@masheev/better-auth 0.0.0-stage → 1.7.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE.md +20 -0
- package/README.md +31 -2
- package/TYPE-PATCH-NOTICE.md +9 -0
- package/TYPE-PATCH-PROVENANCE.json +267 -0
- package/dist/_virtual/_rolldown/runtime.mjs +27 -0
- package/dist/adapters/drizzle-adapter/index.d.mts +1 -0
- package/dist/adapters/drizzle-adapter/index.mjs +2 -0
- package/dist/adapters/index.d.mts +26 -0
- package/dist/adapters/index.mjs +9 -0
- package/dist/adapters/kysely-adapter/index.d.mts +1 -0
- package/dist/adapters/kysely-adapter/index.mjs +2 -0
- package/dist/adapters/memory-adapter/index.d.mts +1 -0
- package/dist/adapters/memory-adapter/index.mjs +2 -0
- package/dist/adapters/mongodb-adapter/index.d.mts +1 -0
- package/dist/adapters/mongodb-adapter/index.mjs +2 -0
- package/dist/adapters/prisma-adapter/index.d.mts +1 -0
- package/dist/adapters/prisma-adapter/index.mjs +2 -0
- package/dist/api/dispatch.d.mts +34 -0
- package/dist/api/dispatch.mjs +275 -0
- package/dist/api/index.d.mts +4053 -0
- package/dist/api/index.mjs +220 -0
- package/dist/api/middlewares/authorization.d.mts +69 -0
- package/dist/api/middlewares/authorization.mjs +78 -0
- package/dist/api/middlewares/index.d.mts +2 -0
- package/dist/api/middlewares/origin-check.d.mts +17 -0
- package/dist/api/middlewares/origin-check.mjs +155 -0
- package/dist/api/rate-limiter/index.mjs +318 -0
- package/dist/api/routes/account.d.mts +413 -0
- package/dist/api/routes/account.mjs +619 -0
- package/dist/api/routes/callback.d.mts +32 -0
- package/dist/api/routes/callback.mjs +261 -0
- package/dist/api/routes/email-verification.d.mts +160 -0
- package/dist/api/routes/email-verification.mjs +324 -0
- package/dist/api/routes/error.d.mts +27 -0
- package/dist/api/routes/error.mjs +387 -0
- package/dist/api/routes/index.d.mts +12 -0
- package/dist/api/routes/ok.d.mts +35 -0
- package/dist/api/routes/ok.mjs +27 -0
- package/dist/api/routes/password.d.mts +182 -0
- package/dist/api/routes/password.mjs +206 -0
- package/dist/api/routes/session.d.mts +450 -0
- package/dist/api/routes/session.mjs +481 -0
- package/dist/api/routes/sign-in.d.mts +186 -0
- package/dist/api/routes/sign-in.mjs +368 -0
- package/dist/api/routes/sign-out.d.mts +51 -0
- package/dist/api/routes/sign-out.mjs +96 -0
- package/dist/api/routes/sign-up.d.mts +159 -0
- package/dist/api/routes/sign-up.mjs +275 -0
- package/dist/api/routes/update-session.d.mts +74 -0
- package/dist/api/routes/update-session.mjs +57 -0
- package/dist/api/routes/update-user.d.mts +428 -0
- package/dist/api/routes/update-user.mjs +522 -0
- package/dist/api/state/oauth.d.mts +53 -0
- package/dist/api/state/oauth.mjs +38 -0
- package/dist/api/state/should-session-refresh.d.mts +12 -0
- package/dist/api/state/should-session-refresh.mjs +13 -0
- package/dist/api/to-auth-endpoints.mjs +60 -0
- package/dist/auth/base.mjs +66 -0
- package/dist/auth/full.d.mts +28 -0
- package/dist/auth/full.mjs +29 -0
- package/dist/auth/minimal.d.mts +10 -0
- package/dist/auth/minimal.mjs +11 -0
- package/dist/auth/trusted-origins.mjs +106 -0
- package/dist/client/broadcast-channel.d.mts +19 -0
- package/dist/client/broadcast-channel.mjs +44 -0
- package/dist/client/config.d.mts +90 -0
- package/dist/client/config.mjs +113 -0
- package/dist/client/equality.d.mts +19 -0
- package/dist/client/equality.mjs +42 -0
- package/dist/client/fetch-plugins.mjs +17 -0
- package/dist/client/focus-manager.d.mts +10 -0
- package/dist/client/focus-manager.mjs +30 -0
- package/dist/client/index.d.mts +35 -0
- package/dist/client/index.mjs +22 -0
- package/dist/client/lynx/index.d.mts +43 -0
- package/dist/client/lynx/index.mjs +22 -0
- package/dist/client/lynx/lynx-store.d.mts +46 -0
- package/dist/client/lynx/lynx-store.mjs +44 -0
- package/dist/client/online-manager.d.mts +11 -0
- package/dist/client/online-manager.mjs +33 -0
- package/dist/client/parser.d.mts +10 -0
- package/dist/client/parser.mjs +70 -0
- package/dist/client/path-to-object.d.mts +113 -0
- package/dist/client/plugins/index.d.mts +44 -0
- package/dist/client/plugins/index.mjs +30 -0
- package/dist/client/plugins/infer-plugin.d.mts +16 -0
- package/dist/client/plugins/infer-plugin.mjs +11 -0
- package/dist/client/proxy.mjs +78 -0
- package/dist/client/query.d.mts +23 -0
- package/dist/client/query.mjs +124 -0
- package/dist/client/react/index.d.mts +44 -0
- package/dist/client/react/index.mjs +22 -0
- package/dist/client/react/react-store.d.mts +46 -0
- package/dist/client/react/react-store.mjs +44 -0
- package/dist/client/session-atom.d.mts +11 -0
- package/dist/client/session-atom.mjs +178 -0
- package/dist/client/session-refresh.d.mts +20 -0
- package/dist/client/session-refresh.mjs +131 -0
- package/dist/client/solid/index.d.mts +44 -0
- package/dist/client/solid/index.mjs +22 -0
- package/dist/client/solid/solid-store.mjs +21 -0
- package/dist/client/svelte/index.d.mts +44 -0
- package/dist/client/svelte/index.mjs +18 -0
- package/dist/client/types.d.mts +51 -0
- package/dist/client/vanilla.d.mts +42 -0
- package/dist/client/vanilla.mjs +18 -0
- package/dist/client/vue/index.d.mts +67 -0
- package/dist/client/vue/index.mjs +54 -0
- package/dist/client/vue/vue-store.mjs +23 -0
- package/dist/context/create-context.mjs +235 -0
- package/dist/context/helpers.mjs +158 -0
- package/dist/context/init-minimal.mjs +17 -0
- package/dist/context/init.mjs +19 -0
- package/dist/context/secret-utils.mjs +53 -0
- package/dist/context/store-capabilities.mjs +12 -0
- package/dist/cookies/cache.mjs +33 -0
- package/dist/cookies/cookie-utils.d.mts +72 -0
- package/dist/cookies/cookie-utils.mjs +203 -0
- package/dist/cookies/index.d.mts +124 -0
- package/dist/cookies/index.mjs +350 -0
- package/dist/cookies/jwt.mjs +44 -0
- package/dist/cookies/session-store.d.mts +32 -0
- package/dist/cookies/session-store.mjs +183 -0
- package/dist/crypto/buffer.d.mts +7 -0
- package/dist/crypto/buffer.mjs +16 -0
- package/dist/crypto/index.d.mts +32 -0
- package/dist/crypto/index.mjs +69 -0
- package/dist/crypto/jwt.d.mts +9 -0
- package/dist/crypto/jwt.mjs +141 -0
- package/dist/crypto/password.d.mts +13 -0
- package/dist/crypto/password.mjs +14 -0
- package/dist/crypto/random.d.mts +4 -0
- package/dist/crypto/random.mjs +5 -0
- package/dist/db/adapter-base.d.mts +7 -0
- package/dist/db/adapter-base.mjs +25 -0
- package/dist/db/adapter-kysely.d.mts +7 -0
- package/dist/db/adapter-kysely.mjs +17 -0
- package/dist/db/field-converter.d.mts +7 -0
- package/dist/db/field-converter.mjs +19 -0
- package/dist/db/field.d.mts +41 -0
- package/dist/db/get-migration.d.mts +56 -0
- package/dist/db/get-migration.mjs +685 -0
- package/dist/db/get-schema.d.mts +13 -0
- package/dist/db/get-schema.mjs +39 -0
- package/dist/db/index.d.mts +10 -0
- package/dist/db/index.mjs +35 -0
- package/dist/db/internal-adapter.d.mts +14 -0
