@nuxtjs/better-auth 0.3.10 → 0.3.11

package/dist/module.d.mts

@@ -30,24 +30,27 @@ interface BetterAuthDatabaseProviderDefinition {
     isEnabled?: (ctx: BetterAuthDatabaseProviderEnabledContext) => boolean;
     priority?: number;
 }
+interface BetterAuthNuxtHooks {
+    /** Register absolute plugin module paths during module setup. Sources are additive and are not deduplicated. */
+    'better-auth:plugins:extend': (sources: BetterAuthPluginSources) => void | Promise<void>;
+    /**
+     * Add plugin schemas to generated Better Auth database tables.
+     * This build-time hook does not install plugins in the runtime auth instance.
+     * @param config - Plugins to include during schema generation
+     * @param config.plugins - Better Auth plugins whose schemas should be generated
+     */
+    'better-auth:config:extend': (config: {
+        plugins?: BetterAuthPlugin[];
+    }) => void | Promise<void>;
+    /** Register or override Better Auth database providers. */
+    'better-auth:database:providers': (providers: Record<string, BetterAuthDatabaseProviderDefinition>) => void | Promise<void>;
+}
 declare module '@nuxt/schema' {
-    interface NuxtHooks {
-        /** Register absolute plugin module paths during module setup. Sources are additive and are not deduplicated. */
-        'better-auth:plugins:extend': (sources: BetterAuthPluginSources) => void | Promise<void>;
-        /**
-         * Add plugin schemas to generated Better Auth database tables.
-         * This build-time hook does not install plugins in the runtime auth instance.
-         * @param config - Plugins to include during schema generation
-         * @param config.plugins - Better Auth plugins whose schemas should be generated
-         */
-        'better-auth:config:extend': (config: {
-            plugins?: BetterAuthPlugin[];
-        }) => void | Promise<void>;
-        /**
-         * Register or override Better Auth database providers.
-         * Providers are auto-selected via `isEnabled` + `priority`.
-         */
-        'better-auth:database:providers': (providers: Record<string, BetterAuthDatabaseProviderDefinition>) => void | Promise<void>;
+    interface NuxtHooks extends BetterAuthNuxtHooks {
+    }
+}
+declare module 'nuxt/schema' {
+    interface NuxtHooks extends BetterAuthNuxtHooks {
     }
 }
 

package/dist/module.json

@@ -1,6 +1,6 @@
 {
   "name": "@nuxtjs/better-auth",
-  "version": "0.3.10",
+  "version": "0.3.11",
   "configKey": "auth",
   "compatibility": {
     "nuxt": ">=4.0.0"

package/dist/module.mjs

@@ -13,7 +13,7 @@ import { isCI, isTest } from 'std-env';
 import { isInternalAssetPath } from '../dist/runtime/internal/auth-route-rules.js';
 export { defineClientAuth, defineServerAuth } from '../dist/runtime/config.js';
 
-const version = "0.3.10";
+const version = "0.3.11";
 
 const CONFIG_EXTENSIONS = [".ts", ".js", ".mts", ".cts", ".mjs", ".cjs"];
 const CONFIG_EXTENSION_RE = /\.[cm]?[jt]s$/;
@@ -1573,6 +1573,8 @@ declare module '#nuxt-better-auth' {
     emailVerified: boolean
     name: string
     image?: string | null
+    /** Whether the user has enabled two-factor authentication. */
+    twoFactorEnabled?: boolean
   }
 
