@masheev/better-auth 0.0.0-stage → 1.7.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (465) hide show
  1. package/LICENSE.md +20 -0
  2. package/README.md +31 -2
  3. package/TYPE-PATCH-NOTICE.md +9 -0
  4. package/TYPE-PATCH-PROVENANCE.json +267 -0
  5. package/dist/_virtual/_rolldown/runtime.mjs +27 -0
  6. package/dist/adapters/drizzle-adapter/index.d.mts +1 -0
  7. package/dist/adapters/drizzle-adapter/index.mjs +2 -0
  8. package/dist/adapters/index.d.mts +26 -0
  9. package/dist/adapters/index.mjs +9 -0
  10. package/dist/adapters/kysely-adapter/index.d.mts +1 -0
  11. package/dist/adapters/kysely-adapter/index.mjs +2 -0
  12. package/dist/adapters/memory-adapter/index.d.mts +1 -0
  13. package/dist/adapters/memory-adapter/index.mjs +2 -0
  14. package/dist/adapters/mongodb-adapter/index.d.mts +1 -0
  15. package/dist/adapters/mongodb-adapter/index.mjs +2 -0
  16. package/dist/adapters/prisma-adapter/index.d.mts +1 -0
  17. package/dist/adapters/prisma-adapter/index.mjs +2 -0
  18. package/dist/api/dispatch.d.mts +34 -0
  19. package/dist/api/dispatch.mjs +275 -0
  20. package/dist/api/index.d.mts +4053 -0
  21. package/dist/api/index.mjs +220 -0
  22. package/dist/api/middlewares/authorization.d.mts +69 -0
  23. package/dist/api/middlewares/authorization.mjs +78 -0
  24. package/dist/api/middlewares/index.d.mts +2 -0
  25. package/dist/api/middlewares/origin-check.d.mts +17 -0
  26. package/dist/api/middlewares/origin-check.mjs +155 -0
  27. package/dist/api/rate-limiter/index.mjs +318 -0
  28. package/dist/api/routes/account.d.mts +413 -0
  29. package/dist/api/routes/account.mjs +619 -0
  30. package/dist/api/routes/callback.d.mts +32 -0
  31. package/dist/api/routes/callback.mjs +261 -0
  32. package/dist/api/routes/email-verification.d.mts +160 -0
  33. package/dist/api/routes/email-verification.mjs +324 -0
  34. package/dist/api/routes/error.d.mts +27 -0
  35. package/dist/api/routes/error.mjs +387 -0
  36. package/dist/api/routes/index.d.mts +12 -0
  37. package/dist/api/routes/ok.d.mts +35 -0
  38. package/dist/api/routes/ok.mjs +27 -0
  39. package/dist/api/routes/password.d.mts +182 -0
  40. package/dist/api/routes/password.mjs +206 -0
  41. package/dist/api/routes/session.d.mts +450 -0
  42. package/dist/api/routes/session.mjs +481 -0
  43. package/dist/api/routes/sign-in.d.mts +186 -0
  44. package/dist/api/routes/sign-in.mjs +368 -0
  45. package/dist/api/routes/sign-out.d.mts +51 -0
  46. package/dist/api/routes/sign-out.mjs +96 -0
  47. package/dist/api/routes/sign-up.d.mts +159 -0
  48. package/dist/api/routes/sign-up.mjs +275 -0
  49. package/dist/api/routes/update-session.d.mts +74 -0
  50. package/dist/api/routes/update-session.mjs +57 -0
  51. package/dist/api/routes/update-user.d.mts +428 -0
  52. package/dist/api/routes/update-user.mjs +522 -0
  53. package/dist/api/state/oauth.d.mts +53 -0
  54. package/dist/api/state/oauth.mjs +38 -0
  55. package/dist/api/state/should-session-refresh.d.mts +12 -0
  56. package/dist/api/state/should-session-refresh.mjs +13 -0
  57. package/dist/api/to-auth-endpoints.mjs +60 -0
  58. package/dist/auth/base.mjs +66 -0
  59. package/dist/auth/full.d.mts +28 -0
  60. package/dist/auth/full.mjs +29 -0
  61. package/dist/auth/minimal.d.mts +10 -0
  62. package/dist/auth/minimal.mjs +11 -0
  63. package/dist/auth/trusted-origins.mjs +106 -0
  64. package/dist/client/broadcast-channel.d.mts +19 -0
  65. package/dist/client/broadcast-channel.mjs +44 -0
  66. package/dist/client/config.d.mts +90 -0
  67. package/dist/client/config.mjs +113 -0
  68. package/dist/client/equality.d.mts +19 -0
  69. package/dist/client/equality.mjs +42 -0
  70. package/dist/client/fetch-plugins.mjs +17 -0
  71. package/dist/client/focus-manager.d.mts +10 -0
  72. package/dist/client/focus-manager.mjs +30 -0
  73. package/dist/client/index.d.mts +35 -0
  74. package/dist/client/index.mjs +22 -0
  75. package/dist/client/lynx/index.d.mts +43 -0
  76. package/dist/client/lynx/index.mjs +22 -0
  77. package/dist/client/lynx/lynx-store.d.mts +46 -0
  78. package/dist/client/lynx/lynx-store.mjs +44 -0
  79. package/dist/client/online-manager.d.mts +11 -0
  80. package/dist/client/online-manager.mjs +33 -0
  81. package/dist/client/parser.d.mts +10 -0
  82. package/dist/client/parser.mjs +70 -0
  83. package/dist/client/path-to-object.d.mts +113 -0
  84. package/dist/client/plugins/index.d.mts +44 -0
  85. package/dist/client/plugins/index.mjs +30 -0
  86. package/dist/client/plugins/infer-plugin.d.mts +16 -0
  87. package/dist/client/plugins/infer-plugin.mjs +11 -0
  88. package/dist/client/proxy.mjs +78 -0
  89. package/dist/client/query.d.mts +23 -0
  90. package/dist/client/query.mjs +124 -0
  91. package/dist/client/react/index.d.mts +44 -0
  92. package/dist/client/react/index.mjs +22 -0
  93. package/dist/client/react/react-store.d.mts +46 -0
  94. package/dist/client/react/react-store.mjs +44 -0
  95. package/dist/client/session-atom.d.mts +11 -0
  96. package/dist/client/session-atom.mjs +178 -0
  97. package/dist/client/session-refresh.d.mts +20 -0
  98. package/dist/client/session-refresh.mjs +131 -0
  99. package/dist/client/solid/index.d.mts +44 -0
  100. package/dist/client/solid/index.mjs +22 -0
  101. package/dist/client/solid/solid-store.mjs +21 -0
  102. package/dist/client/svelte/index.d.mts +44 -0
  103. package/dist/client/svelte/index.mjs +18 -0
  104. package/dist/client/types.d.mts +51 -0
  105. package/dist/client/vanilla.d.mts +42 -0
  106. package/dist/client/vanilla.mjs +18 -0
  107. package/dist/client/vue/index.d.mts +67 -0
  108. package/dist/client/vue/index.mjs +54 -0
  109. package/dist/client/vue/vue-store.mjs +23 -0
  110. package/dist/context/create-context.mjs +235 -0
  111. package/dist/context/helpers.mjs +158 -0
  112. package/dist/context/init-minimal.mjs +17 -0
  113. package/dist/context/init.mjs +19 -0
  114. package/dist/context/secret-utils.mjs +53 -0
  115. package/dist/context/store-capabilities.mjs +12 -0
  116. package/dist/cookies/cache.mjs +33 -0
  117. package/dist/cookies/cookie-utils.d.mts +72 -0
  118. package/dist/cookies/cookie-utils.mjs +203 -0
  119. package/dist/cookies/index.d.mts +124 -0
  120. package/dist/cookies/index.mjs +350 -0
  121. package/dist/cookies/jwt.mjs +44 -0
