@opensaas/stack-auth 0.39.2 → 0.40.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.turbo/turbo-build.log +1 -1
- package/CHANGELOG.md +151 -0
- package/CLAUDE.md +140 -22
- package/dist/client/index.d.ts +0 -16
- package/dist/client/index.d.ts.map +1 -1
- package/dist/config/adopt-better-auth-tables.d.ts +4 -49
- package/dist/config/adopt-better-auth-tables.d.ts.map +1 -1
- package/dist/config/adopt-better-auth-tables.js +4 -51
- package/dist/config/adopt-better-auth-tables.js.map +1 -1
- package/dist/config/derive-auth-lists.d.ts +42 -37
- package/dist/config/derive-auth-lists.d.ts.map +1 -1
- package/dist/config/derive-auth-lists.js +579 -223
- package/dist/config/derive-auth-lists.js.map +1 -1
- package/dist/config/index.d.ts +0 -3
- package/dist/config/index.d.ts.map +1 -1
- package/dist/config/index.js +4 -34
- package/dist/config/index.js.map +1 -1
- package/dist/config/plugin.d.ts.map +1 -1
- package/dist/config/plugin.js +20 -90
- package/dist/config/plugin.js.map +1 -1
- package/dist/config/types.d.ts +89 -67
- package/dist/config/types.d.ts.map +1 -1
- package/dist/index.d.ts +1 -9
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +3 -13
- package/dist/index.js.map +1 -1
- package/dist/lists/index.d.ts +9 -5
- package/dist/lists/index.d.ts.map +1 -1
- package/dist/lists/index.js +9 -6
- package/dist/lists/index.js.map +1 -1
- package/dist/mcp/better-auth.d.ts +6 -19
- package/dist/mcp/better-auth.d.ts.map +1 -1
- package/dist/mcp/better-auth.js +6 -20
- package/dist/mcp/better-auth.js.map +1 -1
- package/dist/plugins/index.d.ts +4 -4
- package/dist/plugins/index.d.ts.map +1 -1
- package/dist/plugins/index.js +4 -4
- package/dist/plugins/index.js.map +1 -1
- package/dist/runtime/types.d.ts +2 -9
- package/dist/runtime/types.d.ts.map +1 -1
- package/dist/runtime/types.js +0 -4
- package/dist/runtime/types.js.map +1 -1
- package/dist/server/index.d.ts +5 -12
- package/dist/server/index.d.ts.map +1 -1
- package/dist/server/index.js +14 -62
- package/dist/server/index.js.map +1 -1
- package/dist/ui/components/ForgotPasswordForm.d.ts +0 -3
- package/dist/ui/components/ForgotPasswordForm.d.ts.map +1 -1
- package/dist/ui/components/ForgotPasswordForm.js +0 -3
- package/dist/ui/components/ForgotPasswordForm.js.map +1 -1
- package/dist/ui/components/ResetPasswordForm.d.ts +0 -3
- package/dist/ui/components/ResetPasswordForm.d.ts.map +1 -1
- package/dist/ui/components/ResetPasswordForm.js +0 -5
- package/dist/ui/components/ResetPasswordForm.js.map +1 -1
- package/dist/ui/components/SignInForm.d.ts +0 -3
- package/dist/ui/components/SignInForm.d.ts.map +1 -1
- package/dist/ui/components/SignInForm.js +0 -4
- package/dist/ui/components/SignInForm.js.map +1 -1
- package/dist/ui/components/SignUpForm.d.ts +0 -3
- package/dist/ui/components/SignUpForm.d.ts.map +1 -1
- package/dist/ui/components/SignUpForm.js +0 -5
- package/dist/ui/components/SignUpForm.js.map +1 -1
- package/dist/ui/lib/clean-error-message.d.ts +3 -6
- package/dist/ui/lib/clean-error-message.d.ts.map +1 -1
- package/dist/ui/lib/clean-error-message.js +3 -6
- package/dist/ui/lib/clean-error-message.js.map +1 -1
- package/dist/ui/types.d.ts +2 -15
- package/dist/ui/types.d.ts.map +1 -1
- package/dist/ui/types.js +2 -7
- package/dist/ui/types.js.map +1 -1
- package/package.json +12 -5
- package/src/client/index.ts +0 -17
- package/src/config/adopt-better-auth-tables.ts +4 -51
- package/src/config/derive-auth-lists.ts +685 -252
- package/src/config/index.ts +4 -34
- package/src/config/plugin.ts +21 -91
- package/src/config/types.ts +90 -67
- package/src/index.ts +3 -14
- package/src/lists/index.ts +17 -5
- package/src/mcp/better-auth.ts +6 -25
- package/src/plugins/index.ts +4 -5
- package/src/runtime/types.ts +2 -10
- package/src/server/index.ts +17 -70
- package/src/ui/components/ForgotPasswordForm.tsx +0 -3
- package/src/ui/components/ResetPasswordForm.tsx +0 -5
- package/src/ui/components/SignInForm.tsx +0 -4
- package/src/ui/components/SignUpForm.tsx +0 -5
- package/src/ui/lib/clean-error-message.ts +3 -6
- package/src/ui/types.ts +2 -15
- package/tests/auth-lists-drift.test.ts +480 -0
