@neutralauth/internal-auth 0.10.11

package/dist/plugins/cross-domain/client.js

@@ -0,0 +1,192 @@
+export function parseSetCookieHeader(header) {
+    const cookieMap = new Map();
+    const cookies = header.split(", ");
+    cookies.forEach((cookie) => {
+        const [nameValue, ...attributes] = cookie.split("; ");
+        const [name, value] = nameValue.split("=");
+        const cookieObj = { value };
+        attributes.forEach((attr) => {
+            const [attrName, attrValue] = attr.split("=");
+            cookieObj[attrName.toLowerCase()] = attrValue;
+        });
+        cookieMap.set(name, cookieObj);
+    });
+    return cookieMap;
+}
+export function getSetCookie(header, prevCookie) {
+    const parsed = parseSetCookieHeader(header);
+    let toSetCookie = {};
+    parsed.forEach((cookie, key) => {
+        const expiresAt = cookie["expires"];
+        const maxAge = cookie["max-age"];
+        const expires = expiresAt
+            ? new Date(String(expiresAt))
+            : maxAge
+                ? new Date(Date.now() + Number(maxAge) * 1000)
+                : null;
+        toSetCookie[key] = {
+            value: cookie["value"],
+            expires: expires ? expires.toISOString() : null,
+        };
+    });
+    if (prevCookie) {
+        try {
+            const prevCookieParsed = JSON.parse(prevCookie);
+            toSetCookie = {
+                ...prevCookieParsed,
+                ...toSetCookie,
+            };
+        }
+        catch {
+            //
+        }
+    }
+    return JSON.stringify(toSetCookie);
+}
+export function getCookie(cookie) {
+    let parsed = {};
+    try {
+        parsed = JSON.parse(cookie);
+    }
+    catch {
+        // noop
+    }
+    const toSend = Object.entries(parsed).reduce((acc, [key, value]) => {
+        if (value.expires && new Date(value.expires) < new Date()) {
+            return acc;
+        }
+        return `${acc}; ${key}=${value.value}`;
+    }, "");
+    return toSend;
+}
+export const crossDomainClient = (opts = {}) => {
+    let store = null;
+    const cookieName = `${opts?.storagePrefix || "better-auth"}_cookie`;
+    const localCacheName = `${opts?.storagePrefix || "better-auth"}_session_data`;
+    const storage = opts?.storage || (typeof localStorage !== "undefined" ? localStorage : undefined);
+    return {
+        id: "cross-domain",
+        $InferServerPlugin: {},
+        getActions(_, $store) {
+            store = $store;
+            return {
+                /**
+                 * Get the stored cookie.
+                 *
+                 * You can use this to get the cookie stored in the device and use it in your fetch
+                 * requests.
+                 *
+                 * @example
+                 * ```ts
+                 * const cookie = client.getCookie();
+                 * fetch("https://api.example.com", {
+                 * 	headers: {
+                 * 		cookie,
+                 * 	},
+                 * });
+                 */
+                getCookie: () => {
+                    const cookie = storage?.getItem(cookieName);
+                    return getCookie(cookie || "{}");
+                },
+                /**
+                 * Notify the session signal.
+                 *
+                 * This is used to trigger an update in useSession, generally when a new session
+                 * token is set.
+                 *
+                 * @example
+                 * ```ts
+                 * client.notifySessionSignal();
+                 * ```
+                 */
+                updateSession: () => {
+                    $store.notify("$sessionSignal");
+                },
+                /**
+                 * Get the stored session data.