  122. package/dist/cookies/session-store.d.mts +32 -0
  123. package/dist/cookies/session-store.mjs +183 -0
  124. package/dist/crypto/buffer.d.mts +7 -0
  125. package/dist/crypto/buffer.mjs +16 -0
  126. package/dist/crypto/index.d.mts +32 -0
  127. package/dist/crypto/index.mjs +69 -0
  128. package/dist/crypto/jwt.d.mts +9 -0
  129. package/dist/crypto/jwt.mjs +141 -0
  130. package/dist/crypto/password.d.mts +13 -0
  131. package/dist/crypto/password.mjs +14 -0
  132. package/dist/crypto/random.d.mts +4 -0
  133. package/dist/crypto/random.mjs +5 -0
  134. package/dist/db/adapter-base.d.mts +7 -0
  135. package/dist/db/adapter-base.mjs +25 -0
  136. package/dist/db/adapter-kysely.d.mts +7 -0
  137. package/dist/db/adapter-kysely.mjs +17 -0
  138. package/dist/db/field-converter.d.mts +7 -0
  139. package/dist/db/field-converter.mjs +19 -0
  140. package/dist/db/field.d.mts +41 -0
  141. package/dist/db/get-migration.d.mts +56 -0
  142. package/dist/db/get-migration.mjs +685 -0
  143. package/dist/db/get-schema.d.mts +13 -0
  144. package/dist/db/get-schema.mjs +39 -0
  145. package/dist/db/index.d.mts +10 -0
  146. package/dist/db/index.mjs +35 -0
  147. package/dist/db/internal-adapter.d.mts +14 -0
  148. package/dist/db/internal-adapter.mjs +951 -0
  149. package/dist/db/revoke-unproven-account-access.d.mts +21 -0
  150. package/dist/db/revoke-unproven-account-access.mjs +58 -0
  151. package/dist/db/schema.d.mts +62 -0
  152. package/dist/db/schema.mjs +161 -0
  153. package/dist/db/to-zod.d.mts +35 -0
  154. package/dist/db/to-zod.mjs +23 -0
  155. package/dist/db/verification-token-storage.mjs +25 -0
  156. package/dist/db/with-hooks.d.mts +37 -0
  157. package/dist/db/with-hooks.mjs +255 -0
  158. package/dist/index.d.mts +30 -0
  159. package/dist/index.mjs +17 -0
  160. package/dist/integrations/cookie-plugin-guard.mjs +18 -0
  161. package/dist/integrations/next-js.d.mts +29 -0
  162. package/dist/integrations/next-js.mjs +105 -0
  163. package/dist/integrations/node.d.mts +11 -0
  164. package/dist/integrations/node.mjs +13 -0
  165. package/dist/integrations/solid-start.d.mts +22 -0
  166. package/dist/integrations/solid-start.mjs +15 -0
  167. package/dist/integrations/svelte-kit.d.mts +38 -0
  168. package/dist/integrations/svelte-kit.mjs +57 -0
  169. package/dist/integrations/tanstack-start-solid.d.mts +33 -0
  170. package/dist/integrations/tanstack-start-solid.mjs +57 -0
  171. package/dist/integrations/tanstack-start.d.mts +33 -0
  172. package/dist/integrations/tanstack-start.mjs +57 -0
  173. package/dist/oauth2/account-key.mjs +43 -0
  174. package/dist/oauth2/errors.mjs +49 -0
  175. package/dist/oauth2/index.d.mts +5 -0
  176. package/dist/oauth2/index.mjs +5 -0
  177. package/dist/oauth2/link-account.d.mts +96 -0
  178. package/dist/oauth2/link-account.mjs +329 -0
  179. package/dist/oauth2/state.d.mts +54 -0
  180. package/dist/oauth2/state.mjs +67 -0
  181. package/dist/oauth2/utils.d.mts +11 -0
  182. package/dist/oauth2/utils.mjs +33 -0
  183. package/dist/package.mjs +4 -0
  184. package/dist/plugins/access/access.d.mts +17 -0
  185. package/dist/plugins/access/access.mjs +78 -0
  186. package/dist/plugins/access/index.d.mts +3 -0
  187. package/dist/plugins/access/index.mjs +2 -0
  188. package/dist/plugins/access/types.d.mts +24 -0
  189. package/dist/plugins/additional-fields/client.d.mts +100 -0
  190. package/dist/plugins/additional-fields/client.mjs +11 -0
  191. package/dist/plugins/admin/access/index.d.mts +2 -0
  192. package/dist/plugins/admin/access/index.mjs +2 -0
  193. package/dist/plugins/admin/access/statement.d.mts +51 -0
  194. package/dist/plugins/admin/access/statement.mjs +52 -0
  195. package/dist/plugins/admin/admin.d.mts +911 -0
  196. package/dist/plugins/admin/admin.mjs +89 -0
  197. package/dist/plugins/admin/client.d.mts +81 -0
  198. package/dist/plugins/admin/client.mjs +39 -0
  199. package/dist/plugins/admin/error-codes.d.mts +30 -0
  200. package/dist/plugins/admin/error-codes.mjs +29 -0
  201. package/dist/plugins/admin/has-permission.mjs +12 -0
  202. package/dist/plugins/admin/index.d.mts +3 -0
  203. package/dist/plugins/admin/index.mjs +2 -0
  204. package/dist/plugins/admin/routes.mjs +919 -0
  205. package/dist/plugins/admin/schema.d.mts +40 -0
  206. package/dist/plugins/admin/schema.mjs +33 -0
  207. package/dist/plugins/admin/types.d.mts +88 -0
  208. package/dist/plugins/anonymous/client.d.mts +32 -0
  209. package/dist/plugins/anonymous/client.mjs +21 -0
  210. package/dist/plugins/anonymous/error-codes.d.mts +15 -0
  211. package/dist/plugins/anonymous/error-codes.mjs +14 -0
  212. package/dist/plugins/anonymous/index.d.mts +175 -0
  213. package/dist/plugins/anonymous/index.mjs +219 -0
  214. package/dist/plugins/anonymous/schema.d.mts +15 -0
  215. package/dist/plugins/anonymous/schema.mjs +9 -0
  216. package/dist/plugins/anonymous/types.d.mts +65 -0
  217. package/dist/plugins/bearer/index.d.mts +45 -0
  218. package/dist/plugins/bearer/index.mjs +74 -0
  219. package/dist/plugins/captcha/constants.d.mts +9 -0
  220. package/dist/plugins/captcha/constants.mjs +27 -0
  221. package/dist/plugins/captcha/error-codes.mjs +13 -0
  222. package/dist/plugins/captcha/index.d.mts +27 -0
  223. package/dist/plugins/captcha/index.mjs +79 -0
  224. package/dist/plugins/captcha/types.d.mts +52 -0
  225. package/dist/plugins/captcha/utils.mjs +9 -0
  226. package/dist/plugins/captcha/verify-handlers/captchafox.mjs +27 -0
  227. package/dist/plugins/captcha/verify-handlers/cloudflare-turnstile.mjs +47 -0
  228. package/dist/plugins/captcha/verify-handlers/google-recaptcha.mjs +32 -0
  229. package/dist/plugins/captcha/verify-handlers/h-captcha.mjs +27 -0
  230. package/dist/plugins/custom-session/client.d.mts +17 -0
  231. package/dist/plugins/custom-session/client.mjs +7 -0
  232. package/dist/plugins/custom-session/index.d.mts +73 -0
  233. package/dist/plugins/custom-session/index.mjs +65 -0
  234. package/dist/plugins/device-authorization/client.d.mts +17 -0
  235. package/dist/plugins/device-authorization/client.mjs +18 -0
  236. package/dist/plugins/device-authorization/error-codes.mjs +19 -0
  237. package/dist/plugins/device-authorization/index.d.mts +558 -0
  238. package/dist/plugins/device-authorization/index.mjs +87 -0
