@lalternative/auth 0.1.1 → 0.1.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -6
- package/dist/client.d.ts +1 -1
- package/dist/index.d.ts +2 -2
- package/dist/server.d.ts +2 -1
- package/dist/server.js +10 -0
- package/dist/server.js.map +1 -1
- package/dist/{types-CLsvniwT.d.ts → types-DfhNPzI_.d.ts} +41 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -11,12 +11,8 @@ and the auth UI forms (verify-email, forgot/reset password, auth layout).
|
|
|
11
11
|
pnpm add @lalternative/auth better-auth react react-dom
|
|
12
12
|
```
|
|
13
13
|
|
|
14
|
-
The package is published to
|
|
15
|
-
|
|
16
|
-
```
|
|
17
|
-
@lalternative:registry=https://npm.pkg.github.com
|
|
18
|
-
//npm.pkg.github.com/:_authToken=${GITHUB_TOKEN}
|
|
19
|
-
```
|
|
14
|
+
The package is published to the public npmjs.org registry — install is
|
|
15
|
+
anonymous, no `.npmrc` override or token needed.
|
|
20
16
|
|
|
21
17
|
## Usage
|
|
22
18
|
|
package/dist/client.d.ts
CHANGED
package/dist/index.d.ts
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
|
-
import { V as VerifyEmailFormProps, F as ForgotPasswordFormProps, R as ResetPasswordFormProps, A as AuthLayoutProps } from './types-
|
|
2
|
-
export { P as PlatformAuthClientConfig, a as PlatformAuthConfig, b as PlatformAuthMailer, c as PlatformAuthMailerArgs, d as PlatformAuthMailerType } from './types-
|
|
1
|
+
import { V as VerifyEmailFormProps, F as ForgotPasswordFormProps, R as ResetPasswordFormProps, A as AuthLayoutProps } from './types-DfhNPzI_.js';
|
|
2
|
+
export { P as PlatformAuthClientConfig, a as PlatformAuthConfig, b as PlatformAuthMailer, c as PlatformAuthMailerArgs, d as PlatformAuthMailerType, e as PlatformSession, f as PlatformSessionData, g as PlatformUser } from './types-DfhNPzI_.js';
|
|
3
3
|
import * as better_auth_react from 'better-auth/react';
|
|
4
4
|
import * as better_auth from 'better-auth';
|
|
5
5
|
import { PlatformAuthClient } from './client.js';
|
package/dist/server.d.ts
CHANGED
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import { Auth, BetterAuthOptions } from 'better-auth';
|
|
2
|
-
import { a as PlatformAuthConfig } from './types-
|
|
2
|
+
import { a as PlatformAuthConfig } from './types-DfhNPzI_.js';
|
|
3
|
+
export { e as PlatformSession, f as PlatformSessionData, g as PlatformUser } from './types-DfhNPzI_.js';
|
|
3
4
|
|
|
4
5
|
/**
|
|
5
6
|
* Creates a Better Auth instance with platform defaults.
|
package/dist/server.js
CHANGED
|
@@ -43,6 +43,16 @@ function createPlatformAuth(config) {
|
|
|
43
43
|
enabled: true,
|
|
44
44
|
requireEmailVerification: true
|
|
45
45
|
},
|
|
46
|
+
// Never auto-merge a social identity into an existing account by matching
|
|
47
|
+
// email. Better Auth links by default (email-verified providers are trusted),
|
|
48
|
+
// so signing in with Google/GitHub on an email already registered would fold
|
|
49
|
+
// that identity into the existing account. We keep each sign-in method its
|
|
50
|
+
// own account: a social login on a taken email is refused, not linked.