- package/dist/db/internal-adapter.mjs +951 -0
- package/dist/db/revoke-unproven-account-access.d.mts +21 -0
- package/dist/db/revoke-unproven-account-access.mjs +58 -0
- package/dist/db/schema.d.mts +62 -0
- package/dist/db/schema.mjs +161 -0
- package/dist/db/to-zod.d.mts +35 -0
- package/dist/db/to-zod.mjs +23 -0
- package/dist/db/verification-token-storage.mjs +25 -0
- package/dist/db/with-hooks.d.mts +37 -0
- package/dist/db/with-hooks.mjs +255 -0
- package/dist/index.d.mts +30 -0
- package/dist/index.mjs +17 -0
- package/dist/integrations/cookie-plugin-guard.mjs +18 -0
- package/dist/integrations/next-js.d.mts +29 -0
- package/dist/integrations/next-js.mjs +105 -0
- package/dist/integrations/node.d.mts +11 -0
- package/dist/integrations/node.mjs +13 -0
- package/dist/integrations/solid-start.d.mts +22 -0
- package/dist/integrations/solid-start.mjs +15 -0
- package/dist/integrations/svelte-kit.d.mts +38 -0
- package/dist/integrations/svelte-kit.mjs +57 -0
- package/dist/integrations/tanstack-start-solid.d.mts +33 -0
- package/dist/integrations/tanstack-start-solid.mjs +57 -0
- package/dist/integrations/tanstack-start.d.mts +33 -0
- package/dist/integrations/tanstack-start.mjs +57 -0
- package/dist/oauth2/account-key.mjs +43 -0
- package/dist/oauth2/errors.mjs +49 -0
- package/dist/oauth2/index.d.mts +5 -0
- package/dist/oauth2/index.mjs +5 -0
- package/dist/oauth2/link-account.d.mts +96 -0
- package/dist/oauth2/link-account.mjs +329 -0
- package/dist/oauth2/state.d.mts +54 -0
- package/dist/oauth2/state.mjs +67 -0
- package/dist/oauth2/utils.d.mts +11 -0
- package/dist/oauth2/utils.mjs +33 -0
- package/dist/package.mjs +4 -0
- package/dist/plugins/access/access.d.mts +17 -0
- package/dist/plugins/access/access.mjs +78 -0
- package/dist/plugins/access/index.d.mts +3 -0
- package/dist/plugins/access/index.mjs +2 -0
- package/dist/plugins/access/types.d.mts +24 -0
- package/dist/plugins/additional-fields/client.d.mts +100 -0
- package/dist/plugins/additional-fields/client.mjs +11 -0
- package/dist/plugins/admin/access/index.d.mts +2 -0
- package/dist/plugins/admin/access/index.mjs +2 -0
- package/dist/plugins/admin/access/statement.d.mts +51 -0
- package/dist/plugins/admin/access/statement.mjs +52 -0
- package/dist/plugins/admin/admin.d.mts +911 -0
- package/dist/plugins/admin/admin.mjs +89 -0
- package/dist/plugins/admin/client.d.mts +81 -0
- package/dist/plugins/admin/client.mjs +39 -0
- package/dist/plugins/admin/error-codes.d.mts +30 -0
- package/dist/plugins/admin/error-codes.mjs +29 -0
- package/dist/plugins/admin/has-permission.mjs +12 -0
- package/dist/plugins/admin/index.d.mts +3 -0
- package/dist/plugins/admin/index.mjs +2 -0
- package/dist/plugins/admin/routes.mjs +919 -0
- package/dist/plugins/admin/schema.d.mts +40 -0
- package/dist/plugins/admin/schema.mjs +33 -0
- package/dist/plugins/admin/types.d.mts +88 -0
- package/dist/plugins/anonymous/client.d.mts +32 -0
- package/dist/plugins/anonymous/client.mjs +21 -0
- package/dist/plugins/anonymous/error-codes.d.mts +15 -0
- package/dist/plugins/anonymous/error-codes.mjs +14 -0
- package/dist/plugins/anonymous/index.d.mts +175 -0
- package/dist/plugins/anonymous/index.mjs +219 -0
- package/dist/plugins/anonymous/schema.d.mts +15 -0
- package/dist/plugins/anonymous/schema.mjs +9 -0
- package/dist/plugins/anonymous/types.d.mts +65 -0
- package/dist/plugins/bearer/index.d.mts +45 -0
- package/dist/plugins/bearer/index.mjs +74 -0
- package/dist/plugins/captcha/constants.d.mts +9 -0
- package/dist/plugins/captcha/constants.mjs +27 -0
- package/dist/plugins/captcha/error-codes.mjs +13 -0
- package/dist/plugins/captcha/index.d.mts +27 -0
- package/dist/plugins/captcha/index.mjs +79 -0
- package/dist/plugins/captcha/types.d.mts +52 -0
- package/dist/plugins/captcha/utils.mjs +9 -0
- package/dist/plugins/captcha/verify-handlers/captchafox.mjs +27 -0
- package/dist/plugins/captcha/verify-handlers/cloudflare-turnstile.mjs +47 -0
- package/dist/plugins/captcha/verify-handlers/google-recaptcha.mjs +32 -0
- package/dist/plugins/captcha/verify-handlers/h-captcha.mjs +27 -0
- package/dist/plugins/custom-session/client.d.mts +17 -0
- package/dist/plugins/custom-session/client.mjs +7 -0
- package/dist/plugins/custom-session/index.d.mts +73 -0
- package/dist/plugins/custom-session/index.mjs +65 -0
- package/dist/plugins/device-authorization/client.d.mts +17 -0
- package/dist/plugins/device-authorization/client.mjs +18 -0
- package/dist/plugins/device-authorization/error-codes.mjs +19 -0
- package/dist/plugins/device-authorization/index.d.mts +558 -0
- package/dist/plugins/device-authorization/index.mjs +87 -0
- package/dist/plugins/device-authorization/routes.d.mts +32 -0
- package/dist/plugins/device-authorization/routes.mjs +725 -0
- package/dist/plugins/device-authorization/schema.d.mts +18 -0
- package/dist/plugins/device-authorization/schema.mjs +63 -0
- package/dist/plugins/email-otp/client.d.mts +21 -0
- package/dist/plugins/email-otp/client.mjs +17 -0
- package/dist/plugins/email-otp/error-codes.d.mts +10 -0
- package/dist/plugins/email-otp/error-codes.mjs +9 -0
- package/dist/plugins/email-otp/index.d.mts +551 -0
- package/dist/plugins/email-otp/index.mjs +145 -0
- package/dist/plugins/email-otp/otp-token.mjs +55 -0
- package/dist/plugins/email-otp/routes.mjs +784 -0
- package/dist/plugins/email-otp/types.d.mts +109 -0
- package/dist/plugins/email-otp/utils.mjs +17 -0
- package/dist/plugins/generic-oauth/error-codes.mjs +8 -0
- package/dist/plugins/generic-oauth/index.d.mts +52 -0
- package/dist/plugins/generic-oauth/index.mjs +279 -0
- package/dist/plugins/generic-oauth/providers/auth0.d.mts +36 -0
- package/dist/plugins/generic-oauth/providers/auth0.mjs +49 -0
- package/dist/plugins/generic-oauth/providers/gumroad.d.mts +31 -0
- package/dist/plugins/generic-oauth/providers/gumroad.mjs +62 -0
- package/dist/plugins/generic-oauth/providers/hubspot.d.mts +36 -0
- package/dist/plugins/generic-oauth/providers/hubspot.mjs +62 -0
- package/dist/plugins/generic-oauth/providers/index.d.mts +10 -0
- package/dist/plugins/generic-oauth/providers/keycloak.d.mts +36 -0
- package/dist/plugins/generic-oauth/providers/keycloak.mjs +47 -0
- package/dist/plugins/generic-oauth/providers/line.d.mts +54 -0
- package/dist/plugins/generic-oauth/providers/line.mjs +93 -0
- package/dist/plugins/generic-oauth/providers/microsoft-entra-id.d.mts +39 -0
- package/dist/plugins/generic-oauth/providers/microsoft-entra-id.mjs +104 -0
- package/dist/plugins/generic-oauth/providers/okta.d.mts +36 -0
- package/dist/plugins/generic-oauth/providers/okta.mjs +47 -0
- package/dist/plugins/generic-oauth/providers/patreon.d.mts +29 -0
- package/dist/plugins/generic-oauth/providers/patreon.mjs +61 -0
- package/dist/plugins/generic-oauth/providers/slack.d.mts +29 -0