- package/tests/config.test.ts +3 -0
- package/tests/credential-field-read-deny-e2e.test.ts +295 -0
- package/tests/derive-auth-lists.test.ts +263 -6
- package/tests/generated-fk-shape.test.ts +432 -9
- package/tests/mcp-oauth-cascade-e2e.test.ts +267 -0
- package/tests/plugin-derived-keys.test.ts +39 -0
- package/tests/plugin-table-derivation.test.ts +270 -0
- package/tsconfig.tsbuildinfo +1 -1
- package/dist/server/schema-converter.d.ts +0 -81
- package/dist/server/schema-converter.d.ts.map +0 -1
- package/dist/server/schema-converter.js +0 -157
- package/dist/server/schema-converter.js.map +0 -1
- package/src/server/schema-converter.ts +0 -243
- package/tests/schema-converter.test.ts +0 -399
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AACjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAC5E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAE7D;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,CAC1B,IAAI,EAAE;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAChD,OAAO,CAAC,EAAE,OAAO,KACd,OAAO,CAAC,IAAI,CAAC,CAAA;AAElB,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,CAAC,EAAE,aAAa,CAAA;IACtB,MAAM,CAAC,EAAE,aAAa,CAAA;IACtB,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAA;CACzC,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;;;;;;;;OAWG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B;;;;;;;;;;;;;;;;OAgBG;IACH,iBAAiB,CAAC,EAAE,aAAa,CAAA;CAClC,CAAA;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,OAAO,CAAA;IAChB;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;;;;;;;;;;;;;;OAgBG;IACH,qBAAqB,CAAC,EAAE,aAAa,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,KAAK,CAAA;CAC3B,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAE7B,IAAI,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;IAEhC,OAAO,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;IAEnC,OAAO,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;IAEnC,YAAY,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;IACxC;;;;;OAKG;IAEH,SAAS,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;CACtC,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;;;;;;;;;;;;;;OAkBG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,OAAO,CAAC,EAAE,SAAS,EAAE,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,gBAAgB,CAAC,EAAE,mBAAmB,GAAG;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAA;IAE1D,iBAAiB,CAAC,EAAE,uBAAuB,GAAG;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAA;IAE/D,aAAa,CAAC,EAAE,mBAAmB,GAAG;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAA;IAEvD,eAAe,CAAC,EAAE,qBAAqB,CAAA;IAEvC;;;;OAIG;IACH,OAAO,CAAC,EAAE,aAAa,GAAG,eAAe,CAAA;IAEzC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,eAAe,CAAA;IAEtB,OAAO,CAAC,EAAE,eAAe,CAAA;IAEzB,YAAY,CAAC,EAAE,eAAe,CAAA;IAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IAExB;;;;;;;;;;;;OAYG;IACH,cAAc,CAAC,EAAE,oBAAoB,CAAA;IAErC;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,EAAE,gBAAgB,CAAA;IAEzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IAE3C;;;;;;;;;;;;;;OAcG;IACH,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAEtC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwCG;IACH,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,OAAO,CAAA;QAChB;;;WAGG;QACH,MAAM,CAAC,EAAE,MAAM,CAAA;QACf;;;WAGG;QACH,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ;;;WAGG;QACH,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,mBAAmB,CAAA;KACtD,GAAG,eAAe,CAAA;IAEnB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;CAC/C,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,gHAAgH;IAChH,OAAO,CAAC,EAAE,SAAS,EAAE,CAAA;CACtB,CAAA;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,yBAAyB,CAAA;IAC/B,OAAO,EAAE,yBAAyB,CAAA;IAClC,OAAO,EAAE,yBAAyB,CAAA;IAClC,YAAY,EAAE,yBAAyB,CAAA;IACvC;;;;OAIG;IACH,SAAS,CAAC,EAAE,yBAAyB,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CACzC,IAAI,CACF,UAAU,EACR,kBAAkB,GAClB,mBAAmB,GACnB,eAAe,GACf,mBAAmB,GACnB,WAAW,GACX,SAAS,GACT,MAAM,GACN,SAAS,GACT,cAAc,GACd,QAAQ,CACX,CACF,GAAG;IACF,gBAAgB,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAA;IAC/C,iBAAiB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAA;IACpD,aAAa,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAA;IAC5C,oFAAoF;IACpF,OAAO,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAA;IAChC,MAAM,EAAE,oBAAoB,CAAA;IAC5B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,iBAAiB,EAAE,gBAAgB,EAAE,CAAA;IACrC,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,OAAO,CAAA;QAChB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,mBAAmB,CAAA;KACtD,CAAA;CACF,CAAA"}
