@nuxtjs/better-auth 0.3.9 → 0.3.11

package/dist/module.d.mts

@@ -30,24 +30,27 @@ interface BetterAuthDatabaseProviderDefinition {
     isEnabled?: (ctx: BetterAuthDatabaseProviderEnabledContext) => boolean;
     priority?: number;
 }
+interface BetterAuthNuxtHooks {
+    /** Register absolute plugin module paths during module setup. Sources are additive and are not deduplicated. */
+    'better-auth:plugins:extend': (sources: BetterAuthPluginSources) => void | Promise<void>;
+    /**
+     * Add plugin schemas to generated Better Auth database tables.
+     * This build-time hook does not install plugins in the runtime auth instance.
+     * @param config - Plugins to include during schema generation
+     * @param config.plugins - Better Auth plugins whose schemas should be generated
+     */
+    'better-auth:config:extend': (config: {
+        plugins?: BetterAuthPlugin[];
+    }) => void | Promise<void>;
+    /** Register or override Better Auth database providers. */
+    'better-auth:database:providers': (providers: Record<string, BetterAuthDatabaseProviderDefinition>) => void | Promise<void>;
+}
 declare module '@nuxt/schema' {
-    interface NuxtHooks {
-        /** Register absolute plugin module paths during module setup. Sources are additive and are not deduplicated. */
-        'better-auth:plugins:extend': (sources: BetterAuthPluginSources) => void | Promise<void>;
-        /**
-         * Add plugin schemas to generated Better Auth database tables.
-         * This build-time hook does not install plugins in the runtime auth instance.
-         * @param config - Plugins to include during schema generation
-         * @param config.plugins - Better Auth plugins whose schemas should be generated
-         */
-        'better-auth:config:extend': (config: {
-            plugins?: BetterAuthPlugin[];
-        }) => void | Promise<void>;
-        /**
-         * Register or override Better Auth database providers.
-         * Providers are auto-selected via `isEnabled` + `priority`.
-         */
-        'better-auth:database:providers': (providers: Record<string, BetterAuthDatabaseProviderDefinition>) => void | Promise<void>;
+    interface NuxtHooks extends BetterAuthNuxtHooks {
+    }
+}
+declare module 'nuxt/schema' {
+    interface NuxtHooks extends BetterAuthNuxtHooks {
     }
 }
 

package/dist/module.json

@@ -1,6 +1,6 @@
 {
   "name": "@nuxtjs/better-auth",
-  "version": "0.3.9",
+  "version": "0.3.11",
   "configKey": "auth",
   "compatibility": {
     "nuxt": ">=4.0.0"

package/dist/module.mjs

@@ -1,6 +1,6 @@
 import { existsSync, readFileSync, statSync, writeFileSync } from 'node:fs';
 import { mkdir, writeFile } from 'node:fs/promises';
-import { getLayerDirectories, resolveServerVariant, hasNuxtCompatibility, updateTemplates, addServerImports, addServerHandler, addNitroPlugin, addImports, addPlugin, addComponentsDir, addRouteMiddleware, extendPages, addTemplate, hasNuxtModule, addTypeTemplate, defineNuxtModule, createResolver, getNitroVersion } from '@nuxt/kit';
+import { getLayerDirectories, resolveServerVariant, hasNuxtCompatibility, hasNuxtModuleCompatibility, updateTemplates, addServerImports, addServerHandler, addNitroPlugin, addImports, addPlugin, addComponentsDir, addRouteMiddleware, extendPages, addTemplate, hasNuxtModule, addTypeTemplate, defineNuxtModule, createResolver, getNitroVersion } from '@nuxt/kit';
 import { consola as consola$1 } from 'consola';
 import { defineDiagnostics, Diagnostic, formatDiagnostic } from 'nostics';
 import { isAbsolute, join, resolve, relative, dirname } from 'pathe';
@@ -13,7 +13,7 @@ import { isCI, isTest } from 'std-env';
 import { isInternalAssetPath } from '../dist/runtime/internal/auth-route-rules.js';
 export { defineClientAuth, defineServerAuth } from '../dist/runtime/config.js';
 
-const version = "0.3.9";
+const version = "0.3.11";
 
 const CONFIG_EXTENSIONS = [".ts", ".js", ".mts", ".cts", ".mjs", ".cjs"];
 const CONFIG_EXTENSION_RE = /\.[cm]?[jt]s$/;
@@ -152,6 +152,17 @@ function resolveAuthPluginSources(nuxt) {
   return resolved;
 }
 
