@lenne.tech/nest-server 11.6.1 → 11.7.0

package/dist/core/modules/better-auth/better-auth-rate-limit.middleware.js

@@ -0,0 +1,70 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BetterAuthRateLimitMiddleware = void 0;
+const common_1 = require("@nestjs/common");
+const better_auth_rate_limiter_service_1 = require("./better-auth-rate-limiter.service");
+const better_auth_service_1 = require("./better-auth.service");
+let BetterAuthRateLimitMiddleware = class BetterAuthRateLimitMiddleware {
+    constructor(rateLimiter, betterAuthService) {
+        this.rateLimiter = rateLimiter;
+        this.betterAuthService = betterAuthService;
+    }
+    use(req, res, next) {
+        if (!this.betterAuthService.isEnabled()) {
+            return next();
+        }
+        if (!this.rateLimiter.isEnabled()) {
+            return next();
+        }
+        const ip = this.getClientIp(req);
+        const basePath = this.betterAuthService.getBasePath();
+        const path = req.path.startsWith(basePath) ? req.path.substring(basePath.length) : req.path;
+        const result = this.rateLimiter.check(ip, path);
+        this.addRateLimitHeaders(res, result);
+        if (!result.allowed) {
+            throw new common_1.HttpException({
+                error: 'Too Many Requests',
+                message: this.rateLimiter.getMessage(),
+                retryAfter: result.resetIn,
+                statusCode: common_1.HttpStatus.TOO_MANY_REQUESTS,
+            }, common_1.HttpStatus.TOO_MANY_REQUESTS);
+        }
+        next();
+    }
+    getClientIp(req) {
+        const forwardedFor = req.headers['x-forwarded-for'];
+        if (forwardedFor) {
+            const ips = Array.isArray(forwardedFor) ? forwardedFor[0] : forwardedFor.split(',')[0];
+            return ips.trim();
+        }
+        const realIp = req.headers['x-real-ip'];
+        if (realIp) {
+            return Array.isArray(realIp) ? realIp[0] : realIp;
+        }
+        return req.ip || req.socket?.remoteAddress || 'unknown';
+    }
+    addRateLimitHeaders(res, result) {
+        res.setHeader('X-RateLimit-Limit', result.limit.toString());
+        res.setHeader('X-RateLimit-Remaining', result.remaining.toString());
+        res.setHeader('X-RateLimit-Reset', result.resetIn.toString());
+        if (!result.allowed) {
+            res.setHeader('Retry-After', result.resetIn.toString());
+        }
+    }
+};
+exports.BetterAuthRateLimitMiddleware = BetterAuthRateLimitMiddleware;
+exports.BetterAuthRateLimitMiddleware = BetterAuthRateLimitMiddleware = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [better_auth_rate_limiter_service_1.BetterAuthRateLimiter,
+        better_auth_service_1.BetterAuthService])
+], BetterAuthRateLimitMiddleware);
+//# sourceMappingURL=better-auth-rate-limit.middleware.js.map

package/dist/core/modules/better-auth/better-auth-rate-limit.middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"better-auth-rate-limit.middleware.js","sourceRoot":"","sources":["../../../../src/core/modules/better-auth/better-auth-rate-limit.middleware.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAuF;AAGvF,yFAA4F;AAC5F,+DAA0D;AA4BnD,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;IACxC,YACmB,WAAkC,EAClC,iBAAoC;QADpC,gBAAW,GAAX,WAAW,CAAuB;QAClC,sBAAiB,GAAjB,iBAAiB,CAAmB;IACpD,CAAC;IAEJ,GAAG,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QAEjD,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,CAAC;YACxC,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAGD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC;YAClC,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAGD,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAGjC,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAG5F,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAGhD,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAGtC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,sBAAa,CACrB;gBACE,KAAK,EAAE,mBAAmB;gBAC1B,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE;gBACtC,UAAU,EAAE,MAAM,CAAC,OAAO;gBAC1B,UAAU,EAAE,mBAAU,CAAC,iBAAiB;aACzC,EACD,mBAAU,CAAC,iBAAiB,CAC7B,CAAC;QACJ,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC;IAMO,WAAW,CAAC,GAAY;QAE9B,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACpD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACvF,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;QAGD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACpD,CAAC;QAGD,OAAO,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,aAAa,IAAI,SAAS,CAAC;IAC1D,CAAC;IAKO,mBAAmB,CAAC,GAAa,EAAE,MAAuB;QAChE,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5D,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpE,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;CACF,CAAA;AAhFY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,mBAAU,GAAE;qCAGqB,wDAAqB;QACf,uCAAiB;GAH5C,6BAA6B,CAgFzC"}