|
package/dist/index.d.ts
CHANGED
|
@@ -1,13 +1,5 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* @opensaas/stack-auth
|
|
3
|
-
*
|
|
4
|
-
* Better-auth integration for OpenSaas Stack
|
|
5
|
-
*
|
|
6
|
-
* This package provides:
|
|
7
|
-
* - Auto-generated User, Session, Account, Verification lists
|
|
8
|
-
* - Session integration with OpenSaas access control
|
|
9
|
-
* - Pre-built auth UI components (SignIn, SignUp, ForgotPassword)
|
|
10
|
-
* - Easy configuration with authPlugin()
|
|
2
|
+
* @opensaas/stack-auth — Better-auth integration for OpenSaas Stack.
|
|
11
3
|
*
|
|
12
4
|
* @example
|
|
13
5
|
* ```typescript
|
package/dist/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC/C,YAAY,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACzE,mBAAmB,mBAAmB,CAAA;AAGtC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAC/D,YAAY,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAA;AAIrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,YAAY,EACV,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,sCAAsC,CAAA;AAE7C,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAG7D,OAAO,EACL,YAAY,EACZ,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA"}
|
package/dist/index.js
CHANGED
|
@@ -1,13 +1,5 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* @opensaas/stack-auth
|
|
3
|
-
*
|
|
4
|
-
* Better-auth integration for OpenSaas Stack
|
|
5
|
-
*
|
|
6
|
-
* This package provides:
|
|
7
|
-
* - Auto-generated User, Session, Account, Verification lists
|
|
8
|
-
* - Session integration with OpenSaas access control
|
|
9
|
-
* - Pre-built auth UI components (SignIn, SignUp, ForgotPassword)
|
|
10
|
-
* - Easy configuration with authPlugin()
|
|
2
|
+
* @opensaas/stack-auth — Better-auth integration for OpenSaas Stack.
|
|
11
3
|
*
|
|
12
4
|
* @example
|
|
13
5
|
* ```typescript
|
|
@@ -27,14 +19,12 @@
|
|
|
27
19
|
* })
|
|
28
20
|
* ```
|
|
29
21
|
*/
|
|
30
|
-
// Config exports
|
|
31
22
|
export { normalizeAuthConfig } from './config/index.js';
|
|
32
23
|
export { authPlugin } from './config/plugin.js';
|
|
33
24
|
// Pure better-auth config -> Auth lists derivation (advanced use cases)
|
|
34
25
|
export { deriveAuthLists } from './config/derive-auth-lists.js';
|
|
35
|
-
// "Adopt existing better-auth tables" recipe —
|
|
36
|
-
//
|
|
37
|
-
// project reaches Schema parity without rebuilding the config by hand.
|
|
26
|
+
// "Adopt existing better-auth tables" recipe — presets the model/schema knobs
|
|
27
|
+
// for a pre-existing separate-schema better-auth install (advanced use case).
|
|
38
28
|
export { adoptBetterAuthTables } from './config/adopt-better-auth-tables.js';
|
|
39
29
|
// List generators (for advanced use cases)
|
|
40
30
|
export { getAuthLists, createUserList, createSessionList, createAccountList, createVerificationList, } from './lists/index.js';
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAI/C,wEAAwE;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAG/D,8EAA8E;AAC9E,8EAA8E;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAQ5E,2CAA2C;AAC3C,OAAO,EACL,YAAY,EACZ,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,kBAAkB,CAAA"}
|
package/dist/lists/index.d.ts
CHANGED
|
@@ -1,4 +1,5 @@
|
|
|
1
1
|
import type { ListConfig, FieldConfig } from '@opensaas/stack-core';
|
|
2
|
+
import type { BetterAuthPlugin } from 'better-auth';
|
|
2
3
|
import type { AuthAccessConfig, NormalizedAuthModels } from '../config/types.js';
|
|
3
4
|
/**
|
|
4
5
|
* Configuration for extending the auto-generated User list
|
|
@@ -24,8 +25,6 @@ export type ExtendUserListConfig = {
|
|
|
24
25
|
hooks?: ListConfig<any>['hooks'];
|
|
25
26
|
};
|
|
26
27
|
/**
|
|
27
|
-
* Create the base User list with better-auth required fields.