- package/dist/plugins/generic-oauth/providers/slack.mjs +63 -0
- package/dist/plugins/generic-oauth/providers/yandex.d.mts +29 -0
- package/dist/plugins/generic-oauth/providers/yandex.mjs +67 -0
- package/dist/plugins/generic-oauth/types.d.mts +268 -0
- package/dist/plugins/haveibeenpwned/index.d.mts +63 -0
- package/dist/plugins/haveibeenpwned/index.mjs +81 -0
- package/dist/plugins/index.d.mts +69 -0
- package/dist/plugins/index.mjs +49 -0
- package/dist/plugins/jwt/adapter.mjs +68 -0
- package/dist/plugins/jwt/client.d.mts +41 -0
- package/dist/plugins/jwt/client.mjs +19 -0
- package/dist/plugins/jwt/cookie-cache.mjs +77 -0
- package/dist/plugins/jwt/index.d.mts +246 -0
- package/dist/plugins/jwt/index.mjs +214 -0
- package/dist/plugins/jwt/schema.d.mts +33 -0
- package/dist/plugins/jwt/schema.mjs +29 -0
- package/dist/plugins/jwt/sign.d.mts +128 -0
- package/dist/plugins/jwt/sign.mjs +130 -0
- package/dist/plugins/jwt/types.d.mts +256 -0
- package/dist/plugins/jwt/utils.d.mts +41 -0
- package/dist/plugins/jwt/utils.mjs +64 -0
- package/dist/plugins/jwt/verify.d.mts +11 -0
- package/dist/plugins/jwt/verify.mjs +45 -0
- package/dist/plugins/last-login-method/client.d.mts +48 -0
- package/dist/plugins/last-login-method/client.mjs +48 -0
- package/dist/plugins/last-login-method/index.d.mts +127 -0
- package/dist/plugins/last-login-method/index.mjs +98 -0
- package/dist/plugins/magic-link/client.d.mts +10 -0
- package/dist/plugins/magic-link/client.mjs +11 -0
- package/dist/plugins/magic-link/index.d.mts +213 -0
- package/dist/plugins/magic-link/index.mjs +208 -0
- package/dist/plugins/magic-link/utils.mjs +9 -0
- package/dist/plugins/multi-session/client.d.mts +19 -0
- package/dist/plugins/multi-session/client.mjs +19 -0
- package/dist/plugins/multi-session/error-codes.d.mts +8 -0
- package/dist/plugins/multi-session/error-codes.mjs +5 -0
- package/dist/plugins/multi-session/index.d.mts +212 -0
- package/dist/plugins/multi-session/index.mjs +217 -0
- package/dist/plugins/oauth-popup/client.d.mts +82 -0
- package/dist/plugins/oauth-popup/client.mjs +203 -0
- package/dist/plugins/oauth-popup/constants.d.mts +11 -0
- package/dist/plugins/oauth-popup/constants.mjs +11 -0
- package/dist/plugins/oauth-popup/error-codes.d.mts +11 -0
- package/dist/plugins/oauth-popup/error-codes.mjs +10 -0
- package/dist/plugins/oauth-popup/index.d.mts +67 -0
- package/dist/plugins/oauth-popup/index.mjs +232 -0
- package/dist/plugins/oauth-popup/types.d.mts +30 -0
- package/dist/plugins/oauth-proxy/index.d.mts +130 -0
- package/dist/plugins/oauth-proxy/index.mjs +407 -0
- package/dist/plugins/oauth-proxy/utils.mjs +55 -0
- package/dist/plugins/one-tap/client.d.mts +174 -0
- package/dist/plugins/one-tap/client.mjs +208 -0
- package/dist/plugins/one-tap/index.d.mts +82 -0
- package/dist/plugins/one-tap/index.mjs +100 -0
- package/dist/plugins/one-time-token/client.d.mts +10 -0
- package/dist/plugins/one-time-token/client.mjs +11 -0
- package/dist/plugins/one-time-token/index.d.mts +132 -0
- package/dist/plugins/one-time-token/index.mjs +107 -0
- package/dist/plugins/one-time-token/utils.mjs +9 -0
- package/dist/plugins/open-api/generator.d.mts +126 -0
- package/dist/plugins/open-api/generator.mjs +557 -0
- package/dist/plugins/open-api/index.d.mts +97 -0
- package/dist/plugins/open-api/index.mjs +65 -0
- package/dist/plugins/open-api/logo.mjs +13 -0
- package/dist/plugins/organization/access/index.d.mts +2 -0
- package/dist/plugins/organization/access/index.mjs +2 -0
- package/dist/plugins/organization/access/statement.d.mts +113 -0
- package/dist/plugins/organization/access/statement.mjs +77 -0
- package/dist/plugins/organization/adapter.d.mts +815 -0
- package/dist/plugins/organization/adapter.mjs +813 -0
- package/dist/plugins/organization/call.mjs +15 -0
- package/dist/plugins/organization/client.d.mts +375 -0
- package/dist/plugins/organization/client.mjs +104 -0
- package/dist/plugins/organization/error-codes.d.mts +66 -0
- package/dist/plugins/organization/error-codes.mjs +65 -0
- package/dist/plugins/organization/has-permission.d.mts +17 -0
- package/dist/plugins/organization/has-permission.mjs +34 -0
- package/dist/plugins/organization/index.d.mts +6 -0
- package/dist/plugins/organization/index.mjs +4 -0
- package/dist/plugins/organization/organization.d.mts +420 -0
- package/dist/plugins/organization/organization.mjs +886 -0
- package/dist/plugins/organization/permission.d.mts +15 -0
- package/dist/plugins/organization/permission.mjs +14 -0
- package/dist/plugins/organization/routes/crud-access-control.d.mts +511 -0
- package/dist/plugins/organization/routes/crud-access-control.mjs +674 -0
- package/dist/plugins/organization/routes/crud-invites.d.mts +1154 -0
- package/dist/plugins/organization/routes/crud-invites.mjs +602 -0
- package/dist/plugins/organization/routes/crud-members.d.mts +1057 -0
- package/dist/plugins/organization/routes/crud-members.mjs +518 -0
- package/dist/plugins/organization/routes/crud-org.d.mts +918 -0
- package/dist/plugins/organization/routes/crud-org.mjs +455 -0
- package/dist/plugins/organization/routes/crud-team.d.mts +1238 -0
- package/dist/plugins/organization/routes/crud-team.mjs +766 -0
- package/dist/plugins/organization/schema.d.mts +390 -0
- package/dist/plugins/organization/schema.mjs +65 -0
- package/dist/plugins/organization/types.d.mts +691 -0
- package/dist/plugins/phone-number/client.d.mts +31 -0
- package/dist/plugins/phone-number/client.mjs +19 -0
- package/dist/plugins/phone-number/error-codes.d.mts +19 -0
- package/dist/plugins/phone-number/error-codes.mjs +18 -0
- package/dist/plugins/phone-number/index.d.mts +360 -0
- package/dist/plugins/phone-number/index.mjs +57 -0
- package/dist/plugins/phone-number/routes.mjs +529 -0
- package/dist/plugins/phone-number/schema.d.mts +22 -0
- package/dist/plugins/phone-number/schema.mjs +18 -0
- package/dist/plugins/phone-number/types.d.mts +116 -0
- package/dist/plugins/siwe/client.d.mts +14 -0
- package/dist/plugins/siwe/client.mjs +15 -0
- package/dist/plugins/siwe/index.d.mts +62 -0
- package/dist/plugins/siwe/index.mjs +272 -0
- package/dist/plugins/siwe/parse-message.mjs +60 -0
- package/dist/plugins/siwe/schema.d.mts +35 -0
- package/dist/plugins/siwe/schema.mjs +30 -0
- package/dist/plugins/siwe/types.d.mts +43 -0
- package/dist/plugins/test-utils/auth-helpers.mjs +33 -0
- package/dist/plugins/test-utils/cookie-builder.mjs +55 -0
- package/dist/plugins/test-utils/db-helpers.mjs +65 -0
- package/dist/plugins/test-utils/factories.mjs +38 -0
- package/dist/plugins/test-utils/index.d.mts +73 -0
- package/dist/plugins/test-utils/index.mjs +97 -0
- package/dist/plugins/test-utils/otp-sink.mjs +21 -0
- package/dist/plugins/test-utils/types.d.mts +51 -0
- package/dist/plugins/two-factor/backup-codes/index.d.mts +291 -0
- package/dist/plugins/two-factor/backup-codes/index.mjs +341 -0