+                 *
+                 * @example
+                 * ```ts
+                 * const sessionData = client.getSessionData();
+                 * ```
+                 */
+                getSessionData: () => {
+                    const sessionData = storage?.getItem(localCacheName);
+                    if (!sessionData)
+                        return null;
+                    try {
+                        const parsed = JSON.parse(sessionData);
+                        if (parsed && typeof parsed === "object" && Object.keys(parsed).length === 0)
+                            return null;
+                        return parsed;
+                    }
+                    catch {
+                        return null;
+                    }
+                },
+            };
+        },
+        fetchPlugins: [
+            {
+                id: "convex",
+                name: "Convex",
+                hooks: {
+                    async onSuccess(context) {
+                        if (!storage) {
+                            return;
+                        }
+                        const setCookie = context.response.headers.get("set-better-auth-cookie");
+                        if (setCookie) {
+                            const prevCookie = storage.getItem(cookieName);
+                            const toSetCookie = getSetCookie(setCookie || "", prevCookie ?? undefined);
+                            await storage.setItem(cookieName, toSetCookie);
+                            // Only notify on session cookie set
+                            if (setCookie.includes(".session_token=")) {
+                                store?.notify("$sessionSignal");
+                            }
+                        }
+                        if (context.request.url.toString().includes("/get-session") &&
+                            !opts?.disableCache) {
+                            const data = context.data;
+                            storage.setItem(localCacheName, JSON.stringify(data));
+                            if (data === null) {
+                                storage.setItem(cookieName, "{}");
+                            }
+                        }
+                    },
+                },
+                async init(url, options) {
+                    if (!storage) {
+                        return {
+                            url,
+                            options: options,
+                        };
+                    }
+                    options = options || {};
+                    const storedCookie = storage.getItem(cookieName);
+                    const cookie = getCookie(storedCookie || "{}");
+                    options.credentials = "omit";
+                    options.headers = {
+                        ...options.headers,
+                        "Better-Auth-Cookie": cookie,
+                    };
+                    if (url.includes("/sign-out")) {
+                        await storage.setItem(cookieName, "{}");
+                        store?.atoms.session?.set({
+                            data: null,
+                            error: null,
+                            isPending: false,
+                        });
+                        storage.setItem(localCacheName, "{}");
+                    }
+                    return {
+                        url,
+                        options: options,
+                    };
+                },
+            },
+        ],
+    };
+};
+//# sourceMappingURL=client.js.map

package/dist/plugins/cross-domain/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/plugins/cross-domain/client.ts"],"names":[],"mappings":"AAeA,MAAM,UAAU,oBAAoB,CAClC,MAAc;IAEd,MAAM,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;IACtD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QACzB,MAAM,CAAC,SAAS,EAAE,GAAG,UAAU,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE3C,MAAM,SAAS,GAAqB,EAAE,KAAK,EAAE,CAAC;QAE9C,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAC1B,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC9C,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAa,CAAC,GAAG,SAAS,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,OAAO,SAAS,CAAC;AACnB,CAAC;AAOD,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,UAAmB;IAC9D,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,WAAW,GAAiC,EAAE,CAAC;IACnD,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,SAAS;YACvB,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC,CAAC,MAAM;gBACN,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