@object-ui/auth 3.1.2 → 3.1.3

package/README.md

@@ -8,7 +8,7 @@ Authentication system for Object UI — AuthProvider, guards, login/register for
 - 🛡️ **AuthGuard** - Protect routes and components from unauthenticated access
 - 📝 **Pre-built Forms** - LoginForm, RegisterForm, and ForgotPasswordForm ready to use
 - 👤 **UserMenu** - Display authenticated user info with sign-out support
-- 🔑 **Auth Client Factory** - `createAuthClient` for pluggable backend integration
+- 🔑 **Auth Client Factory** - `createAuthClient` powered by official [better-auth](https://better-auth.com) client
 - 🌐 **Authenticated Fetch** - `createAuthenticatedFetch` for automatic token injection
 - 👀 **Preview Mode** - Auto-login with simulated identity for marketplace demos and app showcases
 - 🎯 **Type-Safe** - Full TypeScript support with exported types
@@ -30,8 +30,7 @@ import { AuthProvider, useAuth, AuthGuard } from '@object-ui/auth';
 import { createAuthClient } from '@object-ui/auth';
 
 const authClient = createAuthClient({
-  provider: 'custom',
-  apiUrl: 'https://api.example.com/auth',
+  baseURL: 'https://api.example.com/auth',
 });
 