- package/dist/plugins/two-factor/client.d.mts +76 -0
- package/dist/plugins/two-factor/client.mjs +41 -0
- package/dist/plugins/two-factor/constant.mjs +6 -0
- package/dist/plugins/two-factor/error-code.d.mts +20 -0
- package/dist/plugins/two-factor/error-code.mjs +19 -0
- package/dist/plugins/two-factor/index.d.mts +720 -0
- package/dist/plugins/two-factor/index.mjs +349 -0
- package/dist/plugins/two-factor/otp/index.d.mts +216 -0
- package/dist/plugins/two-factor/otp/index.mjs +252 -0
- package/dist/plugins/two-factor/schema.d.mts +59 -0
- package/dist/plugins/two-factor/schema.mjs +53 -0
- package/dist/plugins/two-factor/totp/index.d.mts +219 -0
- package/dist/plugins/two-factor/totp/index.mjs +230 -0
- package/dist/plugins/two-factor/types.d.mts +111 -0
- package/dist/plugins/two-factor/utils.mjs +9 -0
- package/dist/plugins/two-factor/verify-two-factor.mjs +205 -0
- package/dist/plugins/username/client.d.mts +38 -0
- package/dist/plugins/username/client.mjs +17 -0
- package/dist/plugins/username/error-codes.d.mts +16 -0
- package/dist/plugins/username/error-codes.mjs +15 -0
- package/dist/plugins/username/index.d.mts +326 -0
- package/dist/plugins/username/index.mjs +312 -0
- package/dist/plugins/username/schema.d.mts +50 -0
- package/dist/plugins/username/schema.mjs +25 -0
- package/dist/social-providers/index.d.mts +1 -0
- package/dist/social-providers/index.mjs +2 -0
- package/dist/state.d.mts +48 -0
- package/dist/state.mjs +149 -0
- package/dist/test-utils/headers.d.mts +8 -0
- package/dist/test-utils/headers.mjs +17 -0
- package/dist/test-utils/http-test-instance.d.mts +413 -0
- package/dist/test-utils/http-test-instance.mjs +107 -0
- package/dist/test-utils/index.d.mts +4 -0
- package/dist/test-utils/index.mjs +4 -0
- package/dist/test-utils/test-instance.d.mts +56 -0
- package/dist/test-utils/test-instance.mjs +242 -0
- package/dist/types/adapter.d.mts +2 -0
- package/dist/types/api.d.mts +28 -0
- package/dist/types/auth.d.mts +32 -0
- package/dist/types/helper.d.mts +26 -0
- package/dist/types/index.d.mts +10 -0
- package/dist/types/index.mjs +1 -0
- package/dist/types/models.d.mts +10 -0
- package/dist/types/plugins.d.mts +19 -0
- package/dist/utils/boolean.mjs +6 -0
- package/dist/utils/constants.mjs +4 -0
- package/dist/utils/date.mjs +6 -0
- package/dist/utils/hashing.mjs +18 -0
- package/dist/utils/hide-metadata.d.mts +6 -0
- package/dist/utils/hide-metadata.mjs +4 -0
- package/dist/utils/index.d.mts +4 -0
- package/dist/utils/is-api-error.d.mts +2 -0
- package/dist/utils/is-api-error.mjs +2 -0
- package/dist/utils/is-atom.mjs +6 -0
- package/dist/utils/is-promise.mjs +6 -0
- package/dist/utils/middleware-response.mjs +7 -0
- package/dist/utils/password.mjs +32 -0
- package/dist/utils/plugin-helper.mjs +14 -0
- package/dist/utils/request.mjs +23 -0
- package/dist/utils/shim.mjs +22 -0
- package/dist/utils/time.d.mts +48 -0
- package/dist/utils/time.mjs +98 -0
- package/dist/utils/url.d.mts +78 -0
- package/dist/utils/url.mjs +238 -0
- package/dist/utils/validate-user-info.mjs +44 -0
- package/dist/utils/wildcard.mjs +106 -0
- package/dist/version.mjs +5 -0
- package/package.json +595 -3
|
@@ -0,0 +1,62 @@
|
|
|
1
|
+
import { betterFetch } from "@better-fetch/fetch";
|
|
2
|
+
//#region src/plugins/generic-oauth/providers/hubspot.ts
|
|
3
|
+
/**
|
|
4
|
+
* HubSpot OAuth provider helper
|
|
5
|
+
*
|
|
6
|
+
* @example
|
|
7
|
+
* ```ts
|
|
8
|
+
* import { genericOAuth, hubspot } from "better-auth/plugins/generic-oauth";
|
|
9
|
+
*
|
|
10
|
+
* export const auth = betterAuth({
|
|
11
|
+
* plugins: [
|
|
12
|
+
* genericOAuth({
|
|
13
|
+
* config: [
|
|
14
|
+
* hubspot({
|
|
15
|
+
* clientId: process.env.HUBSPOT_CLIENT_ID,
|
|
16
|
+
* clientSecret: process.env.HUBSPOT_CLIENT_SECRET,
|
|
17
|
+
* scopes: ["oauth", "contacts"],
|
|
18
|
+
* }),
|
|
19
|
+
* ],
|
|
20
|
+
* }),
|
|
21
|
+
* ],
|
|
22
|
+
* });
|
|
23
|
+
* ```
|
|
24
|
+
*/
|
|
25
|
+
function hubspot(options) {
|
|
26
|
+
const defaultScopes = ["oauth"];
|
|
27
|
+
const getUserInfo = async (tokens) => {
|
|
28
|
+
const { data: profile, error } = await betterFetch(`https://api.hubapi.com/oauth/v1/access-tokens/${tokens.accessToken}`, { headers: { "Content-Type": "application/json" } });
|
|
29
|
+
if (error || !profile) return null;
|
|
30
|
+
const id = profile.user_id ?? profile.signed_access_token?.userId;
|
|
31
|
+
if (!id) return null;
|
|
32
|
+
return {
|
|
33
|
+
id,
|
|
34
|
+
name: profile.user,
|
|
35
|
+
email: profile.user,
|
|
36
|
+
image: void 0,
|
|
37
|
+
emailVerified: false
|
|
38
|
+
};
|
|
39
|
+
};
|
|
40
|
+
return {
|
|
41
|
+
providerId: "hubspot",
|
|
42
|
+
accountSubject: ({ profile }) => profile.id ?? "",
|
|
43
|
+
authorizationUrl: "https://app.hubspot.com/oauth/authorize",
|
|
44
|
+
tokenUrl: "https://api.hubapi.com/oauth/v1/token",
|
|
45
|
+
clientId: options.clientId,
|
|
46
|
+
clientSecret: options.clientSecret,
|
|
47
|
+
tokenEndpointAuth: options.tokenEndpointAuth,
|
|
48
|
+
scopes: options.scopes ?? defaultScopes,
|
|
49
|
+
redirectURI: options.redirectURI,
|
|
50
|
+
endSessionEndpoint: options.endSessionEndpoint,
|
|
51
|
+
postLogoutRedirectURI: options.postLogoutRedirectURI,
|
|
52
|
+
disableProviderLogout: options.disableProviderLogout,
|
|
53
|
+
authentication: "post",
|
|
54
|
+
pkce: options.pkce,
|
|
55
|
+
disableImplicitSignUp: options.disableImplicitSignUp,
|
|
56
|
+
disableSignUp: options.disableSignUp,
|
|
57
|
+
overrideUserInfo: options.overrideUserInfo,
|
|
58
|
+
getUserInfo
|
|
59
|
+
};
|
|
60
|
+
}
|
|
61
|
+
//#endregion
|
|
62
|
+
export { hubspot };
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
import { Auth0Options, auth0 } from "./auth0.mjs";
|
|
2
|
+
import { GumroadOptions, gumroad } from "./gumroad.mjs";
|
|
3
|
+
import { HubSpotOptions, hubspot } from "./hubspot.mjs";
|
|
4
|
+
import { KeycloakOptions, keycloak } from "./keycloak.mjs";
|
|
5
|
+
import { LineOptions, line } from "./line.mjs";
|
|
6
|
+
import { MicrosoftEntraIdOptions, microsoftEntraId } from "./microsoft-entra-id.mjs";
|
|
7
|
+
import { OktaOptions, okta } from "./okta.mjs";
|
|
8
|
+
import { PatreonOptions, patreon } from "./patreon.mjs";
|
|
9
|
+
import { SlackOptions, slack } from "./slack.mjs";
|
|
10
|
+
import { YandexOptions, yandex } from "./yandex.mjs";
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
import { GenericOAuthConfig } from "../types.mjs";
|
|
2
|
+
import { BaseOAuthProviderOptions } from "../index.mjs";
|
|
3
|
+
|
|
4
|
+
//#region src/plugins/generic-oauth/providers/keycloak.d.ts
|
|
5
|
+
interface KeycloakOptions extends BaseOAuthProviderOptions {
|
|
6
|
+
/**
|
|
7
|
+
* Keycloak issuer URL (includes realm, e.g., https://my-domain/realms/MyRealm)
|
|
8
|
+
* This will be used to construct the discovery URL.