   export interface AuthSession {

package/dist/runtime/app/composables/useUserSession.js

@@ -2,7 +2,7 @@ import { computed, navigateTo, nextTick, useNuxtApp, useRequestURL, useRuntimeCo
 import { normalizeAuthActionError } from "../internal/auth-action-error.js";
 import { resolvePostAuthSuccessRedirect, withFallbackSocialCallbackURL } from "../internal/redirect-helpers.js";
 import { fetchSessionClient, fetchSessionServer, isExpectedSignedOutSessionError, stripToken } from "../internal/session-fetch.js";
-import { isRecord } from "../internal/utils.js";
+import { isRecord, setIfChanged } from "../internal/utils.js";
 import { createVueSafeAuthFacade, isAuthProxyProbeKey } from "../internal/vue-safe-auth-proxy.js";
 import { wrapAuthMethod } from "../internal/wrap-auth-method.js";
 import { getAuthRuntimeFlags, useRawAuthClient } from "./useAuthClient.js";
@@ -152,8 +152,8 @@ export function useUserSession() {
         if (newSession?.data?.session && newSession?.data?.user) {
           sessionExpiredRedirecting = false;
           hydrationSessionWasActive = false;
-          session.value = stripToken(newSession.data.session);
-          user.value = newSession.data.user;
+          setIfChanged(session, stripToken(newSession.data.session));
+          setIfChanged(user, newSession.data.user);
         } else if (!newSession?.isPending && !newSession?.isRefetching) {
           const isHydrationEmptySnapshot = nuxtApp.isHydrating && nuxtApp.payload.serverRendered && Boolean(session.value && user.value) && !newSession?.data?.session && !newSession?.data?.user;
           if (isHydrationEmptySnapshot) {

package/dist/runtime/app/internal/session-fetch.js

@@ -1,6 +1,7 @@
 import { parseJSON } from "better-auth/client";
 import { useRequestFetch, useRequestHeaders } from "#imports";
 import { normalizeAuthActionError } from "./auth-action-error.js";
+import { setIfChanged } from "./utils.js";
 export function stripToken(session) {
   const { token: _, ...safe } = session;
   return safe;
@@ -35,8 +36,8 @@ export async function fetchSessionServer(session, user, authReady, options = {})
       ...options.force ? { query: { disableCookieCache: true } } : {}
     });
     if (data?.session && data?.user) {
-      session.value = stripToken(data.session);
-      user.value = data.user;
+      setIfChanged(session, stripToken(data.session));
+      setIfChanged(user, data.user);
     } else {
       session.value = null;
       user.value = null;
@@ -60,8 +61,8 @@ export async function fetchSessionClient(client, session, user, authReady, optio
     }
     const data = result.data;
     if (data?.session && data?.user) {
-      session.value = stripToken(data.session);
-      user.value = data.user;
+      setIfChanged(session, stripToken(data.session));
+      setIfChanged(user, data.user);
     } else {
       session.value = null;
       user.value = null;

package/dist/runtime/app/internal/utils.d.ts

@@ -1 +1,9 @@
 export declare function isRecord(value: unknown): value is Record<string, unknown>;
+/**
+ * Better Auth refetches the session on window focus and returns fresh objects even
+ * when nothing changed. Keeping the current object avoids retriggering every
+ * computed and watcher that depends on the session or user.
+ */
+export declare function setIfChanged<T>(target: {
+    value: T;
+}, value: T): void;

package/dist/runtime/app/internal/utils.js

@@ -1,3 +1,19 @@
 export function isRecord(value) {
   return Boolean(value && typeof value === "object");
 }
+function isSameValue(a, b) {
+  if (Object.is(a, b))
+    return true;
+  if (a instanceof Date || b instanceof Date)
+    return a instanceof Date && b instanceof Date && a.getTime() === b.getTime();
+  if (Array.isArray(a) || Array.isArray(b))
+    return Array.isArray(a) && Array.isArray(b) && a.length === b.length && a.every((item, index) => isSameValue(item, b[index]));
+  if (!isRecord(a) || !isRecord(b))
+    return false;
+  const keys = Object.keys(a);
+  return keys.length === Object.keys(b).length && keys.every((key) => Object.hasOwn(b, key) && isSameValue(a[key], b[key]));
+}
+export function setIfChanged(target, value) {
+  if (!isSameValue(target.value, value))
+    target.value = value;
+}