package/dist/core/modules/better-auth/better-auth-rate-limiter.service.d.ts

@@ -0,0 +1,32 @@
+import { IBetterAuthRateLimit } from '../../common/interfaces/server-options.interface';
+export interface RateLimitResult {
+    allowed: boolean;
+    current: number;
+    limit: number;
+    remaining: number;
+    resetIn: number;
+}
+export declare class BetterAuthRateLimiter {
+    private readonly logger;
+    private readonly store;
+    private config;
+    private cleanupInterval;
+    constructor();
+    configure(config: IBetterAuthRateLimit | undefined): void;
+    check(ip: string, path: string): RateLimitResult;
+    getMessage(): string;
+    isEnabled(): boolean;
+    reset(ip: string): void;
+    clear(): void;
+    getStats(): {
+        activeEntries: number;
+        enabled: boolean;
+    };
+    onModuleDestroy(): void;
+    private shouldSkip;
+    private getLimit;
+    private getKey;
+    private normalizeEndpoint;
+    private maskIp;
+    private startCleanup;
+}

package/dist/core/modules/better-auth/better-auth-rate-limiter.service.js

@@ -0,0 +1,173 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var BetterAuthRateLimiter_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BetterAuthRateLimiter = void 0;
+const common_1 = require("@nestjs/common");
+const DEFAULT_CONFIG = {
+    enabled: false,
+    max: 10,
+    message: 'Too many requests, please try again later.',
+    skipEndpoints: ['/session', '/callback'],
+    strictEndpoints: ['/sign-in', '/sign-up', '/forgot-password', '/reset-password'],
+    windowSeconds: 60,
+};
+let BetterAuthRateLimiter = BetterAuthRateLimiter_1 = class BetterAuthRateLimiter {
+    constructor() {
+        this.logger = new common_1.Logger(BetterAuthRateLimiter_1.name);
+        this.store = new Map();
+        this.config = DEFAULT_CONFIG;
+        this.cleanupInterval = null;
+        this.startCleanup();
+    }
+    configure(config) {
+        this.config = {
+            ...DEFAULT_CONFIG,
+            ...config,
+            skipEndpoints: config?.skipEndpoints ?? DEFAULT_CONFIG.skipEndpoints,
+            strictEndpoints: config?.strictEndpoints ?? DEFAULT_CONFIG.strictEndpoints,
+        };
+        if (this.config.enabled) {
+            this.logger.log(`Rate limiting enabled: ${this.config.max} requests per ${this.config.windowSeconds}s`);
+        }
+    }
+    check(ip, path) {
+        if (!this.config.enabled) {
+            return {
+                allowed: true,
+                current: 0,
+                limit: Infinity,
+                remaining: Infinity,
+                resetIn: 0,
+            };
+        }
+        if (this.shouldSkip(path)) {
+            return {
+                allowed: true,
+                current: 0,
+                limit: Infinity,
+                remaining: Infinity,
+                resetIn: 0,
+            };
+        }
+        const limit = this.getLimit(path);
+        const key = this.getKey(ip, path);
+        const now = Date.now();
+        let entry = this.store.get(key);
+        if (!entry || now >= entry.resetTime) {
+            entry = {
+                count: 1,
+                resetTime: now + this.config.windowSeconds * 1000,
+            };
+            this.store.set(key, entry);
+            return {
+                allowed: true,
