@o/better-auth-utils 0.16.19

package/dist/esm/createAuthClient.test.native.js

@@ -0,0 +1,103 @@
+import { beforeEach, describe, expect, test, vi } from "vitest";
+import { createBetterAuthClient } from "./createAuthClient.native.js";
+var mocks = vi.hoisted(function () {
+  return {
+    createAuthClient: vi.fn(),
+    request: vi.fn()
+  };
+});
+vi.mock("better-auth/client", function () {
+  return {
+    createAuthClient: mocks.createAuthClient
+  };
+});
+vi.mock("@o/helpers", function () {
+  return {
+    createEmitter: function createEmitter(_name, initialValue) {
+      var emitter = {
+        value: initialValue,
+        emit(value) {
+          emitter.value = value;
+        }
+      };
+      return emitter;
+    },
+    createStorageValue: function createStorageValue() {
+      return {
+        get: function get() {
+          return void 0;
+        },
+        set: vi.fn(),
+        remove: vi.fn()
+      };
+    },
+    isEqualDeepLite: Object.is,
+    useEmitterValue: function useEmitterValue(emitter) {
+      return emitter.value;
+    }
+  };
+});
+describe("createBetterAuthClient signOut", function () {
+  beforeEach(function () {
+    mocks.request.mockReset();
+    mocks.createAuthClient.mockReset();
+    mocks.createAuthClient.mockReturnValue({
+      $fetch: mocks.request,
+      useSession: {
+        subscribe: vi.fn(function () {
+          return vi.fn();
+        })
+      }
+    });
+  });
+  test("sends JSON and clears local auth only after server revocation succeeds", async function () {
+    var deferred = Promise.withResolvers();
+    mocks.request.mockReturnValue(deferred.promise);
+    var onAuthStateChange = vi.fn();
+    var client = createBetterAuthClient({
+      baseURL: "https://auth.example.com",
+      onAuthStateChange
+    });
+    var pending = client.authClient.signOut();
+    expect(mocks.request).toHaveBeenCalledWith("/sign-out", {
+      method: "POST",
+      body: {}
+    });
+    expect(onAuthStateChange).not.toHaveBeenCalled();
+    deferred.resolve({
+      data: {
+        success: true
+      },
+      error: null
+    });
+    await expect(pending).resolves.toEqual({
+      data: {
+        success: true
+      },
+      error: null
+    });
+    expect(onAuthStateChange).toHaveBeenCalledWith({
+      state: "logged-out",
+      session: null,
+      user: null,
+      token: null
+    });
+  });
+  test("keeps local auth when server revocation fails", async function () {
+    var error = {
+      message: "network unavailable"
+    };
+    mocks.request.mockResolvedValue({
+      data: null,
+      error
+    });
+    var onAuthStateChange = vi.fn();
+    var client = createBetterAuthClient({
+      baseURL: "https://auth.example.com",
+      onAuthStateChange
+    });
+    await expect(client.authClient.signOut()).rejects.toBe(error);
+    expect(onAuthStateChange).not.toHaveBeenCalled();
+  });
+});
+//# sourceMappingURL=createAuthClient.test.native.js.map

