@meistrari/auth-core 1.6.0 → 1.7.1

package/dist/index.d.mts

@@ -2,8 +2,8 @@ import * as better_auth_plugins from 'better-auth/plugins';
 import * as better_auth from 'better-auth';
 import { JWTPayload } from 'better-auth';
 import { BetterFetchOption } from 'better-auth/client';
-import * as jose from 'jose';
 import * as _better_auth_sso from '@better-auth/sso';
+import * as better_call from 'better-call';
 import * as nanostores from 'nanostores';
 import * as _better_fetch_fetch from '@better-fetch/fetch';
 export { BetterFetchError as APIError } from '@better-fetch/fetch';
@@ -308,7 +308,7 @@ declare function createAPIClient(apiUrl: string, fetchOptions?: BetterFetchOptio
         };
         fetchOptions?: FetchOptions | undefined;
     }>, data_1?: FetchOptions | undefined) => Promise<_better_fetch_fetch.BetterFetchResponse<{
-        status: ("OK" | "CREATED" | "ACCEPTED" | "NO_CONTENT" | "MULTIPLE_CHOICES" | "MOVED_PERMANENTLY" | "FOUND" | "SEE_OTHER" | "NOT_MODIFIED" | "TEMPORARY_REDIRECT" | "BAD_REQUEST" | "UNAUTHORIZED" | "PAYMENT_REQUIRED" | "FORBIDDEN" | "NOT_FOUND" | "METHOD_NOT_ALLOWED" | "NOT_ACCEPTABLE" | "PROXY_AUTHENTICATION_REQUIRED" | "REQUEST_TIMEOUT" | "CONFLICT" | "GONE" | "LENGTH_REQUIRED" | "PRECONDITION_FAILED" | "PAYLOAD_TOO_LARGE" | "URI_TOO_LONG" | "UNSUPPORTED_MEDIA_TYPE" | "RANGE_NOT_SATISFIABLE" | "EXPECTATION_FAILED" | "I'M_A_TEAPOT" | "MISDIRECTED_REQUEST" | "UNPROCESSABLE_ENTITY" | "LOCKED" | "FAILED_DEPENDENCY" | "TOO_EARLY" | "UPGRADE_REQUIRED" | "PRECONDITION_REQUIRED" | "TOO_MANY_REQUESTS" | "REQUEST_HEADER_FIELDS_TOO_LARGE" | "UNAVAILABLE_FOR_LEGAL_REASONS" | "INTERNAL_SERVER_ERROR" | "NOT_IMPLEMENTED" | "BAD_GATEWAY" | "SERVICE_UNAVAILABLE" | "GATEWAY_TIMEOUT" | "HTTP_VERSION_NOT_SUPPORTED" | "VARIANT_ALSO_NEGOTIATES" | "INSUFFICIENT_STORAGE" | "LOOP_DETECTED" | "NOT_EXTENDED" | "NETWORK_AUTHENTICATION_REQUIRED") | better_auth.Status;
+        status: ("OK" | "CREATED" | "ACCEPTED" | "NO_CONTENT" | "MULTIPLE_CHOICES" | "MOVED_PERMANENTLY" | "FOUND" | "SEE_OTHER" | "NOT_MODIFIED" | "TEMPORARY_REDIRECT" | "BAD_REQUEST" | "UNAUTHORIZED" | "PAYMENT_REQUIRED" | "FORBIDDEN" | "NOT_FOUND" | "METHOD_NOT_ALLOWED" | "NOT_ACCEPTABLE" | "PROXY_AUTHENTICATION_REQUIRED" | "REQUEST_TIMEOUT" | "CONFLICT" | "GONE" | "LENGTH_REQUIRED" | "PRECONDITION_FAILED" | "PAYLOAD_TOO_LARGE" | "URI_TOO_LONG" | "UNSUPPORTED_MEDIA_TYPE" | "RANGE_NOT_SATISFIABLE" | "EXPECTATION_FAILED" | "I'M_A_TEAPOT" | "MISDIRECTED_REQUEST" | "UNPROCESSABLE_ENTITY" | "LOCKED" | "FAILED_DEPENDENCY" | "TOO_EARLY" | "UPGRADE_REQUIRED" | "PRECONDITION_REQUIRED" | "TOO_MANY_REQUESTS" | "REQUEST_HEADER_FIELDS_TOO_LARGE" | "UNAVAILABLE_FOR_LEGAL_REASONS" | "INTERNAL_SERVER_ERROR" | "NOT_IMPLEMENTED" | "BAD_GATEWAY" | "SERVICE_UNAVAILABLE" | "GATEWAY_TIMEOUT" | "HTTP_VERSION_NOT_SUPPORTED" | "VARIANT_ALSO_NEGOTIATES" | "INSUFFICIENT_STORAGE" | "LOOP_DETECTED" | "NOT_EXTENDED" | "NETWORK_AUTHENTICATION_REQUIRED") | better_call.Status;
         body: ({
             message?: string;
             code?: string;
@@ -2706,7 +2706,7 @@ declare function createAPIClient(apiUrl: string, fetchOptions?: BetterFetchOptio