+function exportedNames(declaration) {
+  const names = /* @__PURE__ */ new Set();
+  for (const [, specifiers] of declaration.matchAll(/\bexport\s+(?:type\s+)?\{([^}]*)\}/g)) {
+    for (const specifier of specifiers.split(",")) {
+      const name = specifier.trim().replace(/^type\s+/, "").split(/\s+as\s+/).pop()?.trim();
+      if (name)
+        names.add(name);
+    }
+  }
+  return names;
+}
 function selectNitro3RouteRulesTarget(nitroTypesDeclaration, resolveH3Rules) {
   if (/\binterface\s+NitroRouteConfig\b/.test(nitroTypesDeclaration)) {
     return {
@@ -160,6 +171,14 @@ function selectNitro3RouteRulesTarget(nitroTypesDeclaration, resolveH3Rules) {
       rulesInterface: "NitroRouteRules"
     };
   }
+  const exported = exportedNames(nitroTypesDeclaration);
+  if (exported.has("RouteRuleConfig") && exported.has("RouteRules")) {
+    return {
+      moduleName: "nitro/types",
+      configInterface: "RouteRuleConfig",
+      rulesInterface: "RouteRules"
+    };
+  }
   return {
     moduleName: resolveH3Rules(),
     configInterface: "RouteRuleConfig",
@@ -208,6 +227,9 @@ function resolveServerRuntimeShim(resolve) {
 function resolveH3TypesPath(nitroMajor) {
   return nitroMajor === 3 ? "nitro/h3" : "h3";
 }
+function resolveServerImportsTypesFile(nitroMajor) {
+  return nitroMajor === 3 ? "server-imports.d.ts" : "nitro-imports.d.ts";
+}
 async function resolveAppSecretShim(resolve) {
   const canDeriveAppSecret = await hasNuxtCompatibility({ nuxt: ">=4.6.0-0" });
   return resolve(`./runtime/server/internal/${canDeriveAppSecret ? "app-secret" : "app-secret-unavailable"}`);
@@ -273,8 +295,22 @@ const diagnostics = defineDiagnostics({
   }
 });
 
-function setupDevTools(nuxt) {
+async function setupDevTools(nuxt) {
   const hookable = nuxt;
+  if (await hasNuxtModuleCompatibility("@nuxt/devtools", ">=4.0.0-alpha.8", nuxt)) {
+    hookable.hook("devtools:ready", (ctx) => {
+      ctx.docks.register({
+        id: "better-auth",
+        title: "Auth",
+        icon: "simple-icons:betterauth",
+        type: "iframe",
+        url: "/__better-auth-devtools",
+        groupId: "nuxt",
+        category: "server"
+      });
+    });
+    return;
+  }
   hookable.hook("devtools:customTabs", (tabs) => {
     tabs.push({
       category: "server",
@@ -342,12 +378,12 @@ function registerAuthMiddleware(resolve) {
   });
 }
 function registerPrepareTypesHook(input) {
-  const { nuxt, serverDir, hasHubDb } = input;
+  const { nuxt, serverDir, hasHubDb, serverImportsTypesFile } = input;
   nuxt.hook("prepare:types", ({ nodeTsConfig, nodeReferences, sharedReferences }) => {
     nodeTsConfig.compilerOptions ||= {};
     nodeTsConfig.compilerOptions.paths ||= {};
     const projectReferenceTypePaths = [
-      join(nuxt.options.buildDir, "types/nitro-imports.d.ts"),
+      join(nuxt.options.buildDir, "types", serverImportsTypesFile),
       join(nuxt.options.buildDir, "types/auth-database.d.ts")
     ];
     if (hasHubDb)
@@ -394,7 +430,7 @@ async function registerDevtools(input) {
   const isProduction = process.env.NODE_ENV === "production" || !nuxt.options.dev;
   if (isProduction || clientOnly)
     return;
-  setupDevTools(nuxt);
+  await setupDevTools(nuxt);
   addServerHandler({ route: "/api/_better-auth/config", method: "get", handler: resolve("./runtime/server/api/_better-auth/config.get") });
   if (hasHubDb) {
     const handlers = [
@@ -1209,7 +1245,7 @@ function buildNuxtFetchFallback(name) {
 `).join("");
 }
 function registerServerTypeTemplates(input) {
-  const { serverConfigPath, hasHubDb, runtimeTypesPath, sharedServerConfigSafe, h3TypesPath, nitro3RouteRulesTarget } = input;
+  const { serverConfigPath, hasHubDb, runtimeTypesPath, sharedServerConfigSafe, h3TypesPath, serverImportsTypesFile, nitro3RouteRulesTarget } = input;
   const fetchRoutingTypeDeclarations = h3TypesPath === "nitro/h3" ? `type NitroFetchRequest = string & {}
 type AvailableRouterMethod<_ReqT extends NitroFetchRequest> = 'get' | 'head' | 'patch' | 'post' | 'put' | 'delete' | 'connect' | 'options' | 'trace'` : `import type { AvailableRouterMethod, NitroFetchRequest } from 'nitropack/types'`;
   const resolvedNitro3RouteRulesTarget = nitro3RouteRulesTarget ?? {
@@ -1232,7 +1268,7 @@ type AvailableRouterMethod<_ReqT extends NitroFetchRequest> = 'get' | 'head' | '
     auth?: import('${runtimeTypesPath}').AuthMeta
   }
 }`).join("\n");
-  const serverConfigTypeTemplateOptions = sharedServerConfigSafe ? { nuxt: true, nitro: true, node: true, shared: true } : { nuxt: true, nitro: true, node: true };
+  const serverConfigTypeTemplateOptions = sharedServerConfigSafe || h3TypesPath === "nitro/h3" ? { nuxt: true, nitro: true, node: true, shared: true } : { nuxt: true, nitro: true, node: true };
   addTypeTemplate({
     filename: "types/auth-database.d.ts",
     getContents: () => `
@@ -1246,7 +1282,7 @@ declare module '#auth/database' {
   addTypeTemplate({
     filename: "types/nuxt-better-auth-server-context.d.ts",
     getContents: () => `
-/// <reference path="./nitro-imports.d.ts" />
+/// <reference path="./${serverImportsTypesFile}" />
 /// <reference path="./auth-database.d.ts" />
 ${hasHubDb ? '/// <reference path="../hub/db.d.ts" />' : ""}
 
