})) throw APIError.from("UNAUTHORIZED", SIWE_ERROR_CODES.INVALID_SIWE_SIGNATURE);
+	} catch {
+		throw APIError.from("UNAUTHORIZED", SIWE_ERROR_CODES.INVALID_SIWE_SIGNATURE);
+	}
+};
+const siwe = (options) => ({
+	id: "siwe",
+	schema: mergeSchema(schema, options?.schema),
+	init(ctx) {
+		return { options: { databaseHooks: { account: { delete: { async after(account) {
+			if (account.providerId !== "siwe" || !account.accountId) return;
+			const parsed = parseWalletAccountId(account.accountId);
+			if (!parsed) return;
+			await ctx.adapter.deleteMany({
+				model: "walletAddress",
+				where: [
+					{
+						field: "address",
+						value: parsed.address
+					},
+					{
+						field: "chainId",
+						value: parsed.chainId
+					},
+					{
+						field: "userId",
+						value: account.userId
+					}
+				]
+			});
+		} } } } } };
+	},
+	endpoints: {
+		getSiweNonce: createAuthEndpoint("/siwe/nonce", {
+			method: "POST",
+			body: getSiweNonceBodySchema
+		}, async (ctx) => {
+			const { walletAddress: rawWalletAddress, chainId } = ctx.body;
+			const walletAddress = toChecksumAddress(rawWalletAddress);
+			const nonce = await options.getNonce();
+			await ctx.context.internalAdapter.createVerificationValue({
+				identifier: `siwe:${createWalletAccountId(walletAddress, chainId)}`,
+				value: nonce,
+				expiresAt: new Date(Date.now() + 900 * 1e3)
+			});
+			return ctx.json({ nonce });
+		}),
+		verifySiweMessage: createAuthEndpoint("/siwe/verify", {
+			method: "POST",
+			body: verifySiweMessageBodyBaseSchema.refine((data) => options.anonymous !== false || !!data.email, {
+				message: "Email is required when the anonymous plugin option is disabled.",
+				path: ["email"]
+			}),
+			requireRequest: true
+		}, async (ctx) => {
+			const { message, signature, walletAddress: rawWalletAddress, chainId, email } = ctx.body;
+			const walletAddress = toChecksumAddress(rawWalletAddress);
+			const isAnonymous = options.anonymous ?? true;
+			const verificationIdentifier = createWalletVerificationIdentifier(walletAddress, chainId);
+			const verification = await ctx.context.internalAdapter.findVerificationValue(verificationIdentifier);
+			if (!verification || /* @__PURE__ */ new Date() > verification.expiresAt) throw APIError.from("UNAUTHORIZED", SIWE_ERROR_CODES.INVALID_OR_EXPIRED_NONCE);
+			await verifySiweMessageOrThrow(options, {
+				message,
+				signature,
+				address: walletAddress,
+				chainId,
+				nonce: verification.value
+			});
+			await ctx.context.internalAdapter.deleteVerificationValue(verification.id);
+			const walletAddressForChain = await ctx.context.adapter.findOne({
+				model: "walletAddress",
+				where: [{
+					field: "address",
+					operator: "eq",
+					value: walletAddress
+				}, {
+					field: "chainId",
+					operator: "eq",
+					value: chainId
+				}]
+			});
+			const walletAddressAnyChain = await ctx.context.adapter.findOne({
+				model: "walletAddress",
+				where: [{
+					field: "address",
+					operator: "eq",
+					value: walletAddress
+				}]
+			});
+			const currentSession = await getSessionFromCtx(ctx);
+			const accountLinking = ctx.context.options.account?.accountLinking;
+			const trustedProviders = accountLinking?.trustedProviders;