;gBAC9C,CAAC,CAAC,IAAI,CAAC;QACX,WAAW,CAAC,GAAG,CAAC,GAAG;YACjB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;YACtB,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;SAChD,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAChD,WAAW,GAAG;gBACZ,GAAG,gBAAgB;gBACnB,GAAG,WAAW;aACf,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,EAAE;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,IAAI,MAAM,GAAG,EAAkC,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAiC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QACjE,IAAI,KAAK,CAAC,OAAO,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAC1D,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,GAAG,GAAG,KAAK,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;IACzC,CAAC,EAAE,EAAE,CAAC,CAAC;IACP,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,OAOI,EAAE,EACN,EAAE;IACF,IAAI,KAAK,GAAuB,IAAI,CAAC;IACrC,MAAM,UAAU,GAAG,GAAG,IAAI,EAAE,aAAa,IAAI,aAAa,SAAS,CAAC;IACpE,MAAM,cAAc,GAAG,GAAG,IAAI,EAAE,aAAa,IAAI,aAAa,eAAe,CAAC;IAC9E,MAAM,OAAO,GACX,IAAI,EAAE,OAAO,IAAI,CAAC,OAAO,YAAY,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEpF,OAAO;QACL,EAAE,EAAE,cAAc;QAClB,kBAAkB,EAAE,EAAoC;QACxD,UAAU,CAAC,CAAC,EAAE,MAAM;YAClB,KAAK,GAAG,MAAM,CAAC;YACf,OAAO;gBACL;;;;;;;;;;;;;;mBAcG;gBACH,SAAS,EAAE,GAAG,EAAE;oBACd,MAAM,MAAM,GAAG,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;oBAC5C,OAAO,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;gBACnC,CAAC;gBACD;;;;;;;;;;mBAUG;gBACH,aAAa,EAAE,GAAG,EAAE;oBAClB,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAClC,CAAC;gBACD;;;;;;;mBAOG;gBACH,cAAc,EAAE,GAAmC,EAAE;oBACnD,MAAM,WAAW,GAAG,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;oBACrD,IAAI,CAAC,WAAW;wBAAE,OAAO,IAAI,CAAC;oBAC9B,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;wBACvC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;4BAAE,OAAO,IAAI,CAAC;wBAC1F,OAAO,MAAM,CAAC;oBAChB,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;aACF,CAAC;QACJ,CAAC;QACD,YAAY,EAAE;YACZ;gBACE,EAAE,EAAE,QAAQ;gBACZ,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE;oBACL,KAAK,CAAC,SAAS,CAAC,OAAO;wBACrB,IAAI,CAAC,OAAO,EAAE,CAAC;4BACb,OAAO;wBACT,CAAC;wBACD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAC5C,wBAAwB,CACzB,CAAC;wBACF,IAAI,SAAS,EAAE,CAAC;4BACd,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;4BAC/C,MAAM,WAAW,GAAG,YAAY,CAC9B,SAAS,IAAI,EAAE,EACf,UAAU,IAAI,SAAS,CACxB,CAAC;4BACF,MAAM,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;4BAC/C,oCAAoC;4BACpC,IAAI,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gCAC1C,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;4BAClC,CAAC;wBACH,CAAC;wBAED,IACE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;4BACvD,CAAC,IAAI,EAAE,YAAY,EACnB,CAAC;4BACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;4BAC1B,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;4BACtD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gCAClB,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;4BACpC,CAAC;wBACH,CAAC;oBACH,CAAC;iBACF;gBACD,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO;oBACrB,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,OAAO;4BACL,GAAG;4BACH,OAAO,EAAE,OAA4B;yBACtC,CAAC;oBACJ,CAAC;oBACD,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;oBACxB,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;oBACjD,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC;oBAC/C,OAAO,CAAC,WAAW,GAAG,MAAM,CAAC;oBAC7B,OAAO,CAAC,OAAO,GAAG;wBAChB,GAAG,OAAO,CAAC,OAAO;wBAClB,oBAAoB,EAAE,MAAM;qBAC7B,CAAC;oBACF,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;wBAC9B,MAAM,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;wBACxC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC;4BACxB,IAAI,EAAE,IAAI;4BACV,KAAK,EAAE,IAAI;4BACX,SAAS,EAAE,KAAK;yBACjB,CAAC,CAAC;wBACH,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;oBACxC,CAAC;oBACD,OAAO;wBACL,GAAG;wBACH,OAAO,EAAE,OAA4B;qBACtC,CAAC;gBACJ,CAAC;aACF;SACF;KAC+B,CAAC;AACrC,CAAC,CAAC"}

package/dist/plugins/cross-domain/index.d.ts

@@ -0,0 +1,51 @@
+import { z } from "zod";
+export declare const crossDomain: ({ siteUrl }: {
+    siteUrl: string;
+}) => {
+    id: "cross-domain";
+    init(): {
+        options: {
+            trustedOrigins: string[];
+        };
+        context: {
+            oauthConfig: {
+                storeStateStrategy: "database";
+                skipStateCookieCheck: true;
+            };
+        };
+    };
+    hooks: {
+        before: ({
+            matcher(ctx: import("better-auth").HookEndpointContext): boolean;