@@ -1537,6 +1573,8 @@ declare module '#nuxt-better-auth' {
     emailVerified: boolean
     name: string
     image?: string | null
+    /** Whether the user has enabled two-factor authentication. */
+    twoFactorEnabled?: boolean
   }
 
   export interface AuthSession {
@@ -1694,7 +1732,9 @@ const module$1 = defineNuxtModule({
   setup(options, nuxt) {
     const finishSetup = async () => {
       const resolver = createResolver(import.meta.url);
-      const h3TypesPath = resolveH3TypesPath(getNitroVersion(nuxt));
+      const nitroMajor = getNitroVersion(nuxt);
+      const h3TypesPath = resolveH3TypesPath(nitroMajor);
+      const serverImportsTypesFile = resolveServerImportsTypesFile(nitroMajor);
       nuxt.options.alias["#better-auth/nitro-compat"] = resolveServerRuntimeShim(resolver.resolve);
       nuxt.options.alias["#better-auth/app-secret"] = await resolveAppSecretShim(resolver.resolve);
       const registeredPluginSources = {};
@@ -1758,7 +1798,8 @@ const module$1 = defineNuxtModule({
         registerPrepareTypesHook({
           nuxt,
           serverDir: setup.prepareTypes.serverDir,
-          hasHubDb: setup.prepareTypes.hasHubDb
+          hasHubDb: setup.prepareTypes.hasHubDb,
+          serverImportsTypesFile
         });
       }
       if (setup.database.providerDefinition) {
@@ -1783,6 +1824,7 @@ const module$1 = defineNuxtModule({
           runtimeTypesPath: resolver.resolve("./runtime/types"),
           sharedServerConfigSafe: [setup.configs.server.path, ...setup.pluginSources.server].every(isServerConfigSharedTypeSafe),
           h3TypesPath,
+          serverImportsTypesFile,
           nitro3RouteRulesTarget: h3TypesPath === "nitro/h3" ? resolveNitro3RouteRulesTarget(nuxt.options.rootDir) : void 0
         });
       }

package/dist/runtime/app/composables/useUserSession.js

@@ -2,7 +2,7 @@ import { computed, navigateTo, nextTick, useNuxtApp, useRequestURL, useRuntimeCo
 import { normalizeAuthActionError } from "../internal/auth-action-error.js";
 import { resolvePostAuthSuccessRedirect, withFallbackSocialCallbackURL } from "../internal/redirect-helpers.js";
 import { fetchSessionClient, fetchSessionServer, isExpectedSignedOutSessionError, stripToken } from "../internal/session-fetch.js";
-import { isRecord } from "../internal/utils.js";
+import { isRecord, setIfChanged } from "../internal/utils.js";
 import { createVueSafeAuthFacade, isAuthProxyProbeKey } from "../internal/vue-safe-auth-proxy.js";
 import { wrapAuthMethod } from "../internal/wrap-auth-method.js";
 import { getAuthRuntimeFlags, useRawAuthClient } from "./useAuthClient.js";
@@ -152,8 +152,8 @@ export function useUserSession() {
         if (newSession?.data?.session && newSession?.data?.user) {
           sessionExpiredRedirecting = false;
           hydrationSessionWasActive = false;
-          session.value = stripToken(newSession.data.session);
-          user.value = newSession.data.user;
+          setIfChanged(session, stripToken(newSession.data.session));
+          setIfChanged(user, newSession.data.user);
         } else if (!newSession?.isPending && !newSession?.isRefetching) {
           const isHydrationEmptySnapshot = nuxtApp.isHydrating && nuxtApp.payload.serverRendered && Boolean(session.value && user.value) && !newSession?.data?.session && !newSession?.data?.user;
           if (isHydrationEmptySnapshot) {