+                current: 1,
+                limit,
+                remaining: limit - 1,
+                resetIn: this.config.windowSeconds,
+            };
+        }
+        entry.count++;
+        const resetIn = Math.ceil((entry.resetTime - now) / 1000);
+        const allowed = entry.count <= limit;
+        const remaining = Math.max(0, limit - entry.count);
+        if (!allowed) {
+            this.logger.warn(`Rate limit exceeded for IP ${this.maskIp(ip)} on ${path}: ${entry.count}/${limit}`);
+        }
+        return {
+            allowed,
+            current: entry.count,
+            limit,
+            remaining,
+            resetIn,
+        };
+    }
+    getMessage() {
+        return this.config.message;
+    }
+    isEnabled() {
+        return this.config.enabled;
+    }
+    reset(ip) {
+        for (const key of this.store.keys()) {
+            if (key.startsWith(`${ip}:`)) {
+                this.store.delete(key);
+            }
+        }
+    }
+    clear() {
+        this.store.clear();
+    }
+    getStats() {
+        return {
+            activeEntries: this.store.size,
+            enabled: this.config.enabled,
+        };
+    }
+    onModuleDestroy() {
+        if (this.cleanupInterval) {
+            clearInterval(this.cleanupInterval);
+            this.cleanupInterval = null;
+        }
+    }
+    shouldSkip(path) {
+        return this.config.skipEndpoints.some((skip) => path === skip || path.endsWith(skip) || path.includes(skip));
+    }
+    getLimit(path) {
+        const isStrict = this.config.strictEndpoints.some((strict) => path === strict || path.endsWith(strict) || path.includes(strict));
+        return isStrict ? Math.ceil(this.config.max / 2) : this.config.max;
+    }
+    getKey(ip, path) {
+        const endpoint = this.normalizeEndpoint(path);
+        return `${ip}:${endpoint}`;
+    }
+    normalizeEndpoint(path) {
+        const cleanPath = path.split('?')[0];
+        if (cleanPath.includes('/callback/')) {
+            return 'callback';
+        }
+        const segments = cleanPath.split('/').filter(Boolean);
+        return segments[segments.length - 1] || 'root';
+    }
+    maskIp(ip) {
+        if (ip.includes('.')) {
+            const parts = ip.split('.');
+            return `${parts[0]}.${parts[1]}.*.*`;
+        }
+        const parts = ip.split(':');
+        return `${parts[0]}:****`;
+    }
+    startCleanup() {
+        this.cleanupInterval = setInterval(() => {
+            const now = Date.now();
+            let cleaned = 0;
+            for (const [key, entry] of this.store.entries()) {
+                if (now >= entry.resetTime) {
+                    this.store.delete(key);
+                    cleaned++;
+                }
+            }
+            if (cleaned > 0) {
+                this.logger.debug(`Cleaned up ${cleaned} expired rate limit entries`);
+            }
+        }, 5 * 60 * 1000);
+        if (this.cleanupInterval.unref) {
+            this.cleanupInterval.unref();
+        }
+    }
+};
+exports.BetterAuthRateLimiter = BetterAuthRateLimiter;
+exports.BetterAuthRateLimiter = BetterAuthRateLimiter = BetterAuthRateLimiter_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [])
+], BetterAuthRateLimiter);
+//# sourceMappingURL=better-auth-rate-limiter.service.js.map