package/dist/esm/createAuthClient.test.native.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["beforeEach","describe","expect","test","vi","createBetterAuthClient","mocks","hoisted","createAuthClient","fn","request","mock","createEmitter","_name","initialValue","emitter","value","emit","createStorageValue","get","set","remove","isEqualDeepLite","Object","is","useEmitterValue","mockReset","mockReturnValue","$fetch","useSession","subscribe","deferred","Promise","withResolvers","promise","onAuthStateChange","client","baseURL","pending","authClient","signOut","toHaveBeenCalledWith","method","body","not","toHaveBeenCalled","resolve","data","success","error","resolves","toEqual"],"sources":["../../src/createAuthClient.test.ts"],"sourcesContent":[null],"mappings":"AAAA,SAASA,UAAA,EAAYC,QAAA,EAAUC,MAAA,EAAQC,IAAA,EAAMC,EAAA,QAAU;AA8BvD,SAASC,sBAAA,QAA8B;AA5BvC,IAAAC,KAAM,GAAAF,EAAQ,CAAAG,OAAG,aAAe;EAC9B;IACAC,gBAAe,EAAAJ,EAAA,CAAAK,EAAA;IACfC,OAAA,EAAAN,EAAA,CAAAK,EAAA;EAEF,CAAG;AAAkC,EACnC;AACFL,EAAE,CAAAO,IAAA;EAEF,OAAQ;IACNH,gBAAgB,EAAAF,KAAe,CAAAE;EAC7B;AAAgB;AACPJ,EAAA,CAAAO,IACP,aAAqB;EACnB;IAAgBC,aAClB,WAAAA,cAAAC,KAAA,EAAAC,YAAA;MACF,IAAAC,OAAA;QACAC,KAAO,EAAAF,YAAA;QACTG,KAAAD,KAAA;UACAD,OAAA,CAAAC,KAAoB,GAAAA,KAAO;QACzB;MACA;MACA,OAAQD,OAAM;IAChB;IACAG,kBAAiB,WAAOA,mBAAA;MACxB;QACAC,GAAA,WAAAA,IAAA;UAIO;QACP;QACEC,GAAM,EAAAhB,EAAA,CAAAK,EAAQ;QACdY,MAAM,EAAAjB,EAAA,CAAAK,EAAA;MACN;IAAuC;IACvBa,eACF,EAAAC,MAAA,CAAAC,EAAA;IAAAC,eACC,WAAMA,eAAaA,CAAAV,OAAA;MAChC,OAAAA,OAAA,CAAAC,KAAA;IACF;EACF,CAAC;AAED;AACEf,QAAA,iCAAyB,EAGtB;EACHD,UAAM,aAAQ;IACdM,KAAA,CAAMI,OAAA,CAAAgB,SAAA;IACNpB,KAAA,CAAME,gBAAS,CAAAkB,SAAA;IAAuBpB,KACpC,CAAAE,gBAAS,CAAAmB,eAAA;MACTC,MAAA,EAAAtB,KAAA,CAAAI,OAAA;MACDmB,UAAA;QAEDC,SAAM,EAAA1B,EAAU,CAAAK,EAAA,aAAO;UACvB,OAAaL,EAAA,CAAAK,EAAA,EAAO;QAClB;MACA;IACF,CAAC;EACD;EAEAN,IAAA,yEAAyD;IACzD,IAAA4B,QAAM,GAAOC,OAAS,CAAAC,aAAS;IAC/B3B,KAAA,CAAAI,OAAO,CAAAiB,eAAmB,CAAAI,QAAA,CAAAG,OAAA,CAAqB;IAAA,IAC7CC,iBAAO,GAAA/B,EAAA,CAAAK,EAAA;IAAA,IACP2B,MAAA,GAAS/B,sBAAA;MACTgC,OAAM;MACNF;IACF,CAAC;IACF,IAAAG,OAAA,GAAAF,MAAA,CAAAG,UAAA,CAAAC,OAAA;IAEDtC,MAAK,CAAAI,KAAA,CAAAI,OAAA,EAAA+B,oBAAA,YAAiD;MACpDC,MAAM,QAAU;MAChBC,IAAM;IACN;IACAzC,MAAM,CAAAiC,iBAAS,EAAAS,GAAA,CAAAC,gBAAuB;IAAAd,QACpC,CAAAe,OAAS;MACTC,IAAA;QACDC,OAAA;MAED;MACAC,KAAO;IACR;IACF,MAAA/C,MAAA,CAAAoC,OAAA,EAAAY,QAAA,CAAAC,OAAA","ignoreList":[]}

package/dist/esm/index.js

@@ -0,0 +1,2 @@
+export * from "./createAuthClient.mjs";
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["../../src/index.ts"],"sourcesContent":[null],"mappings":"AAAA,cAAc","ignoreList":[]}

package/dist/esm/index.mjs

@@ -0,0 +1,2 @@
+export * from "./createAuthClient.mjs";
+//# sourceMappingURL=index.mjs.map

package/dist/esm/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["../../src/index.ts"],"sourcesContent":[null],"mappings":"AAAA,cAAc","ignoreList":[]}

package/dist/esm/index.native.js

@@ -0,0 +1,2 @@
+export * from "./createAuthClient.native.js";
+//# sourceMappingURL=index.native.js.map

package/dist/esm/index.native.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["../../src/index.ts"],"sourcesContent":[null],"mappings":"AAAA,cAAc","ignoreList":[]}