|
|
28
|
-
*
|
|
29
28
|
* Backwards-compatible helper: derives the default `User` list (keyed `User`,
|
|
30
29
|
* default field shapes) via {@link deriveAuthLists}.
|
|
31
30
|
*/
|
|
@@ -43,7 +42,9 @@ export declare function createAccountList(): ListConfig<any>;
|
|
|
43
42
|
*/
|
|
44
43
|
export declare function createVerificationList(): ListConfig<any>;
|
|
45
44
|
/**
|
|
46
|
-
* Get all auth lists required by better-auth
|
|
45
|
+
* Get all auth lists required by better-auth — the four base models, an
|
|
46
|
+
* optional database-backed `RateLimit`, and any table a better-auth plugin
|
|
47
|
+
* declares in its own `schema` (issue #992).
|
|
47
48
|
*
|
|
48
49
|
* Derives the Auth lists from the resolved better-auth model config. When no
|
|
49
50
|
* `models` are supplied (or none carry overrides), the result is the historical
|
|
@@ -51,7 +52,10 @@ export declare function createVerificationList(): ListConfig<any>;
|
|
|
51
52
|
*
|
|
52
53
|
* @param userConfig - Extra User-list fields/access/hooks (from `extendUserList`)
|
|
53
54
|
* @param models - Resolved better-auth model config; defaults to the better-auth defaults
|
|
54
|
-
* @param accessConfig - App-authored access for each Auth list, keyed by better-auth model name
|
|
55
|
+
* @param accessConfig - App-authored access for each base Auth list, keyed by better-auth model name
|
|
56
|
+
* @param plugins - The app's better-auth plugins (`authPlugin({ betterAuthPlugins })`)
|
|
57
|
+
* @param credentialFieldsConfig - App-authored additions to the credential-field read-deny
|
|
58
|
+
* (`authPlugin({ credentialFields })`), keyed by better-auth model key
|
|
55
59
|
*/
|
|
56
|
-
export declare function getAuthLists(userConfig?: ExtendUserListConfig, models?: NormalizedAuthModels, accessConfig?: AuthAccessConfig): Record<string, ListConfig<any>>;
|
|
60
|
+
export declare function getAuthLists(userConfig?: ExtendUserListConfig, models?: NormalizedAuthModels, accessConfig?: AuthAccessConfig, plugins?: BetterAuthPlugin[], credentialFieldsConfig?: Record<string, string[]>): Record<string, ListConfig<any>>;
|
|
57
61
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lists/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAGhF;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IACpC;;;;;;;OAOG;IAEH,MAAM,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;IAClC;;OAEG;IAEH,KAAK,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAA;CACjC,CAAA;AAeD
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lists/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAGhF;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IACpC;;;;;;;OAOG;IAEH,MAAM,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;IAClC;;OAEG;IAEH,KAAK,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAA;CACjC,CAAA;AAeD;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,MAAM,CAAC,EAAE,oBAAoB,GAE5B,UAAU,CAAC,GAAG,CAAC,CAEjB;AAED;;GAEG;AAEH,wBAAgB,iBAAiB,IAAI,UAAU,CAAC,GAAG,CAAC,CAEnD;AAED;;GAEG;AAEH,wBAAgB,iBAAiB,IAAI,UAAU,CAAC,GAAG,CAAC,CAEnD;AAED;;GAEG;AAEH,wBAAgB,sBAAsB,IAAI,UAAU,CAAC,GAAG,CAAC,CAExD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,YAAY,CAC1B,UAAU,CAAC,EAAE,oBAAoB,EACjC,MAAM,GAAE,oBAAqC,EAC7C,YAAY,CAAC,EAAE,gBAAgB,EAC/B,OAAO,CAAC,EAAE,gBAAgB,EAAE,EAC5B,sBAAsB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAEhD,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAQjC"}
|
package/dist/lists/index.js
CHANGED
|
@@ -12,8 +12,6 @@ const DEFAULT_MODELS = {
|
|
|
12
12
|
verification: { modelName: 'Verification', fields: {} },
|
|
13
13
|
};
|
|
14
14
|
/**
|
|
15
|
-
* Create the base User list with better-auth required fields.