package/dist/core/modules/better-auth/better-auth-rate-limiter.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"better-auth-rate-limiter.service.js","sourceRoot":"","sources":["../../../../src/core/modules/better-auth/better-auth-rate-limiter.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AA6CpD,MAAM,cAAc,GAAmC;IACrD,OAAO,EAAE,KAAK;IACd,GAAG,EAAE,EAAE;IACP,OAAO,EAAE,4CAA4C;IACrD,aAAa,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;IACxC,eAAe,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,kBAAkB,EAAE,iBAAiB,CAAC;IAChF,aAAa,EAAE,EAAE;CAClB,CAAC;AAwBK,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IAMhC;QALiB,WAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;QAChD,UAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;QACnD,WAAM,GAAmC,cAAc,CAAC;QACxD,oBAAe,GAA0B,IAAI,CAAC;QAIpD,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAOD,SAAS,CAAC,MAAwC;QAChD,IAAI,CAAC,MAAM,GAAG;YACZ,GAAG,cAAc;YACjB,GAAG,MAAM;YAET,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,cAAc,CAAC,aAAa;YACpE,eAAe,EAAE,MAAM,EAAE,eAAe,IAAI,cAAc,CAAC,eAAe;SAC3E,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,0BAA0B,IAAI,CAAC,MAAM,CAAC,GAAG,iBAAiB,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IASD,KAAK,CAAC,EAAU,EAAE,IAAY;QAE5B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC;gBACV,KAAK,EAAE,QAAQ;gBACf,SAAS,EAAE,QAAQ;gBACnB,OAAO,EAAE,CAAC;aACX,CAAC;QACJ,CAAC;QAGD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC;gBACV,KAAK,EAAE,QAAQ;gBACf,SAAS,EAAE,QAAQ;gBACnB,OAAO,EAAE,CAAC;aACX,CAAC;QACJ,CAAC;QAGD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAGvB,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEhC,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YAErC,KAAK,GAAG;gBACN,KAAK,EAAE,CAAC;gBACR,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,IAAI;aAClD,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAE3B,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC;gBACV,KAAK;gBACL,SAAS,EAAE,KAAK,GAAG,CAAC;gBACpB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;aACnC,CAAC;QACJ,CAAC;QAGD,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAEnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,KAAK,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;QACxG,CAAC;QAED,OAAO;YACL,OAAO;YACP,OAAO,EAAE,KAAK,CAAC,KAAK;YACpB,KAAK;YACL,SAAS;YACT,OAAO;SACR,CAAC;IACJ,CAAC;IAKD,UAAU;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAC7B,CAAC;IAKD,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAC7B,CAAC;IAOD,KAAK,CAAC,EAAU;QAEd,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YACpC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAKD,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAKD,QAAQ;QACN,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YAC9B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;SAC7B,CAAC;IACJ,CAAC;IAKD,eAAe;QACb,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC;IAKO,UAAU,CAAC,IAAY;QAC7B,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/G,CAAC;IAMO,QAAQ,CAAC,IAAY;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAC/C,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC9E,CAAC;QAEF,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;IACrE,CAAC;IAMO,MAAM,CAAC,EAAU,EAAE,IAAY;QAErC,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;IAC7B,CAAC;IAKO,iBAAiB,CAAC,IAAY;QAEpC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAGrC,IAAI,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACrC,OAAO,UAAU,CAAC;QACpB,CAAC;QAGD,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC;IACjD,CAAC;IAKO,MAAM,CAAC,EAAU;QACvB,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAErB,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACvC,CAAC;QAED,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5B,CAAC;IAKO,YAAY;QAElB,IAAI,CAAC,eAAe,GAAG,WAAW,CAChC,GAAG,EAAE;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,OAAO,GAAG,CAAC,CAAC;YAEhB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBAChD,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;oBAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBACvB,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,OAAO,6BAA6B,CAAC,CAAC;YACxE,CAAC;QACH,CAAC,EACD,CAAC,GAAG,EAAE,GAAG,IAAI,CACd,CAAC;QAGF,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;CACF,CAAA;AAzPY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;;GACA,qBAAqB,CAyPjC"}