|
|
9
|
+
*/
|
|
10
|
+
issuer: string;
|
|
11
|
+
}
|
|
12
|
+
/**
|
|
13
|
+
* Keycloak OAuth provider helper
|
|
14
|
+
*
|
|
15
|
+
* @example
|
|
16
|
+
* ```ts
|
|
17
|
+
* import { genericOAuth, keycloak } from "better-auth/plugins/generic-oauth";
|
|
18
|
+
*
|
|
19
|
+
* export const auth = betterAuth({
|
|
20
|
+
* plugins: [
|
|
21
|
+
* genericOAuth({
|
|
22
|
+
* config: [
|
|
23
|
+
* keycloak({
|
|
24
|
+
* clientId: process.env.KEYCLOAK_CLIENT_ID,
|
|
25
|
+
* clientSecret: process.env.KEYCLOAK_CLIENT_SECRET,
|
|
26
|
+
* issuer: process.env.KEYCLOAK_ISSUER,
|
|
27
|
+
* }),
|
|
28
|
+
* ],
|
|
29
|
+
* }),
|
|
30
|
+
* ],
|
|
31
|
+
* });
|
|
32
|
+
* ```
|
|
33
|
+
*/
|
|
34
|
+
declare function keycloak(options: KeycloakOptions): GenericOAuthConfig<"keycloak">;
|
|
35
|
+
//#endregion
|
|
36
|
+
export { KeycloakOptions, keycloak };
|
|
@@ -0,0 +1,47 @@
|
|
|
1
|
+
//#region src/plugins/generic-oauth/providers/keycloak.ts
|
|
2
|
+
/**
|
|
3
|
+
* Keycloak OAuth provider helper
|
|
4
|
+
*
|
|
5
|
+
* @example
|
|
6
|
+
* ```ts
|
|
7
|
+
* import { genericOAuth, keycloak } from "better-auth/plugins/generic-oauth";
|
|
8
|
+
*
|
|
9
|
+
* export const auth = betterAuth({
|
|
10
|
+
* plugins: [
|
|
11
|
+
* genericOAuth({
|
|
12
|
+
* config: [
|
|
13
|
+
* keycloak({
|
|
14
|
+
* clientId: process.env.KEYCLOAK_CLIENT_ID,
|
|
15
|
+
* clientSecret: process.env.KEYCLOAK_CLIENT_SECRET,
|
|
16
|
+
* issuer: process.env.KEYCLOAK_ISSUER,
|
|
17
|
+
* }),
|
|
18
|
+
* ],
|
|
19
|
+
* }),
|
|
20
|
+
* ],
|
|
21
|
+
* });
|
|
22
|
+
* ```
|
|
23
|
+
*/
|
|
24
|
+
function keycloak(options) {
|
|
25
|
+
return {
|
|
26
|
+
providerId: "keycloak",
|
|
27
|
+
discoveryUrl: `${options.issuer.replace(/\/$/, "")}/.well-known/openid-configuration`,
|
|
28
|
+
clientId: options.clientId,
|
|
29
|
+
clientSecret: options.clientSecret,
|
|
30
|
+
tokenEndpointAuth: options.tokenEndpointAuth,
|
|
31
|
+
scopes: options.scopes ?? [
|
|
32
|
+
"openid",
|
|
33
|
+
"profile",
|
|
34
|
+
"email"
|
|
35
|
+
],
|
|
36
|
+
redirectURI: options.redirectURI,
|
|
37
|
+
endSessionEndpoint: options.endSessionEndpoint,
|
|
38
|
+
postLogoutRedirectURI: options.postLogoutRedirectURI,
|
|
39
|
+
disableProviderLogout: options.disableProviderLogout,
|
|
40
|
+
pkce: options.pkce,
|
|
41
|
+
disableImplicitSignUp: options.disableImplicitSignUp,
|
|
42
|
+
disableSignUp: options.disableSignUp,
|
|
43
|
+
overrideUserInfo: options.overrideUserInfo
|
|
44
|
+
};
|
|
45
|
+
}
|
|
46
|
+
//#endregion
|
|
47
|
+
export { keycloak };
|
|
@@ -0,0 +1,54 @@
|
|
|
1
|
+
import { GenericOAuthConfig } from "../types.mjs";
|
|
2
|
+
import { BaseOAuthProviderOptions } from "../index.mjs";
|
|
3
|
+
|
|
4
|
+
//#region src/plugins/generic-oauth/providers/line.d.ts
|
|
5
|
+
interface LineOptions extends BaseOAuthProviderOptions {
|
|
6
|
+
/**
|
|
7
|
+
* Unique provider identifier for this LINE channel.
|
|
8
|
+
* Use different providerIds for different countries/channels (e.g., "line-jp", "line-th", "line-tw").
|
|
9
|
+
* @default "line"
|
|
10
|
+
*/
|
|
11
|
+
providerId?: string;
|
|
12
|
+
}
|
|
13
|
+
/**
|
|
14
|
+
* LINE OAuth provider helper
|
|
15
|
+
*
|
|
16
|
+
* LINE requires separate channels for different countries (Japan, Thailand, Taiwan, etc.).
|
|
17
|
+
* Each channel has its own clientId and clientSecret. To support multiple countries,
|
|
18
|
+
* call this function multiple times with different providerIds and credentials.
|
|
19
|
+
*
|
|
20
|
+
* @example
|
|
21
|
+
* ```ts
|
|
22
|
+
* import { genericOAuth, line } from "better-auth/plugins/generic-oauth";
|
|
23
|
+
*
|
|
24
|
+
* export const auth = betterAuth({
|
|
25
|
+
* plugins: [
|
|
26
|
+
* genericOAuth({
|
|
27
|
+
* config: [
|
|
28
|
+
* // Japan channel
|
|
29
|
+
* line({
|
|
30
|
+
* providerId: "line-jp",
|
|
31
|
+
* clientId: process.env.LINE_JP_CLIENT_ID,
|
|
32
|
+
* clientSecret: process.env.LINE_JP_CLIENT_SECRET,
|
|
33
|
+
* }),
|
|
34
|
+
* // Thailand channel
|
|
35
|
+
* line({
|
|
36
|
+
* providerId: "line-th",
|
|
37
|
+
* clientId: process.env.LINE_TH_CLIENT_ID,
|
|
38
|
+
* clientSecret: process.env.LINE_TH_CLIENT_SECRET,
|
|
39
|
+
* }),
|
|
40
|
+
* // Taiwan channel
|
|
41
|
+
* line({
|
|
42
|
+
* providerId: "line-tw",
|
|
43
|
+
* clientId: process.env.LINE_TW_CLIENT_ID,
|
|
44
|
+
* clientSecret: process.env.LINE_TW_CLIENT_SECRET,
|
|
45
|
+
* }),
|
|
46
|
+
* ],
|
|
47
|
+
* }),
|
|
48
|
+
* ],
|
|
49
|
+
* });
|
|
50
|
+
* ```
|
|
51
|
+
*/
|
|
52
|
+
declare function line(options: LineOptions): GenericOAuthConfig;
|
|
53
|
+
//#endregion
|
|
54
|
+
export { LineOptions, line };
|
|
@@ -0,0 +1,93 @@
|
|
|
1
|
+
import { decodeJwt } from "jose";
|
|
2
|
+
import { betterFetch } from "@better-fetch/fetch";
|
|
3
|
+
//#region src/plugins/generic-oauth/providers/line.ts
|
|
4
|
+
/**
|
|
5
|
+
* LINE OAuth provider helper
|
|
6
|
+
*
|
|
7
|
+
* LINE requires separate channels for different countries (Japan, Thailand, Taiwan, etc.).