package/dist/runtime/app/middleware/auth.global.js

@@ -2,13 +2,15 @@ import { defu } from "defu";
 import { createRouter, toRouteMatcher } from "radix3";
 import { parsePath, parseQuery } from "ufo";
 import { createError, defineNuxtRouteMiddleware, getRouteRules, navigateTo, useNuxtApp, useRequestHeaders, useRuntimeConfig } from "#imports";
-import { shouldSkipAuthRouteRules } from "../../internal/auth-route-rules.js";
+import { normalizeAuthRoutePath, shouldSkipAuthRouteRules } from "../../internal/auth-route-rules.js";
 import { matchesUser } from "../../utils/match-user.js";
 import { useUserSession } from "../composables/useUserSession.js";
 let authRouteRulesPromise = null;
 let routeRulesMatcherPromise = null;
 export default defineNuxtRouteMiddleware(async (to) => {
-  if (shouldSkipAuthRouteRules(to.path))
+  const runtimeConfig = useRuntimeConfig();
+  const path = normalizeAuthRoutePath(to.path, runtimeConfig.app?.baseURL);
+  if (shouldSkipAuthRouteRules(to.path) || shouldSkipAuthRouteRules(path))
     return;
   if (to.matched?.length === 0)
     return;
@@ -30,7 +32,7 @@ export default defineNuxtRouteMiddleware(async (to) => {
   const auth = to.meta.auth;
   if (auth === void 0 || auth === false)
     return;
-  const config = useRuntimeConfig().public.auth;
+  const config = runtimeConfig.public.auth;
   if (import.meta.server && config?.clientOnly)
     return;
   const { fetchSession, user, loggedIn } = useUserSession();

package/dist/runtime/config.d.ts

@@ -12,7 +12,7 @@ export interface ClientAuthContext {
 export type ServerAuthConfig = Omit<BetterAuthOptions, 'secret' | 'baseURL' | 'basePath'> & {
     /** The module registers its server handler at /api/auth. */
     basePath?: '/api/auth';
-    plugins?: readonly BetterAuthPlugin[];
+    plugins?: readonly unknown[];
 };
 export type ClientAuthConfig = Omit<BetterAuthClientOptions, 'baseURL'> & {
     baseURL?: string;
@@ -108,8 +108,11 @@ export interface AuthRuntimeConfig {
 export interface AuthPrivateRuntimeConfig {
     hubSecondaryStorage: boolean | 'custom';
 }
-export declare function defineServerAuth<const R>(config: (ctx: ServerAuthContext) => R & ServerAuthConfig): (ctx: ServerAuthContext) => R;
-export declare function defineServerAuth<const R>(config: R & ServerAuthConfig & (R extends (...args: never[]) => unknown ? never : unknown)): (ctx: ServerAuthContext) => R;
+export declare function defineServerAuth<const R extends ServerAuthConfig>(config: (ctx: ServerAuthContext) => R): (ctx: ServerAuthContext) => R;
+export declare function defineServerAuth<const R>(config: (ctx: ServerAuthContext) => R & ServerAuthConfig & (R extends {
+    basePath: infer B;
+} ? B extends '/api/auth' ? unknown : never : unknown)): (ctx: ServerAuthContext) => R;
+export declare function defineServerAuth<const R extends ServerAuthConfig>(config: R & (R extends (...args: never[]) => unknown ? never : unknown)): (ctx: ServerAuthContext) => R;
 export declare function extendServerAuth<const R extends ServerAuthConfig, const P extends readonly BetterAuthPlugin[]>(createConfig: (ctx: ServerAuthContext) => R, plugins: P): (ctx: ServerAuthContext) => ExtendedServerAuthConfig<R, P>;
 export declare function defineClientAuth<T extends ClientAuthConfig>(config: T | ((ctx: ClientAuthContext) => T)): ClientAuthFactory<T>;
 export declare function extendClientAuth<T extends ClientAuthConfig, const P extends BetterAuthClientPlugin[]>(createClient: ClientAuthFactory<T>, plugins: P): ClientAuthFactory<ExtendedClientAuthConfig<T, P>>;

package/dist/runtime/internal/auth-route-rules.js

@@ -2,7 +2,9 @@ import { withoutBase } from "ufo";
 const internalAssetPaths = ["/_fonts", "/_ipx", "/_nuxt", "/api/_nuxt_icon"];
 export function isInternalAssetPath(path) {
   const pathname = path.split(/[?#]/, 1)[0] || "/";
-  return internalAssetPaths.some((prefix) => pathname === prefix || pathname.startsWith(`${prefix}/`));
+  return internalAssetPaths.some((prefix) => {
+    return pathname === prefix || pathname.startsWith(`${prefix}/`) || pathname.endsWith(prefix) || pathname.includes(`${prefix}/`);
+  });
 }
 const internalRouteRuleAuthPaths = /* @__PURE__ */ new Set([
   "/__better-auth-devtools",