package/dist/runtime/app/internal/session-fetch.js

@@ -1,6 +1,7 @@
 import { parseJSON } from "better-auth/client";
 import { useRequestFetch, useRequestHeaders } from "#imports";
 import { normalizeAuthActionError } from "./auth-action-error.js";
+import { setIfChanged } from "./utils.js";
 export function stripToken(session) {
   const { token: _, ...safe } = session;
   return safe;
@@ -35,8 +36,8 @@ export async function fetchSessionServer(session, user, authReady, options = {})
       ...options.force ? { query: { disableCookieCache: true } } : {}
     });
     if (data?.session && data?.user) {
-      session.value = stripToken(data.session);
-      user.value = data.user;
+      setIfChanged(session, stripToken(data.session));
+      setIfChanged(user, data.user);
     } else {
       session.value = null;
       user.value = null;
@@ -60,8 +61,8 @@ export async function fetchSessionClient(client, session, user, authReady, optio
     }
     const data = result.data;
     if (data?.session && data?.user) {
-      session.value = stripToken(data.session);
-      user.value = data.user;
+      setIfChanged(session, stripToken(data.session));
+      setIfChanged(user, data.user);
     } else {
       session.value = null;
       user.value = null;

package/dist/runtime/app/internal/utils.d.ts

@@ -1 +1,9 @@
 export declare function isRecord(value: unknown): value is Record<string, unknown>;
+/**
+ * Better Auth refetches the session on window focus and returns fresh objects even
+ * when nothing changed. Keeping the current object avoids retriggering every
+ * computed and watcher that depends on the session or user.
+ */
+export declare function setIfChanged<T>(target: {
+    value: T;
+}, value: T): void;

package/dist/runtime/app/internal/utils.js

@@ -1,3 +1,19 @@
 export function isRecord(value) {
   return Boolean(value && typeof value === "object");
 }
+function isSameValue(a, b) {
+  if (Object.is(a, b))
+    return true;
+  if (a instanceof Date || b instanceof Date)
+    return a instanceof Date && b instanceof Date && a.getTime() === b.getTime();
+  if (Array.isArray(a) || Array.isArray(b))
+    return Array.isArray(a) && Array.isArray(b) && a.length === b.length && a.every((item, index) => isSameValue(item, b[index]));
+  if (!isRecord(a) || !isRecord(b))
+    return false;
+  const keys = Object.keys(a);
+  return keys.length === Object.keys(b).length && keys.every((key) => Object.hasOwn(b, key) && isSameValue(a[key], b[key]));
+}
+export function setIfChanged(target, value) {
+  if (!isSameValue(target.value, value))
+    target.value = value;
+}

package/dist/runtime/app/middleware/auth.global.js

@@ -2,13 +2,15 @@ import { defu } from "defu";
 import { createRouter, toRouteMatcher } from "radix3";
 import { parsePath, parseQuery } from "ufo";
 import { createError, defineNuxtRouteMiddleware, getRouteRules, navigateTo, useNuxtApp, useRequestHeaders, useRuntimeConfig } from "#imports";
-import { shouldSkipAuthRouteRules } from "../../internal/auth-route-rules.js";
+import { normalizeAuthRoutePath, shouldSkipAuthRouteRules } from "../../internal/auth-route-rules.js";
 import { matchesUser } from "../../utils/match-user.js";
 import { useUserSession } from "../composables/useUserSession.js";
 let authRouteRulesPromise = null;
 let routeRulesMatcherPromise = null;
 export default defineNuxtRouteMiddleware(async (to) => {
-  if (shouldSkipAuthRouteRules(to.path))
+  const runtimeConfig = useRuntimeConfig();
+  const path = normalizeAuthRoutePath(to.path, runtimeConfig.app?.baseURL);
+  if (shouldSkipAuthRouteRules(to.path) || shouldSkipAuthRouteRules(path))
     return;
   if (to.matched?.length === 0)
     return;
@@ -30,7 +32,7 @@ export default defineNuxtRouteMiddleware(async (to) => {
   const auth = to.meta.auth;
   if (auth === void 0 || auth === false)
     return;
-  const config = useRuntimeConfig().public.auth;
+  const config = runtimeConfig.public.auth;
   if (import.meta.server && config?.clientOnly)
     return;
   const { fetchSession, user, loggedIn } = useUserSession();