package/dist/esm/server.mjs

@@ -0,0 +1,77 @@
+import { createRemoteJWKSet, jwtVerify } from "jose";
+class NotAuthenticatedError extends Error {}
+class InvalidTokenError extends Error {}
+async function getAuthDataFromRequest(authServer, req, tokenOptions) {
+  const authHeader = req.headers.get("authorization");
+  try {
+    const session = await authServer.api.getSession({
+      headers: req.headers
+    });
+    if (session?.user) {
+      return {
+        id: session.user.id,
+        email: session.user.email || void 0,
+        role: session.user.role === "admin" ? "admin" : void 0
+      };
+    }
+  } catch (err) {
+    console.warn(`Error validating session`, err);
+  }
+  const jwtToken = authHeader?.replace("Bearer ", "");
+  if (jwtToken) {
+    try {
+      const payload = await validateToken(jwtToken, tokenOptions);
+      const userId = payload?.id || payload?.sub;
+      if (userId) {
+        return {
+          id: userId,
+          email: payload.email,
+          role: payload.role === "admin" ? "admin" : void 0
+        };
+      }
+    } catch (err) {
+      if (!(err instanceof InvalidTokenError)) {
+        throw err;
+      }
+    }
+  }
+  return null;
+}
+async function validateToken(token, options) {
+  const {
+    baseUrl = process.env.ONE_SERVER_URL,
+    forceIssuer = process.env.FORCE_ISSUER || "",
+    jwksPath = "/api/auth/jwks"
+  } = options || {};
+  if (!baseUrl) {
+    throw new Error(`No baseURL!`);
+  }
+  const normalizedBaseUrl = removeTrailingSlash(baseUrl);
+  const url = `${forceIssuer || normalizedBaseUrl}${jwksPath}`;
+  const JWKS = createRemoteJWKSet(new URL(url));
+  try {
+    const verifyOptions = forceIssuer ? {} : {
+      issuer: normalizedBaseUrl,
+      audience: normalizedBaseUrl
+    };
+    const {
+      payload
+    } = await jwtVerify(token, JWKS, verifyOptions);
+    return payload;
+  } catch (error) {
+    throw new InvalidTokenError(`${error}`);
+  }
+}
+async function isValidJWT(token, options) {
+  try {
+    await validateToken(token, options);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function removeTrailingSlash(str) {
+  return str.replace(/\/$/, "");
+}
+export { InvalidTokenError, NotAuthenticatedError, getAuthDataFromRequest, isValidJWT, validateToken };
+//# sourceMappingURL=server.mjs.map