  239. package/dist/plugins/device-authorization/routes.d.mts +32 -0
  240. package/dist/plugins/device-authorization/routes.mjs +725 -0
  241. package/dist/plugins/device-authorization/schema.d.mts +18 -0
  242. package/dist/plugins/device-authorization/schema.mjs +63 -0
  243. package/dist/plugins/email-otp/client.d.mts +21 -0
  244. package/dist/plugins/email-otp/client.mjs +17 -0
  245. package/dist/plugins/email-otp/error-codes.d.mts +10 -0
  246. package/dist/plugins/email-otp/error-codes.mjs +9 -0
  247. package/dist/plugins/email-otp/index.d.mts +551 -0
  248. package/dist/plugins/email-otp/index.mjs +145 -0
  249. package/dist/plugins/email-otp/otp-token.mjs +55 -0
  250. package/dist/plugins/email-otp/routes.mjs +784 -0
  251. package/dist/plugins/email-otp/types.d.mts +109 -0
  252. package/dist/plugins/email-otp/utils.mjs +17 -0
  253. package/dist/plugins/generic-oauth/error-codes.mjs +8 -0
  254. package/dist/plugins/generic-oauth/index.d.mts +52 -0
  255. package/dist/plugins/generic-oauth/index.mjs +279 -0
  256. package/dist/plugins/generic-oauth/providers/auth0.d.mts +36 -0
  257. package/dist/plugins/generic-oauth/providers/auth0.mjs +49 -0
  258. package/dist/plugins/generic-oauth/providers/gumroad.d.mts +31 -0
  259. package/dist/plugins/generic-oauth/providers/gumroad.mjs +62 -0
  260. package/dist/plugins/generic-oauth/providers/hubspot.d.mts +36 -0
  261. package/dist/plugins/generic-oauth/providers/hubspot.mjs +62 -0
  262. package/dist/plugins/generic-oauth/providers/index.d.mts +10 -0
  263. package/dist/plugins/generic-oauth/providers/keycloak.d.mts +36 -0
  264. package/dist/plugins/generic-oauth/providers/keycloak.mjs +47 -0
  265. package/dist/plugins/generic-oauth/providers/line.d.mts +54 -0
  266. package/dist/plugins/generic-oauth/providers/line.mjs +93 -0
  267. package/dist/plugins/generic-oauth/providers/microsoft-entra-id.d.mts +39 -0
  268. package/dist/plugins/generic-oauth/providers/microsoft-entra-id.mjs +104 -0
  269. package/dist/plugins/generic-oauth/providers/okta.d.mts +36 -0
  270. package/dist/plugins/generic-oauth/providers/okta.mjs +47 -0
  271. package/dist/plugins/generic-oauth/providers/patreon.d.mts +29 -0
  272. package/dist/plugins/generic-oauth/providers/patreon.mjs +61 -0
  273. package/dist/plugins/generic-oauth/providers/slack.d.mts +29 -0
  274. package/dist/plugins/generic-oauth/providers/slack.mjs +63 -0
  275. package/dist/plugins/generic-oauth/providers/yandex.d.mts +29 -0
  276. package/dist/plugins/generic-oauth/providers/yandex.mjs +67 -0
  277. package/dist/plugins/generic-oauth/types.d.mts +268 -0
  278. package/dist/plugins/haveibeenpwned/index.d.mts +63 -0
  279. package/dist/plugins/haveibeenpwned/index.mjs +81 -0
  280. package/dist/plugins/index.d.mts +69 -0
  281. package/dist/plugins/index.mjs +49 -0
  282. package/dist/plugins/jwt/adapter.mjs +68 -0
  283. package/dist/plugins/jwt/client.d.mts +41 -0
  284. package/dist/plugins/jwt/client.mjs +19 -0
  285. package/dist/plugins/jwt/cookie-cache.mjs +77 -0
  286. package/dist/plugins/jwt/index.d.mts +246 -0
  287. package/dist/plugins/jwt/index.mjs +214 -0
  288. package/dist/plugins/jwt/schema.d.mts +33 -0
  289. package/dist/plugins/jwt/schema.mjs +29 -0
  290. package/dist/plugins/jwt/sign.d.mts +128 -0
  291. package/dist/plugins/jwt/sign.mjs +130 -0
  292. package/dist/plugins/jwt/types.d.mts +256 -0
  293. package/dist/plugins/jwt/utils.d.mts +41 -0
  294. package/dist/plugins/jwt/utils.mjs +64 -0
  295. package/dist/plugins/jwt/verify.d.mts +11 -0
  296. package/dist/plugins/jwt/verify.mjs +45 -0
  297. package/dist/plugins/last-login-method/client.d.mts +48 -0
  298. package/dist/plugins/last-login-method/client.mjs +48 -0
  299. package/dist/plugins/last-login-method/index.d.mts +127 -0
  300. package/dist/plugins/last-login-method/index.mjs +98 -0
  301. package/dist/plugins/magic-link/client.d.mts +10 -0
  302. package/dist/plugins/magic-link/client.mjs +11 -0
  303. package/dist/plugins/magic-link/index.d.mts +213 -0
  304. package/dist/plugins/magic-link/index.mjs +208 -0
  305. package/dist/plugins/magic-link/utils.mjs +9 -0
  306. package/dist/plugins/multi-session/client.d.mts +19 -0
  307. package/dist/plugins/multi-session/client.mjs +19 -0
  308. package/dist/plugins/multi-session/error-codes.d.mts +8 -0
  309. package/dist/plugins/multi-session/error-codes.mjs +5 -0
  310. package/dist/plugins/multi-session/index.d.mts +212 -0
  311. package/dist/plugins/multi-session/index.mjs +217 -0
  312. package/dist/plugins/oauth-popup/client.d.mts +82 -0
  313. package/dist/plugins/oauth-popup/client.mjs +203 -0
  314. package/dist/plugins/oauth-popup/constants.d.mts +11 -0
  315. package/dist/plugins/oauth-popup/constants.mjs +11 -0
  316. package/dist/plugins/oauth-popup/error-codes.d.mts +11 -0
  317. package/dist/plugins/oauth-popup/error-codes.mjs +10 -0
  318. package/dist/plugins/oauth-popup/index.d.mts +67 -0
  319. package/dist/plugins/oauth-popup/index.mjs +232 -0
  320. package/dist/plugins/oauth-popup/types.d.mts +30 -0
  321. package/dist/plugins/oauth-proxy/index.d.mts +130 -0
  322. package/dist/plugins/oauth-proxy/index.mjs +407 -0
  323. package/dist/plugins/oauth-proxy/utils.mjs +55 -0
  324. package/dist/plugins/one-tap/client.d.mts +174 -0
  325. package/dist/plugins/one-tap/client.mjs +208 -0
  326. package/dist/plugins/one-tap/index.d.mts +82 -0
  327. package/dist/plugins/one-tap/index.mjs +100 -0
  328. package/dist/plugins/one-time-token/client.d.mts +10 -0
  329. package/dist/plugins/one-time-token/client.mjs +11 -0
  330. package/dist/plugins/one-time-token/index.d.mts +132 -0
  331. package/dist/plugins/one-time-token/index.mjs +107 -0
  332. package/dist/plugins/one-time-token/utils.mjs +9 -0
  333. package/dist/plugins/open-api/generator.d.mts +126 -0
  334. package/dist/plugins/open-api/generator.mjs +557 -0
  335. package/dist/plugins/open-api/index.d.mts +97 -0
  336. package/dist/plugins/open-api/index.mjs +65 -0
  337. package/dist/plugins/open-api/logo.mjs +13 -0
  338. package/dist/plugins/organization/access/index.d.mts +2 -0
  339. package/dist/plugins/organization/access/index.mjs +2 -0
  340. package/dist/plugins/organization/access/statement.d.mts +113 -0
  341. package/dist/plugins/organization/access/statement.mjs +77 -0