+			if (currentSession !== null && accountLinking?.enabled !== false && (trustedProviders === void 0 || trustedProviders.length === 0 || trustedProviders.includes("siwe"))) {
+				const sessionUser = currentSession.user;
+				if (walletAddressForChain && walletAddressForChain.userId === sessionUser.id) return ctx.json({
+					token: currentSession.session.token,
+					success: true,
+					user: {
+						id: sessionUser.id,
+						walletAddress,
+						chainId
+					}
+				});
+				const walletOwner = walletAddressForChain?.userId ?? walletAddressAnyChain?.userId;
+				if (walletOwner && walletOwner !== sessionUser.id) throw APIError.from("BAD_REQUEST", SIWE_ERROR_CODES.WALLET_ALREADY_LINKED);
+				await ctx.context.adapter.create({
+					model: "walletAddress",
+					data: {
+						userId: sessionUser.id,
+						address: walletAddress,
+						chainId,
+						isPrimary: false,
+						createdAt: /* @__PURE__ */ new Date()
+					}
+				});
+				await ctx.context.internalAdapter.linkAccount({
+					userId: sessionUser.id,
+					providerId: "siwe",
+					accountId: createWalletAccountId(walletAddress, chainId)
+				});
+				return ctx.json({
+					token: currentSession.session.token,
+					success: true,
+					user: {
+						id: sessionUser.id,
+						walletAddress,
+						chainId
+					}
+				});
+			}
+			const existingUserId = walletAddressForChain?.userId ?? walletAddressAnyChain?.userId;
+			let user = existingUserId ? await ctx.context.adapter.findOne({
+				model: "user",
+				where: [{
+					field: "id",
+					operator: "eq",
+					value: existingUserId
+				}]
+			}) : null;
+			if (!user) {
+				const domain = options.emailDomainName ?? getOrigin(ctx.context.baseURL);
+				const userEmail = !isAnonymous && email ? email : `${walletAddress}@${domain}`;
+				const { name, avatar } = await options.ensLookup?.({ walletAddress }) ?? {};
+				user = await ctx.context.internalAdapter.createUser({
+					name: name ?? walletAddress,
+					email: userEmail,
+					image: avatar ?? ""
+				});
+				await ctx.context.adapter.create({
+					model: "walletAddress",
+					data: {
+						userId: user.id,
+						address: walletAddress,
+						chainId,
+						isPrimary: true,
+						createdAt: /* @__PURE__ */ new Date()
+					}
+				});
+				await ctx.context.internalAdapter.createAccount({
+					userId: user.id,
+					providerId: "siwe",
+					accountId: createWalletAccountId(walletAddress, chainId)
+				});
+			} else if (!walletAddressForChain) {
+				await ctx.context.adapter.create({
+					model: "walletAddress",
+					data: {
+						userId: user.id,
+						address: walletAddress,
+						chainId,
+						isPrimary: false,
+						createdAt: /* @__PURE__ */ new Date()
+					}
+				});
+				await ctx.context.internalAdapter.createAccount({
+					userId: user.id,
+					providerId: "siwe",
+					accountId: createWalletAccountId(walletAddress, chainId)
+				});
+			}
+			const session = await ctx.context.internalAdapter.createSession(user.id);
+			if (!session) throw APIError.from("INTERNAL_SERVER_ERROR", SIWE_ERROR_CODES.SESSION_CREATION_FAILED);
+			await setSessionCookie(ctx, {
+				session,
+				user
+			});
+			return ctx.json({
+				token: session.token,
+				success: true,
+				user: {
+					id: user.id,