package/dist/esm/server.mjs.map

@@ -0,0 +1 @@
+{"version":3,"names":["createRemoteJWKSet","jwtVerify","NotAuthenticatedError","Error","InvalidTokenError","getAuthDataFromRequest","authServer","req","tokenOptions","authHeader","headers","get","session","api","getSession","user","id","email","role","err","console","warn","jwtToken","replace","payload","validateToken","userId","sub","token","options","baseUrl","process","env","ONE_SERVER_URL","forceIssuer","FORCE_ISSUER","jwksPath","normalizedBaseUrl","removeTrailingSlash","url","JWKS","URL","verifyOptions","issuer","audience","error","isValidJWT","str"],"sources":["../../src/server.ts"],"sourcesContent":[null],"mappings":"AAMA,SAASA,kBAAA,EAAoBC,SAAA,QAAkC;AAiBxD,MAAMC,qBAAA,SAA8BC,KAAA,CAAM;AAC1C,MAAMC,iBAAA,SAA0BD,KAAA,CAAM;AAkB7C,eAAsBE,uBACpBC,UAAA,EACAC,GAAA,EACAC,YAAA,EAC0B;EAC1B,MAAMC,UAAA,GAAaF,GAAA,CAAIG,OAAA,CAAQC,GAAA,CAAI,eAAe;EAWlD,IAAI;IACF,MAAMC,OAAA,GAAU,MAAMN,UAAA,CAAWO,GAAA,CAAIC,UAAA,CAAW;MAAEJ,OAAA,EAASH,GAAA,CAAIG;IAAQ,CAAC;IACxE,IAAIE,OAAA,EAASG,IAAA,EAAM;MACjB,OAAO;QACLC,EAAA,EAAIJ,OAAA,CAAQG,IAAA,CAAKC,EAAA;QACjBC,KAAA,EAAOL,OAAA,CAAQG,IAAA,CAAKE,KAAA,IAAS;QAC7BC,IAAA,EAAMN,OAAA,CAAQG,IAAA,CAAKG,IAAA,KAAS,UAAU,UAAU;MAClD;IACF;EACF,SAASC,GAAA,EAAK;IACZC,OAAA,CAAQC,IAAA,CAAK,4BAA4BF,GAAG;EAE9C;EAIA,MAAMG,QAAA,GAAWb,UAAA,EAAYc,OAAA,CAAQ,WAAW,EAAE;EAElD,IAAID,QAAA,EAAU;IACZ,IAAI;MACF,MAAME,OAAA,GAAU,MAAMC,aAAA,CAAcH,QAAA,EAAUd,YAAY;MAC1D,MAAMkB,MAAA,GAAUF,OAAA,EAAiBR,EAAA,IAAMQ,OAAA,EAASG,GAAA;MAChD,IAAID,MAAA,EAAQ;QACV,OAAO;UACLV,EAAA,EAAIU,MAAA;UACJT,KAAA,EAAQO,OAAA,CAAgBP,KAAA;UACxBC,IAAA,EAAOM,OAAA,CAAgBN,IAAA,KAAS,UAAU,UAAU;QACtD;MACF;IACF,SAASC,GAAA,EAAK;MACZ,IAAI,EAAEA,GAAA,YAAef,iBAAA,GAAoB;QACvC,MAAMe,GAAA;MACR;IACF;EACF;EAEA,OAAO;AACT;AAIA,eAAsBM,cACpBG,KAAA,EACAC,OAAA,EACqB;EACrB,MAAM;IACJC,OAAA,GAAUC,OAAA,CAAQC,GAAA,CAAIC,cAAA;IACtBC,WAAA,GAAcH,OAAA,CAAQC,GAAA,CAAIG,YAAA,IAAgB;IAC1CC,QAAA,GAAW;EACb,IAAIP,OAAA,IAAW,CAAC;EAEhB,IAAI,CAACC,OAAA,EAAS;IACZ,MAAM,IAAI3B,KAAA,CAAM,aAAa;EAC/B;EAEA,MAAMkC,iBAAA,GAAoBC,mBAAA,CAAoBR,OAAO;EACrD,MAAMS,GAAA,GAAM,GAAGL,WAAA,IAAeG,iBAAiB,GAAGD,QAAQ;EAG1D,MAAMI,IAAA,GAAOxC,kBAAA,CAAmB,IAAIyC,GAAA,CAAIF,GAAG,CAAC;EAE5C,IAAI;IACF,MAAMG,aAAA,GAAgBR,WAAA,GAClB,CAAC,IACD;MACES,MAAA,EAAQN,iBAAA;MACRO,QAAA,EAAUP;IACZ;IAEJ,MAAM;MAAEb;IAAQ,IAAI,MAAMvB,SAAA,CAAU2B,KAAA,EAAOY,IAAA,EAAME,aAAa;IAE9D,OAAOlB,OAAA;EACT,SAASqB,KAAA,EAAO;IACd,MAAM,IAAIzC,iBAAA,CAAkB,GAAGyC,KAAK,EAAE;EACxC;AACF;AAEA,eAAsBC,WACpBlB,KAAA,EACAC,OAAA,EACkB;EAClB,IAAI;IACF,MAAMJ,aAAA,CAAcG,KAAA,EAAOC,OAAO;IAClC,OAAO;EACT,QAAQ;IACN,OAAO;EACT;AACF;AAEA,SAASS,oBAAoBS,GAAA,EAAa;EACxC,OAAOA,GAAA,CAAIxB,OAAA,CAAQ,OAAO,EAAE;AAC9B","ignoreList":[]}