  342. package/dist/plugins/organization/adapter.d.mts +815 -0
  343. package/dist/plugins/organization/adapter.mjs +813 -0
  344. package/dist/plugins/organization/call.mjs +15 -0
  345. package/dist/plugins/organization/client.d.mts +375 -0
  346. package/dist/plugins/organization/client.mjs +104 -0
  347. package/dist/plugins/organization/error-codes.d.mts +66 -0
  348. package/dist/plugins/organization/error-codes.mjs +65 -0
  349. package/dist/plugins/organization/has-permission.d.mts +17 -0
  350. package/dist/plugins/organization/has-permission.mjs +34 -0
  351. package/dist/plugins/organization/index.d.mts +6 -0
  352. package/dist/plugins/organization/index.mjs +4 -0
  353. package/dist/plugins/organization/organization.d.mts +420 -0
  354. package/dist/plugins/organization/organization.mjs +886 -0
  355. package/dist/plugins/organization/permission.d.mts +15 -0
  356. package/dist/plugins/organization/permission.mjs +14 -0
  357. package/dist/plugins/organization/routes/crud-access-control.d.mts +511 -0
  358. package/dist/plugins/organization/routes/crud-access-control.mjs +674 -0
  359. package/dist/plugins/organization/routes/crud-invites.d.mts +1154 -0
  360. package/dist/plugins/organization/routes/crud-invites.mjs +602 -0
  361. package/dist/plugins/organization/routes/crud-members.d.mts +1057 -0
  362. package/dist/plugins/organization/routes/crud-members.mjs +518 -0
  363. package/dist/plugins/organization/routes/crud-org.d.mts +918 -0
  364. package/dist/plugins/organization/routes/crud-org.mjs +455 -0
  365. package/dist/plugins/organization/routes/crud-team.d.mts +1238 -0
  366. package/dist/plugins/organization/routes/crud-team.mjs +766 -0
  367. package/dist/plugins/organization/schema.d.mts +390 -0
  368. package/dist/plugins/organization/schema.mjs +65 -0
  369. package/dist/plugins/organization/types.d.mts +691 -0
  370. package/dist/plugins/phone-number/client.d.mts +31 -0
  371. package/dist/plugins/phone-number/client.mjs +19 -0
  372. package/dist/plugins/phone-number/error-codes.d.mts +19 -0
  373. package/dist/plugins/phone-number/error-codes.mjs +18 -0
  374. package/dist/plugins/phone-number/index.d.mts +360 -0
  375. package/dist/plugins/phone-number/index.mjs +57 -0
  376. package/dist/plugins/phone-number/routes.mjs +529 -0
  377. package/dist/plugins/phone-number/schema.d.mts +22 -0
  378. package/dist/plugins/phone-number/schema.mjs +18 -0
  379. package/dist/plugins/phone-number/types.d.mts +116 -0
  380. package/dist/plugins/siwe/client.d.mts +14 -0
  381. package/dist/plugins/siwe/client.mjs +15 -0
  382. package/dist/plugins/siwe/index.d.mts +62 -0
  383. package/dist/plugins/siwe/index.mjs +272 -0
  384. package/dist/plugins/siwe/parse-message.mjs +60 -0
  385. package/dist/plugins/siwe/schema.d.mts +35 -0
  386. package/dist/plugins/siwe/schema.mjs +30 -0
  387. package/dist/plugins/siwe/types.d.mts +43 -0
  388. package/dist/plugins/test-utils/auth-helpers.mjs +33 -0
  389. package/dist/plugins/test-utils/cookie-builder.mjs +55 -0
  390. package/dist/plugins/test-utils/db-helpers.mjs +65 -0
  391. package/dist/plugins/test-utils/factories.mjs +38 -0
  392. package/dist/plugins/test-utils/index.d.mts +73 -0
  393. package/dist/plugins/test-utils/index.mjs +97 -0
  394. package/dist/plugins/test-utils/otp-sink.mjs +21 -0
  395. package/dist/plugins/test-utils/types.d.mts +51 -0
  396. package/dist/plugins/two-factor/backup-codes/index.d.mts +291 -0
  397. package/dist/plugins/two-factor/backup-codes/index.mjs +341 -0
  398. package/dist/plugins/two-factor/client.d.mts +76 -0
  399. package/dist/plugins/two-factor/client.mjs +41 -0
  400. package/dist/plugins/two-factor/constant.mjs +6 -0
  401. package/dist/plugins/two-factor/error-code.d.mts +20 -0
  402. package/dist/plugins/two-factor/error-code.mjs +19 -0
  403. package/dist/plugins/two-factor/index.d.mts +720 -0
  404. package/dist/plugins/two-factor/index.mjs +349 -0
  405. package/dist/plugins/two-factor/otp/index.d.mts +216 -0
  406. package/dist/plugins/two-factor/otp/index.mjs +252 -0
  407. package/dist/plugins/two-factor/schema.d.mts +59 -0
  408. package/dist/plugins/two-factor/schema.mjs +53 -0
  409. package/dist/plugins/two-factor/totp/index.d.mts +219 -0
  410. package/dist/plugins/two-factor/totp/index.mjs +230 -0
  411. package/dist/plugins/two-factor/types.d.mts +111 -0
  412. package/dist/plugins/two-factor/utils.mjs +9 -0
  413. package/dist/plugins/two-factor/verify-two-factor.mjs +205 -0
  414. package/dist/plugins/username/client.d.mts +38 -0
  415. package/dist/plugins/username/client.mjs +17 -0
  416. package/dist/plugins/username/error-codes.d.mts +16 -0
  417. package/dist/plugins/username/error-codes.mjs +15 -0
  418. package/dist/plugins/username/index.d.mts +326 -0
  419. package/dist/plugins/username/index.mjs +312 -0
  420. package/dist/plugins/username/schema.d.mts +50 -0
  421. package/dist/plugins/username/schema.mjs +25 -0
  422. package/dist/social-providers/index.d.mts +1 -0
  423. package/dist/social-providers/index.mjs +2 -0
  424. package/dist/state.d.mts +48 -0
  425. package/dist/state.mjs +149 -0
  426. package/dist/test-utils/headers.d.mts +8 -0
  427. package/dist/test-utils/headers.mjs +17 -0
  428. package/dist/test-utils/http-test-instance.d.mts +413 -0
  429. package/dist/test-utils/http-test-instance.mjs +107 -0
  430. package/dist/test-utils/index.d.mts +4 -0
  431. package/dist/test-utils/index.mjs +4 -0
  432. package/dist/test-utils/test-instance.d.mts +56 -0
  433. package/dist/test-utils/test-instance.mjs +242 -0
  434. package/dist/types/adapter.d.mts +2 -0
  435. package/dist/types/api.d.mts +28 -0
  436. package/dist/types/auth.d.mts +32 -0
  437. package/dist/types/helper.d.mts +26 -0
  438. package/dist/types/index.d.mts +10 -0
  439. package/dist/types/index.mjs +1 -0
  440. package/dist/types/models.d.mts +10 -0
  441. package/dist/types/plugins.d.mts +19 -0
  442. package/dist/utils/boolean.mjs +6 -0
  443. package/dist/utils/constants.mjs +4 -0
  444. package/dist/utils/date.mjs +6 -0
  445. package/dist/utils/hashing.mjs +18 -0
  446. package/dist/utils/hide-metadata.d.mts +6 -0
  447. package/dist/utils/hide-metadata.mjs +4 -0
  448. package/dist/utils/index.d.mts +4 -0