package/dist/runtime/app/pages/__better-auth-devtools.vue

@@ -1,7 +1,7 @@
 <script setup>
-import { useFetch, useRuntimeConfig } from "#imports";
+import { useFetch, useHead, useRuntimeConfig } from "#imports";
 import { useDevtoolsClient } from "@nuxt/devtools-kit/iframe-client";
-import { computed, ref, watch, watchEffect } from "vue";
+import { computed, onBeforeUnmount, onMounted, ref, shallowRef, triggerRef, watch } from "vue";
 const pageSize = 20;
 const tabLabels = {
   sessions: "Sessions",
@@ -10,13 +10,23 @@ const tabLabels = {
   config: "Config"
 };
 const devtoolsClient = useDevtoolsClient();
+const nativeHost = shallowRef();
+let stopHostUpdates;
+onMounted(() => {
+  if (window.parent === window)
+    return;
+  try {
+    nativeHost.value = window.parent.__NUXT_DEVTOOLS_HOST__;
+  } catch {
+    return;
+  }
+  stopHostUpdates = nativeHost.value?.hooks.hook("host:update:reactivity", () => triggerRef(nativeHost));
+});
+onBeforeUnmount(() => stopHostUpdates?.());
 const runtimeConfig = useRuntimeConfig();
 const hasDb = computed(() => runtimeConfig.public.auth?.useDatabase ?? false);
-const isDark = computed(() => devtoolsClient.value?.host?.app?.colorMode?.value === "dark");
-watchEffect(() => {
-  if (import.meta.client)
-    document.documentElement.classList.toggle("dark", isDark.value);
-});
+const isDark = computed(() => (nativeHost.value ?? devtoolsClient.value?.host)?.app?.colorMode?.value === "dark");
+useHead({ style: [{ key: "better-auth-devtools-body", textContent: "body { margin: 0 !important; }" }] });
 const activeTab = ref(hasDb.value ? "sessions" : "config");
 const tabs = computed(() => hasDb.value ? ["sessions", "users", "accounts", "config"] : ["config"]);
 watch(hasDb, (enabled) => {
@@ -125,7 +135,7 @@ async function deleteConfirmedSession() {
 </script>
 
 <template>
-  <div class="devtools-shell">
+  <div class="devtools-shell" :class="{ dark: isDark }">
     <header class="devtools-header">
       <div class="brand">
         <svg width="60" height="45" viewBox="0 0 60 45" fill="none" class="brand-mark" xmlns="http://www.w3.org/2000/svg">
@@ -375,6 +385,6 @@ async function deleteConfirmedSession() {
   </div>
 </template>
 