|
|
8
|
+
* Each channel has its own clientId and clientSecret. To support multiple countries,
|
|
9
|
+
* call this function multiple times with different providerIds and credentials.
|
|
10
|
+
*
|
|
11
|
+
* @example
|
|
12
|
+
* ```ts
|
|
13
|
+
* import { genericOAuth, line } from "better-auth/plugins/generic-oauth";
|
|
14
|
+
*
|
|
15
|
+
* export const auth = betterAuth({
|
|
16
|
+
* plugins: [
|
|
17
|
+
* genericOAuth({
|
|
18
|
+
* config: [
|
|
19
|
+
* // Japan channel
|
|
20
|
+
* line({
|
|
21
|
+
* providerId: "line-jp",
|
|
22
|
+
* clientId: process.env.LINE_JP_CLIENT_ID,
|
|
23
|
+
* clientSecret: process.env.LINE_JP_CLIENT_SECRET,
|
|
24
|
+
* }),
|
|
25
|
+
* // Thailand channel
|
|
26
|
+
* line({
|
|
27
|
+
* providerId: "line-th",
|
|
28
|
+
* clientId: process.env.LINE_TH_CLIENT_ID,
|
|
29
|
+
* clientSecret: process.env.LINE_TH_CLIENT_SECRET,
|
|
30
|
+
* }),
|
|
31
|
+
* // Taiwan channel
|
|
32
|
+
* line({
|
|
33
|
+
* providerId: "line-tw",
|
|
34
|
+
* clientId: process.env.LINE_TW_CLIENT_ID,
|
|
35
|
+
* clientSecret: process.env.LINE_TW_CLIENT_SECRET,
|
|
36
|
+
* }),
|
|
37
|
+
* ],
|
|
38
|
+
* }),
|
|
39
|
+
* ],
|
|
40
|
+
* });
|
|
41
|
+
* ```
|
|
42
|
+
*/
|
|
43
|
+
function line(options) {
|
|
44
|
+
const defaultScopes = [
|
|
45
|
+
"openid",
|
|
46
|
+
"profile",
|
|
47
|
+
"email"
|
|
48
|
+
];
|
|
49
|
+
const authorizationUrl = "https://access.line.me/oauth2/v2.1/authorize";
|
|
50
|
+
const tokenUrl = "https://api.line.me/oauth2/v2.1/token";
|
|
51
|
+
const userInfoUrl = "https://api.line.me/oauth2/v2.1/userinfo";
|
|
52
|
+
const getUserInfo = async (tokens) => {
|
|
53
|
+
let profile = null;
|
|
54
|
+
if (tokens.idToken) try {
|
|
55
|
+
profile = decodeJwt(tokens.idToken);
|
|
56
|
+
} catch {}
|
|
57
|
+
if (!profile) {
|
|
58
|
+
const { data, error } = await betterFetch(userInfoUrl, { headers: { Authorization: `Bearer ${tokens.accessToken}` } });
|
|
59
|
+
if (error || !data) return null;
|
|
60
|
+
profile = data;
|
|
61
|
+
}
|
|
62
|
+
if (!profile) return null;
|
|
63
|
+
return {
|
|
64
|
+
sub: profile.sub,
|
|
65
|
+
name: profile.name,
|
|
66
|
+
email: profile.email,
|
|
67
|
+
image: profile.picture,
|
|
68
|
+
emailVerified: false
|
|
69
|
+
};
|
|
70
|
+
};
|
|
71
|
+
return {
|
|
72
|
+
providerId: options.providerId ?? "line",
|
|
73
|
+
accountSubject: ({ profile }) => profile.sub ?? "",
|
|
74
|
+
authorizationUrl,
|
|
75
|
+
tokenUrl,
|
|
76
|
+
userInfoUrl,
|
|
77
|
+
clientId: options.clientId,
|
|
78
|
+
clientSecret: options.clientSecret,
|
|
79
|
+
tokenEndpointAuth: options.tokenEndpointAuth,
|
|
80
|
+
scopes: options.scopes ?? defaultScopes,
|
|
81
|
+
redirectURI: options.redirectURI,
|
|
82
|
+
endSessionEndpoint: options.endSessionEndpoint,
|
|
83
|
+
postLogoutRedirectURI: options.postLogoutRedirectURI,
|
|
84
|
+
disableProviderLogout: options.disableProviderLogout,
|
|
85
|
+
pkce: options.pkce,
|
|
86
|
+
disableImplicitSignUp: options.disableImplicitSignUp,
|
|
87
|
+
disableSignUp: options.disableSignUp,
|
|
88
|
+
overrideUserInfo: options.overrideUserInfo,
|
|
89
|
+
getUserInfo
|
|
90
|
+
};
|
|
91
|
+
}
|
|
92
|
+
//#endregion
|
|
93
|
+
export { line };
|
|
@@ -0,0 +1,39 @@
|
|
|
1
|
+
import { GenericOAuthConfig } from "../types.mjs";
|
|
2
|
+
import { BaseOAuthProviderOptions } from "../index.mjs";
|
|
3
|
+
|
|
4
|
+
//#region src/plugins/generic-oauth/providers/microsoft-entra-id.d.ts
|
|
5
|
+
interface MicrosoftEntraIdOptions extends BaseOAuthProviderOptions {
|
|
6
|
+
/**
|
|
7
|
+
* Concrete Microsoft Entra ID tenant GUID.
|
|
8
|
+
*
|
|
9
|
+
* Use Better Auth's built-in Microsoft provider for the multi-tenant
|
|
10
|
+
* `common`, `organizations`, or `consumers` authorities. Those authorities
|
|
11
|
+
* require ID-token claim validation to derive the account's actual issuer.
|
|
12
|
+
*/
|
|
13
|
+
tenantId: string;
|
|
14
|
+
}
|
|
15
|
+
/**
|
|
16
|
+
* Microsoft Entra ID (Azure AD) OAuth provider helper
|
|
17
|
+
*
|
|
18
|
+
* @example
|
|
19
|
+
* ```ts
|
|
20
|
+
* import { genericOAuth, microsoftEntraId } from "better-auth/plugins/generic-oauth";
|
|
21
|
+
*
|
|
22
|
+
* export const auth = betterAuth({
|
|
23
|
+
* plugins: [
|
|
24
|
+
* genericOAuth({
|
|
25
|
+
* config: [
|
|
26
|
+
* microsoftEntraId({
|
|
27
|
+
* clientId: process.env.MS_APP_ID,
|
|
28
|
+
* clientSecret: process.env.MS_CLIENT_SECRET,
|
|
29
|
+
* tenantId: process.env.MS_TENANT_ID,
|
|
30
|
+
* }),
|
|
31
|
+
* ],
|
|
32
|
+
* }),
|
|
33
|
+
* ],
|
|
34
|
+
* });
|
|
35
|
+
* ```
|
|
36
|
+
*/
|
|
37
|
+
declare function microsoftEntraId(options: MicrosoftEntraIdOptions): GenericOAuthConfig<"microsoft-entra-id">;
|
|
38
|
+
//#endregion
|
|
39
|
+
export { MicrosoftEntraIdOptions, microsoftEntraId };
|
|
@@ -0,0 +1,104 @@
|
|
|
1
|
+
import { decodeJwt } from "jose";
|
|
2
|
+
import { betterFetch } from "@better-fetch/fetch";
|
|
3
|
+
import { createPlaceholderEmail } from "@better-auth/core/utils/email";
|
|
4
|
+
//#region src/plugins/generic-oauth/providers/microsoft-entra-id.ts
|
|
5
|
+