package/dist/runtime/server/utils/auth.d.ts

@@ -9,13 +9,18 @@ type UserAuthConfig = AuthOptions & {
     trustedOrigins?: BetterAuthOptions['trustedOrigins'];
     secondaryStorage?: BetterAuthOptions['secondaryStorage'];
 };
-type ResolvedAuthOptions = Omit<UserAuthConfig, 'secret' | 'baseURL' | 'trustedOrigins' | 'database'> & {
+type ResolvedAuthOptions = Omit<UserAuthConfig, 'secret' | 'baseURL' | 'trustedOrigins' | 'database' | 'plugins'> & {
+    plugins?: BetterAuthOptions['plugins'];
     secret: string;
     baseURL: string;
     trustedOrigins?: BetterAuthOptions['trustedOrigins'];
     database?: BetterAuthOptions['database'];
 };
-type AuthInstance = ReturnType<typeof betterAuth<ResolvedAuthOptions>>;
+type AuthInstance = ReturnType<typeof betterAuth<ResolvedAuthOptions>> & {
+    api: ReturnType<typeof betterAuth<ResolvedAuthOptions>>['api'] & {
+        signInUsername?: (...args: unknown[]) => unknown;
+    };
+};
 /**
  * Returns the Better Auth instance like `serverAuth()`, after waiting for the auth secret that
  * Nuxt 4.6+ derives from `appSecret` (`NUXT_APP_SECRET`). Use it in code that can run before the

package/dist/runtime/server/utils/auth.js

@@ -274,6 +274,7 @@ export function serverAuth(event) {
   }
   const authOptions = {
     ...userConfig,
+    ...userConfig.plugins ? { plugins: [...userConfig.plugins] } : {},
     ...rateLimit ? { rateLimit } : {},
     ...database ? { database } : {},
     secret: betterAuthSecret,

package/dist/runtime/types/augment.d.ts

@@ -7,6 +7,8 @@ export interface AuthUser {
     emailVerified: boolean;
     name: string;
     image?: string | null;
+    /** Whether the user has enabled two-factor authentication. */
+    twoFactorEnabled?: boolean;
 }
 export interface AuthSession {
     id: string;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nuxtjs/better-auth",
   "type": "module",
-  "version": "0.3.10",
+  "version": "0.3.11",
   "description": "Nuxt module for Better Auth integration with NuxtHub, route protection, session management, and role-based access",
   "author": "onmax",
   "license": "MIT",
@@ -94,7 +94,7 @@
     "@libsql/client": "^0.18.0",
     "@libsql/linux-x64-gnu": "0.5.29",
     "@nuxt/devtools": "^3.4.1",
-    "@nuxt/fonts": "0.14.0",
+    "@nuxt/fonts": "1.0.1",
     "@nuxt/module-builder": "^1.0.3",
     "@nuxt/schema": "^4.6.0",
     "@nuxt/test-utils": "^4.3.3",
@@ -102,8 +102,8 @@
     "@pinia/nuxt": "^1.0.2",
     "@types/better-sqlite3": "^9.6.0",
     "@vue/test-utils": "^2.4.6",
-    "better-auth": "1.7.7",
-    "better-call": "1.4.0",
+    "better-auth": "1.7.10",
+    "better-call": "1.4.2",
     "better-sqlite3": "^13.0.0",
     "drizzle-kit": "^0.31.10",
     "drizzle-orm": "^0.45.2",
@@ -112,15 +112,15 @@
     "nitropack": "2.13.4",
     "nuxt": "^4.6.0",
     "pinia": "^4.0.3",
-    "pkg-pr-new": "0.0.88",
-    "playwright-core": "1.63.0",
+    "pkg-pr-new": "0.0.91",
+    "playwright-core": "1.64.1",
     "postgres": "^3.4.9",
     "typescript": "~5.9.3",
     "unstorage": "^1.17.5",
     "vitest": "^5.0.0",
-    "vue": "3.5.43",
+    "vue": "3.5.44",
     "vue-tsc": "^3.3.10",
-    "wrangler": "4.147.0",
+    "wrangler": "4.151.1",
     "yaml": "^2.9.0"
   },
   "scripts": {