-<style>
-:root{--ba-bg:#fff;--ba-fg:#1f1f1f;--ba-muted:#707070;--ba-border:#e5e5e5;--ba-soft:#f7f7f7;--ba-hover:#efefef;--ba-good:#047857;--ba-bad:#b91c1c}.dark{--ba-bg:#111;--ba-fg:#f4f4f5;--ba-muted:#a1a1aa;--ba-border:#2d2d2d;--ba-soft:#191919;--ba-hover:#242424;--ba-good:#34d399;--ba-bad:#f87171}*{box-sizing:border-box}body{margin:0}button,input{font:inherit}.devtools-shell{background:var(--ba-bg);color:var(--ba-fg);font-family:Inter,ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif;font-size:13px;min-height:100vh}.devtools-header{border-bottom:1px solid var(--ba-border);gap:16px;justify-content:space-between;min-height:48px;padding:0 16px}.actions,.brand,.confirm,.devtools-header,.links,.pagination,.toolbar,.toolbar-meta{align-items:center;display:flex}.brand{font-weight:600;gap:10px}.brand-mark{height:auto;width:24px}.links a{color:var(--ba-muted);padding:8px 10px;text-decoration:none}.links a:hover{color:var(--ba-fg)}.tabs{border-bottom:1px solid var(--ba-border);display:flex;gap:4px;padding:8px 12px 0}.actions button,.confirm button,.pagination button,.tabs button,.toolbar button{background:transparent;border:1px solid var(--ba-border);color:var(--ba-fg);cursor:pointer;min-height:30px;padding:5px 10px}.tabs button{border-bottom:0}.tabs button.active,button:hover:not(:disabled){background:var(--ba-hover)}button:disabled{color:var(--ba-muted);cursor:default}button.danger{color:var(--ba-bad)}.panel{padding:16px}.section{display:grid;gap:14px}.toolbar{gap:12px;justify-content:space-between}.actions,.confirm,.pagination,.toolbar-meta{gap:8px}input{background:var(--ba-bg);border:1px solid var(--ba-border);color:var(--ba-fg);padding:7px 10px;width:min(340px,100%)}table{border:1px solid var(--ba-border);border-collapse:collapse;width:100%}td,th{border-bottom:1px solid var(--ba-border);padding:9px 10px;text-align:left;vertical-align:top}th{background:var(--ba-soft);font-weight:500}td small,th{color:var(--ba-muted)}td small{display:block;margin-top:3px}code,pre{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,monospace}.badge{background:var(--ba-soft);border:1px solid var(--ba-border);color:var(--ba-muted);display:inline-flex;padding:2px 8px}.badge.good{color:var(--ba-good)}.badge.bad,.error{color:var(--ba-bad)}.confirm,.empty,.notice{background:var(--ba-soft);border:1px solid var(--ba-border);padding:10px 12px}.empty,.notice{color:var(--ba-muted)}.config-grid{grid-template-columns:repeat(auto-fit,minmax(280px,1fr))}.config-grid .error,.config-grid .toolbar{grid-column:1/-1}article{background:var(--ba-soft);border:1px solid var(--ba-border)}h2{border-bottom:1px solid var(--ba-border);font-size:13px;padding:10px 12px}h2,pre{margin:0}pre{font-size:12px;line-height:1.5;overflow:auto;padding:12px}.capitalize{text-transform:capitalize}@media (max-width:720px){.devtools-header,.toolbar,.toolbar-meta{align-items:stretch;flex-direction:column}.actions,.tabs{flex-wrap:wrap}table{display:block;overflow-x:auto}}
+<style scoped>
+.devtools-shell{--ba-bg:#fff;--ba-fg:#1f1f1f;--ba-muted:#707070;--ba-border:#e5e5e5;--ba-soft:#f7f7f7;--ba-hover:#efefef;--ba-good:#047857;--ba-bad:#b91c1c}.devtools-shell.dark{--ba-bg:#111;--ba-fg:#f4f4f5;--ba-muted:#a1a1aa;--ba-border:#2d2d2d;--ba-soft:#191919;--ba-hover:#242424;--ba-good:#34d399;--ba-bad:#f87171}*{box-sizing:border-box}button,input{font:inherit}.devtools-shell{background:var(--ba-bg);color:var(--ba-fg);font-family:Inter,ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif;font-size:13px;min-height:100vh}.devtools-header{border-bottom:1px solid var(--ba-border);gap:16px;justify-content:space-between;min-height:48px;padding:0 16px}.actions,.brand,.confirm,.devtools-header,.links,.pagination,.toolbar,.toolbar-meta{align-items:center;display:flex}.brand{font-weight:600;gap:10px}.brand-mark{height:auto;width:24px}.links a{color:var(--ba-muted);padding:8px 10px;text-decoration:none}.links a:hover{color:var(--ba-fg)}.tabs{border-bottom:1px solid var(--ba-border);display:flex;gap:4px;padding:8px 12px 0}.actions button,.confirm button,.pagination button,.tabs button,.toolbar button{background:transparent;border:1px solid var(--ba-border);color:var(--ba-fg);cursor:pointer;min-height:30px;padding:5px 10px}.tabs button{border-bottom:0}.tabs button.active,button:hover:not(:disabled){background:var(--ba-hover)}button:disabled{color:var(--ba-muted);cursor:default}button.danger{color:var(--ba-bad)}.panel{padding:16px}.section{display:grid;gap:14px}.toolbar{gap:12px;justify-content:space-between}.actions,.confirm,.pagination,.toolbar-meta{gap:8px}input{background:var(--ba-bg);border:1px solid var(--ba-border);color:var(--ba-fg);padding:7px 10px;width:min(340px,100%)}table{border:1px solid var(--ba-border);border-collapse:collapse;width:100%}td,th{border-bottom:1px solid var(--ba-border);padding:9px 10px;text-align:left;vertical-align:top}th{background:var(--ba-soft);font-weight:500}td small,th{color:var(--ba-muted)}td small{display:block;margin-top:3px}code,pre{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,monospace}.badge{background:var(--ba-soft);border:1px solid var(--ba-border);color:var(--ba-muted);display:inline-flex;padding:2px 8px}.badge.good{color:var(--ba-good)}.badge.bad,.error{color:var(--ba-bad)}.confirm,.empty,.notice{background:var(--ba-soft);border:1px solid var(--ba-border);padding:10px 12px}.empty,.notice{color:var(--ba-muted)}.config-grid{grid-template-columns:repeat(auto-fit,minmax(280px,1fr))}.config-grid .error,.config-grid .toolbar{grid-column:1/-1}article{background:var(--ba-soft);border:1px solid var(--ba-border)}h2{border-bottom:1px solid var(--ba-border);font-size:13px;padding:10px 12px}h2,pre{margin:0}pre{font-size:12px;line-height:1.5;overflow:auto;padding:12px}.capitalize{text-transform:capitalize}@media (max-width:720px){.devtools-header,.toolbar,.toolbar-meta{align-items:stretch;flex-direction:column}.actions,.tabs{flex-wrap:wrap}table{display:block;overflow-x:auto}}
 </style>