             data: CompleteAuthorizationFlowResponse;
             error: null;
         }>;
-        refreshAccessToken: (refreshToken?: string) => Promise<{
+        refreshAccessToken: (refreshToken: string) => Promise<{
             data: null;
             error: {
                 message?: string | undefined;
@@ -2717,7 +2717,7 @@ declare function createAPIClient(apiUrl: string, fetchOptions?: BetterFetchOptio
             data: CompleteAuthorizationFlowResponse;
             error: null;
         }>;
-        whoAmI: (accessToken?: string) => Promise<{
+        whoAmI: (accessToken: string) => Promise<{
             data: null;
             error: {
                 message?: string | undefined;
@@ -2728,6 +2728,17 @@ declare function createAPIClient(apiUrl: string, fetchOptions?: BetterFetchOptio
             data: WhoAmIResponse;
             error: null;
         }>;
+        switchOrganization: (organizationId: string, accessToken: string) => Promise<{
+            data: null;
+            error: {
+                message?: string | undefined;
+                status: number;
+                statusText: string;
+            };
+        } | {
+            data: CompleteAuthorizationFlowResponse;
+            error: null;
+        }>;
     };
 } & {
     $Infer: {
@@ -2847,7 +2858,7 @@ declare function createAPIClient(apiUrl: string, fetchOptions?: BetterFetchOptio
             statusText: string;
         };
     } | {
-        data: jose.JSONWebKeySet;
+        data: better_auth.JSONWebKeySet;
         error: null;
     }>;
 } & {
@@ -3260,7 +3271,7 @@ declare const stub: {
         };
         fetchOptions?: FetchOptions | undefined;
     }>, data_1?: FetchOptions | undefined) => Promise<_better_fetch_fetch.BetterFetchResponse<{
-        status: ("OK" | "CREATED" | "ACCEPTED" | "NO_CONTENT" | "MULTIPLE_CHOICES" | "MOVED_PERMANENTLY" | "FOUND" | "SEE_OTHER" | "NOT_MODIFIED" | "TEMPORARY_REDIRECT" | "BAD_REQUEST" | "UNAUTHORIZED" | "PAYMENT_REQUIRED" | "FORBIDDEN" | "NOT_FOUND" | "METHOD_NOT_ALLOWED" | "NOT_ACCEPTABLE" | "PROXY_AUTHENTICATION_REQUIRED" | "REQUEST_TIMEOUT" | "CONFLICT" | "GONE" | "LENGTH_REQUIRED" | "PRECONDITION_FAILED" | "PAYLOAD_TOO_LARGE" | "URI_TOO_LONG" | "UNSUPPORTED_MEDIA_TYPE" | "RANGE_NOT_SATISFIABLE" | "EXPECTATION_FAILED" | "I'M_A_TEAPOT" | "MISDIRECTED_REQUEST" | "UNPROCESSABLE_ENTITY" | "LOCKED" | "FAILED_DEPENDENCY" | "TOO_EARLY" | "UPGRADE_REQUIRED" | "PRECONDITION_REQUIRED" | "TOO_MANY_REQUESTS" | "REQUEST_HEADER_FIELDS_TOO_LARGE" | "UNAVAILABLE_FOR_LEGAL_REASONS" | "INTERNAL_SERVER_ERROR" | "NOT_IMPLEMENTED" | "BAD_GATEWAY" | "SERVICE_UNAVAILABLE" | "GATEWAY_TIMEOUT" | "HTTP_VERSION_NOT_SUPPORTED" | "VARIANT_ALSO_NEGOTIATES" | "INSUFFICIENT_STORAGE" | "LOOP_DETECTED" | "NOT_EXTENDED" | "NETWORK_AUTHENTICATION_REQUIRED") | better_auth.Status;