package/dist/core/modules/better-auth/better-auth-user.mapper.d.ts

@@ -0,0 +1,43 @@
+import { Connection } from 'mongoose';
+export interface BetterAuthSessionUser {
+    createdAt?: Date;
+    email: string;
+    emailVerified?: boolean;
+    id: string;
+    image?: string;
+    name?: string;
+    updatedAt?: Date;
+}
+export interface MappedUser {
+    _authenticatedViaBetterAuth: true;
+    email: string;
+    emailVerified?: boolean;
+    hasRole: (roles: string | string[]) => boolean;
+    iamId: string;
+    id: string;
+    image?: string;
+    name?: string;
+    roles: string[];
+    verified?: boolean;
+}
+export interface SyncedUserDocument {
+    _id: any;
+    avatar?: string;
+    createdAt: Date;
+    email: string;
+    firstName?: string;
+    iamId: string;
+    lastName?: string;
+    password?: string;
+    roles: string[];
+    updatedAt: Date;
+    verified?: boolean;
+}
+export declare class BetterAuthUserMapper {
+    private readonly connection?;
+    private readonly logger;
+    constructor(connection?: Connection);
+    mapSessionUser(sessionUser: BetterAuthSessionUser): Promise<MappedUser | null>;
+    private createMappedUser;
+    linkOrCreateUser(sessionUser: BetterAuthSessionUser, additionalData?: Record<string, any>): Promise<null | SyncedUserDocument>;
+}

package/dist/core/modules/better-auth/better-auth-user.mapper.js

@@ -0,0 +1,159 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var BetterAuthUserMapper_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BetterAuthUserMapper = void 0;
+const common_1 = require("@nestjs/common");
+const mongoose_1 = require("@nestjs/mongoose");
+const mongoose_2 = require("mongoose");
+const role_enum_1 = require("../../common/enums/role.enum");
+let BetterAuthUserMapper = BetterAuthUserMapper_1 = class BetterAuthUserMapper {
+    constructor(connection) {
+        this.connection = connection;
+        this.logger = new common_1.Logger(BetterAuthUserMapper_1.name);
+    }
+    async mapSessionUser(sessionUser) {
+        if (!sessionUser?.id || !sessionUser?.email) {
+            return null;
+        }
+        if (!this.connection) {
+            this.logger.warn('No database connection available - using default role mapping');
+            return this.createMappedUser({
+                email: sessionUser.email,
+                emailVerified: sessionUser.emailVerified,
+                iamId: sessionUser.id,
+                id: sessionUser.id,
+                image: sessionUser.image,
+                name: sessionUser.name,
+                roles: [],
+                verified: sessionUser.emailVerified,
+            });
+        }
+        try {
+            const userCollection = this.connection.collection('users');
+            const dbUser = await userCollection.findOne({
+                $or: [{ email: sessionUser.email }, { iamId: sessionUser.id }],
+            });
+            if (dbUser) {
+                const roles = Array.isArray(dbUser.roles) ? dbUser.roles : [];
+                const verified = dbUser.verified === true || sessionUser.emailVerified === true;
+                return this.createMappedUser({
+                    email: sessionUser.email,
+                    emailVerified: sessionUser.emailVerified,
+                    iamId: sessionUser.id,
+                    id: dbUser._id.toString(),
+                    image: sessionUser.image,
+                    name: sessionUser.name,
+                    roles,
+                    verified,
+                });
+            }
+            this.logger.debug(`Better-Auth user ${sessionUser.email} not found in users collection`);
+            return this.createMappedUser({
+                email: sessionUser.email,
+                emailVerified: sessionUser.emailVerified,