|
|
51
|
+
account: {
|
|
52
|
+
accountLinking: {
|
|
53
|
+
enabled: false
|
|
54
|
+
}
|
|
55
|
+
},
|
|
46
56
|
hooks: {
|
|
47
57
|
// eslint-disable-next-line @typescript-eslint/no-explicit-any
|
|
48
58
|
before: async (ctx) => {
|
package/dist/server.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"sources":["../src/server.ts"],"sourcesContent":["import { betterAuth, APIError, type Auth, type BetterAuthOptions } from \"better-auth\"\nimport { emailOTP, admin } from \"better-auth/plugins\"\nimport type { PlatformAuthConfig, PlatformAuthMailerType } from \"./types\"\n\nconst DEFAULT_EMAIL_SUBJECTS: Record<string, string> = {\n \"email-verification\": \"Verify your account\",\n \"forget-password\": \"Reset your password\",\n \"sign-in\": \"Your sign-in code\",\n}\n\nfunction defaultRenderOtpEmail(otp: string): string {\n return `\n <div style=\"font-family:sans-serif;max-width:480px;margin:0 auto;padding:32px\">\n <h2 style=\"font-size:20px;font-weight:600;margin-bottom:16px\">Your verification code</h2>\n <p style=\"color:#555;margin-bottom:24px\">Use the code below to continue. It expires in 5 minutes.</p>\n <div style=\"background:#f5f5f5;border-radius:8px;padding:24px;text-align:center;letter-spacing:8px;font-size:32px;font-weight:700\">\n ${otp}\n </div>\n <p style=\"color:#999;font-size:12px;margin-top:24px\">If you didn't request this, you can safely ignore this email.</p>\n </div>\n `\n}\n\n/**\n * Creates a Better Auth instance with platform defaults.\n * Each app calls this with its own config (DB, secret, providers, plugins).\n */\nexport function createPlatformAuth(\n config: PlatformAuthConfig,\n): Auth<BetterAuthOptions> {\n const {\n database,\n baseURL,\n secret,\n appName,\n mailer,\n google,\n github,\n plugins = [],\n betaMode = false,\n isInvited,\n emailSubjects,\n renderOtpEmail,\n } = config\n\n const subjects = { ...DEFAULT_EMAIL_SUBJECTS, ...emailSubjects }\n const renderEmail = renderOtpEmail ?? defaultRenderOtpEmail\n\n // The concrete instance type (with email-otp/admin plugins) is widened to\n // the base Auth type so the published .d.ts stays portable
|
|
1
|
+
{"version":3,"sources":["../src/server.ts"],"sourcesContent":["import { betterAuth, APIError, type Auth, type BetterAuthOptions } from \"better-auth\"\nimport { emailOTP, admin } from \"better-auth/plugins\"\nimport type { PlatformAuthConfig, PlatformAuthMailerType } from \"./types\"\n\nconst DEFAULT_EMAIL_SUBJECTS: Record<string, string> = {\n \"email-verification\": \"Verify your account\",\n \"forget-password\": \"Reset your password\",\n \"sign-in\": \"Your sign-in code\",\n}\n\nfunction defaultRenderOtpEmail(otp: string): string {\n return `\n <div style=\"font-family:sans-serif;max-width:480px;margin:0 auto;padding:32px\">\n <h2 style=\"font-size:20px;font-weight:600;margin-bottom:16px\">Your verification code</h2>\n <p style=\"color:#555;margin-bottom:24px\">Use the code below to continue. It expires in 5 minutes.</p>\n <div style=\"background:#f5f5f5;border-radius:8px;padding:24px;text-align:center;letter-spacing:8px;font-size:32px;font-weight:700\">\n ${otp}\n </div>\n <p style=\"color:#999;font-size:12px;margin-top:24px\">If you didn't request this, you can safely ignore this email.</p>\n </div>\n `\n}\n\n/**\n * Creates a Better Auth instance with platform defaults.\n * Each app calls this with its own config (DB, secret, providers, plugins).\n */\nexport function createPlatformAuth(\n config: PlatformAuthConfig,\n): Auth<BetterAuthOptions> {\n const {\n database,\n baseURL,\n secret,\n appName,\n mailer,\n google,\n github,\n plugins = [],\n betaMode = false,\n isInvited,\n emailSubjects,\n renderOtpEmail,\n } = config\n\n const subjects = { ...DEFAULT_EMAIL_SUBJECTS, ...emailSubjects }\n const renderEmail = renderOtpEmail ?? defaultRenderOtpEmail\n\n // The concrete instance type (with email-otp/admin plugins) is widened to\n // the base Auth type so the published .d.ts stays portable (inferring the\n // full plugin type triggers TS2742 — it can't be named without a zod ref).\n // The admin() plugin's user.role field is re-exposed via module augmentation\n // below, so consumers (e.g. transcript-web me.ts) still see session.user.role.