+        status: ("OK" | "CREATED" | "ACCEPTED" | "NO_CONTENT" | "MULTIPLE_CHOICES" | "MOVED_PERMANENTLY" | "FOUND" | "SEE_OTHER" | "NOT_MODIFIED" | "TEMPORARY_REDIRECT" | "BAD_REQUEST" | "UNAUTHORIZED" | "PAYMENT_REQUIRED" | "FORBIDDEN" | "NOT_FOUND" | "METHOD_NOT_ALLOWED" | "NOT_ACCEPTABLE" | "PROXY_AUTHENTICATION_REQUIRED" | "REQUEST_TIMEOUT" | "CONFLICT" | "GONE" | "LENGTH_REQUIRED" | "PRECONDITION_FAILED" | "PAYLOAD_TOO_LARGE" | "URI_TOO_LONG" | "UNSUPPORTED_MEDIA_TYPE" | "RANGE_NOT_SATISFIABLE" | "EXPECTATION_FAILED" | "I'M_A_TEAPOT" | "MISDIRECTED_REQUEST" | "UNPROCESSABLE_ENTITY" | "LOCKED" | "FAILED_DEPENDENCY" | "TOO_EARLY" | "UPGRADE_REQUIRED" | "PRECONDITION_REQUIRED" | "TOO_MANY_REQUESTS" | "REQUEST_HEADER_FIELDS_TOO_LARGE" | "UNAVAILABLE_FOR_LEGAL_REASONS" | "INTERNAL_SERVER_ERROR" | "NOT_IMPLEMENTED" | "BAD_GATEWAY" | "SERVICE_UNAVAILABLE" | "GATEWAY_TIMEOUT" | "HTTP_VERSION_NOT_SUPPORTED" | "VARIANT_ALSO_NEGOTIATES" | "INSUFFICIENT_STORAGE" | "LOOP_DETECTED" | "NOT_EXTENDED" | "NETWORK_AUTHENTICATION_REQUIRED") | better_call.Status;
         body: ({
             message?: string;
             code?: string;
@@ -5658,7 +5669,7 @@ declare const stub: {
             data: CompleteAuthorizationFlowResponse;
             error: null;
         }>;
-        refreshAccessToken: (refreshToken?: string) => Promise<{
+        refreshAccessToken: (refreshToken: string) => Promise<{
             data: null;
             error: {
                 message?: string | undefined;
@@ -5669,7 +5680,7 @@ declare const stub: {
             data: CompleteAuthorizationFlowResponse;
             error: null;
         }>;
-        whoAmI: (accessToken?: string) => Promise<{
+        whoAmI: (accessToken: string) => Promise<{
             data: null;
             error: {
                 message?: string | undefined;
@@ -5680,6 +5691,17 @@ declare const stub: {
             data: WhoAmIResponse;
             error: null;
         }>;
+        switchOrganization: (organizationId: string, accessToken: string) => Promise<{
+            data: null;
+            error: {
+                message?: string | undefined;
+                status: number;
+                statusText: string;
+            };
+        } | {
+            data: CompleteAuthorizationFlowResponse;
+            error: null;
+        }>;
     };
 } & {
     $Infer: {
@@ -5799,7 +5821,7 @@ declare const stub: {
             statusText: string;
         };
     } | {
-        data: jose.JSONWebKeySet;
+        data: better_auth.JSONWebKeySet;
         error: null;
     }>;
 } & {
@@ -6225,14 +6247,26 @@ declare class ApplicationService {
      * @throws {RefreshTokenExpiredError} When the refresh token has expired or is invalid
      * @throws {ApplicationError} For other API errors
      */
-    refreshAccessToken(): Promise<CompleteAuthorizationFlowResponse>;
+    refreshAccessToken(refreshToken: string): Promise<CompleteAuthorizationFlowResponse>;
     /**
      * Gets the current user and organization for a specific application.
      *
      * @param accessToken - The access token to use for the who am I request
      * @returns The current user and organization
      */
-    whoAmI(accessToken?: string): Promise<WhoAmIResponse>;
+    whoAmI(accessToken: string): Promise<WhoAmIResponse>;
+    /**
+     * Switches the active organization for the authenticated user.