+            handler: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+                context: {
+                    headers: Headers;
+                };
+            } | undefined>;
+        } | {
+            matcher: (ctx: import("better-auth").HookEndpointContext) => boolean;
+            handler: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+                context: import("better-call").MiddlewareContext<import("better-call").MiddlewareOptions, import("better-auth").AuthContext<import("better-auth").BetterAuthOptions> & {
+                    returned?: unknown | undefined;
+                    responseHeaders?: Headers | undefined;
+                }>;
+            }>;
+        })[];
+        after: {
+            matcher(ctx: import("better-auth").HookEndpointContext): boolean;
+            handler: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>;
+        }[];
+    };
+    endpoints: {
+        verifyOneTimeToken: import("better-call").StrictEndpoint<"/cross-domain/one-time-token/verify", {
+            method: "POST";
+            body: z.ZodObject<{
+                token: z.ZodString;
+            }, z.core.$strip>;
+        }, {
+            session: import("better-auth").Session & Record<string, any>;
+            user: import("better-auth").User & Record<string, any>;
+        }>;
+    };
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/plugins/cross-domain/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/plugins/cross-domain/index.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,WAAW,GAAI,aAAa;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4L3D,CAAC"}

package/dist/plugins/cross-domain/index.js

@@ -0,0 +1,173 @@
+import { setSessionCookie } from "better-auth/cookies";
+import { generateRandomString } from "better-auth/crypto";
+import { createAuthEndpoint, createAuthMiddleware, oneTimeToken as oneTimeTokenPlugin, } from "better-auth/plugins";
+import { z } from "zod";
+export const crossDomain = ({ siteUrl }) => {
+    const oneTimeToken = oneTimeTokenPlugin();
+    const rewriteCallbackURL = (callbackURL) => {
+        if (callbackURL && !callbackURL.startsWith("/")) {
+            return callbackURL;
+        }
+        const relativeCallbackURL = callbackURL || "/";
+        return new URL(relativeCallbackURL, siteUrl).toString();
+    };
+    const isExpoNative = (ctx) => {
+        return ctx.headers?.has("expo-origin");
+    };
+    return {
+        id: "cross-domain",
+        // TODO: remove this in the next minor release, it doesn't
+        // actually affect ctx.trustedOrigins. cors allowedOrigins
+        // is using it, via options.trustedOrigins, though, so it's
+        // a breaking change.
+        init() {
+            return {
+                options: {
+                    trustedOrigins: [siteUrl],
+                },
+                context: {
+                    oauthConfig: {
+                        storeStateStrategy: "database",
+                        // We could fake the cookie by sending a header, but it would need
+                        // to be set on a 302 redirect from the identity provider, and we
+                        // don't have a way to do that. This only means we can't stop an
+                        // oauth flow that started in one browser from continuing in
+                        // another. We still verify the state token from the query string
+                        // against the database.
+                        skipStateCookieCheck: true,
+                    },
+                },
+            };
+        },
+        hooks: {
+            before: [
+                {
+                    matcher(ctx) {
+                        return (Boolean(ctx.request?.headers.get("better-auth-cookie") ||
+                            ctx.headers?.get("better-auth-cookie")) && !isExpoNative(ctx));
+                    },
+                    handler: createAuthMiddleware(async (ctx) => {
+                        const existingHeaders = (ctx.request?.headers ||
+                            ctx.headers);
+                        const headers = new Headers({
+                            ...Object.fromEntries(existingHeaders?.entries()),
+                        });
+                        // Skip if the request has an authorization header
+                        if (headers.get("authorization")) {
+                            return;
+                        }
+                        const cookie = headers.get("better-auth-cookie");
+                        if (!cookie) {
+                            return;