  449. package/dist/utils/is-api-error.d.mts +2 -0
  450. package/dist/utils/is-api-error.mjs +2 -0
  451. package/dist/utils/is-atom.mjs +6 -0
  452. package/dist/utils/is-promise.mjs +6 -0
  453. package/dist/utils/middleware-response.mjs +7 -0
  454. package/dist/utils/password.mjs +32 -0
  455. package/dist/utils/plugin-helper.mjs +14 -0
  456. package/dist/utils/request.mjs +23 -0
  457. package/dist/utils/shim.mjs +22 -0
  458. package/dist/utils/time.d.mts +48 -0
  459. package/dist/utils/time.mjs +98 -0
  460. package/dist/utils/url.d.mts +78 -0
  461. package/dist/utils/url.mjs +238 -0
  462. package/dist/utils/validate-user-info.mjs +44 -0
  463. package/dist/utils/wildcard.mjs +106 -0
  464. package/dist/version.mjs +5 -0
  465. package/package.json +595 -3
@@ -0,0 +1,62 @@
1
+ import { betterFetch } from "@better-fetch/fetch";
2
+ //#region src/plugins/generic-oauth/providers/hubspot.ts
3
+ /**
4
+ * HubSpot OAuth provider helper
5
+ *
6
+ * @example
7
+ * ```ts
8
+ * import { genericOAuth, hubspot } from "better-auth/plugins/generic-oauth";
9
+ *
10
+ * export const auth = betterAuth({
11
+ * plugins: [
12
+ * genericOAuth({
13
+ * config: [
14
+ * hubspot({
15
+ * clientId: process.env.HUBSPOT_CLIENT_ID,
16
+ * clientSecret: process.env.HUBSPOT_CLIENT_SECRET,
17
+ * scopes: ["oauth", "contacts"],
18
+ * }),
19
+ * ],
20
+ * }),
21
+ * ],
22
+ * });
23
+ * ```
24
+ */
25
+ function hubspot(options) {
26
+ const defaultScopes = ["oauth"];
27
+ const getUserInfo = async (tokens) => {
28
+ const { data: profile, error } = await betterFetch(`https://api.hubapi.com/oauth/v1/access-tokens/${tokens.accessToken}`, { headers: { "Content-Type": "application/json" } });
29
+ if (error || !profile) return null;
30
+ const id = profile.user_id ?? profile.signed_access_token?.userId;
31
+ if (!id) return null;
32
+ return {
33
+ id,
34
+ name: profile.user,
35
+ email: profile.user,
36
+ image: void 0,
37
+ emailVerified: false
38
+ };
39
+ };
40
+ return {
41
+ providerId: "hubspot",
42
+ accountSubject: ({ profile }) => profile.id ?? "",
43
+ authorizationUrl: "https://app.hubspot.com/oauth/authorize",
44
+ tokenUrl: "https://api.hubapi.com/oauth/v1/token",
45
+ clientId: options.clientId,
46
+ clientSecret: options.clientSecret,
47
+ tokenEndpointAuth: options.tokenEndpointAuth,
48
+ scopes: options.scopes ?? defaultScopes,
49
+ redirectURI: options.redirectURI,
50
+ endSessionEndpoint: options.endSessionEndpoint,
51
+ postLogoutRedirectURI: options.postLogoutRedirectURI,
52
+ disableProviderLogout: options.disableProviderLogout,
53
+ authentication: "post",
54
+ pkce: options.pkce,
55
+ disableImplicitSignUp: options.disableImplicitSignUp,
56
+ disableSignUp: options.disableSignUp,
57
+ overrideUserInfo: options.overrideUserInfo,
58
+ getUserInfo
59
+ };
60
+ }
61
+ //#endregion
62
+ export { hubspot };
@@ -0,0 +1,10 @@
1
+ import { Auth0Options, auth0 } from "./auth0.mjs";
2
+ import { GumroadOptions, gumroad } from "./gumroad.mjs";
3
+ import { HubSpotOptions, hubspot } from "./hubspot.mjs";
4
+ import { KeycloakOptions, keycloak } from "./keycloak.mjs";
5
+ import { LineOptions, line } from "./line.mjs";
6
+ import { MicrosoftEntraIdOptions, microsoftEntraId } from "./microsoft-entra-id.mjs";
7
+ import { OktaOptions, okta } from "./okta.mjs";
8
+ import { PatreonOptions, patreon } from "./patreon.mjs";
9
+ import { SlackOptions, slack } from "./slack.mjs";
10
+ import { YandexOptions, yandex } from "./yandex.mjs";
@@ -0,0 +1,36 @@
1
+ import { GenericOAuthConfig } from "../types.mjs";
2
+ import { BaseOAuthProviderOptions } from "../index.mjs";
3
+
4
+ //#region src/plugins/generic-oauth/providers/keycloak.d.ts
5
+ interface KeycloakOptions extends BaseOAuthProviderOptions {
6
+ /**
7
+ * Keycloak issuer URL (includes realm, e.g., https://my-domain/realms/MyRealm)
8
+ * This will be used to construct the discovery URL.
9
+ */
10
+ issuer: string;
11
+ }
12
+ /**
13
+ * Keycloak OAuth provider helper
14
+ *
15
+ * @example
16
+ * ```ts
17
+ * import { genericOAuth, keycloak } from "better-auth/plugins/generic-oauth";
18
+ *
19
+ * export const auth = betterAuth({
20
+ * plugins: [
21
+ * genericOAuth({
22
+ * config: [
23
+ * keycloak({
24
+ * clientId: process.env.KEYCLOAK_CLIENT_ID,
25
+ * clientSecret: process.env.KEYCLOAK_CLIENT_SECRET,
26
+ * issuer: process.env.KEYCLOAK_ISSUER,
27
+ * }),
28
+ * ],
29
+ * }),
30
+ * ],
31
+ * });
32
+ * ```
33
+ */
34
+ declare function keycloak(options: KeycloakOptions): GenericOAuthConfig<"keycloak">;
35
+ //#endregion
36
+ export { KeycloakOptions, keycloak };
@@ -0,0 +1,47 @@
1
+ //#region src/plugins/generic-oauth/providers/keycloak.ts
2
+ /**
3
+ * Keycloak OAuth provider helper
4
+ *
5
+ * @example
6
+ * ```ts
7
+ * import { genericOAuth, keycloak } from "better-auth/plugins/generic-oauth";
8
+ *
9
+ * export const auth = betterAuth({
10
+ * plugins: [
11
+ * genericOAuth({
12
+ * config: [
13
+ * keycloak({
14
+ * clientId: process.env.KEYCLOAK_CLIENT_ID,
15
+ * clientSecret: process.env.KEYCLOAK_CLIENT_SECRET,
16
+ * issuer: process.env.KEYCLOAK_ISSUER,
17
+ * }),
18
+ * ],
19
+ * }),
20
+ * ],
21
+ * });
22
+ * ```
23
+ */
24
+ function keycloak(options) {
25
+ return {
26
+ providerId: "keycloak",
27
+ discoveryUrl: `${options.issuer.replace(/\/$/, "")}/.well-known/openid-configuration`,
28
+ clientId: options.clientId,
29
+ clientSecret: options.clientSecret,
30
+ tokenEndpointAuth: options.tokenEndpointAuth,
31
+ scopes: options.scopes ?? [
32
+ "openid",
33
+ "profile",
34
+ "email"
35
+ ],
36
+ redirectURI: options.redirectURI,
37
+ endSessionEndpoint: options.endSessionEndpoint,
38
+ postLogoutRedirectURI: options.postLogoutRedirectURI,
39
+ disableProviderLogout: options.disableProviderLogout,
40
+ pkce: options.pkce,
41
+ disableImplicitSignUp: options.disableImplicitSignUp,
42
+ disableSignUp: options.disableSignUp,
43
+ overrideUserInfo: options.overrideUserInfo
44
+ };
45
+ }
46
+ //#endregion
47
+ export { keycloak };
@@ -0,0 +1,54 @@
1
+ import { GenericOAuthConfig } from "../types.mjs";
2
+ import { BaseOAuthProviderOptions } from "../index.mjs";
3
+
4
+ //#region src/plugins/generic-oauth/providers/line.d.ts
5
+ interface LineOptions extends BaseOAuthProviderOptions {
6
+ /**
7
+ * Unique provider identifier for this LINE channel.