package/dist/esm/server.native.js

@@ -0,0 +1,196 @@
+import { createRemoteJWKSet, jwtVerify } from "jose";
+function _assert_this_initialized(self) {
+  if (self === void 0) throw new ReferenceError("this hasn't been initialised - super() hasn't been called");
+  return self;
+}
+function _call_super(_this, derived, args) {
+  derived = _get_prototype_of(derived);
+  return _possible_constructor_return(_this, _is_native_reflect_construct() ? Reflect.construct(derived, args || [], _get_prototype_of(_this).constructor) : derived.apply(_this, args));
+}
+function _class_call_check(instance, Constructor) {
+  if (!(instance instanceof Constructor)) throw new TypeError("Cannot call a class as a function");
+}
+function _construct(Parent, args, Class) {
+  if (_is_native_reflect_construct()) _construct = Reflect.construct;else {
+    _construct = function construct(Parent2, args2, Class2) {
+      var a = [null];
+      a.push.apply(a, args2);
+      var Constructor = Function.bind.apply(Parent2, a);
+      var instance = new Constructor();
+      if (Class2) _set_prototype_of(instance, Class2.prototype);
+      return instance;
+    };
+  }
+  return _construct.apply(null, arguments);
+}
+function _get_prototype_of(o) {
+  _get_prototype_of = Object.setPrototypeOf ? Object.getPrototypeOf : function getPrototypeOf(o2) {
+    return o2.__proto__ || Object.getPrototypeOf(o2);
+  };
+  return _get_prototype_of(o);
+}
+function _inherits(subClass, superClass) {
+  if (typeof superClass !== "function" && superClass !== null) {
+    throw new TypeError("Super expression must either be null or a function");
+  }
+  subClass.prototype = Object.create(superClass && superClass.prototype, {
+    constructor: {
+      value: subClass,
+      writable: true,
+      configurable: true
+    }
+  });
+  if (superClass) _set_prototype_of(subClass, superClass);
+}
+function _instanceof(left, right) {
+  "@swc/helpers - instanceof";
+
+  if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
+    return !!right[Symbol.hasInstance](left);
+  } else return left instanceof right;
+}
+function _is_native_function(fn) {
+  return Function.toString.call(fn).indexOf("[native code]") !== -1;
+}
+function _is_native_reflect_construct() {
+  try {
+    var result = !Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {}));
+  } catch (_) {}
+  return (_is_native_reflect_construct = function () {
+    return !!result;
+  })();
+}
+function _possible_constructor_return(self, call) {
+  if (call && (_type_of(call) === "object" || typeof call === "function")) return call;
+  return _assert_this_initialized(self);
+}
+function _set_prototype_of(o, p) {
+  _set_prototype_of = Object.setPrototypeOf || function setPrototypeOf(o2, p2) {
+    o2.__proto__ = p2;
+    return o2;
+  };
+  return _set_prototype_of(o, p);
+}
+function _type_of(obj) {
+  "@swc/helpers - typeof";
+
+  return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
+}
+function _wrap_native_super(Class) {
+  var _cache = typeof Map === "function" ? /* @__PURE__ */new Map() : void 0;
+  _wrap_native_super = function (Class2) {
+    if (Class2 === null || !_is_native_function(Class2)) return Class2;
+    if (typeof Class2 !== "function") throw new TypeError("Super expression must either be null or a function");
+    if (typeof _cache !== "undefined") {
+      if (_cache.has(Class2)) return _cache.get(Class2);
+      _cache.set(Class2, Wrapper);
+    }