+                        }
+                        headers.append("cookie", cookie);
+                        return {
+                            context: {
+                                headers,
+                            },
+                        };
+                    }),
+                },
+                {
+                    matcher: (ctx) => {
+                        return (ctx.method === "GET" &&
+                            ctx.path.startsWith("/verify-email") &&
+                            !isExpoNative(ctx));
+                    },
+                    handler: createAuthMiddleware(async (ctx) => {
+                        if (ctx.query?.callbackURL) {
+                            ctx.query.callbackURL = rewriteCallbackURL(ctx.query.callbackURL);
+                        }
+                        return { context: ctx };
+                    }),
+                },
+                {
+                    matcher: (ctx) => {
+                        return (((ctx.method === "POST" && ctx.path.startsWith("/link-social")) ||
+                            ctx.path.startsWith("/send-verification-email") ||
+                            ctx.path.startsWith("/sign-in/email") ||
+                            ctx.path.startsWith("/sign-in/social") ||
+                            ctx.path.startsWith("/sign-in/magic-link") ||
+                            ctx.path.startsWith("/delete-user") ||
+                            ctx.path.startsWith("/change-email")) &&
+                            !isExpoNative(ctx));
+                    },
+                    handler: createAuthMiddleware(async (ctx) => {
+                        const isSignIn = ctx.path.startsWith("/sign-in");
+                        ctx.body.callbackURL = rewriteCallbackURL(ctx.body.callbackURL);
+                        if (isSignIn && ctx.body.newUserCallbackURL) {
+                            ctx.body.newUserCallbackURL = rewriteCallbackURL(ctx.body.newUserCallbackURL);
+                        }
+                        if (isSignIn && ctx.body.errorCallbackURL) {
+                            ctx.body.errorCallbackURL = rewriteCallbackURL(ctx.body.errorCallbackURL);
+                        }
+                        return { context: ctx };
+                    }),
+                },
+            ],
+            after: [
+                {
+                    matcher(ctx) {
+                        return !isExpoNative(ctx);
+                    },
+                    handler: createAuthMiddleware(async (ctx) => {
+                        const setCookie = ctx.context.responseHeaders?.get("set-cookie");
+                        if (!setCookie) {
+                            return;
+                        }
+                        ctx.context.responseHeaders?.delete("set-cookie");
+                        ctx.setHeader("Set-Better-Auth-Cookie", setCookie);
+                    }),
+                },
+                {
+                    matcher: (ctx) => {
+                        return ((ctx.path?.startsWith("/callback") ||
+                            ctx.path?.startsWith("/oauth2/callback") ||
+                            ctx.path?.startsWith("/magic-link/verify")) &&
+                            !isExpoNative(ctx));
+                    },
+                    handler: createAuthMiddleware(async (ctx) => {
+                        // Mostly copied from the one-time-token plugin
+                        const session = ctx.context.newSession;
+                        if (!session) {
+                            ctx.context.logger.error("No session found");
+                            return;
+                        }
+                        const token = generateRandomString(32);
+                        const expiresAt = new Date(Date.now() + 3 * 60 * 1000);
+                        await ctx.context.internalAdapter.createVerificationValue({
+                            value: session.session.token,
+                            identifier: `one-time-token:${token}`,
+                            expiresAt,
+                        });
+                        const redirectTo = ctx.context.responseHeaders?.get("location");
+                        if (!redirectTo) {
+                            ctx.context.logger.error("No redirect to found");
+                            return;
+                        }
+                        const url = new URL(redirectTo);
+                        url.searchParams.set("ott", token);
+                        throw ctx.redirect(url.toString());