\n return betterAuth({\n database,\n baseURL,\n secret,\n emailAndPassword: {\n enabled: true,\n requireEmailVerification: true,\n },\n // Never auto-merge a social identity into an existing account by matching\n // email. Better Auth links by default (email-verified providers are trusted),\n // so signing in with Google/GitHub on an email already registered would fold\n // that identity into the existing account. We keep each sign-in method its\n // own account: a social login on a taken email is refused, not linked.\n account: {\n accountLinking: {\n enabled: false,\n },\n },\n hooks: {\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\n before: async (ctx: any) => {\n if (!betaMode) return\n if (ctx.path !== \"/sign-up/email\") return\n const body = ctx.body as { email?: string; inviteToken?: string } | undefined\n const email = body?.email\n const inviteToken = body?.inviteToken\n if (email && inviteToken && isInvited) {\n const ok = await isInvited(email, inviteToken)\n if (ok) return\n }\n throw new APIError(\"FORBIDDEN\", {\n message: \"Registration is invite-only during the private beta.\",\n })\n },\n },\n plugins: [\n emailOTP({\n async sendVerificationOTP({ email, otp, type }) {\n const subject = subjects[type]\n ? `${subjects[type]} - ${appName}`\n : `Your ${appName} code`\n const html = renderEmail(otp, type as PlatformAuthMailerType)\n\n if (mailer) {\n await mailer({\n to: email,\n subject,\n html,\n type: type as PlatformAuthMailerType,\n otp,\n })\n return\n }\n\n console.warn(\n `[EMAIL] No mailer configured — logging OTP to stdout for ${email} (${type}): ${otp}`,\n )\n },\n otpLength: 6,\n expiresIn: 300,\n overrideDefaultEmailVerification: true,\n }),\n admin(),\n ...plugins, // app-specific plugins (e.g. tanstackStartCookies)\n ],\n socialProviders: {\n ...(google\n ? {\n google: {\n clientId: google.clientId,\n clientSecret: google.clientSecret,\n },\n }\n : {}),\n ...(github\n ? {\n github: {\n clientId: github.clientId,\n clientSecret: github.clientSecret,\n },\n }\n : {}),\n },\n }) as unknown as Auth<BetterAuthOptions>\n}\n\nexport type PlatformAuth = ReturnType<typeof createPlatformAuth>\n\n// Re-export the session contract from /server so consumers that import the\n// auth factory can type api.getSession() without a second import path.\nexport type {\n PlatformUser,\n PlatformSession,\n PlatformSessionData,\n} from \"./types\"\n"],"mappings":";AAAA,SAAS,YAAY,gBAAmD;AACxE,SAAS,UAAU,aAAa;AAGhC,IAAM,yBAAiD;AAAA,EACrD,sBAAsB;AAAA,EACtB,mBAAmB;AAAA,EACnB,WAAW;AACb;AAEA,SAAS,sBAAsB,KAAqB;AAClD,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA,oBAKW,GAAG;AAAA;AAAA;AAAA;AAAA;AAKvB;AAMO,SAAS,mBACd,QACyB;AACzB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU,CAAC;AAAA,IACX,WAAW;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,QAAM,WAAW,EAAE,GAAG,wBAAwB,GAAG,cAAc;AAC/D,QAAM,cAAc,kBAAkB;AAOtC,SAAO,WAAW;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA,kBAAkB;AAAA,MAChB,SAAS;AAAA,MACT,0BAA0B;AAAA,IAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA,SAAS;AAAA,MACP,gBAAgB;AAAA,QACd,SAAS;AAAA,MACX;AAAA,IACF;AAAA,IACA,OAAO;AAAA;AAAA,MAEL,QAAQ,OAAO,QAAa;AAC1B,YAAI,CAAC,SAAU;AACf,YAAI,IAAI,SAAS,iBAAkB;AACnC,cAAM,OAAO,IAAI;AACjB,cAAM,QAAQ,MAAM;AACpB,cAAM,cAAc,MAAM;AAC1B,YAAI,SAAS,eAAe,WAAW;AACrC,gBAAM,KAAK,MAAM,UAAU,OAAO,WAAW;AAC7C,cAAI,GAAI;AAAA,QACV;AACA,cAAM,IAAI,SAAS,aAAa;AAAA,UAC9B,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,IACF;AAAA,IACA,SAAS;AAAA,MACP,SAAS;AAAA,QACP,MAAM,oBAAoB,EAAE,OAAO,KAAK,KAAK,GAAG;AAC9C,gBAAM,UAAU,SAAS,IAAI,IACzB,GAAG,SAAS,IAAI,CAAC,MAAM,OAAO,KAC9B,QAAQ,OAAO;AACnB,gBAAM,OAAO,YAAY,KAAK,IAA8B;AAE5D,cAAI,QAAQ;AACV,kBAAM,OAAO;AAAA,cACX,IAAI;AAAA,cACJ;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,YACF,CAAC;AACD;AAAA,UACF;AAEA,kBAAQ;AAAA,YACN,iEAA4D,KAAK,KAAK,IAAI,MAAM,GAAG;AAAA,UACrF;AAAA,QACF;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,QACX,kCAAkC;AAAA,MACpC,CAAC;AAAA,MACD,MAAM;AAAA,MACN,GAAG;AAAA;AAAA,IACL;AAAA,IACA,iBAAiB;AAAA,MACf,GAAI,SACA;AAAA,QACE,QAAQ;AAAA,UACN,UAAU,OAAO;AAAA,UACjB,cAAc,OAAO;AAAA,QACvB;AAAA,MACF,IACA,CAAC;AAAA,MACL,GAAI,SACA;AAAA,QACE,QAAQ;AAAA,UACN,UAAU,OAAO;AAAA,UACjB,cAAc,OAAO;AAAA,QACvB;AAAA,MACF,IACA,CAAC;AAAA,IACP;AAAA,EACF,CAAC;AACH;","names":[]}
|
|
@@ -1,5 +1,45 @@
|
|
|
1
1
|
import { BetterAuthOptions } from 'better-auth';
|
|
2
2
|
|
|
3
|
+
/**
|
|
4
|
+
* Session user shape exposed by the platform auth instance.