+					walletAddress,
+					chainId
+				}
+			});
+		})
+	},
+	options,
+	$ERROR_CODES: SIWE_ERROR_CODES
+});
+
+//#endregion
+export { siwe };
+//# sourceMappingURL=index.mjs.map

package/dist/plugins/siwe/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../src/plugins/siwe/index.ts"],"sourcesContent":["import type { BetterAuthPlugin } from \"@better-auth/core\";\nimport { createAuthEndpoint } from \"@better-auth/core/api\";\nimport type { Account } from \"@better-auth/core/db\";\n\nimport * as z from \"zod\";\nimport { APIError, getSessionFromCtx } from \"../../api\";\nimport { setSessionCookie } from \"../../cookies\";\nimport { mergeSchema } from \"../../db/schema\";\nimport type { InferOptionSchema, User } from \"../../types\";\nimport { toChecksumAddress } from \"../../utils/hashing\";\nimport { getOrigin } from \"../../utils/url\";\nimport { SIWE_ERROR_CODES } from \"./error-codes\";\nimport { schema } from \"./schema\";\nimport type {\n\tENSLookupArgs,\n\tENSLookupResult,\n\tSIWEVerifyMessageArgs,\n\tWalletAddress,\n} from \"./types\";\n\ndeclare module \"@better-auth/core\" {\n\tinterface BetterAuthPluginRegistry<AuthOptions, Options> {\n\t\tsiwe: {\n\t\t\tcreator: typeof siwe;\n\t\t};\n\t}\n}\n\nexport interface SIWEPluginOptions {\n\tdomain: string;\n\temailDomainName?: string | undefined;\n\tanonymous?: boolean | undefined;\n\tgetNonce: () => Promise<string>;\n\tverifyMessage: (args: SIWEVerifyMessageArgs) => Promise<boolean>;\n\tensLookup?: ((args: ENSLookupArgs) => Promise<ENSLookupResult>) | undefined;\n\tschema?: InferOptionSchema<typeof schema> | undefined;\n}\n\nconst walletAddressSchema = z\n\t.string()\n\t.regex(/^0[xX][a-fA-F0-9]{40}$/i)\n\t.length(42);\n\nconst chainIdSchema = z\n\t.number()\n\t.int()\n\t.positive()\n\t.max(2147483647)\n\t.optional()\n\t.default(1);\n\nconst getSiweNonceBodySchema = z.object({\n\twalletAddress: walletAddressSchema,\n\tchainId: chainIdSchema,\n});\n\nconst verifySiweMessageBodyBaseSchema = z.object({\n\tmessage: z.string().min(1),\n\tsignature: z.string().min(1),\n\twalletAddress: walletAddressSchema,\n\tchainId: chainIdSchema,\n\temail: z.email().optional(),\n});\n\nconst createWalletAccountId = (walletAddress: string, chainId: number) =>\n\t`${walletAddress}:${chainId}`;\n\nconst createWalletVerificationIdentifier = (\n\twalletAddress: string,\n\tchainId: number,\n) => `siwe:${createWalletAccountId(walletAddress, chainId)}`;\n\nconst parseWalletAccountId = (\n\taccountId: string,\n): { address: string; chainId: number } | null => {\n\tconst [address, chainIdStr] = accountId.split(\":\");\n\tconst chainId = parseInt(chainIdStr ?? \"\", 10);\n\n\tif (!address || Number.isNaN(chainId)) {\n\t\treturn null;\n\t}\n\n\treturn { address, chainId };\n};\n\nconst verifySiweMessageOrThrow = async (\n\toptions: SIWEPluginOptions,\n\targs: {\n\t\tmessage: string;\n\t\tsignature: string;\n\t\taddress: string;\n\t\tchainId: number;\n\t\tnonce: string;\n\t},\n) => {\n\ttry {\n\t\tconst verified = await options.verifyMessage({\n\t\t\tmessage: args.message,\n\t\t\tsignature: args.signature,\n\t\t\taddress: args.address,\n\t\t\tchainId: args.chainId,\n\t\t\tcacao: {\n\t\t\t\th: { t: \"caip122\" },\n\t\t\t\tp: {\n\t\t\t\t\tdomain: options.domain,\n\t\t\t\t\taud: options.domain,\n\t\t\t\t\tnonce: args.nonce,\n\t\t\t\t\tiss: options.domain,\n\t\t\t\t\tversion: \"1\",\n\t\t\t\t},\n\t\t\t\ts: { t: \"eip191\", s: args.signature },\n\t\t\t},\n\t\t});\n\n\t\tif (!verified) {\n\t\t\tthrow APIError.from(\n\t\t\t\t\"UNAUTHORIZED\",\n\t\t\t\tSIWE_ERROR_CODES.INVALID_SIWE_SIGNATURE,\n\t\t\t);\n\t\t}\n\t} catch {\n\t\tthrow APIError.from(\n\t\t\t\"UNAUTHORIZED\",\n\t\t\tSIWE_ERROR_CODES.INVALID_SIWE_SIGNATURE,\n\t\t);\n\t}\n};\n\nexport const siwe = (options: SIWEPluginOptions) =>\n\t({\n\t\tid: \"siwe\",\n\t\tschema: mergeSchema(schema, options?.schema),\n\t\tinit(ctx) {\n\t\t\treturn {\n\t\t\t\toptions: {\n\t\t\t\t\tdatabaseHooks: {\n\t\t\t\t\t\taccount: {\n\t\t\t\t\t\t\tdelete: {\n\t\t\t\t\t\t\t\tasync after(account: Account) {\n\t\t\t\t\t\t\t\t\tif (account.providerId !== \"siwe\" || !account.accountId) {\n\t\t\t\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\t\t\tconst parsed = parseWalletAccountId(account.accountId);\n\t\t\t\t\t\t\t\t\tif (!parsed) {\n\t\t\t\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\t\t\tawait ctx.adapter.deleteMany({\n\t\t\t\t\t\t\t\t\t\tmodel: \"walletAddress\",\n\t\t\t\t\t\t\t\t\t\twhere: [\n\t\t\t\t\t\t\t\t\t\t\t{ field: \"address\", value: parsed.address },\n\t\t\t\t\t\t\t\t\t\t\t{ field: \"chainId\", value: parsed.chainId },\n\t\t\t\t\t\t\t\t\t\t\t{ field: \"userId\", value: account.userId },\n\t\t\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t};\n\t\t},\n\t\tendpoints: {\n\t\t\tgetSiweNonce: createAuthEndpoint(\n\t\t\t\t\"/siwe/nonce\",\n\t\t\t\t{\n\t\t\t\t\tmethod: \"POST\",\n\t\t\t\t\tbody: getSiweNonceBodySchema,\n\t\t\t\t},\n\t\t\t\tasync (ctx) => {\n\t\t\t\t\tconst { walletAddress: rawWalletAddress, chainId } = ctx.body;\n\t\t\t\t\tconst walletAddress = toChecksumAddress(rawWalletAddress);\n\t\t\t\t\tconst nonce = await options.getNonce();\n\n\t\t\t\t\tawait ctx.context.internalAdapter.createVerificationValue({\n\t\t\t\t\t\tidentifier: `siwe:${createWalletAccountId(walletAddress, chainId)}`,\n\t\t\t\t\t\tvalue: nonce,\n\t\t\t\t\t\texpiresAt: new Date(Date.now() + 15 * 60 * 1000),\n\t\t\t\t\t});\n\n\t\t\t\t\treturn ctx.json({ nonce });\n\t\t\t\t},\n\t\t\t),\n\t\t\tverifySiweMessage: createAuthEndpoint(\n\t\t\t\t\"/siwe/verify\",\n\t\t\t\t{\n\t\t\t\t\tmethod: \"POST\",\n\t\t\t\t\tbody: verifySiweMessageBodyBaseSchema.refine(\n\t\t\t\t\t\t(data) => options.anonymous !== false || !!data.email,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\"Email is required when the anonymous plugin option is disabled.\",\n\t\t\t\t\t\t\tpath: [\"email\"],\n\t\t\t\t\t\t},\n\t\t\t\t\t),\n\t\t\t\t\trequireRequest: true,\n\t\t\t\t},\n\t\t\t\tasync (ctx) => {\n\t\t\t\t\tconst {\n\t\t\t\t\t\tmessage,\n\t\t\t\t\t\tsignature,\n\t\t\t\t\t\twalletAddress: rawWalletAddress,\n\t\t\t\t\t\tchainId,\n\t\t\t\t\t\temail,\n\t\t\t\t\t} = ctx.body;\n\n\t\t\t\t\tconst walletAddress = toChecksumAddress(rawWalletAddress);\n\t\t\t\t\tconst isAnonymous = options.anonymous ?? true;\n\n\t\t\t\t\tconst verificationIdentifier = createWalletVerificationIdentifier(\n\t\t\t\t\t\twalletAddress,\n\t\t\t\t\t\tchainId,\n\t\t\t\t\t);\n\n\t\t\t\t\tconst verification =\n\t\t\t\t\t\tawait ctx.context.internalAdapter.findVerificationValue(\n\t\t\t\t\t\t\tverificationIdentifier,\n\t\t\t\t\t\t);\n\n\t\t\t\t\tif (!verification || new Date() > verification.expiresAt) {\n\t\t\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\t\t\"UNAUTHORIZED\",\n\t\t\t\t\t\t\tSIWE_ERROR_CODES.INVALID_OR_EXPIRED_NONCE,\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\n\t\t\t\t\tawait verifySiweMessageOrThrow(options, {\n\t\t\t\t\t\tmessage,\n\t\t\t\t\t\tsignature,\n\t\t\t\t\t\taddress: walletAddress,\n\t\t\t\t\t\tchainId,\n\t\t\t\t\t\tnonce: verification.value,\n\t\t\t\t\t});\n\n\t\t\t\t\t// Nonce is single-use: delete it after successful verification.\n\t\t\t\t\tawait ctx.context.internalAdapter.deleteVerificationValue(\n\t\t\t\t\t\tverification.id,\n\t\t\t\t\t);\n\n\t\t\t\t\tconst walletAddressForChain =\n\t\t\t\t\t\tawait ctx.context.adapter.findOne<WalletAddress>({\n\t\t\t\t\t\t\tmodel: \"walletAddress\",\n\t\t\t\t\t\t\twhere: [\n\t\t\t\t\t\t\t\t{ field: \"address\", operator: \"eq\", value: walletAddress },\n\t\t\t\t\t\t\t\t{ field: \"chainId\", operator: \"eq\", value: chainId },\n\t\t\t\t\t\t\t],\n\t\t\t\t\t\t});\n\n\t\t\t\t\tconst walletAddressAnyChain =\n\t\t\t\t\t\tawait ctx.context.adapter.findOne<WalletAddress>({\n\t\t\t\t\t\t\tmodel: \"walletAddress\",\n\t\t\t\t\t\t\twhere: [\n\t\t\t\t\t\t\t\t{ field: \"address\", operator: \"eq\", value: walletAddress },\n\t\t\t\t\t\t\t],\n\t\t\t\t\t\t});\n\n\t\t\t\t\tconst currentSession = await getSessionFromCtx(ctx);\n\t\t\t\t\tconst accountLinking = ctx.context.options.account?.accountLinking;\n\t\t\t\t\tconst trustedProviders = accountLinking?.trustedProviders;\n\n\t\t\t\t\tconst shouldLink =\n\t\t\t\t\t\tcurrentSession !== null &&\n\t\t\t\t\t\taccountLinking?.enabled !== false &&\n\t\t\t\t\t\t(trustedProviders === undefined ||\n\t\t\t\t\t\t\ttrustedProviders.length === 0 ||\n\t\t\t\t\t\t\ttrustedProviders.includes(\"siwe\"));\n\n\t\t\t\t\tif (shouldLink) {\n\t\t\t\t\t\tconst sessionUser = currentSession.user;\n\n\t\t\t\t\t\tif (\n\t\t\t\t\t\t\twalletAddressForChain &&\n\t\t\t\t\t\t\twalletAddressForChain.userId === sessionUser.id\n\t\t\t\t\t\t) {\n\t\t\t\t\t\t\treturn ctx.json({\n\t\t\t\t\t\t\t\ttoken: currentSession.session.token,\n\t\t\t\t\t\t\t\tsuccess: true,\n\t\t\t\t\t\t\t\tuser: { id: sessionUser.id, walletAddress, chainId },\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\tconst walletOwner =\n\t\t\t\t\t\t\twalletAddressForChain?.userId ?? walletAddressAnyChain?.userId;\n\t\t\t\t\t\tif (walletOwner && walletOwner !== sessionUser.id) {\n\t\t\t\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\t\t\t\"BAD_REQUEST\",\n\t\t\t\t\t\t\t\tSIWE_ERROR_CODES.WALLET_ALREADY_LINKED,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\tawait ctx.context.adapter.create({\n\t\t\t\t\t\t\tmodel: \"walletAddress\",\n\t\t\t\t\t\t\tdata: {\n\t\t\t\t\t\t\t\tuserId: sessionUser.id,\n\t\t\t\t\t\t\t\taddress: walletAddress,\n\t\t\t\t\t\t\t\tchainId,\n\t\t\t\t\t\t\t\tisPrimary: false,\n\t\t\t\t\t\t\t\tcreatedAt: new Date(),\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t});\n\n\t\t\t\t\t\tawait ctx.context.internalAdapter.linkAccount({\n\t\t\t\t\t\t\tuserId: sessionUser.id,\n\t\t\t\t\t\t\tproviderId: \"siwe\",\n\t\t\t\t\t\t\taccountId: createWalletAccountId(walletAddress, chainId),\n\t\t\t\t\t\t});\n\n\t\t\t\t\t\treturn