+                    }),
+                },
+            ],
+        },
+        endpoints: {
+            verifyOneTimeToken: createAuthEndpoint("/cross-domain/one-time-token/verify", {
+                method: "POST",
+                body: z.object({
+                    token: z.string(),
+                }),
+            }, async (ctx) => {
+                const response = await oneTimeToken.endpoints.verifyOneTimeToken({
+                    ...ctx,
+                    returnHeaders: false,
+                    returnStatus: false,
+                });
+                await setSessionCookie(ctx, response);
+                return response;
+            }),
+        },
+    };
+};
+//# sourceMappingURL=index.js.map

package/dist/plugins/cross-domain/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/plugins/cross-domain/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,IAAI,kBAAkB,GACnC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,EAAE,OAAO,EAAuB,EAAE,EAAE;IAC9D,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAC;IAE1C,MAAM,kBAAkB,GAAG,CAAC,WAAoB,EAAE,EAAE;QAClD,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,MAAM,mBAAmB,GAAG,WAAW,IAAI,GAAG,CAAC;QAC/C,OAAO,IAAI,GAAG,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1D,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,GAA0B,EAAE,EAAE;QAClD,OAAO,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;IACzC,CAAC,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,cAAc;QAClB,0DAA0D;QAC1D,0DAA0D;QAC1D,2DAA2D;QAC3D,qBAAqB;QACrB,IAAI;YACF,OAAO;gBACL,OAAO,EAAE;oBACP,cAAc,EAAE,CAAC,OAAO,CAAC;iBAC1B;gBACD,OAAO,EAAE;oBACP,WAAW,EAAE;wBACX,kBAAkB,EAAE,UAAU;wBAC9B,kEAAkE;wBAClE,iEAAiE;wBACjE,gEAAgE;wBAChE,4DAA4D;wBAC5D,iEAAiE;wBACjE,wBAAwB;wBACxB,oBAAoB,EAAE,IAAI;qBAC3B;iBACF;aACF,CAAC;QACJ,CAAC;QACD,KAAK,EAAE;YACL,MAAM,EAAE;gBACN;oBACE,OAAO,CAAC,GAAG;wBACT,OAAO,CACL,OAAO,CACL,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;4BAC5C,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,oBAAoB,CAAC,CACzC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CACxB,CAAC;oBACJ,CAAC;oBACD,OAAO,EAAE,oBAAoB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;wBAC1C,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO;4BAC3C,GAAG,CAAC,OAAO,CAAY,CAAC;wBAC1B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;4BAC1B,GAAG,MAAM,CAAC,WAAW,CAAC,eAAe,EAAE,OAAO,EAAE,CAAC;yBAClD,CAAC,CAAC;wBACH,kDAAkD;wBAClD,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;4BACjC,OAAO;wBACT,CAAC;wBACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;wBACjD,IAAI,CAAC,MAAM,EAAE,CAAC;4BACZ,OAAO;wBACT,CAAC;wBACD,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;wBACjC,OAAO;4BACL,OAAO,EAAE;gCACP,OAAO;6BACR;yBACF,CAAC;oBACJ,CAAC,CAAC;iBACH;gBACD;oBACE,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;wBACf,OAAO,CACL,GAAG,CAAC,MAAM,KAAK,KAAK;4BACpB,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;4BACpC,CAAC,YAAY,CAAC,GAAG,CAAC,CACnB,CAAC;oBACJ,CAAC;oBACD,OAAO,EAAE,oBAAoB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;wBAC1C,IAAI,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC;4BAC3B,GAAG,CAAC,KAAK,CAAC,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;wBACpE,CAAC;wBACD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;oBAC1B,CAAC,CAAC;iBACH;gBACD;oBACE,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;wBACf,OAAO,CACL,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;4BAC7D,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC;4BAC/C,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;4BACrC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC;4BACtC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC;4BAC1C,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;4BACnC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;4BACvC,CAAC,YAAY,CAAC,GAAG,CAAC,CACnB,CAAC;oBACJ,CAAC;oBACD,OAAO,EAAE,oBAAoB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;wBAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;wBACjD,GAAG,CAAC,IAAI,CAAC,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;wBAChE,IAAI,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;4BAC5C,GAAG,CAAC,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAC9C,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAC5B,CAAC;wBACJ,CAAC;wBACD,IAAI,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;4BAC1C,GAAG,CAAC,IAAI,CAAC,gBAAgB,GAAG,kBAAkB,CAC5C,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAC1B,CAAC;wBACJ,CAAC;wBACD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;oBAC1B,CAAC,CAAC;iBACH;aACF;YACD,KAAK,EAAE;gBACL;oBACE,OAAO,CAAC,GAAG;wBACT,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;oBAC5B,CAAC;oBACD,OAAO,EAAE,oBAAoB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;wBAC1C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;wBACjE,IAAI,CAAC,SAAS,EAAE,CAAC;4BACf,OAAO;wBACT,CAAC;wBACD,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;wBAClD,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;oBACrD,CAAC,CAAC;iBACH;gBACD;oBACE,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;wBACf,OAAO,CACL,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC;4BAChC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,kBAAkB,CAAC;4BACxC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,oBAAoB,CAAC,CAAC;4BAC7C,CAAC,YAAY,CAAC,GAAG,CAAC,CACnB,CAAC;oBACJ,CAAC;oBACD,OAAO,EAAE,oBAAoB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;wBAC1C,+CAA+C;wBAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;wBACvC,IAAI,CAAC,OAAO,EAAE,CAAC;4BACb,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;4BAC7C,OAAO;wBACT,CAAC;wBACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;wBACvC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;wBACvD,MAAM,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,uBAAuB,CAAC;4BACxD,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK;4BAC5B,UAAU,EAAE,kBAAkB,KAAK,EAAE;4BACrC,SAAS;yBACV,CAAC,CAAC;wBACH,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;wBAChE,IAAI,CAAC,UAAU,EAAE,CAAC;4BAChB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;4BACjD,OAAO;wBACT,CAAC;wBACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;wBAChC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;wBACnC,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACrC,CAAC,CAAC;iBACH;aACF;SACF;QACD,SAAS,EAAE;YACT,kBAAkB,EAAE,kBAAkB,CACpC,qCAAqC,EACrC;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;oBACb,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;iBAClB,CAAC;aACH,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;gBACZ,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,kBAAkB,CAAC;oBAC/D,GAAG,GAAG;oBACN,aAAa,EAAE,KAAK;oBACpB,YAAY,EAAE,KAAK;iBACpB,CAAC,CAAC;gBACH,MAAM,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACtC,OAAO,QAAQ,CAAC;YAClB,CAAC,CACF;SACF;KACyB,CAAC;AAC/B,CAAC,CAAC"}

package/dist/plugins/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./convex/index.js";
+export * from "./cross-domain/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/plugins/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/plugins/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC"}

package/dist/plugins/index.js

@@ -0,0 +1,3 @@
+export * from "./convex/index.js";
+export * from "./cross-domain/index.js";
+//# sourceMappingURL=index.js.map

package/dist/plugins/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/plugins/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC"}

package/dist/react/index.d.ts

@@ -0,0 +1,80 @@
+import type { PropsWithChildren, ReactNode } from "react";
+import type { AuthTokenFetcher } from "convex/browser";
+import type { FunctionReference } from "convex/server";
+import type { BetterAuthClientPlugin } from "better-auth";
+import type { createAuthClient } from "better-auth/react";
+import type { convexClient, crossDomainClient } from "../client/plugins/index.js";
+import type { EmptyObject } from "convex-helpers";
+type CrossDomainClient = ReturnType<typeof crossDomainClient>;
+type ConvexClient = ReturnType<typeof convexClient>;
+type PluginsWithCrossDomain = (CrossDomainClient | ConvexClient | BetterAuthClientPlugin)[];
+type PluginsWithoutCrossDomain = (ConvexClient | BetterAuthClientPlugin)[];
+type AuthClientWithPlugins<Plugins extends PluginsWithCrossDomain | PluginsWithoutCrossDomain> = ReturnType<typeof createAuthClient<BetterAuthClientPlugin & {
+    plugins: Plugins;
+}>>;
+export type AuthClient = AuthClientWithPlugins<PluginsWithCrossDomain> | AuthClientWithPlugins<PluginsWithoutCrossDomain>;
+type IConvexReactClient = {
+    setAuth(fetchToken: AuthTokenFetcher): void;
+    clearAuth(): void;
+};
+/**
+ * A wrapper React component which provides a {@link react.ConvexReactClient}
+ * authenticated with Better Auth.
+ *
+ * @public
+ */
+export declare function ConvexBetterAuthProvider({ children, client, authClient, initialToken, }: {
+    children: ReactNode;
+    client: IConvexReactClient;
+    authClient: AuthClient;
+    initialToken?: string | null;
+}): import("react/jsx-runtime").JSX.Element;
+/**
+ * _Experimental_
+ *
+ * A wrapper React component which provides error handling for auth related errors.