8
+ * Use different providerIds for different countries/channels (e.g., "line-jp", "line-th", "line-tw").
9
+ * @default "line"
10
+ */
11
+ providerId?: string;
12
+ }
13
+ /**
14
+ * LINE OAuth provider helper
15
+ *
16
+ * LINE requires separate channels for different countries (Japan, Thailand, Taiwan, etc.).
17
+ * Each channel has its own clientId and clientSecret. To support multiple countries,
18
+ * call this function multiple times with different providerIds and credentials.
19
+ *
20
+ * @example
21
+ * ```ts
22
+ * import { genericOAuth, line } from "better-auth/plugins/generic-oauth";
23
+ *
24
+ * export const auth = betterAuth({
25
+ * plugins: [
26
+ * genericOAuth({
27
+ * config: [
28
+ * // Japan channel
29
+ * line({
30
+ * providerId: "line-jp",
31
+ * clientId: process.env.LINE_JP_CLIENT_ID,
32
+ * clientSecret: process.env.LINE_JP_CLIENT_SECRET,
33
+ * }),
34
+ * // Thailand channel
35
+ * line({
36
+ * providerId: "line-th",
37
+ * clientId: process.env.LINE_TH_CLIENT_ID,
38
+ * clientSecret: process.env.LINE_TH_CLIENT_SECRET,
39
+ * }),
40
+ * // Taiwan channel
41
+ * line({
42
+ * providerId: "line-tw",
43
+ * clientId: process.env.LINE_TW_CLIENT_ID,
44
+ * clientSecret: process.env.LINE_TW_CLIENT_SECRET,
45
+ * }),
46
+ * ],
47
+ * }),
48
+ * ],
49
+ * });
50
+ * ```
51
+ */
52
+ declare function line(options: LineOptions): GenericOAuthConfig;
53
+ //#endregion
54
+ export { LineOptions, line };
@@ -0,0 +1,93 @@
1
+ import { decodeJwt } from "jose";
2
+ import { betterFetch } from "@better-fetch/fetch";
3
+ //#region src/plugins/generic-oauth/providers/line.ts
4
+ /**
5
+ * LINE OAuth provider helper
6
+ *
7
+ * LINE requires separate channels for different countries (Japan, Thailand, Taiwan, etc.).
8
+ * Each channel has its own clientId and clientSecret. To support multiple countries,
9
+ * call this function multiple times with different providerIds and credentials.
10
+ *
11
+ * @example
12
+ * ```ts
13
+ * import { genericOAuth, line } from "better-auth/plugins/generic-oauth";
14
+ *
15
+ * export const auth = betterAuth({
16
+ * plugins: [
17
+ * genericOAuth({
18
+ * config: [
19
+ * // Japan channel
20
+ * line({
21
+ * providerId: "line-jp",
22
+ * clientId: process.env.LINE_JP_CLIENT_ID,
23
+ * clientSecret: process.env.LINE_JP_CLIENT_SECRET,
24
+ * }),
25
+ * // Thailand channel
26
+ * line({
27
+ * providerId: "line-th",
28
+ * clientId: process.env.LINE_TH_CLIENT_ID,
29
+ * clientSecret: process.env.LINE_TH_CLIENT_SECRET,
30
+ * }),
31
+ * // Taiwan channel
32
+ * line({
33
+ * providerId: "line-tw",
34
+ * clientId: process.env.LINE_TW_CLIENT_ID,
35
+ * clientSecret: process.env.LINE_TW_CLIENT_SECRET,
36
+ * }),
37
+ * ],
38
+ * }),
39
+ * ],
40
+ * });
41
+ * ```
42
+ */
43
+ function line(options) {
44
+ const defaultScopes = [
45
+ "openid",
46
+ "profile",
47
+ "email"
48
+ ];
49
+ const authorizationUrl = "https://access.line.me/oauth2/v2.1/authorize";
50
+ const tokenUrl = "https://api.line.me/oauth2/v2.1/token";
51
+ const userInfoUrl = "https://api.line.me/oauth2/v2.1/userinfo";
52
+ const getUserInfo = async (tokens) => {
53
+ let profile = null;
54
+ if (tokens.idToken) try {
55
+ profile = decodeJwt(tokens.idToken);
56
+ } catch {}
57
+ if (!profile) {
58
+ const { data, error } = await betterFetch(userInfoUrl, { headers: { Authorization: `Bearer ${tokens.accessToken}` } });
59
+ if (error || !data) return null;
60
+ profile = data;
61
+ }
62
+ if (!profile) return null;
63
+ return {
64
+ sub: profile.sub,
65
+ name: profile.name,
66
+ email: profile.email,
67
+ image: profile.picture,
68
+ emailVerified: false
69
+ };
70
+ };
71
+ return {
72
+ providerId: options.providerId ?? "line",
73
+ accountSubject: ({ profile }) => profile.sub ?? "",
74
+ authorizationUrl,
75
+ tokenUrl,
76
+ userInfoUrl,
77
+ clientId: options.clientId,
78
+ clientSecret: options.clientSecret,
79
+ tokenEndpointAuth: options.tokenEndpointAuth,
80
+ scopes: options.scopes ?? defaultScopes,
81
+ redirectURI: options.redirectURI,
82
+ endSessionEndpoint: options.endSessionEndpoint,
83
+ postLogoutRedirectURI: options.postLogoutRedirectURI,
84
+ disableProviderLogout: options.disableProviderLogout,
85
+ pkce: options.pkce,
86
+ disableImplicitSignUp: options.disableImplicitSignUp,
87
+ disableSignUp: options.disableSignUp,
88
+ overrideUserInfo: options.overrideUserInfo,
89
+ getUserInfo
90
+ };
91
+ }
92
+ //#endregion
93
+ export { line };
@@ -0,0 +1,39 @@
1
+ import { GenericOAuthConfig } from "../types.mjs";
2
+ import { BaseOAuthProviderOptions } from "../index.mjs";
3
+
4
+ //#region src/plugins/generic-oauth/providers/microsoft-entra-id.d.ts
5
+ interface MicrosoftEntraIdOptions extends BaseOAuthProviderOptions {
6
+ /**
7
+ * Concrete Microsoft Entra ID tenant GUID.