+     *
+     * Issues new access and refresh tokens scoped to the specified organization.
+     * The target organization must be entitled to the application and the entitlement's
+     * access rules must allow the current user.
+     *
+     * @param organizationId - The ID of the organization to switch to
+     * @param accessToken - Optional access token for authentication (uses cookie if not provided)
+     * @returns New authentication tokens and user/organization details
+     */
+    switchOrganization(organizationId: string, accessToken: string): Promise<CompleteAuthorizationFlowResponse>;
 }
 
 type UpdateOrganizationPayload = Partial<Pick<ExtendedOrganization, 'name' | 'logo' | 'settings'>>;

package/dist/index.d.ts

@@ -2,8 +2,8 @@ import * as better_auth_plugins from 'better-auth/plugins';
 import * as better_auth from 'better-auth';
 import { JWTPayload } from 'better-auth';
 import { BetterFetchOption } from 'better-auth/client';
-import * as jose from 'jose';
 import * as _better_auth_sso from '@better-auth/sso';
+import * as better_call from 'better-call';
 import * as nanostores from 'nanostores';
 import * as _better_fetch_fetch from '@better-fetch/fetch';
 export { BetterFetchError as APIError } from '@better-fetch/fetch';
@@ -308,7 +308,7 @@ declare function createAPIClient(apiUrl: string, fetchOptions?: BetterFetchOptio
         };
         fetchOptions?: FetchOptions | undefined;
     }>, data_1?: FetchOptions | undefined) => Promise<_better_fetch_fetch.BetterFetchResponse<{
-        status: ("OK" | "CREATED" | "ACCEPTED" | "NO_CONTENT" | "MULTIPLE_CHOICES" | "MOVED_PERMANENTLY" | "FOUND" | "SEE_OTHER" | "NOT_MODIFIED" | "TEMPORARY_REDIRECT" | "BAD_REQUEST" | "UNAUTHORIZED" | "PAYMENT_REQUIRED" | "FORBIDDEN" | "NOT_FOUND" | "METHOD_NOT_ALLOWED" | "NOT_ACCEPTABLE" | "PROXY_AUTHENTICATION_REQUIRED" | "REQUEST_TIMEOUT" | "CONFLICT" | "GONE" | "LENGTH_REQUIRED" | "PRECONDITION_FAILED" | "PAYLOAD_TOO_LARGE" | "URI_TOO_LONG" | "UNSUPPORTED_MEDIA_TYPE" | "RANGE_NOT_SATISFIABLE" | "EXPECTATION_FAILED" | "I'M_A_TEAPOT" | "MISDIRECTED_REQUEST" | "UNPROCESSABLE_ENTITY" | "LOCKED" | "FAILED_DEPENDENCY" | "TOO_EARLY" | "UPGRADE_REQUIRED" | "PRECONDITION_REQUIRED" | "TOO_MANY_REQUESTS" | "REQUEST_HEADER_FIELDS_TOO_LARGE" | "UNAVAILABLE_FOR_LEGAL_REASONS" | "INTERNAL_SERVER_ERROR" | "NOT_IMPLEMENTED" | "BAD_GATEWAY" | "SERVICE_UNAVAILABLE" | "GATEWAY_TIMEOUT" | "HTTP_VERSION_NOT_SUPPORTED" | "VARIANT_ALSO_NEGOTIATES" | "INSUFFICIENT_STORAGE" | "LOOP_DETECTED" | "NOT_EXTENDED" | "NETWORK_AUTHENTICATION_REQUIRED") | better_auth.Status;
+        status: ("OK" | "CREATED" | "ACCEPTED" | "NO_CONTENT" | "MULTIPLE_CHOICES" | "MOVED_PERMANENTLY" | "FOUND" | "SEE_OTHER" | "NOT_MODIFIED" | "TEMPORARY_REDIRECT" | "BAD_REQUEST" | "UNAUTHORIZED" | "PAYMENT_REQUIRED" | "FORBIDDEN" | "NOT_FOUND" | "METHOD_NOT_ALLOWED" | "NOT_ACCEPTABLE" | "PROXY_AUTHENTICATION_REQUIRED" | "REQUEST_TIMEOUT" | "CONFLICT" | "GONE" | "LENGTH_REQUIRED" | "PRECONDITION_FAILED" | "PAYLOAD_TOO_LARGE" | "URI_TOO_LONG" | "UNSUPPORTED_MEDIA_TYPE" | "RANGE_NOT_SATISFIABLE" | "EXPECTATION_FAILED" | "I'M_A_TEAPOT" | "MISDIRECTED_REQUEST" | "UNPROCESSABLE_ENTITY" | "LOCKED" | "FAILED_DEPENDENCY" | "TOO_EARLY" | "UPGRADE_REQUIRED" | "PRECONDITION_REQUIRED" | "TOO_MANY_REQUESTS" | "REQUEST_HEADER_FIELDS_TOO_LARGE" | "UNAVAILABLE_FOR_LEGAL_REASONS" | "INTERNAL_SERVER_ERROR" | "NOT_IMPLEMENTED" | "BAD_GATEWAY" | "SERVICE_UNAVAILABLE" | "GATEWAY_TIMEOUT" | "HTTP_VERSION_NOT_SUPPORTED" | "VARIANT_ALSO_NEGOTIATES" | "INSUFFICIENT_STORAGE" | "LOOP_DETECTED" | "NOT_EXTENDED" | "NETWORK_AUTHENTICATION_REQUIRED") | better_call.Status;