+ * This is typically used to redirect the user to the login page when they are
+ * unauthenticated, and does so reactively based on the getAuthUserFn query.
+ *
+ * @example
+ * ```ts
+ * // convex/auth.ts
+ * export const { getAuthUser } = authComponent.clientApi();
+ *
+ * // auth-client.tsx
+ * import { AuthBoundary } from "@convex-dev/react";
+ * import { api } from '../../convex/_generated/api'
+ * import { isAuthError } from '../lib/utils'
+ *
+ * export const ClientAuthBoundary = ({ children }: PropsWithChildren) => {
+ *   return (
+ *     <AuthBoundary
+ *       onUnauth={() => redirect("/sign-in")}
+ *       authClient={authClient}
+ *       getAuthUserFn={api.auth.getAuthUser}
+ *       isAuthError={isAuthError}
+ * >
+ *   <>{children}</>
+ * </AuthBoundary>
+ * )
+ * ```
+ * @param props.children - Children to render.
+ * @param props.onUnauth - Function to call when the user is
+ * unauthenticated. Typically a redirect to the login page.
+ * @param props.authClient - Better Auth authClient to use.
+ * @param props.renderFallback - Fallback component to render when the user is
+ * unauthenticated. Defaults to null. Generally not rendered as error handling
+ * is typically a redirect.
+ * @param props.getAuthUserFn - Reference to a Convex query that returns user.
+ * The component provides a query for this via `export const { getAuthUser } = authComponent.clientApi()`.
+ * @param props.isAuthError - Function to check if the error is auth related.
+ */
+export declare const AuthBoundary: ({ children, onUnauth, authClient, renderFallback, getAuthUserFn, isAuthError, }: PropsWithChildren<{
+    onUnauth: () => void | Promise<void>;
+    authClient: AuthClient;
+    renderFallback?: () => React.ReactNode;
+    getAuthUserFn: FunctionReference<"query", "public", EmptyObject>;
+    isAuthError: (error: unknown) => boolean;
+}>) => import("react/jsx-runtime").JSX.Element;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/react/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/react/index.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAE1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAOvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EACV,YAAY,EACZ,iBAAiB,EAClB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElD,KAAK,iBAAiB,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC9D,KAAK,YAAY,GAAG,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;AACpD,KAAK,sBAAsB,GAAG,CAC1B,iBAAiB,GACjB,YAAY,GACZ,sBAAsB,CACzB,EAAE,CAAC;AACJ,KAAK,yBAAyB,GAAG,CAAC,YAAY,GAAG,sBAAsB,CAAC,EAAE,CAAC;AAC3E,KAAK,qBAAqB,CACxB,OAAO,SAAS,sBAAsB,GAAG,yBAAyB,IAChE,UAAU,CACZ,OAAO,gBAAgB,CACrB,sBAAsB,GAAG;IACvB,OAAO,EAAE,OAAO,CAAC;CAClB,CACF,CACF,CAAC;AACF,MAAM,MAAM,UAAU,GAClB,qBAAqB,CAAC,sBAAsB,CAAC,GAC7C,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;AAIrD,KAAK,kBAAkB,GAAG;IACxB,OAAO,CAAC,UAAU,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC5C,SAAS,IAAI,IAAI,CAAC;CACnB,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,QAAQ,EACR,MAAM,EACN,UAAU,EACV,YAAY,GACb,EAAE;IACD,QAAQ,EAAE,SAAS,CAAC;IACpB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,UAAU,EAAE,UAAU,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,2CAkCA;AA6GD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,eAAO,MAAM,YAAY,GAAI,iFAwB1B,iBAAiB,CAAC;IACnB,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,UAAU,EAAE,UAAU,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,KAAK,CAAC,SAAS,CAAC;IACvC,aAAa,EAAE,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IACjE,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CAC1C,CAAC,4CA4BD,CAAC"}