+    function Wrapper() {
+      return _construct(Class2, arguments, _get_prototype_of(this).constructor);
+    }
+    Wrapper.prototype = Object.create(Class2.prototype, {
+      constructor: {
+        value: Wrapper,
+        enumerable: false,
+        writable: true,
+        configurable: true
+      }
+    });
+    return _set_prototype_of(Wrapper, Class2);
+  };
+  return _wrap_native_super(Class);
+}
+var NotAuthenticatedError = /* @__PURE__ */function (Error1) {
+  "use strict";
+
+  _inherits(NotAuthenticatedError2, Error1);
+  function NotAuthenticatedError2() {
+    _class_call_check(this, NotAuthenticatedError2);
+    return _call_super(this, NotAuthenticatedError2, arguments);
+  }
+  return NotAuthenticatedError2;
+}(_wrap_native_super(Error));
+var InvalidTokenError = /* @__PURE__ */function (Error1) {
+  "use strict";
+
+  _inherits(InvalidTokenError2, Error1);
+  function InvalidTokenError2() {
+    _class_call_check(this, InvalidTokenError2);
+    return _call_super(this, InvalidTokenError2, arguments);
+  }
+  return InvalidTokenError2;
+}(_wrap_native_super(Error));
+async function getAuthDataFromRequest(authServer, req, tokenOptions) {
+  var authHeader = req.headers.get("authorization");
+  try {
+    var session = await authServer.api.getSession({
+      headers: req.headers
+    });
+    if (session === null || session === void 0 ? void 0 : session.user) {
+      return {
+        id: session.user.id,
+        email: session.user.email || void 0,
+        role: session.user.role === "admin" ? "admin" : void 0
+      };
+    }
+  } catch (err) {
+    console.warn(`Error validating session`, err);
+  }
+  var jwtToken = authHeader === null || authHeader === void 0 ? void 0 : authHeader.replace("Bearer ", "");
+  if (jwtToken) {
+    try {
+      var payload = await validateToken(jwtToken, tokenOptions);
+      var userId = (payload === null || payload === void 0 ? void 0 : payload.id) || (payload === null || payload === void 0 ? void 0 : payload.sub);
+      if (userId) {
+        return {
+          id: userId,
+          email: payload.email,
+          role: payload.role === "admin" ? "admin" : void 0
+        };
+      }
+    } catch (err) {
+      if (!_instanceof(err, InvalidTokenError)) {
+        throw err;
+      }
+    }
+  }
+  return null;
+}
+async function validateToken(token, options) {
+  var {
+    baseUrl = process.env.ONE_SERVER_URL,
+    forceIssuer = process.env.FORCE_ISSUER || "",
+    jwksPath = "/api/auth/jwks"
+  } = options || {};
+  if (!baseUrl) {
+    throw new Error(`No baseURL!`);
+  }
+  var normalizedBaseUrl = removeTrailingSlash(baseUrl);
+  var url = `${forceIssuer || normalizedBaseUrl}${jwksPath}`;
+  var JWKS = createRemoteJWKSet(new URL(url));
+  try {
+    var verifyOptions = forceIssuer ? {} : {
+      issuer: normalizedBaseUrl,
+      audience: normalizedBaseUrl
+    };
+    var {
+      payload
+    } = await jwtVerify(token, JWKS, verifyOptions);
+    return payload;
+  } catch (error) {
+    throw new InvalidTokenError(`${error}`);
+  }
+}
+async function isValidJWT(token, options) {
+  try {
+    await validateToken(token, options);
+    return true;
+  } catch (unused) {
+    return false;
+  }
+}
+function removeTrailingSlash(str) {
+  return str.replace(/\/$/, "");
+}
+export { InvalidTokenError, NotAuthenticatedError, getAuthDataFromRequest, isValidJWT, validateToken };
+//# sourceMappingURL=server.native.js.map