         body: ({
             message?: string;
             code?: string;
@@ -2706,7 +2706,7 @@ declare function createAPIClient(apiUrl: string, fetchOptions?: BetterFetchOptio
             data: CompleteAuthorizationFlowResponse;
             error: null;
         }>;
-        refreshAccessToken: (refreshToken?: string) => Promise<{
+        refreshAccessToken: (refreshToken: string) => Promise<{
             data: null;
             error: {
                 message?: string | undefined;
@@ -2717,7 +2717,7 @@ declare function createAPIClient(apiUrl: string, fetchOptions?: BetterFetchOptio
             data: CompleteAuthorizationFlowResponse;
             error: null;
         }>;
-        whoAmI: (accessToken?: string) => Promise<{
+        whoAmI: (accessToken: string) => Promise<{
             data: null;
             error: {
                 message?: string | undefined;
@@ -2728,6 +2728,17 @@ declare function createAPIClient(apiUrl: string, fetchOptions?: BetterFetchOptio
             data: WhoAmIResponse;
             error: null;
         }>;
+        switchOrganization: (organizationId: string, accessToken: string) => Promise<{
+            data: null;
+            error: {
+                message?: string | undefined;
+                status: number;
+                statusText: string;
+            };
+        } | {
+            data: CompleteAuthorizationFlowResponse;
+            error: null;
+        }>;
     };
 } & {
     $Infer: {
@@ -2847,7 +2858,7 @@ declare function createAPIClient(apiUrl: string, fetchOptions?: BetterFetchOptio
             statusText: string;
         };
     } | {
-        data: jose.JSONWebKeySet;
+        data: better_auth.JSONWebKeySet;
         error: null;
     }>;
 } & {
@@ -3260,7 +3271,7 @@ declare const stub: {
         };
         fetchOptions?: FetchOptions | undefined;
     }>, data_1?: FetchOptions | undefined) => Promise<_better_fetch_fetch.BetterFetchResponse<{
-        status: ("OK" | "CREATED" | "ACCEPTED" | "NO_CONTENT" | "MULTIPLE_CHOICES" | "MOVED_PERMANENTLY" | "FOUND" | "SEE_OTHER" | "NOT_MODIFIED" | "TEMPORARY_REDIRECT" | "BAD_REQUEST" | "UNAUTHORIZED" | "PAYMENT_REQUIRED" | "FORBIDDEN" | "NOT_FOUND" | "METHOD_NOT_ALLOWED" | "NOT_ACCEPTABLE" | "PROXY_AUTHENTICATION_REQUIRED" | "REQUEST_TIMEOUT" | "CONFLICT" | "GONE" | "LENGTH_REQUIRED" | "PRECONDITION_FAILED" | "PAYLOAD_TOO_LARGE" | "URI_TOO_LONG" | "UNSUPPORTED_MEDIA_TYPE" | "RANGE_NOT_SATISFIABLE" | "EXPECTATION_FAILED" | "I'M_A_TEAPOT" | "MISDIRECTED_REQUEST" | "UNPROCESSABLE_ENTITY" | "LOCKED" | "FAILED_DEPENDENCY" | "TOO_EARLY" | "UPGRADE_REQUIRED" | "PRECONDITION_REQUIRED" | "TOO_MANY_REQUESTS" | "REQUEST_HEADER_FIELDS_TOO_LARGE" | "UNAVAILABLE_FOR_LEGAL_REASONS" | "INTERNAL_SERVER_ERROR" | "NOT_IMPLEMENTED" | "BAD_GATEWAY" | "SERVICE_UNAVAILABLE" | "GATEWAY_TIMEOUT" | "HTTP_VERSION_NOT_SUPPORTED" | "VARIANT_ALSO_NEGOTIATES" | "INSUFFICIENT_STORAGE" | "LOOP_DETECTED" | "NOT_EXTENDED" | "NETWORK_AUTHENTICATION_REQUIRED") | better_auth.Status;