ctx.json({\n\t\t\t\t\t\t\ttoken: currentSession.session.token,\n\t\t\t\t\t\t\tsuccess: true,\n\t\t\t\t\t\t\tuser: { id: sessionUser.id, walletAddress, chainId },\n\t\t\t\t\t\t});\n\t\t\t\t\t}\n\n\t\t\t\t\tconst existingUserId =\n\t\t\t\t\t\twalletAddressForChain?.userId ?? walletAddressAnyChain?.userId;\n\n\t\t\t\t\tlet user = existingUserId\n\t\t\t\t\t\t? await ctx.context.adapter.findOne<User>({\n\t\t\t\t\t\t\t\tmodel: \"user\",\n\t\t\t\t\t\t\t\twhere: [{ field: \"id\", operator: \"eq\", value: existingUserId }],\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t: null;\n\n\t\t\t\t\tif (!user) {\n\t\t\t\t\t\tconst domain =\n\t\t\t\t\t\t\toptions.emailDomainName ?? getOrigin(ctx.context.baseURL);\n\t\t\t\t\t\tconst userEmail =\n\t\t\t\t\t\t\t!isAnonymous && email ? email : `${walletAddress}@${domain}`;\n\t\t\t\t\t\tconst { name, avatar } =\n\t\t\t\t\t\t\t(await options.ensLookup?.({ walletAddress })) ?? {};\n\n\t\t\t\t\t\tuser = await ctx.context.internalAdapter.createUser({\n\t\t\t\t\t\t\tname: name ?? walletAddress,\n\t\t\t\t\t\t\temail: userEmail,\n\t\t\t\t\t\t\timage: avatar ?? \"\",\n\t\t\t\t\t\t});\n\n\t\t\t\t\t\tawait ctx.context.adapter.create({\n\t\t\t\t\t\t\tmodel: \"walletAddress\",\n\t\t\t\t\t\t\tdata: {\n\t\t\t\t\t\t\t\tuserId: user.id,\n\t\t\t\t\t\t\t\taddress: walletAddress,\n\t\t\t\t\t\t\t\tchainId,\n\t\t\t\t\t\t\t\tisPrimary: true,\n\t\t\t\t\t\t\t\tcreatedAt: new Date(),\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t});\n\n\t\t\t\t\t\tawait ctx.context.internalAdapter.createAccount({\n\t\t\t\t\t\t\tuserId: user.id,\n\t\t\t\t\t\t\tproviderId: \"siwe\",\n\t\t\t\t\t\t\taccountId: createWalletAccountId(walletAddress, chainId),\n\t\t\t\t\t\t});\n\t\t\t\t\t} else if (!walletAddressForChain) {\n\t\t\t\t\t\t// User exists but this specific address/chain combo doesn't\n\t\t\t\t\t\tawait ctx.context.adapter.create({\n\t\t\t\t\t\t\tmodel: \"walletAddress\",\n\t\t\t\t\t\t\tdata: {\n\t\t\t\t\t\t\t\tuserId: user.id,\n\t\t\t\t\t\t\t\taddress: walletAddress,\n\t\t\t\t\t\t\t\tchainId,\n\t\t\t\t\t\t\t\tisPrimary: false,\n\t\t\t\t\t\t\t\tcreatedAt: new Date(),\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t});\n\n\t\t\t\t\t\tawait ctx.context.internalAdapter.createAccount({\n\t\t\t\t\t\t\tuserId: user.id,\n\t\t\t\t\t\t\tproviderId: \"siwe\",\n\t\t\t\t\t\t\taccountId: createWalletAccountId(walletAddress, chainId),\n\t\t\t\t\t\t});\n\t\t\t\t\t}\n\n\t\t\t\t\tconst session = await ctx.context.internalAdapter.createSession(\n\t\t\t\t\t\tuser.id,\n\t\t\t\t\t);\n\n\t\t\t\t\tif (!session) {\n\t\t\t\t\t\tthrow APIError.from(\n\t\t\t\t\t\t\t\"INTERNAL_SERVER_ERROR\",\n\t\t\t\t\t\t\tSIWE_ERROR_CODES.SESSION_CREATION_FAILED,\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\n\t\t\t\t\tawait setSessionCookie(ctx, { session, user });\n\n\t\t\t\t\treturn ctx.json({\n\t\t\t\t\t\ttoken: session.token,\n\t\t\t\t\t\tsuccess: true,\n\t\t\t\t\t\tuser: { id: user.id, walletAddress, chainId },\n\t\t\t\t\t});\n\t\t\t\t},\n\t\t\t),\n\t\t},\n\t\toptions,\n\t\t$ERROR_CODES: SIWE_ERROR_CODES,\n\t}) satisfies