package/dist/esm/server.native.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createRemoteJWKSet","jwtVerify","_assert_this_initialized","self","ReferenceError","_call_super","_this","derived","args","_get_prototype_of","_possible_constructor_return","_is_native_reflect_construct","Reflect","construct","constructor","apply","_class_call_check","instance","Constructor","TypeError","_construct","Parent","Class","Parent2","args2","Class2","a","push","Function","bind","_set_prototype_of","prototype","arguments","o","Object","setPrototypeOf","getPrototypeOf","o2","__proto__","_inherits","subClass","superClass","create","value","writable","configurable","_instanceof","left","right","Symbol","hasInstance","_is_native_function","fn","toString","call","indexOf","result","Boolean","valueOf","_","_type_of","p","p2"],"sources":["../../src/server.ts"],"sourcesContent":[null],"mappings":"AAMA,SAASA,kBAAA,EAAoBC,SAAA,QAAkC;AAiBxD,SAAMC,yBAAAC,IAA8B;EAAO,IAAAA,IAAA,uBAAAC,cAAA;EAC3C,OAAMD,IAAA;AAAiC;AAkB9C,SAAAE,WAAsBA,CAAAC,KAAA,EAAAC,OAAA,EAAAC,IACpB;EAIAD,OAAM,GAAAE,iBAAiB,CAAAF,OAAY;EAWnC,OAAIG,4BAAA,CAAAJ,KAAA,EAAAK,4BAAA,KAAAC,OAAA,CAAAC,SAAA,CAAAN,OAAA,EAAAC,IAAA,QAAAC,iBAAA,CAAAH,KAAA,EAAAQ,WAAA,IAAAP,OAAA,CAAAQ,KAAA,CAAAT,KAAA,EAAAE,IAAA;AACF;AACA,SAAIQ,iBAAeA,CAAAC,QAAA,EAAAC,WAAA;EACjB,MAAAD,QAAO,YAAAC,WAAA,aAAAC,SAAA;AAAA;AACY,SACjBC,UAAOA,CAAAC,MAAQ,EAAKb,IAAA,EAAAc,KAAS;EAAA,IAAAX,4BACV,EAAS,EAAAS,UAAU,GAAAR,OAAU,CAAAC,SAAA,MAClD;IACFO,UAAA,YAAAP,UAAAU,OAAA,EAAAC,KAAA,EAAAC,MAAA;MACF,IAAAC,CAAS,IACP,IAAQ,CAEV;MAIAA,CAAA,CAAMC,IAAA,CAAAZ,KAAA,CAAWW,CAAA,EAAAF,KAAA;MAEb,IAAAN,WAAU,GAAAU,QAAA,CAAAC,IAAA,CAAAd,KAAA,CAAAQ,OAAA,EAAAG,CAAA;MACZ,IAAIT,QAAA,OAAAC,WAAA;MACF,IAAAO,MAAM,EAAAK,iBAAgB,CAAAb,QAAc,EAAAQ,MAAU,CAAAM,SAAA;MAC9C,OAAMd,QAAU;IAChB;EACE;EAAO,OAAAG,UACD,CAAAL,KAAA,OAAAiB,SAAA;AAAA;AACoB,SAAAvB,iBACDA,CAAAwB,CAAA;EAA6BxB,iBACtD,GAAAyB,MAAA,CAAAC,cAAA,GAAAD,MAAA,CAAAE,cAAA,YAAAA,eAAAC,EAAA;IAAA,OACFA,EAAA,CAAAC,SAAA,IAAAJ,MAAA,CAAAE,cAAA,CAAAC,EAAA;EAAA;EAEA,OAAA5B,iBAAM,CAAewB,CAAA;AACnB;AAAM,SACRM,UAAAC,QAAA,EAAAC,UAAA;EAAA,IACF,OAAAA,UAAA,mBAAAA,UAAA;IACF,UAAAtB,SAAA;EAEA;EACFqB,QAAA,CAAAT,SAAA,GAAAG,MAAA,CAAAQ,MAAA,CAAAD,UAAA,IAAAA,UAAA,CAAAV,SAAA;IAIAjB,WAAsB;MAIpB6B,KAAM,EAAAH,QAAA;MACJI,QAAU;MACVC,YAAc;IACd;EACF;EAEA,IAAIJ,UAAU,EAAAX,iBAAA,CAAAU,QAAA,EAAAC,UAAA;AACZ;AAA6B,SAC/BK,YAAAC,IAAA,EAAAC,KAAA;EAEA,2BAA0B;;EAC1B,IAAAA,KAAM,IAAM,IAAG,WAAAC,MAAe,gBAAoB,IAAAD,KAAQ,CAAAC,MAAA,CAAAC,WAAA;IAG1D,OAAM,EAAAF,KAAO,CAAAC,MAAA,CAAAC,WAAmB,CAAI,CAAAH,IAAI;EAExC,OAAI,OAAAA,IAAA,YAAAC,KAAA;AACF;AAEI,SACEG,mBAAQA,CAAAC,EAAA;EAAA,OACRxB,QAAU,CAAAyB,QAAA,CAAAC,IAAA,CAAAF,EAAA,EAAAG,OAAA;AAAA;AAGhB,SAAA5C,4BAA0BA,CAAA,EAAU;EAEpC;IACF,IAAA6C,MAAS,IAAOC,OAAA,CAAA1B,SAAA,CAAA2B,OAAA,CAAAJ,IAAA,CAAA1C,OAAA,CAAAC,SAAA,CAAA4C,OAAA,mBACd;EACF,SAAAE,CAAA,GACF;EAEA,QAAAhD,4BAEE,YAAAA,CAAA,EACkB;IAClB,OAAI,EAAA6C,MAAA;EACF;AACA;AAAO,SACT9C,4BAAQA,CAAAP,IAAA,EAAAmD,IAAA;EACN,IAAAA,IAAA,KAAOM,QAAA,CAAAN,IAAA,yBAAAA,IAAA,yBAAAA,IAAA;EACT,OAAApD,wBAAA,CAAAC,IAAA;AACF;AAEA,SAAS2B,kBAAAG,CAAA,EAAoB4B,CAAA;EAC3B/B,iBAAW,GAAQI,MAAO,CAAAC,cAAE,aAAAA,eAAAE,EAAA,EAAAyB,EAAA;IAC9BzB,EAAA,CAAAC,SAAA,GAAAwB,EAAA","ignoreList":[]}