+                iamId: sessionUser.id,
+                id: sessionUser.id,
+                image: sessionUser.image,
+                name: sessionUser.name,
+                roles: [],
+                verified: sessionUser.emailVerified,
+            });
+        }
+        catch (error) {
+            this.logger.error(`Error mapping Better-Auth user: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            return null;
+        }
+    }
+    createMappedUser(userData) {
+        const roles = userData.roles || [];
+        return {
+            ...userData,
+            _authenticatedViaBetterAuth: true,
+            hasRole: (checkRoles) => {
+                const rolesToCheck = Array.isArray(checkRoles) ? checkRoles : [checkRoles];
+                if (rolesToCheck.includes(role_enum_1.RoleEnum.S_EVERYONE)) {
+                    return true;
+                }
+                if (rolesToCheck.includes(role_enum_1.RoleEnum.S_USER)) {
+                    return true;
+                }
+                if (rolesToCheck.includes(role_enum_1.RoleEnum.S_NO_ONE)) {
+                    return false;
+                }
+                if (rolesToCheck.includes(role_enum_1.RoleEnum.S_VERIFIED)) {
+                    return userData.verified === true;
+                }
+                return rolesToCheck.some((role) => roles.includes(role));
+            },
+            roles,
+        };
+    }
+    async linkOrCreateUser(sessionUser, additionalData) {
+        if (!sessionUser?.email) {
+            return null;
+        }
+        if (!this.connection) {
+            this.logger.warn('No database connection available - cannot sync user');
+            return null;
+        }
+        try {
+            const userCollection = this.connection.collection('users');
+            const existingUser = await userCollection.findOne({
+                $or: [{ email: sessionUser.email }, { iamId: sessionUser.id }],
+            });
+            const updateData = {
+                email: sessionUser.email,
+                ...(sessionUser.name && { firstName: sessionUser.name.split(' ')[0] }),
+                ...(sessionUser.name &&
+                    sessionUser.name.includes(' ') && {
+                    lastName: sessionUser.name.split(' ').slice(1).join(' '),
+                }),
+                ...(sessionUser.emailVerified !== undefined && { verified: sessionUser.emailVerified }),
+                ...(sessionUser.image && { avatar: sessionUser.image }),
+                iamId: sessionUser.id,
+                updatedAt: new Date(),
+                ...additionalData,
+            };
+            const updateQuery = {
+                $set: updateData,
+            };
+            if (!existingUser) {
+                updateQuery.$setOnInsert = {
+                    createdAt: new Date(),
+                    roles: [],
+                };
+            }
+            const result = await userCollection.findOneAndUpdate({
+                $or: [{ email: sessionUser.email }, { iamId: sessionUser.id }],
+            }, updateQuery, {
+                returnDocument: 'after',
+                upsert: true,
+            });
+            return result;
+        }
+        catch (error) {
+            this.logger.error(`Error syncing Better-Auth user: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            return null;
+        }
+    }
+};
+exports.BetterAuthUserMapper = BetterAuthUserMapper;
+exports.BetterAuthUserMapper = BetterAuthUserMapper = BetterAuthUserMapper_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Optional)()),
+    __param(0, (0, mongoose_1.InjectConnection)()),
+    __metadata("design:paramtypes", [mongoose_2.Connection])
+], BetterAuthUserMapper);
+//# sourceMappingURL=better-auth-user.mapper.js.map