BetterAuthPlugin;\n"],"mappings":";;;;;;;;;;;;AAsCA,MAAM,sBAAsB,EAC1B,QAAQ,CACR,MAAM,0BAA0B,CAChC,OAAO,GAAG;AAEZ,MAAM,gBAAgB,EACpB,QAAQ,CACR,KAAK,CACL,UAAU,CACV,IAAI,WAAW,CACf,UAAU,CACV,QAAQ,EAAE;AAEZ,MAAM,yBAAyB,EAAE,OAAO;CACvC,eAAe;CACf,SAAS;CACT,CAAC;AAEF,MAAM,kCAAkC,EAAE,OAAO;CAChD,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC1B,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC5B,eAAe;CACf,SAAS;CACT,OAAO,EAAE,OAAO,CAAC,UAAU;CAC3B,CAAC;AAEF,MAAM,yBAAyB,eAAuB,YACrD,GAAG,cAAc,GAAG;AAErB,MAAM,sCACL,eACA,YACI,QAAQ,sBAAsB,eAAe,QAAQ;AAE1D,MAAM,wBACL,cACiD;CACjD,MAAM,CAAC,SAAS,cAAc,UAAU,MAAM,IAAI;CAClD,MAAM,UAAU,SAAS,cAAc,IAAI,GAAG;AAE9C,KAAI,CAAC,WAAW,OAAO,MAAM,QAAQ,CACpC,QAAO;AAGR,QAAO;EAAE;EAAS;EAAS;;AAG5B,MAAM,2BAA2B,OAChC,SACA,SAOI;AACJ,KAAI;AAmBH,MAAI,CAlBa,MAAM,QAAQ,cAAc;GAC5C,SAAS,KAAK;GACd,WAAW,KAAK;GAChB,SAAS,KAAK;GACd,SAAS,KAAK;GACd,OAAO;IACN,GAAG,EAAE,GAAG,WAAW;IACnB,GAAG;KACF,QAAQ,QAAQ;KAChB,KAAK,QAAQ;KACb,OAAO,KAAK;KACZ,KAAK,QAAQ;KACb,SAAS;KACT;IACD,GAAG;KAAE,GAAG;KAAU,GAAG,KAAK;KAAW;IACrC;GACD,CAAC,CAGD,OAAM,SAAS,KACd,gBACA,iBAAiB,uBACjB;SAEK;AACP,QAAM,SAAS,KACd,gBACA,iBAAiB,uBACjB;;;AAIH,MAAa,QAAQ,aACnB;CACA,IAAI;CACJ,QAAQ,YAAY,QAAQ,SAAS,OAAO;CAC5C,KAAK,KAAK;AACT,SAAO,EACN,SAAS,EACR,eAAe,EACd,SAAS,EACR,QAAQ,EACP,MAAM,MAAM,SAAkB;AAC7B,OAAI,QAAQ,eAAe,UAAU,CAAC,QAAQ,UAC7C;GAGD,MAAM,SAAS,qBAAqB,QAAQ,UAAU;AACtD,OAAI,CAAC,OACJ;AAGD,SAAM,IAAI,QAAQ,WAAW;IAC5B,OAAO;IACP,OAAO;KACN;MAAE,OAAO;MAAW,OAAO,OAAO;MAAS;KAC3C;MAAE,OAAO;MAAW,OAAO,OAAO;MAAS;KAC3C;MAAE,OAAO;MAAU,OAAO,QAAQ;MAAQ;KAC1C;IACD,CAAC;KAEH,EACD,EACD,EACD,EACD;;CAEF,WAAW;EACV,cAAc,mBACb,eACA;GACC,QAAQ;GACR,MAAM;GACN,EACD,OAAO,QAAQ;GACd,MAAM,EAAE,eAAe,kBAAkB,YAAY,IAAI;GACzD,MAAM,gBAAgB,kBAAkB,iBAAiB;GACzD,MAAM,QAAQ,MAAM,QAAQ,UAAU;AAEtC,SAAM,IAAI,QAAQ,gBAAgB,wBAAwB;IACzD,YAAY,QAAQ,sBAAsB,eAAe,QAAQ;IACjE,OAAO;IACP,WAAW,IAAI,KAAK,KAAK,KAAK,GAAG,MAAU,IAAK;IAChD,CAAC;AAEF,UAAO,IAAI,KAAK,EAAE,OAAO,CAAC;IAE3B;EACD,mBAAmB,mBAClB,gBACA;GACC,QAAQ;GACR,MAAM,gCAAgC,QACpC,SAAS,QAAQ,cAAc,SAAS,CAAC,CAAC,KAAK,OAChD;IACC,SACC;IACD,MAAM,CAAC,QAAQ;IACf,CACD;GACD,gBAAgB;GAChB,EACD,OAAO,QAAQ;GACd,MAAM,EACL,SACA,WACA,eAAe,kBACf,SACA,UACG,IAAI;GAER,MAAM,gBAAgB,kBAAkB,iBAAiB;GACzD,MAAM,cAAc,QAAQ,aAAa;GAEzC,MAAM,yBAAyB,mCAC9B,eACA,QACA;GAED,MAAM,eACL,MAAM,IAAI,QAAQ,gBAAgB,sBACjC,uBACA;AAEF,OAAI,CAAC,gCAAgB,IAAI,MAAM,GAAG,aAAa,UAC9C,OAAM,SAAS,KACd,gBACA,iBAAiB,yBACjB;AAGF,SAAM,yBAAyB,SAAS;IACvC;IACA;IACA,SAAS;IACT;IACA,OAAO,aAAa;IACpB,CAAC;AAGF,SAAM,IAAI,QAAQ,gBAAgB,wBACjC,aAAa,GACb;GAED,MAAM,wBACL,MAAM,IAAI,QAAQ,QAAQ,QAAuB;IAChD,OAAO;IACP,OAAO,CACN;KAAE,OAAO;KAAW,UAAU;KAAM,OAAO;KAAe,EAC1D;KAAE,OAAO;KAAW,UAAU;KAAM,OAAO;KAAS,CACpD;IACD,CAAC;GAEH,MAAM,wBACL,MAAM,IAAI,QAAQ,QAAQ,QAAuB;IAChD,OAAO;IACP,OAAO,CACN;KAAE,OAAO;KAAW,UAAU;KAAM,OAAO;KAAe,CAC1D;IACD,CAAC;GAEH,MAAM,iBAAiB,MAAM,kBAAkB,IAAI;GACnD,MAAM,iBAAiB,IAAI,QAAQ,QAAQ,SAAS;GACpD,MAAM,mBAAmB,gBAAgB;AASzC,OANC,mBAAmB,QACnB,gBAAgB,YAAY,UAC3B,qBAAqB,UACrB,iBAAiB,WAAW,KAC5B,iBAAiB,SAAS,OAAO,GAEnB;IACf,MAAM,cAAc,eAAe;AAEnC,QACC,yBACA,sBAAsB,WAAW,YAAY,GAE7C,QAAO,IAAI,KAAK;KACf,OAAO,eAAe,QAAQ;KAC9B,SAAS;KACT,MAAM;MAAE,IAAI,YAAY;MAAI;MAAe;MAAS;KACpD,CAAC;IAGH,MAAM,cACL,uBAAuB,UAAU,uBAAuB;AACzD,QAAI,eAAe,gBAAgB,YAAY,GAC9C,OAAM,SAAS,KACd,eACA,iBAAiB,sBACjB;AAGF,UAAM,IAAI,QAAQ,QAAQ,OAAO;KAChC,OAAO;KACP,MAAM;MACL,QAAQ,YAAY;MACpB,SAAS;MACT;MACA,WAAW;MACX,2BAAW,IAAI,MAAM;MACrB;KACD,CAAC;AAEF,UAAM,IAAI,QAAQ,gBAAgB,YAAY;KAC7C,QAAQ,YAAY;KACpB,YAAY;KACZ,WAAW,sBAAsB,eAAe,QAAQ;KACxD,CAAC;AAEF,WAAO,IAAI,KAAK;KACf,OAAO,eAAe,QAAQ;KAC9B,SAAS;KACT,MAAM;MAAE,IAAI,YAAY;MAAI;MAAe;MAAS;KACpD,CAAC;;GAGH,MAAM,iBACL,uBAAuB,UAAU,uBAAuB;GAEzD,IAAI,OAAO,iBACR,MAAM,IAAI,QAAQ,QAAQ,QAAc;IACxC,OAAO;IACP,OAAO,CAAC;KAAE,OAAO;KAAM,UAAU;KAAM,OAAO;KAAgB,CAAC;IAC/D,CAAC,GACD;AAEH,OAAI,CAAC,MAAM;IACV,MAAM,SACL,QAAQ,mBAAmB,UAAU,IAAI,QAAQ,QAAQ;IAC1D,MAAM,YACL,CAAC,eAAe,QAAQ,QAAQ,GAAG,cAAc,GAAG;IACrD,MAAM,EAAE,MAAM,WACZ,MAAM,QAAQ,YAAY,EAAE,eAAe,CAAC,IAAK,EAAE;AAErD,WAAO,MAAM,IAAI,QAAQ,gBAAgB,WAAW;KACnD,MAAM,QAAQ;KACd,OAAO;KACP,OAAO,UAAU;KACjB,CAAC;AAEF,UAAM,IAAI,QAAQ,QAAQ,OAAO;KAChC,OAAO;KACP,MAAM;MACL,QAAQ,KAAK;MACb,SAAS;MACT;MACA,WAAW;MACX,2BAAW,IAAI,MAAM;MACrB;KACD,CAAC;AAEF,UAAM,IAAI,QAAQ,gBAAgB,cAAc;KAC/C,QAAQ,KAAK;KACb,YAAY;KACZ,WAAW,sBAAsB,eAAe,QAAQ;KACxD,CAAC;cACQ,CAAC,uBAAuB;AAElC,UAAM,IAAI,QAAQ,QAAQ,OAAO;KAChC,OAAO;KACP,MAAM;MACL,QAAQ,KAAK;MACb,SAAS;MACT;MACA,WAAW;MACX,2BAAW,IAAI,MAAM;MACrB;KACD,CAAC;AAEF,UAAM,IAAI,QAAQ,gBAAgB,cAAc;KAC/C,QAAQ,KAAK;KACb,YAAY;KACZ,WAAW,sBAAsB,eAAe,QAAQ;KACxD,CAAC;;GAGH,MAAM,UAAU,MAAM,IAAI,QAAQ,gBAAgB,cACjD,KAAK,GACL;AAED,OAAI,CAAC,QACJ,OAAM,SAAS,KACd,yBACA,iBAAiB,wBACjB;AAGF,SAAM,iBAAiB,KAAK;IAAE;IAAS;IAAM,CAAC;AAE9C,UAAO,IAAI,KAAK;IACf,OAAO,QAAQ;IACf,SAAS;IACT,MAAM;KAAE,IAAI,KAAK;KAAI;KAAe;KAAS;IAC7C,CAAC;IAEH;EACD;CACD;CACA,cAAc;CACd"}

package/dist/plugins/siwe/schema.d.mts

@@ -0,0 +1,5 @@
+//#region src/plugins/siwe/schema.d.ts
+declare const schema: BetterAuthPluginDBSchema;
+//#endregion
+export { schema };
+//# sourceMappingURL=schema.d.mts.map

package/dist/plugins/siwe/schema.mjs

@@ -0,0 +1,32 @@
+//#region src/plugins/siwe/schema.ts
+const schema = { walletAddress: { fields: {
+	userId: {
+		type: "string",
+		references: {
+			model: "user",
+			field: "id"
+		},
+		required: true,
+		index: true
+	},
+	address: {
+		type: "string",
+		required: true
+	},
+	chainId: {
+		type: "number",
+		required: true
+	},
+	isPrimary: {
+		type: "boolean",
+		defaultValue: false
+	},
+	createdAt: {
+		type: "date",
+		required: true
+	}
+} } };
+
+//#endregion
+export { schema };
+//# sourceMappingURL=schema.mjs.map

package/dist/plugins/siwe/schema.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.mjs","names":[],"sources":["../../../src/plugins/siwe/schema.ts"],"sourcesContent":["import type { BetterAuthPluginDBSchema } from \"@better-auth/core/db\";\n\nexport const schema = {\n\twalletAddress: {\n\t\tfields: {\n\t\t\tuserId: {\n\t\t\t\ttype: \"string\",\n\t\t\t\treferences: {\n\t\t\t\t\tmodel: \"user\",\n\t\t\t\t\tfield: \"id\",\n\t\t\t\t},\n\t\t\t\trequired: true,\n\t\t\t\tindex: true,\n\t\t\t},\n\t\t\taddress: {\n\t\t\t\ttype: \"string\",\n\t\t\t\trequired: true,\n\t\t\t},\n\t\t\tchainId: {\n\t\t\t\ttype: \"number\",\n\t\t\t\trequired: true,\n\t\t\t},\n\t\t\tisPrimary: {\n\t\t\t\ttype: \"boolean\",\n\t\t\t\tdefaultValue: false,\n\t\t\t},\n\t\t\tcreatedAt: {\n\t\t\t\ttype: \"date\",\n\t\t\t\trequired: true,\n\t\t\t},\n\t\t},\n\t},\n} satisfies BetterAuthPluginDBSchema;\n"],"mappings":";AAEA,MAAa,SAAS,EACrB,eAAe,EACd,QAAQ;CACP,QAAQ;EACP,MAAM;EACN,YAAY;GACX,OAAO;GACP,OAAO;GACP;EACD,UAAU;EACV,OAAO;EACP;CACD,SAAS;EACR,MAAM;EACN,UAAU;EACV;CACD,SAAS;EACR,MAAM;EACN,UAAU;EACV;CACD,WAAW;EACV,MAAM;EACN,cAAc;EACd;CACD,WAAW;EACV,MAAM;EACN,UAAU;EACV;CACD,EACD,EACD"}