|
|
5
|
+
*
|
|
6
|
+
* The instance returned by {@link createPlatformAuth} is widened to the base
|
|
7
|
+
* `Auth` type so the published `.d.ts` stays portable (inferring the full
|
|
8
|
+
* plugin-augmented type triggers TS2742). That widening hides the fields the
|
|
9
|
+
* email-otp/admin plugins add at runtime — notably `role` from `admin()`.
|
|
10
|
+
*
|
|
11
|
+
* This is the hand-maintained contract for what `api.getSession()` actually
|
|
12
|
+
* returns. Consumers cast the session to {@link PlatformSession} to read these
|
|
13
|
+
* fields with types. Keep it in sync with the enabled plugins.
|
|
14
|
+
*/
|
|
15
|
+
interface PlatformUser {
|
|
16
|
+
id: string;
|
|
17
|
+
email: string;
|
|
18
|
+
emailVerified: boolean;
|
|
19
|
+
name: string;
|
|
20
|
+
image?: string | null;
|
|
21
|
+
createdAt: Date;
|
|
22
|
+
updatedAt: Date;
|
|
23
|
+
/** From the admin() plugin. Absent until a role is assigned. */
|
|
24
|
+
role?: string | null;
|
|
25
|
+
/** From the admin() plugin. */
|
|
26
|
+
banned?: boolean | null;
|
|
27
|
+
}
|
|
28
|
+
interface PlatformSessionData {
|
|
29
|
+
id: string;
|
|
30
|
+
userId: string;
|
|
31
|
+
expiresAt: Date;
|
|
32
|
+
token: string;
|
|
33
|
+
createdAt: Date;
|
|
34
|
+
updatedAt: Date;
|
|
35
|
+
ipAddress?: string | null;
|
|
36
|
+
userAgent?: string | null;
|
|
37
|
+
}
|
|
38
|
+
/** Return shape of `auth.api.getSession()` for platform apps. */
|
|
39
|
+
interface PlatformSession {
|
|
40
|
+
user: PlatformUser;
|
|
41
|
+
session: PlatformSessionData;
|
|
42
|
+
}
|
|
3
43
|
type PlatformAuthMailerType = "email-verification" | "forget-password" | "sign-in" | "change-email";
|
|
4
44
|
interface PlatformAuthMailerArgs {
|
|
5
45
|
/** Recipient address */
|
|
@@ -106,4 +146,4 @@ interface AuthLayoutProps {
|
|
|
106
146
|
footer?: React.ReactNode;
|
|
107
147
|
}
|
|
108
148
|
|
|
109
|
-
export type { AuthLayoutProps as A, ForgotPasswordFormProps as F, PlatformAuthClientConfig as P, ResetPasswordFormProps as R, VerifyEmailFormProps as V, PlatformAuthConfig as a, PlatformAuthMailer as b, PlatformAuthMailerArgs as c, PlatformAuthMailerType as d };
|
|
149
|
+
export type { AuthLayoutProps as A, ForgotPasswordFormProps as F, PlatformAuthClientConfig as P, ResetPasswordFormProps as R, VerifyEmailFormProps as V, PlatformAuthConfig as a, PlatformAuthMailer as b, PlatformAuthMailerArgs as c, PlatformAuthMailerType as d, PlatformSession as e, PlatformSessionData as f, PlatformUser as g };
|