package/dist/core/modules/better-auth/better-auth-user.mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"better-auth-user.mapper.js","sourceRoot":"","sources":["../../../../src/core/modules/better-auth/better-auth-user.mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA8D;AAC9D,+CAAoD;AACpD,uCAAsC;AAEtC,4DAAwD;AA+DjD,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IAG/B,YAA4C,UAAwC;QAAvB,eAAU,GAAV,UAAU,CAAa;QAFnE,WAAM,GAAG,IAAI,eAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;IAEuB,CAAC;IAaxF,KAAK,CAAC,cAAc,CAAC,WAAkC;QACrD,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;YAClF,OAAO,IAAI,CAAC,gBAAgB,CAAC;gBAC3B,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,aAAa,EAAE,WAAW,CAAC,aAAa;gBACxC,KAAK,EAAE,WAAW,CAAC,EAAE;gBACrB,EAAE,EAAE,WAAW,CAAC,EAAE;gBAClB,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,KAAK,EAAE,EAAE;gBACT,QAAQ,EAAE,WAAW,CAAC,aAAa;aACpC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YAGH,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC;gBAC1C,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC;aAC/D,CAAC,CAAC;YAEH,IAAI,MAAM,EAAE,CAAC;gBAEX,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAE9D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,IAAI,IAAI,WAAW,CAAC,aAAa,KAAK,IAAI,CAAC;gBAEhF,OAAO,IAAI,CAAC,gBAAgB,CAAC;oBAC3B,KAAK,EAAE,WAAW,CAAC,KAAK;oBACxB,aAAa,EAAE,WAAW,CAAC,aAAa;oBACxC,KAAK,EAAE,WAAW,CAAC,EAAE;oBACrB,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE;oBACzB,KAAK,EAAE,WAAW,CAAC,KAAK;oBACxB,IAAI,EAAE,WAAW,CAAC,IAAI;oBACtB,KAAK;oBACL,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;YAKD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,WAAW,CAAC,KAAK,gCAAgC,CAAC,CAAC;YAEzF,OAAO,IAAI,CAAC,gBAAgB,CAAC;gBAC3B,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,aAAa,EAAE,WAAW,CAAC,aAAa;gBACxC,KAAK,EAAE,WAAW,CAAC,EAAE;gBACrB,EAAE,EAAE,WAAW,CAAC,EAAE;gBAClB,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,KAAK,EAAE,EAAE;gBACT,QAAQ,EAAE,WAAW,CAAC,aAAa;aACpC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YACjH,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAKO,gBAAgB,CAAC,QAAqE;QAC5F,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;QAEnC,OAAO;YACL,GAAG,QAAQ;YACX,2BAA2B,EAAE,IAAI;YACjC,OAAO,EAAE,CAAC,UAA6B,EAAW,EAAE;gBAClD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;gBAG3E,IAAI,YAAY,CAAC,QAAQ,CAAC,oBAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC/C,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,IAAI,YAAY,CAAC,QAAQ,CAAC,oBAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC3C,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,IAAI,YAAY,CAAC,QAAQ,CAAC,oBAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7C,OAAO,KAAK,CAAC;gBACf,CAAC;gBAGD,IAAI,YAAY,CAAC,QAAQ,CAAC,oBAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC/C,OAAO,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC;gBACpC,CAAC;gBAGD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,KAAK;SACN,CAAC;IACJ,CAAC;IAiBD,KAAK,CAAC,gBAAgB,CACpB,WAAkC,EAClC,cAAoC;QAEpC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAG3D,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC;gBAChD,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC;aAC/D,CAAC,CAAC;YAEH,MAAM,UAAU,GAAwB;gBACtC,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,GAAG,CAAC,WAAW,CAAC,IAAI;oBAClB,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI;oBAChC,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;iBACzD,CAAC;gBACJ,GAAG,CAAC,WAAW,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,aAAa,EAAE,CAAC;gBACvF,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC;gBACvD,KAAK,EAAE,WAAW,CAAC,EAAE;gBACrB,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,GAAG,cAAc;aAClB,CAAC;YAGF,MAAM,WAAW,GAAwB;gBACvC,IAAI,EAAE,UAAU;aACjB,CAAC;YAGF,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,WAAW,CAAC,YAAY,GAAG;oBACzB,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,KAAK,EAAE,EAAE;iBACV,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,CAClD;gBACE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC;aAC/D,EACD,WAAW,EACX;gBACE,cAAc,EAAE,OAAO;gBACvB,MAAM,EAAE,IAAI;aACb,CACF,CAAC;YAEF,OAAO,MAAmC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YACjH,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAA;AAzMY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;IAIE,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,2BAAgB,GAAE,CAAA;qCAA+B,qBAAU;GAHzE,oBAAoB,CAyMhC"}

package/dist/core/modules/better-auth/better-auth.config.d.ts

@@ -0,0 +1,9 @@
+import { betterAuth } from 'better-auth';
+import { IBetterAuth } from '../../common/interfaces/server-options.interface';
+export type BetterAuthInstance = ReturnType<typeof betterAuth>;
+export interface CreateBetterAuthOptions {
+    config: IBetterAuth;
+    db: any;
+    fallbackSecrets?: (string | undefined)[];
+}
+export declare function createBetterAuthInstance(options: CreateBetterAuthOptions): BetterAuthInstance | null;