8
+ *
9
+ * Use Better Auth's built-in Microsoft provider for the multi-tenant
10
+ * `common`, `organizations`, or `consumers` authorities. Those authorities
11
+ * require ID-token claim validation to derive the account's actual issuer.
12
+ */
13
+ tenantId: string;
14
+ }
15
+ /**
16
+ * Microsoft Entra ID (Azure AD) OAuth provider helper
17
+ *
18
+ * @example
19
+ * ```ts
20
+ * import { genericOAuth, microsoftEntraId } from "better-auth/plugins/generic-oauth";
21
+ *
22
+ * export const auth = betterAuth({
23
+ * plugins: [
24
+ * genericOAuth({
25
+ * config: [
26
+ * microsoftEntraId({
27
+ * clientId: process.env.MS_APP_ID,
28
+ * clientSecret: process.env.MS_CLIENT_SECRET,
29
+ * tenantId: process.env.MS_TENANT_ID,
30
+ * }),
31
+ * ],
32
+ * }),
33
+ * ],
34
+ * });
35
+ * ```
36
+ */
37
+ declare function microsoftEntraId(options: MicrosoftEntraIdOptions): GenericOAuthConfig<"microsoft-entra-id">;
38
+ //#endregion
39
+ export { MicrosoftEntraIdOptions, microsoftEntraId };
@@ -0,0 +1,104 @@
1
+ import { decodeJwt } from "jose";
2
+ import { betterFetch } from "@better-fetch/fetch";
3
+ import { createPlaceholderEmail } from "@better-auth/core/utils/email";
4
+ //#region src/plugins/generic-oauth/providers/microsoft-entra-id.ts
5
+ function getMicrosoftProfileName(profile) {
6
+ return profile.name ?? (`${profile.given_name ?? profile.givenname ?? ""} ${profile.family_name ?? profile.familyname ?? ""}`.trim() || void 0);
7
+ }
8
+ /**
9
+ * Microsoft Entra ID (Azure AD) OAuth provider helper
10
+ *
11
+ * @example
12
+ * ```ts
13
+ * import { genericOAuth, microsoftEntraId } from "better-auth/plugins/generic-oauth";
14
+ *
15
+ * export const auth = betterAuth({
16
+ * plugins: [
17
+ * genericOAuth({
18
+ * config: [
19
+ * microsoftEntraId({
20
+ * clientId: process.env.MS_APP_ID,
21
+ * clientSecret: process.env.MS_CLIENT_SECRET,
22
+ * tenantId: process.env.MS_TENANT_ID,
23
+ * }),
24
+ * ],
25
+ * }),
26
+ * ],
27
+ * });
28
+ * ```
29
+ */
30
+ function microsoftEntraId(options) {
31
+ const defaultScopes = [
32
+ "openid",
33
+ "profile",
34
+ "email"
35
+ ];
36
+ const tenantId = typeof options.tenantId === "string" ? options.tenantId.toLowerCase() : "";
37
+ if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(tenantId)) throw new Error("The generic microsoftEntraId helper requires a concrete Microsoft Entra tenant GUID. Use the built-in Microsoft provider for common, organizations, or consumers.");
38
+ const authorizationUrl = `https://login.microsoftonline.com/${tenantId}/oauth2/v2.0/authorize`;
39
+ const tokenUrl = `https://login.microsoftonline.com/${tenantId}/oauth2/v2.0/token`;
40
+ const discoveryUrl = `https://login.microsoftonline.com/${tenantId}/v2.0/.well-known/openid-configuration`;
41
+ const userInfoUrl = "https://graph.microsoft.com/oidc/userinfo";
42
+ const getUserInfo = async (tokens) => {
43
+ if (!tokens.idToken) return null;
44
+ let tokenProfile;
45
+ try {
46
+ tokenProfile = decodeJwt(tokens.idToken);
47
+ } catch {
48
+ return null;
49
+ }
50
+ const oid = typeof tokenProfile.oid === "string" && tokenProfile.oid.trim().length > 0 ? tokenProfile.oid : void 0;
51
+ if (!oid) return null;
52
+ const tokenEmail = tokenProfile.email;
53
+ const tokenUserInfo = {
54
+ ...tokenProfile,
55
+ name: getMicrosoftProfileName(tokenProfile),
56
+ email: tokenEmail ?? createPlaceholderEmail({
57
+ identifier: oid,
58
+ namespace: "microsoft-entra-id"
59
+ }),
60
+ image: tokenProfile.picture,
61
+ emailVerified: tokenEmail ? tokenProfile.email_verified ?? false : false
62
+ };
63
+ if (!tokens.accessToken) return tokenUserInfo;
64
+ const { data: profile, error } = await betterFetch(userInfoUrl, { headers: { Authorization: `Bearer ${tokens.accessToken}` } });
65
+ if (error || !profile) return tokenUserInfo;
66
+ if (typeof tokenProfile.sub !== "string" || profile.sub !== tokenProfile.sub) return tokenUserInfo;
67
+ const emailClaim = tokenProfile.email ?? profile.email;
68
+ return {
69
+ ...profile,
70
+ ...tokenProfile,
71
+ name: getMicrosoftProfileName(tokenProfile) ?? getMicrosoftProfileName(profile),
72
+ email: emailClaim ?? createPlaceholderEmail({
73
+ identifier: oid,
74
+ namespace: "microsoft-entra-id"
75
+ }),
76
+ image: tokenProfile.picture ?? profile.picture,
77
+ emailVerified: emailClaim != null ? tokenProfile.email_verified ?? profile.email_verified ?? false : false
78
+ };
79
+ };
80
+ return {
81
+ providerId: "microsoft-entra-id",
82
+ accountSubject: ({ profile }) => typeof profile.oid === "string" ? profile.oid : "",
83
+ discoveryUrl,
84
+ requireIdTokenVerification: true,
85
+ authorizationUrl,
86
+ tokenUrl,
87
+ userInfoUrl,
88
+ clientId: options.clientId,
89
+ clientSecret: options.clientSecret,
90
+ tokenEndpointAuth: options.tokenEndpointAuth,
91
+ scopes: options.scopes ?? defaultScopes,
92
+ redirectURI: options.redirectURI,
93
+ endSessionEndpoint: options.endSessionEndpoint,
94
+ postLogoutRedirectURI: options.postLogoutRedirectURI,
95
+ disableProviderLogout: options.disableProviderLogout,
96
+ pkce: options.pkce,
97
+ disableImplicitSignUp: options.disableImplicitSignUp,
98
+ disableSignUp: options.disableSignUp,
99
+ overrideUserInfo: options.overrideUserInfo,
100
+ getUserInfo
101
+ };
102
+ }
103
+ //#endregion
104
+ export { microsoftEntraId };
@@ -0,0 +1,36 @@
1
+ import { GenericOAuthConfig } from "../types.mjs";
2
+ import { BaseOAuthProviderOptions } from "../index.mjs";
3
+
4
+ //#region src/plugins/generic-oauth/providers/okta.d.ts
5
+ interface OktaOptions extends BaseOAuthProviderOptions {
6
+ /**
7
+ * Okta issuer URL (e.g., https://dev-xxxxx.okta.com/oauth2/default)
8
+ * This will be used to construct the discovery URL.