function getMicrosoftProfileName(profile) {
|
|
6
|
+
return profile.name ?? (`${profile.given_name ?? profile.givenname ?? ""} ${profile.family_name ?? profile.familyname ?? ""}`.trim() || void 0);
|
|
7
|
+
}
|
|
8
|
+
/**
|
|
9
|
+
* Microsoft Entra ID (Azure AD) OAuth provider helper
|
|
10
|
+
*
|
|
11
|
+
* @example
|
|
12
|
+
* ```ts
|
|
13
|
+
* import { genericOAuth, microsoftEntraId } from "better-auth/plugins/generic-oauth";
|
|
14
|
+
*
|
|
15
|
+
* export const auth = betterAuth({
|
|
16
|
+
* plugins: [
|
|
17
|
+
* genericOAuth({
|
|
18
|
+
* config: [
|
|
19
|
+
* microsoftEntraId({
|
|
20
|
+
* clientId: process.env.MS_APP_ID,
|
|
21
|
+
* clientSecret: process.env.MS_CLIENT_SECRET,
|
|
22
|
+
* tenantId: process.env.MS_TENANT_ID,
|
|
23
|
+
* }),
|
|
24
|
+
* ],
|
|
25
|
+
* }),
|
|
26
|
+
* ],
|
|
27
|
+
* });
|
|
28
|
+
* ```
|
|
29
|
+
*/
|
|
30
|
+
function microsoftEntraId(options) {
|
|
31
|
+
const defaultScopes = [
|
|
32
|
+
"openid",
|
|
33
|
+
"profile",
|
|
34
|
+
"email"
|
|
35
|
+
];
|
|
36
|
+
const tenantId = typeof options.tenantId === "string" ? options.tenantId.toLowerCase() : "";
|
|
37
|
+
if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(tenantId)) throw new Error("The generic microsoftEntraId helper requires a concrete Microsoft Entra tenant GUID. Use the built-in Microsoft provider for common, organizations, or consumers.");
|
|
38
|
+
const authorizationUrl = `https://login.microsoftonline.com/${tenantId}/oauth2/v2.0/authorize`;
|
|
39
|
+
const tokenUrl = `https://login.microsoftonline.com/${tenantId}/oauth2/v2.0/token`;
|
|
40
|
+
const discoveryUrl = `https://login.microsoftonline.com/${tenantId}/v2.0/.well-known/openid-configuration`;
|
|
41
|
+
const userInfoUrl = "https://graph.microsoft.com/oidc/userinfo";
|
|
42
|
+
const getUserInfo = async (tokens) => {
|
|
43
|
+
if (!tokens.idToken) return null;
|
|
44
|
+
let tokenProfile;
|
|
45
|
+
try {
|
|
46
|
+
tokenProfile = decodeJwt(tokens.idToken);
|
|
47
|
+
} catch {
|
|
48
|
+
return null;
|
|
49
|
+
}
|
|
50
|
+
const oid = typeof tokenProfile.oid === "string" && tokenProfile.oid.trim().length > 0 ? tokenProfile.oid : void 0;
|
|
51
|
+
if (!oid) return null;
|
|
52
|
+
const tokenEmail = tokenProfile.email;
|
|
53
|
+
const tokenUserInfo = {
|
|
54
|
+
...tokenProfile,
|
|
55
|
+
name: getMicrosoftProfileName(tokenProfile),
|
|
56
|
+
email: tokenEmail ?? createPlaceholderEmail({
|
|
57
|
+
identifier: oid,
|
|
58
|
+
namespace: "microsoft-entra-id"
|
|
59
|
+
}),
|
|
60
|
+
image: tokenProfile.picture,
|
|
61
|
+
emailVerified: tokenEmail ? tokenProfile.email_verified ?? false : false
|
|
62
|
+
};
|
|
63
|
+
if (!tokens.accessToken) return tokenUserInfo;
|
|
64
|
+
const { data: profile, error } = await betterFetch(userInfoUrl, { headers: { Authorization: `Bearer ${tokens.accessToken}` } });
|
|
65
|
+
if (error || !profile) return tokenUserInfo;
|
|
66
|
+
if (typeof tokenProfile.sub !== "string" || profile.sub !== tokenProfile.sub) return tokenUserInfo;
|
|
67
|
+
const emailClaim = tokenProfile.email ?? profile.email;
|
|
68
|
+
return {
|
|
69
|
+
...profile,
|
|
70
|
+
...tokenProfile,
|
|
71
|
+
name: getMicrosoftProfileName(tokenProfile) ?? getMicrosoftProfileName(profile),
|
|
72
|
+
email: emailClaim ?? createPlaceholderEmail({
|
|
73
|
+
identifier: oid,
|
|
74
|
+
namespace: "microsoft-entra-id"
|
|
75
|
+
}),
|
|
76
|
+
image: tokenProfile.picture ?? profile.picture,
|
|
77
|
+
emailVerified: emailClaim != null ? tokenProfile.email_verified ?? profile.email_verified ?? false : false
|
|
78
|
+
};
|
|
79
|
+
};
|
|
80
|
+
return {
|
|
81
|
+
providerId: "microsoft-entra-id",
|
|
82
|
+
accountSubject: ({ profile }) => typeof profile.oid === "string" ? profile.oid : "",
|
|
83
|
+
discoveryUrl,
|
|
84
|
+
requireIdTokenVerification: true,
|
|
85
|
+
authorizationUrl,
|
|
86
|
+
tokenUrl,
|
|
87
|
+
userInfoUrl,
|
|
88
|
+
clientId: options.clientId,
|
|
89
|
+
clientSecret: options.clientSecret,
|
|
90
|
+
tokenEndpointAuth: options.tokenEndpointAuth,
|
|
91
|
+
scopes: options.scopes ?? defaultScopes,
|
|
92
|
+
redirectURI: options.redirectURI,
|
|
93
|
+
endSessionEndpoint: options.endSessionEndpoint,
|
|
94
|
+
postLogoutRedirectURI: options.postLogoutRedirectURI,
|
|
95
|
+
disableProviderLogout: options.disableProviderLogout,
|
|
96
|
+
pkce: options.pkce,
|
|
97
|
+
disableImplicitSignUp: options.disableImplicitSignUp,
|
|
98
|
+
disableSignUp: options.disableSignUp,
|
|
99
|
+
overrideUserInfo: options.overrideUserInfo,
|
|
100
|
+
getUserInfo
|
|
101
|
+
};
|
|
102
|
+
}
|
|
103
|
+
//#endregion
|
|
104
|
+
export { microsoftEntraId };
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
import { GenericOAuthConfig } from "../types.mjs";
|
|
2
|
+
import { BaseOAuthProviderOptions } from "../index.mjs";
|
|
3
|
+
|
|
4
|
+
//#region src/plugins/generic-oauth/providers/okta.d.ts
|
|
5
|
+
interface OktaOptions extends BaseOAuthProviderOptions {
|
|
6
|
+
/**
|
|
7
|
+
* Okta issuer URL (e.g., https://dev-xxxxx.okta.com/oauth2/default)
|
|
8
|
+
* This will be used to construct the discovery URL.