package/dist/runtime/config.d.ts

@@ -12,7 +12,7 @@ export interface ClientAuthContext {
 export type ServerAuthConfig = Omit<BetterAuthOptions, 'secret' | 'baseURL' | 'basePath'> & {
     /** The module registers its server handler at /api/auth. */
     basePath?: '/api/auth';
-    plugins?: readonly BetterAuthPlugin[];
+    plugins?: readonly unknown[];
 };
 export type ClientAuthConfig = Omit<BetterAuthClientOptions, 'baseURL'> & {
     baseURL?: string;
@@ -108,8 +108,11 @@ export interface AuthRuntimeConfig {
 export interface AuthPrivateRuntimeConfig {
     hubSecondaryStorage: boolean | 'custom';
 }
-export declare function defineServerAuth<const R>(config: (ctx: ServerAuthContext) => R & ServerAuthConfig): (ctx: ServerAuthContext) => R;
-export declare function defineServerAuth<const R>(config: R & ServerAuthConfig & (R extends (...args: never[]) => unknown ? never : unknown)): (ctx: ServerAuthContext) => R;
+export declare function defineServerAuth<const R extends ServerAuthConfig>(config: (ctx: ServerAuthContext) => R): (ctx: ServerAuthContext) => R;
+export declare function defineServerAuth<const R>(config: (ctx: ServerAuthContext) => R & ServerAuthConfig & (R extends {
+    basePath: infer B;
+} ? B extends '/api/auth' ? unknown : never : unknown)): (ctx: ServerAuthContext) => R;
+export declare function defineServerAuth<const R extends ServerAuthConfig>(config: R & (R extends (...args: never[]) => unknown ? never : unknown)): (ctx: ServerAuthContext) => R;
 export declare function extendServerAuth<const R extends ServerAuthConfig, const P extends readonly BetterAuthPlugin[]>(createConfig: (ctx: ServerAuthContext) => R, plugins: P): (ctx: ServerAuthContext) => ExtendedServerAuthConfig<R, P>;
 export declare function defineClientAuth<T extends ClientAuthConfig>(config: T | ((ctx: ClientAuthContext) => T)): ClientAuthFactory<T>;
 export declare function extendClientAuth<T extends ClientAuthConfig, const P extends BetterAuthClientPlugin[]>(createClient: ClientAuthFactory<T>, plugins: P): ClientAuthFactory<ExtendedClientAuthConfig<T, P>>;

package/dist/runtime/internal/auth-route-rules.js

@@ -2,7 +2,9 @@ import { withoutBase } from "ufo";
 const internalAssetPaths = ["/_fonts", "/_ipx", "/_nuxt", "/api/_nuxt_icon"];
 export function isInternalAssetPath(path) {
   const pathname = path.split(/[?#]/, 1)[0] || "/";
-  return internalAssetPaths.some((prefix) => pathname === prefix || pathname.startsWith(`${prefix}/`));
+  return internalAssetPaths.some((prefix) => {
+    return pathname === prefix || pathname.startsWith(`${prefix}/`) || pathname.endsWith(prefix) || pathname.includes(`${prefix}/`);
+  });
 }
 const internalRouteRuleAuthPaths = /* @__PURE__ */ new Set([
   "/__better-auth-devtools",

package/dist/runtime/server/internal/nitro2.d.ts

@@ -1,10 +1,9 @@
 import type { H3Event } from 'h3';
 import type { AuthRouteRules } from '../../types.js';
-import { splitSetCookieString } from 'cookie-es';
 import { defineEventHandler, getQuery, getRequestHost, getRequestProtocol, getRequestURL, readBody, toWebRequest } from 'h3';
 import { useRuntimeConfig } from 'nitropack/runtime';
 export { defineEventHandler, getQuery, getRequestHost, getRequestProtocol, getRequestURL, readBody, toWebRequest, useRuntimeConfig, };
 export type ServerEvent = H3Event;
-export { splitSetCookieString as splitCookiesString };
+export declare function splitCookiesString(cookiesString: string | string[]): string[];
 export declare function getAuthRouteRules(event: ServerEvent): AuthRouteRules;
 export declare function createAuthError(status: number, statusText: string): Error;

package/dist/runtime/server/internal/nitro2.js

@@ -20,7 +20,9 @@ export {
   toWebRequest,
   useRuntimeConfig
 };
-export { splitSetCookieString as splitCookiesString };
+export function splitCookiesString(cookiesString) {
+  return splitSetCookieString(cookiesString);
+}
 export function getAuthRouteRules(event) {
   return getRouteRules(event);
 }

package/dist/runtime/server/internal/portable.d.ts

@@ -1,10 +1,9 @@
 import type { RequestEvent } from 'nuxt/server';
 import type { AuthRouteRules } from '../../types.js';
-import { splitSetCookieString } from 'cookie-es';
 import { defineEventHandler, getQuery, getRequestHost, getRequestProtocol, getRequestURL, readBody, useRuntimeConfig } from 'nuxt/server';
 export { defineEventHandler, getQuery, getRequestHost, getRequestProtocol, getRequestURL, readBody, useRuntimeConfig, };
 export type ServerEvent = RequestEvent;
-export { splitSetCookieString as splitCookiesString };
+export declare function splitCookiesString(cookiesString: string | string[]): string[];
 export declare function getAuthRouteRules(event: ServerEvent): AuthRouteRules;
 export declare function createAuthError(status: number, statusText: string): Error;
 export declare function toWebRequest(event: ServerEvent): Request;