9
+ */
10
+ issuer: string;
11
+ }
12
+ /**
13
+ * Okta OAuth provider helper
14
+ *
15
+ * @example
16
+ * ```ts
17
+ * import { genericOAuth, okta } from "better-auth/plugins/generic-oauth";
18
+ *
19
+ * export const auth = betterAuth({
20
+ * plugins: [
21
+ * genericOAuth({
22
+ * config: [
23
+ * okta({
24
+ * clientId: process.env.OKTA_CLIENT_ID,
25
+ * clientSecret: process.env.OKTA_CLIENT_SECRET,
26
+ * issuer: process.env.OKTA_ISSUER,
27
+ * }),
28
+ * ],
29
+ * }),
30
+ * ],
31
+ * });
32
+ * ```
33
+ */
34
+ declare function okta(options: OktaOptions): GenericOAuthConfig<"okta">;
35
+ //#endregion
36
+ export { OktaOptions, okta };
@@ -0,0 +1,47 @@
1
+ //#region src/plugins/generic-oauth/providers/okta.ts
2
+ /**
3
+ * Okta OAuth provider helper
4
+ *
5
+ * @example
6
+ * ```ts
7
+ * import { genericOAuth, okta } from "better-auth/plugins/generic-oauth";
8
+ *
9
+ * export const auth = betterAuth({
10
+ * plugins: [
11
+ * genericOAuth({
12
+ * config: [
13
+ * okta({
14
+ * clientId: process.env.OKTA_CLIENT_ID,
15
+ * clientSecret: process.env.OKTA_CLIENT_SECRET,
16
+ * issuer: process.env.OKTA_ISSUER,
17
+ * }),
18
+ * ],
19
+ * }),
20
+ * ],
21
+ * });
22
+ * ```
23
+ */
24
+ function okta(options) {
25
+ return {
26
+ providerId: "okta",
27
+ discoveryUrl: `${options.issuer.replace(/\/$/, "")}/.well-known/openid-configuration`,
28
+ clientId: options.clientId,
29
+ clientSecret: options.clientSecret,
30
+ tokenEndpointAuth: options.tokenEndpointAuth,
31
+ scopes: options.scopes ?? [
32
+ "openid",
33
+ "profile",
34
+ "email"
35
+ ],
36
+ redirectURI: options.redirectURI,
37
+ endSessionEndpoint: options.endSessionEndpoint,
38
+ postLogoutRedirectURI: options.postLogoutRedirectURI,
39
+ disableProviderLogout: options.disableProviderLogout,
40
+ pkce: options.pkce,
41
+ disableImplicitSignUp: options.disableImplicitSignUp,
42
+ disableSignUp: options.disableSignUp,
43
+ overrideUserInfo: options.overrideUserInfo
44
+ };
45
+ }
46
+ //#endregion
47
+ export { okta };
@@ -0,0 +1,29 @@
1
+ import { GenericOAuthConfig } from "../types.mjs";
2
+ import { BaseOAuthProviderOptions } from "../index.mjs";
3
+
4
+ //#region src/plugins/generic-oauth/providers/patreon.d.ts
5
+ interface PatreonOptions extends BaseOAuthProviderOptions {}
6
+ /**
7
+ * Patreon OAuth provider helper
8
+ *
9
+ * @example
10
+ * ```ts
11
+ * import { genericOAuth, patreon } from "better-auth/plugins/generic-oauth";
12
+ *
13
+ * export const auth = betterAuth({
14
+ * plugins: [
15
+ * genericOAuth({
16
+ * config: [
17
+ * patreon({
18
+ * clientId: process.env.PATREON_CLIENT_ID,
19
+ * clientSecret: process.env.PATREON_CLIENT_SECRET,
20
+ * }),
21
+ * ],
22
+ * }),
23
+ * ],
24
+ * });
25
+ * ```
26
+ */
27
+ declare function patreon(options: PatreonOptions): GenericOAuthConfig<"patreon">;
28
+ //#endregion
29
+ export { PatreonOptions, patreon };
@@ -0,0 +1,61 @@
1
+ import { betterFetch } from "@better-fetch/fetch";
2
+ //#region src/plugins/generic-oauth/providers/patreon.ts
3
+ /**
4
+ * Patreon OAuth provider helper
5
+ *
6
+ * @example
7
+ * ```ts
8
+ * import { genericOAuth, patreon } from "better-auth/plugins/generic-oauth";
9
+ *
10
+ * export const auth = betterAuth({
11
+ * plugins: [
12
+ * genericOAuth({
13
+ * config: [
14
+ * patreon({
15
+ * clientId: process.env.PATREON_CLIENT_ID,
16
+ * clientSecret: process.env.PATREON_CLIENT_SECRET,
17
+ * }),
18
+ * ],
19
+ * }),
20
+ * ],
21
+ * });
22
+ * ```
23
+ */
24
+ function patreon(options) {
25
+ const defaultScopes = ["identity[email]"];
26
+ const getUserInfo = async (tokens) => {
27
+ const { data: profile, error } = await betterFetch("https://www.patreon.com/api/oauth2/v2/identity?fields[user]=email,full_name,image_url,is_email_verified", {
28
+ method: "GET",
29
+ headers: { Authorization: `Bearer ${tokens.accessToken}` }
30
+ });
31
+ if (error || !profile) return null;
32
+ return {
33
+ id: profile.data.id,
34
+ name: profile.data.attributes.full_name,
35
+ email: profile.data.attributes.email,
36
+ image: profile.data.attributes.image_url,
37
+ emailVerified: profile.data.attributes.is_email_verified
38
+ };
39
+ };
40
+ return {
41
+ providerId: "patreon",
42
+ accountSubject: ({ profile }) => profile.id ?? "",
43
+ authorizationUrl: "https://www.patreon.com/oauth2/authorize",
44
+ tokenUrl: "https://www.patreon.com/api/oauth2/token",
45
+ clientId: options.clientId,
46
+ clientSecret: options.clientSecret,
47
+ tokenEndpointAuth: options.tokenEndpointAuth,
48
+ scopes: options.scopes ?? defaultScopes,
49
+ redirectURI: options.redirectURI,
50
+ endSessionEndpoint: options.endSessionEndpoint,
51
+ postLogoutRedirectURI: options.postLogoutRedirectURI,
52
+ disableProviderLogout: options.disableProviderLogout,
53
+ pkce: options.pkce,
54
+ disableImplicitSignUp: options.disableImplicitSignUp,
55
+ disableSignUp: options.disableSignUp,
56
+ overrideUserInfo: options.overrideUserInfo,
57
+ getUserInfo
58
+ };
59
+ }
60
+ //#endregion
61
+ export { patreon };
@@ -0,0 +1,29 @@
1
+ import { GenericOAuthConfig } from "../types.mjs";
2
+ import { BaseOAuthProviderOptions } from "../index.mjs";
3
+
4
+ //#region src/plugins/generic-oauth/providers/slack.d.ts
5
+ interface SlackOptions extends BaseOAuthProviderOptions {}
6
+ /**
7
+ * Slack OAuth provider helper
8
+ *
9
+ * @example
10
+ * ```ts
11
+ * import { genericOAuth, slack } from "better-auth/plugins/generic-oauth";
12
+ *
13
+ * export const auth = betterAuth({
14
+ * plugins: [
15
+ * genericOAuth({
16
+ * config: [
17
+ * slack({
18
+ * clientId: process.env.SLACK_CLIENT_ID,
19
+ * clientSecret: process.env.SLACK_CLIENT_SECRET,
20
+ * }),
21
+ * ],
22
+ * }),
23
+ * ],
24
+ * });
25
+ * ```
26
+ */
27
+ declare function slack(options: SlackOptions): GenericOAuthConfig<"slack">;
28
+ //#endregion
29
+ export { SlackOptions, slack };