package/package.json

@@ -0,0 +1,66 @@
+{
+  "name": "@o/better-auth-utils",
+  "version": "0.16.19",
+  "description": "Better auth utilities and client for React/React Native applications",
+  "sideEffects": false,
+  "type": "module",
+  "source": "src/index.ts",
+  "main": "dist/cjs",
+  "module": "dist/esm",
+  "types": "./src/index.ts",
+  "files": [
+    "src",
+    "dist"
+  ],
+  "scripts": {
+    "build": "tamagui-build --skip-types",
+    "watch": "tamagui-build --skip-types --watch",
+    "test": "vitest run",
+    "lint": "oxlint src",
+    "lint:fix": "oxfmt src && oxlint --fix --fix-suggestions src",
+    "clean": "tamagui-build clean",
+    "clean:build": "tamagui-build clean:build"
+  },
+  "exports": {
+    "./package.json": "./package.json",
+    ".": {
+      "react-native": "./dist/esm/index.native.js",
+      "types": "./src/index.ts",
+      "import": "./dist/esm/index.mjs",
+      "require": "./dist/cjs/index.cjs",
+      "default": "./dist/esm/index.mjs"
+    },
+    "./server": {
+      "types": "./src/server.ts",
+      "import": "./dist/esm/server.mjs",
+      "require": "./dist/cjs/server.cjs",
+      "default": "./dist/esm/server.mjs"
+    }
+  },
+  "dependencies": {
+    "@o/helpers": "0.16.19",
+    "jose": "^6.0.10"
+  },
+  "peerDependencies": {
+    "better-auth": "^1.6.23",
+    "react": "*"
+  },
+  "devDependencies": {
+    "@tamagui/build": "2.3.1",
+    "@types/node": "24.0.3",
+    "@types/react": "^19.0.8",
+    "oxfmt": "^0.16.0",
+    "oxlint": "^1.31.0",
+    "react": "*",
+    "vitest": "4.1.11"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/natew/orez.git",
+    "directory": "packages/better-auth-utils"
+  },
+  "optionalDependencies": null
+}

package/src/createAuthClient.test.ts

@@ -0,0 +1,86 @@
+import { beforeEach, describe, expect, test, vi } from 'vitest'
+
+const mocks = vi.hoisted(() => ({
+  createAuthClient: vi.fn(),
+  request: vi.fn(),
+}))
+
+vi.mock('better-auth/client', () => ({
+  createAuthClient: mocks.createAuthClient,
+}))
+
+vi.mock('@o/helpers', () => ({
+  createEmitter: (_name: string, initialValue: unknown) => {
+    const emitter = {
+      value: initialValue,
+      emit(value: unknown) {
+        emitter.value = value
+      },
+    }
+    return emitter
+  },
+  createStorageValue: () => ({
+    get: () => undefined,
+    set: vi.fn(),
+    remove: vi.fn(),
+  }),
+  isEqualDeepLite: Object.is,
+  useEmitterValue: (emitter: { value: unknown }) => emitter.value,
+}))
+
+import { createBetterAuthClient } from './createAuthClient'
+
+describe('createBetterAuthClient signOut', () => {
+  beforeEach(() => {
+    mocks.request.mockReset()
+    mocks.createAuthClient.mockReset()
+    mocks.createAuthClient.mockReturnValue({
+      $fetch: mocks.request,
+      useSession: {
+        subscribe: vi.fn(() => vi.fn()),
+      },
+    })
+  })
+
+  test('sends JSON and clears local auth only after server revocation succeeds', async () => {
+    const deferred = Promise.withResolvers<{
+      data: { success: true }
+      error: null
+    }>()
+    mocks.request.mockReturnValue(deferred.promise)
+    const onAuthStateChange = vi.fn()
+    const client = createBetterAuthClient({
+      baseURL: 'https://auth.example.com',
+      onAuthStateChange,
+    })
+
+    const pending = client.authClient.signOut()
+    expect(mocks.request).toHaveBeenCalledWith('/sign-out', {
+      method: 'POST',
+      body: {},
+    })
+    expect(onAuthStateChange).not.toHaveBeenCalled()
+
+    deferred.resolve({ data: { success: true }, error: null })
+    await expect(pending).resolves.toEqual({ data: { success: true }, error: null })
+    expect(onAuthStateChange).toHaveBeenCalledWith({
+      state: 'logged-out',
+      session: null,
+      user: null,
+      token: null,
+    })
+  })
+
+  test('keeps local auth when server revocation fails', async () => {
+    const error = { message: 'network unavailable' }
+    mocks.request.mockResolvedValue({ data: null, error })
+    const onAuthStateChange = vi.fn()
+    const client = createBetterAuthClient({
+      baseURL: 'https://auth.example.com',
+      onAuthStateChange,
+    })
+
+    await expect(client.authClient.signOut()).rejects.toBe(error)
+    expect(onAuthStateChange).not.toHaveBeenCalled()
+  })
+})