package/dist/runtime/server/internal/portable.js

@@ -20,7 +20,9 @@ export {
   readBody,
   useRuntimeConfig
 };
-export { splitSetCookieString as splitCookiesString };
+export function splitCookiesString(cookiesString) {
+  return splitSetCookieString(cookiesString);
+}
 export function getAuthRouteRules(event) {
   const rules = getRouteRules(event);
   return { auth: normalizeAuthRouteRule(rules.auth) };

package/dist/runtime/server/utils/auth.d.ts

@@ -9,13 +9,18 @@ type UserAuthConfig = AuthOptions & {
     trustedOrigins?: BetterAuthOptions['trustedOrigins'];
     secondaryStorage?: BetterAuthOptions['secondaryStorage'];
 };
-type ResolvedAuthOptions = Omit<UserAuthConfig, 'secret' | 'baseURL' | 'trustedOrigins' | 'database'> & {
+type ResolvedAuthOptions = Omit<UserAuthConfig, 'secret' | 'baseURL' | 'trustedOrigins' | 'database' | 'plugins'> & {
+    plugins?: BetterAuthOptions['plugins'];
     secret: string;
     baseURL: string;
     trustedOrigins?: BetterAuthOptions['trustedOrigins'];
     database?: BetterAuthOptions['database'];
 };
-type AuthInstance = ReturnType<typeof betterAuth<ResolvedAuthOptions>>;
+type AuthInstance = ReturnType<typeof betterAuth<ResolvedAuthOptions>> & {
+    api: ReturnType<typeof betterAuth<ResolvedAuthOptions>>['api'] & {
+        signInUsername?: (...args: unknown[]) => unknown;
+    };
+};
 /**
  * Returns the Better Auth instance like `serverAuth()`, after waiting for the auth secret that
  * Nuxt 4.6+ derives from `appSecret` (`NUXT_APP_SECRET`). Use it in code that can run before the

package/dist/runtime/server/utils/auth.js

@@ -274,6 +274,7 @@ export function serverAuth(event) {
   }
   const authOptions = {
     ...userConfig,
+    ...userConfig.plugins ? { plugins: [...userConfig.plugins] } : {},
     ...rateLimit ? { rateLimit } : {},
     ...database ? { database } : {},
     secret: betterAuthSecret,

package/dist/runtime/types/augment.d.ts

@@ -7,6 +7,8 @@ export interface AuthUser {
     emailVerified: boolean;
     name: string;
     image?: string | null;
+    /** Whether the user has enabled two-factor authentication. */
+    twoFactorEnabled?: boolean;
 }
 export interface AuthSession {
     id: string;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nuxtjs/better-auth",
   "type": "module",
-  "version": "0.3.9",
+  "version": "0.3.11",
   "description": "Nuxt module for Better Auth integration with NuxtHub, route protection, session management, and role-based access",
   "author": "onmax",
   "license": "MIT",
@@ -94,7 +94,7 @@
     "@libsql/client": "^0.18.0",
     "@libsql/linux-x64-gnu": "0.5.29",
     "@nuxt/devtools": "^3.4.1",
-    "@nuxt/fonts": "0.14.0",
+    "@nuxt/fonts": "1.0.1",
     "@nuxt/module-builder": "^1.0.3",
     "@nuxt/schema": "^4.6.0",
     "@nuxt/test-utils": "^4.3.3",
@@ -102,25 +102,25 @@
     "@pinia/nuxt": "^1.0.2",
     "@types/better-sqlite3": "^9.6.0",
     "@vue/test-utils": "^2.4.6",
-    "better-auth": "1.7.7",
-    "better-call": "1.4.0",
+    "better-auth": "1.7.10",
+    "better-call": "1.4.2",
     "better-sqlite3": "^13.0.0",
     "drizzle-kit": "^0.31.10",
     "drizzle-orm": "^0.45.2",
     "eslint": "^10.8.1",
-    "happy-dom": "^20.8.9",
+    "happy-dom": "^21.0.0",
     "nitropack": "2.13.4",
     "nuxt": "^4.6.0",
     "pinia": "^4.0.3",
-    "pkg-pr-new": "0.0.88",
-    "playwright-core": "1.63.0",
+    "pkg-pr-new": "0.0.91",
+    "playwright-core": "1.64.1",
     "postgres": "^3.4.9",
     "typescript": "~5.9.3",
     "unstorage": "^1.17.5",
     "vitest": "^5.0.0",
-    "vue": "3.5.43",
+    "vue": "3.5.44",
     "vue-tsc": "^3.3.10",
-    "wrangler": "4.147.0",
+    "wrangler": "4.151.1",
     "yaml": "^2.9.0"
   },
   "scripts": {