+        status: ("OK" | "CREATED" | "ACCEPTED" | "NO_CONTENT" | "MULTIPLE_CHOICES" | "MOVED_PERMANENTLY" | "FOUND" | "SEE_OTHER" | "NOT_MODIFIED" | "TEMPORARY_REDIRECT" | "BAD_REQUEST" | "UNAUTHORIZED" | "PAYMENT_REQUIRED" | "FORBIDDEN" | "NOT_FOUND" | "METHOD_NOT_ALLOWED" | "NOT_ACCEPTABLE" | "PROXY_AUTHENTICATION_REQUIRED" | "REQUEST_TIMEOUT" | "CONFLICT" | "GONE" | "LENGTH_REQUIRED" | "PRECONDITION_FAILED" | "PAYLOAD_TOO_LARGE" | "URI_TOO_LONG" | "UNSUPPORTED_MEDIA_TYPE" | "RANGE_NOT_SATISFIABLE" | "EXPECTATION_FAILED" | "I'M_A_TEAPOT" | "MISDIRECTED_REQUEST" | "UNPROCESSABLE_ENTITY" | "LOCKED" | "FAILED_DEPENDENCY" | "TOO_EARLY" | "UPGRADE_REQUIRED" | "PRECONDITION_REQUIRED" | "TOO_MANY_REQUESTS" | "REQUEST_HEADER_FIELDS_TOO_LARGE" | "UNAVAILABLE_FOR_LEGAL_REASONS" | "INTERNAL_SERVER_ERROR" | "NOT_IMPLEMENTED" | "BAD_GATEWAY" | "SERVICE_UNAVAILABLE" | "GATEWAY_TIMEOUT" | "HTTP_VERSION_NOT_SUPPORTED" | "VARIANT_ALSO_NEGOTIATES" | "INSUFFICIENT_STORAGE" | "LOOP_DETECTED" | "NOT_EXTENDED" | "NETWORK_AUTHENTICATION_REQUIRED") | better_call.Status;
         body: ({
             message?: string;
             code?: string;
@@ -5658,7 +5669,7 @@ declare const stub: {
             data: CompleteAuthorizationFlowResponse;
             error: null;
         }>;
-        refreshAccessToken: (refreshToken?: string) => Promise<{
+        refreshAccessToken: (refreshToken: string) => Promise<{
             data: null;
             error: {
                 message?: string | undefined;
@@ -5669,7 +5680,7 @@ declare const stub: {
             data: CompleteAuthorizationFlowResponse;
             error: null;
         }>;
-        whoAmI: (accessToken?: string) => Promise<{
+        whoAmI: (accessToken: string) => Promise<{
             data: null;
             error: {
                 message?: string | undefined;
@@ -5680,6 +5691,17 @@ declare const stub: {
             data: WhoAmIResponse;
             error: null;
         }>;
+        switchOrganization: (organizationId: string, accessToken: string) => Promise<{
+            data: null;
+            error: {
+                message?: string | undefined;
+                status: number;
+                statusText: string;
+            };
+        } | {
+            data: CompleteAuthorizationFlowResponse;
+            error: null;
+        }>;
     };
 } & {
     $Infer: {
@@ -5799,7 +5821,7 @@ declare const stub: {
             statusText: string;
         };
     } | {
-        data: jose.JSONWebKeySet;
+        data: better_auth.JSONWebKeySet;
         error: null;
     }>;
 } & {
@@ -6225,14 +6247,26 @@ declare class ApplicationService {
      * @throws {RefreshTokenExpiredError} When the refresh token has expired or is invalid
      * @throws {ApplicationError} For other API errors
      */
-    refreshAccessToken(): Promise<CompleteAuthorizationFlowResponse>;
+    refreshAccessToken(refreshToken: string): Promise<CompleteAuthorizationFlowResponse>;
     /**
      * Gets the current user and organization for a specific application.