 function App() {

package/dist/createAuthClient.d.ts

@@ -7,11 +7,12 @@
  */
 import type { AuthClient, AuthClientConfig } from './types';
 /**
- * Create an auth client instance.
+ * Create an auth client instance backed by the official better-auth client.
  *
- * This factory creates an abstraction layer over the authentication provider.
- * It is designed to work with better-auth but can be adapted to any auth backend
- * that exposes standard REST endpoints for sign-in, sign-up, sign-out, and session management.
+ * Internally delegates to `createAuthClient` from `better-auth/client`,
+ * exposing the same {@link AuthClient} interface so that AuthProvider,
+ * createAuthenticatedFetch, and all downstream consumers continue to work
+ * without changes.
  *
  * @example
  * ```ts

package/dist/createAuthClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createAuthClient.d.ts","sourceRoot":"","sources":["../src/createAuthClient.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAwD,MAAM,SAAS,CAAC;AAElH;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,UAAU,CA4ErE"}
+{"version":3,"file":"createAuthClient.d.ts","sourceRoot":"","sources":["../src/createAuthClient.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAwD,MAAM,SAAS,CAAC;AAiClH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,UAAU,CAwFrE"}

package/dist/createAuthClient.js

@@ -5,12 +5,45 @@
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.
  */
+import { createAuthClient as createBetterAuthClient } from 'better-auth/client';
 /**
- * Create an auth client instance.
+ * Resolve a baseURL (which may be relative or absolute) into the
+ * `{ origin, basePath }` pair required by the better-auth client.
  *
- * This factory creates an abstraction layer over the authentication provider.
- * It is designed to work with better-auth but can be adapted to any auth backend
- * that exposes standard REST endpoints for sign-in, sign-up, sign-out, and session management.
+ * - Absolute URLs (e.g. `http://localhost:3000/api/auth`) are split into origin + pathname.
+ * - Relative paths (e.g. `/api/v1/auth`) use `window.location.origin` in
+ *   browser environments, falling back to `http://localhost` elsewhere.
+ */
+function resolveAuthURL(baseURL) {
+    try {
+        const url = new URL(baseURL);
+        return { origin: url.origin, basePath: url.pathname.replace(/\/$/, '') };
+    }
+    catch {
+        // Relative URL – resolve against the current origin when available
+        const origin = getWindowOrigin() ?? 'http://localhost';
+        return { origin, basePath: baseURL.replace(/\/$/, '') };
+    }
+}
+/** Safely read window.location.origin when available (browser environments). */
+function getWindowOrigin() {
+    try {
+        if (typeof window !== 'undefined' && window.location?.origin) {
+            return window.location.origin;
+        }
+    }
+    catch {
+        // window may be defined but accessing location can throw in some SSR environments
+    }
+    return undefined;
+}
+/**
+ * Create an auth client instance backed by the official better-auth client.
+ *
+ * Internally delegates to `createAuthClient` from `better-auth/client`,
+ * exposing the same {@link AuthClient} interface so that AuthProvider,
+ * createAuthenticatedFetch, and all downstream consumers continue to work
+ * without changes.
  *
  * @example
  * ```ts
@@ -19,70 +52,79 @@
  * ```
  */
 export function createAuthClient(config) {
-    const { baseURL, fetchFn = fetch } = config;
-    async function request(path, options) {
-        const url = `${baseURL}${path}`;
-        const response = await fetchFn(url, {
-            ...options,
-            headers: {
-                'Content-Type': 'application/json',
-                ...options?.headers,
-            },
-            credentials: 'include',
-        });
-        if (!response.ok) {
-            const body = await response.json().catch(() => null);
-            const message = (body && typeof body === 'object' && 'message' in body)
-                ? String(body.message)
-                : `Auth request failed with status ${response.status}`;
-            throw new Error(message);
-        }
-        return response.json();
-    }
+    const { baseURL, fetchFn } = config;
+    const { origin, basePath } = resolveAuthURL(baseURL);
+    const betterAuth = createBetterAuthClient({
+        baseURL: origin,
+        basePath,
+        disableDefaultFetchPlugins: true,
+        fetchOptions: fetchFn ? { customFetchImpl: fetchFn } : undefined,
+    });
+    // The better-auth client exposes methods whose TS return types are narrower
+    // than the runtime JSON the server actually sends (e.g. `session` on signIn).
+    // We deliberately cast through `unknown` to bridge from better-auth types
+    // to the ObjectUI AuthClient contract.
     return {
         async signIn(credentials) {
-            return request('/sign-in/email', {
-                method: 'POST',
-                body: JSON.stringify(credentials),
+            const { data, error } = await betterAuth.signIn.email({
+                email: credentials.email,
+                password: credentials.password,
             });
+            if (error) {
+                throw new Error(error.message ?? `Auth request failed with status ${error.status}`);
+            }
+            const payload = data;
+            return { user: payload.user, session: payload.session };
         },
-        async signUp(data) {
-            return request('/sign-up/email', {
-                method: 'POST',
-                body: JSON.stringify(data),
+        async signUp(signUpData) {
+            const { data, error } = await betterAuth.signUp.email({
+                email: signUpData.email,
+                password: signUpData.password,
+                name: signUpData.name,
             });
+            if (error) {
+                throw new Error(error.message ?? `Auth request failed with status ${error.status}`);
+            }
+            const payload = data;
+            return { user: payload.user, session: payload.session };
         },
         async signOut() {
-            await request('/sign-out', { method: 'POST' });
+            const { error } = await betterAuth.signOut();
+            if (error) {
+                throw new Error(error.message ?? `Auth request failed with status ${error.status}`);
+            }
         },
         async getSession() {
-            try {
-                return await request('/get-session', {
-                    method: 'GET',
-                });
-            }
-            catch {
+            const { data, error } = await betterAuth.getSession();
+            if (error || !data)
                 return null;
-            }
+            const payload = data;
+            return { user: payload.user, session: payload.session };
         },
         async forgotPassword(email) {
-            await request('/forgot-password', {
-                method: 'POST',
-                body: JSON.stringify({ email }),
-            });
+            const forgetPw = betterAuth.forgetPassword;
+            const { error } = await forgetPw({ email, redirectTo: '/' });
+            if (error) {
+                throw new Error(error.message ?? `Auth request failed with status ${error.status}`);
+            }
         },
         async resetPassword(token, newPassword) {
-            await request('/reset-password', {
-                method: 'POST',
-                body: JSON.stringify({ token, newPassword }),
-            });
+            const { error } = await betterAuth.resetPassword({ token, newPassword });
+            if (error) {
+                throw new Error(error.message ?? `Auth request failed with status ${error.status}`);
+            }
         },
-        async updateUser(data) {
-            const result = await request('/update-user', {
-                method: 'POST',
-                body: JSON.stringify(data),
-            });
-            return result.user;
+        async updateUser(userData) {
+            const { data, error } = await betterAuth.updateUser(userData);
+            if (error) {
+                throw new Error(error.message ?? `Auth request failed with status ${error.status}`);
+            }
+            if (!data) {
+                throw new Error('Update user returned no data');
+            }
+            // The server response may wrap the user in a `user` key or return it directly
+            const raw = data;
+            return (raw && typeof raw === 'object' && 'user' in raw ? raw.user : raw);
         },
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@object-ui/auth",
-  "version": "3.1.2",
+  "version": "3.1.3",
   "type": "module",
   "license": "MIT",
   "description": "Authentication system for Object UI with AuthProvider, useAuth hook, AuthGuard, and form components.",
@@ -27,7 +27,8 @@
     "react": "^18.0.0 || ^19.0.0"
   },
   "dependencies": {
-    "@object-ui/types": "3.1.2"
+    "better-auth": "^1.5.4",
+    "@object-ui/types": "3.1.3"
   },
   "devDependencies": {
     "@types/react": "19.2.14",