|
|
9
|
+
*/
|
|
10
|
+
issuer: string;
|
|
11
|
+
}
|
|
12
|
+
/**
|
|
13
|
+
* Okta OAuth provider helper
|
|
14
|
+
*
|
|
15
|
+
* @example
|
|
16
|
+
* ```ts
|
|
17
|
+
* import { genericOAuth, okta } from "better-auth/plugins/generic-oauth";
|
|
18
|
+
*
|
|
19
|
+
* export const auth = betterAuth({
|
|
20
|
+
* plugins: [
|
|
21
|
+
* genericOAuth({
|
|
22
|
+
* config: [
|
|
23
|
+
* okta({
|
|
24
|
+
* clientId: process.env.OKTA_CLIENT_ID,
|
|
25
|
+
* clientSecret: process.env.OKTA_CLIENT_SECRET,
|
|
26
|
+
* issuer: process.env.OKTA_ISSUER,
|
|
27
|
+
* }),
|
|
28
|
+
* ],
|
|
29
|
+
* }),
|
|
30
|
+
* ],
|
|
31
|
+
* });
|
|
32
|
+
* ```
|
|
33
|
+
*/
|
|
34
|
+
declare function okta(options: OktaOptions): GenericOAuthConfig<"okta">;
|
|
35
|
+
//#endregion
|
|
36
|
+
export { OktaOptions, okta };
|
|
@@ -0,0 +1,47 @@
|
|
|
1
|
+
//#region src/plugins/generic-oauth/providers/okta.ts
|
|
2
|
+
/**
|
|
3
|
+
* Okta OAuth provider helper
|
|
4
|
+
*
|
|
5
|
+
* @example
|
|
6
|
+
* ```ts
|
|
7
|
+
* import { genericOAuth, okta } from "better-auth/plugins/generic-oauth";
|
|
8
|
+
*
|
|
9
|
+
* export const auth = betterAuth({
|
|
10
|
+
* plugins: [
|
|
11
|
+
* genericOAuth({
|
|
12
|
+
* config: [
|
|
13
|
+
* okta({
|
|
14
|
+
* clientId: process.env.OKTA_CLIENT_ID,
|
|
15
|
+
* clientSecret: process.env.OKTA_CLIENT_SECRET,
|
|
16
|
+
* issuer: process.env.OKTA_ISSUER,
|
|
17
|
+
* }),
|
|
18
|
+
* ],
|
|
19
|
+
* }),
|
|
20
|
+
* ],
|
|
21
|
+
* });
|
|
22
|
+
* ```
|
|
23
|
+
*/
|
|
24
|
+
function okta(options) {
|
|
25
|
+
return {
|
|
26
|
+
providerId: "okta",
|
|
27
|
+
discoveryUrl: `${options.issuer.replace(/\/$/, "")}/.well-known/openid-configuration`,
|
|
28
|
+
clientId: options.clientId,
|
|
29
|
+
clientSecret: options.clientSecret,
|
|
30
|
+
tokenEndpointAuth: options.tokenEndpointAuth,
|
|
31
|
+
scopes: options.scopes ?? [
|
|
32
|
+
"openid",
|
|
33
|
+
"profile",
|
|
34
|
+
"email"
|
|
35
|
+
],
|
|
36
|
+
redirectURI: options.redirectURI,
|
|
37
|
+
endSessionEndpoint: options.endSessionEndpoint,
|
|
38
|
+
postLogoutRedirectURI: options.postLogoutRedirectURI,
|
|
39
|
+
disableProviderLogout: options.disableProviderLogout,
|
|
40
|
+
pkce: options.pkce,
|
|
41
|
+
disableImplicitSignUp: options.disableImplicitSignUp,
|
|
42
|
+
disableSignUp: options.disableSignUp,
|
|
43
|
+
overrideUserInfo: options.overrideUserInfo
|
|
44
|
+
};
|
|
45
|
+
}
|
|
46
|
+
//#endregion
|
|
47
|
+
export { okta };
|
|
@@ -0,0 +1,29 @@
|
|
|
1
|
+
import { GenericOAuthConfig } from "../types.mjs";
|
|
2
|
+
import { BaseOAuthProviderOptions } from "../index.mjs";
|
|
3
|
+
|
|
4
|
+
//#region src/plugins/generic-oauth/providers/patreon.d.ts
|
|
5
|
+
interface PatreonOptions extends BaseOAuthProviderOptions {}
|
|
6
|
+
/**
|
|
7
|
+
* Patreon OAuth provider helper
|
|
8
|
+
*
|
|
9
|
+
* @example
|
|
10
|
+
* ```ts
|
|
11
|
+
* import { genericOAuth, patreon } from "better-auth/plugins/generic-oauth";
|
|
12
|
+
*
|
|
13
|
+
* export const auth = betterAuth({
|
|
14
|
+
* plugins: [
|
|
15
|
+
* genericOAuth({
|
|
16
|
+
* config: [
|
|
17
|
+
* patreon({
|
|
18
|
+
* clientId: process.env.PATREON_CLIENT_ID,
|
|
19
|
+
* clientSecret: process.env.PATREON_CLIENT_SECRET,
|
|
20
|
+
* }),
|
|
21
|
+
* ],
|
|
22
|
+
* }),
|
|
23
|
+
* ],
|
|
24
|
+
* });
|
|
25
|
+
* ```
|
|
26
|
+
*/
|
|
27
|
+
declare function patreon(options: PatreonOptions): GenericOAuthConfig<"patreon">;
|
|
28
|
+
//#endregion
|
|
29
|
+
export { PatreonOptions, patreon };
|
|
@@ -0,0 +1,61 @@
|
|
|
1
|
+
import { betterFetch } from "@better-fetch/fetch";
|
|
2
|
+
//#region src/plugins/generic-oauth/providers/patreon.ts
|
|
3
|
+
/**
|
|
4
|
+
* Patreon OAuth provider helper
|
|
5
|
+
*
|
|
6
|
+
* @example
|
|
7
|
+
* ```ts
|
|
8
|
+
* import { genericOAuth, patreon } from "better-auth/plugins/generic-oauth";
|
|
9
|
+
*
|
|
10
|
+
* export const auth = betterAuth({
|
|
11
|
+
* plugins: [
|
|
12
|
+
* genericOAuth({
|
|
13
|
+
* config: [
|
|
14
|
+
* patreon({
|
|
15
|
+
* clientId: process.env.PATREON_CLIENT_ID,
|
|
16
|
+
* clientSecret: process.env.PATREON_CLIENT_SECRET,
|
|
17
|
+
* }),
|
|
18
|
+
* ],
|
|
19
|
+
* }),
|
|
20
|
+
* ],
|
|
21
|
+
* });
|
|
22
|
+
* ```
|
|
23
|
+
*/
|
|
24
|
+
function patreon(options) {
|
|
25
|
+
const defaultScopes = ["identity[email]"];
|
|
26
|
+
const getUserInfo = async (tokens) => {
|
|
27
|
+
const { data: profile, error } = await betterFetch("https://www.patreon.com/api/oauth2/v2/identity?fields[user]=email,full_name,image_url,is_email_verified", {
|
|
28
|
+
method: "GET",
|
|
29
|
+
headers: { Authorization: `Bearer ${tokens.accessToken}` }
|
|
30
|
+
});
|
|
31
|
+
if (error || !profile) return null;
|
|
32
|
+
return {
|
|
33
|
+
id: profile.data.id,
|
|
34
|
+
name: profile.data.attributes.full_name,
|
|
35
|
+
email: profile.data.attributes.email,
|
|
36
|
+
image: profile.data.attributes.image_url,
|
|
37
|
+
emailVerified: profile.data.attributes.is_email_verified
|
|
38
|
+
};
|
|
39
|
+
};
|
|
40
|
+
return {
|
|
41
|
+
providerId: "patreon",
|
|
42
|
+
accountSubject: ({ profile }) => profile.id ?? "",
|
|
43
|
+
authorizationUrl: "https://www.patreon.com/oauth2/authorize",
|
|
44
|
+
tokenUrl: "https://www.patreon.com/api/oauth2/token",
|
|
45
|
+
clientId: options.clientId,
|
|
46
|
+
clientSecret: options.clientSecret,
|
|
47
|
+
tokenEndpointAuth: options.tokenEndpointAuth,
|
|
48
|
+
scopes: options.scopes ?? defaultScopes,
|
|
49
|
+
redirectURI: options.redirectURI,
|
|
50
|
+
endSessionEndpoint: options.endSessionEndpoint,
|
|
51
|
+
postLogoutRedirectURI: options.postLogoutRedirectURI,
|
|
52
|
+
disableProviderLogout: options.disableProviderLogout,
|
|
53
|
+
pkce: options.pkce,
|
|
54
|
+
disableImplicitSignUp: options.disableImplicitSignUp,
|
|
55
|
+
disableSignUp: options.disableSignUp,
|
|
56
|
+
overrideUserInfo: options.overrideUserInfo,
|
|
57
|
+
getUserInfo
|
|
58
|
+
};
|
|
59
|
+
}
|
|
60
|
+
//#endregion
|
|
61
|
+
export { patreon };
|
|
@@ -0,0 +1,29 @@
|
|
|
1
|
+
import { GenericOAuthConfig } from "../types.mjs";
|
|
2
|
+
import { BaseOAuthProviderOptions } from "../index.mjs";
|
|
3
|
+
|
|
4
|
+
//#region src/plugins/generic-oauth/providers/slack.d.ts
|
|
5
|
+
interface SlackOptions extends BaseOAuthProviderOptions {}
|
|
6
|
+
/**
|
|
7
|
+
* Slack OAuth provider helper
|
|
8
|
+
*
|
|
9
|
+
* @example
|
|
10
|
+
* ```ts
|
|
11
|
+
* import { genericOAuth, slack } from "better-auth/plugins/generic-oauth";
|
|
12
|
+
*
|
|
13
|
+
* export const auth = betterAuth({
|
|
14
|
+
* plugins: [
|
|
15
|
+
* genericOAuth({
|
|
16
|
+
* config: [
|
|
17
|
+
* slack({
|
|
18
|
+
* clientId: process.env.SLACK_CLIENT_ID,
|
|
19
|
+
* clientSecret: process.env.SLACK_CLIENT_SECRET,
|
|
20
|
+
* }),
|
|
21
|
+
* ],
|
|
22
|
+
* }),
|
|
23
|
+
* ],
|
|
24
|
+
* });
|
|
25
|
+
* ```
|
|
26
|
+
*/
|
|
27
|
+
declare function slack(options: SlackOptions): GenericOAuthConfig<"slack">;
|
|
28
|
+
//#endregion
|
|
29
|
+
export { SlackOptions, slack };
|