      *
      * @param accessToken - The access token to use for the who am I request
      * @returns The current user and organization
      */
-    whoAmI(accessToken?: string): Promise<WhoAmIResponse>;
+    whoAmI(accessToken: string): Promise<WhoAmIResponse>;
+    /**
+     * Switches the active organization for the authenticated user.
+     *
+     * Issues new access and refresh tokens scoped to the specified organization.
+     * The target organization must be entitled to the application and the entitlement's
+     * access rules must allow the current user.
+     *
+     * @param organizationId - The ID of the organization to switch to
+     * @param accessToken - Optional access token for authentication (uses cookie if not provided)
+     * @returns New authentication tokens and user/organization details
+     */
+    switchOrganization(organizationId: string, accessToken: string): Promise<CompleteAuthorizationFlowResponse>;
 }
 
 type UpdateOrganizationPayload = Partial<Pick<ExtendedOrganization, 'name' | 'logo' | 'settings'>>;

package/dist/index.mjs

@@ -6,7 +6,7 @@ import { createAccessControl } from 'better-auth/plugins/access';
 import { defaultStatements } from 'better-auth/plugins/organization/access';
 export { BetterFetchError as APIError } from '@better-fetch/fetch';
 
-const version = "1.6.0";
+const version = "1.7.1";
 
 const statements = {
   ...defaultStatements,
@@ -98,9 +98,7 @@ function applicationsPluginClient() {
           },
           refreshAccessToken: async (refreshToken) => {
             const headers = new Headers();
-            if (refreshToken) {
-              headers.set("Cookie", `tela-refresh-token=${refreshToken}`);
-            }
+            headers.set("x-tela-refresh-token", refreshToken);
             return await $fetch("/applications/token/refresh", {
               method: "POST",
               headers
@@ -108,13 +106,22 @@ function applicationsPluginClient() {
           },
           whoAmI: async (accessToken) => {
             const headers = new Headers();
-            if (accessToken) {
-              headers.set("Cookie", `tela-access-token=${accessToken}`);
-            }
+            headers.set("x-tela-access-token", accessToken);
             return await $fetch("/applications/whoami", {
               method: "GET",
               headers
             });
+          },
+          switchOrganization: async (organizationId, accessToken) => {
+            const headers = new Headers();
+            headers.set("x-tela-access-token", accessToken);
+            return await $fetch("/applications/switch-organization", {
+              method: "POST",
+              headers,
+              body: {
+                organizationId
+              }
+            });
           }
         }
       };
@@ -270,8 +277,8 @@ class ApplicationService {
    * @throws {RefreshTokenExpiredError} When the refresh token has expired or is invalid
    * @throws {ApplicationError} For other API errors
    */
-  async refreshAccessToken() {
-    const response = await this.client.applications.refreshAccessToken();
+  async refreshAccessToken(refreshToken) {
+    const response = await this.client.applications.refreshAccessToken(refreshToken);
     if (!response.data) {
       const error = response.error;
       const status = error?.status;
@@ -295,6 +302,24 @@ class ApplicationService {
     }
     return response.data;
   }
+  /**
+   * Switches the active organization for the authenticated user.
+   *
+   * Issues new access and refresh tokens scoped to the specified organization.
+   * The target organization must be entitled to the application and the entitlement's
+   * access rules must allow the current user.
+   *
+   * @param organizationId - The ID of the organization to switch to
+   * @param accessToken - Optional access token for authentication (uses cookie if not provided)
+   * @returns New authentication tokens and user/organization details
+   */
+  async switchOrganization(organizationId, accessToken) {
+    const response = await this.client.applications.switchOrganization(organizationId, accessToken);
+    if (!response.data) {
+      throw new Error("No data returned from the API", { cause: response.error });
+    }
+    return response.data;
+  }
 }
 
 class OrganizationService {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meistrari/auth-core",
-  "version": "1.6.0",
+  "version": "1.7.1",
   "type": "module",
   "exports": {
     ".": {