|
|
16
|
-
*
|
|
17
15
|
* Backwards-compatible helper: derives the default `User` list (keyed `User`,
|
|
18
16
|
* default field shapes) via {@link deriveAuthLists}.
|
|
19
17
|
*/
|
|
@@ -42,7 +40,9 @@ export function createVerificationList() {
|
|
|
42
40
|
return deriveAuthLists(DEFAULT_MODELS).lists.Verification;
|
|
43
41
|
}
|
|
44
42
|
/**
|
|
45
|
-
* Get all auth lists required by better-auth
|
|
43
|
+
* Get all auth lists required by better-auth — the four base models, an
|
|
44
|
+
* optional database-backed `RateLimit`, and any table a better-auth plugin
|
|
45
|
+
* declares in its own `schema` (issue #992).
|
|
46
46
|
*
|
|
47
47
|
* Derives the Auth lists from the resolved better-auth model config. When no
|
|
48
48
|
* `models` are supplied (or none carry overrides), the result is the historical
|
|
@@ -50,9 +50,12 @@ export function createVerificationList() {
|
|
|
50
50
|
*
|
|
51
51
|
* @param userConfig - Extra User-list fields/access/hooks (from `extendUserList`)
|
|
52
52
|
* @param models - Resolved better-auth model config; defaults to the better-auth defaults
|
|
53
|
-
* @param accessConfig - App-authored access for each Auth list, keyed by better-auth model name
|
|
53
|
+
* @param accessConfig - App-authored access for each base Auth list, keyed by better-auth model name
|
|
54
|
+
* @param plugins - The app's better-auth plugins (`authPlugin({ betterAuthPlugins })`)
|
|
55
|
+
* @param credentialFieldsConfig - App-authored additions to the credential-field read-deny
|
|
56
|
+
* (`authPlugin({ credentialFields })`), keyed by better-auth model key
|
|
54
57
|
*/
|
|
55
|
-
export function getAuthLists(userConfig, models = DEFAULT_MODELS, accessConfig) {
|
|
56
|
-
return deriveAuthLists(models, userConfig || {}, accessConfig || {}).lists;
|
|
58
|
+
export function getAuthLists(userConfig, models = DEFAULT_MODELS, accessConfig, plugins, credentialFieldsConfig) {
|
|
59
|
+
return deriveAuthLists(models, userConfig || {}, accessConfig || {}, plugins || [], credentialFieldsConfig || {}).lists;
|
|
57
60
|
}
|
|
58
61
|
//# sourceMappingURL=index.js.map
|
package/dist/lists/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lists/index.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lists/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AA4BhE;;;;;GAKG;AACH,MAAM,cAAc,GAAyB;IAC3C,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;IACvC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE;IAC7C,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE;IAC7C,YAAY,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,EAAE;CACxD,CAAA;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,MAA6B;IAG7B,OAAO,eAAe,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;AAC3D,CAAC;AAED;;GAEG;AACH,qGAAqG;AACrG,MAAM,UAAU,iBAAiB;IAC/B,OAAO,eAAe,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,OAAO,CAAA;AACtD,CAAC;AAED;;GAEG;AACH,qGAAqG;AACrG,MAAM,UAAU,iBAAiB;IAC/B,OAAO,eAAe,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,OAAO,CAAA;AACtD,CAAC;AAED;;GAEG;AACH,qGAAqG;AACrG,MAAM,UAAU,sBAAsB;IACpC,OAAO,eAAe,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,YAAY,CAAA;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,YAAY,CAC1B,UAAiC,EACjC,MAAM,GAAyB,cAAc,EAC7C,YAA+B,EAC/B,OAA4B,EAC5B,sBAAiD;IAGjD,OAAO,eAAe,CACpB,MAAM,EACN,UAAU,IAAI,EAAE,EAChB,YAAY,IAAI,EAAE,EAClB,OAAO,IAAI,EAAE,EACb,sBAAsB,IAAI,EAAE,CAC7B,CAAC,KAAK,CAAA;AACT,CAAC"}
|
|
@@ -1,12 +1,4 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Better Auth integration for MCP OAuth authentication
|
|
3
|
-
* Provides session handling and authentication utilities
|
|
4
|
-
*/
|
|
5
1
|
import type { McpSession, McpSessionProvider } from '@opensaas/stack-core/mcp';
|
|
6
|
-
/**
|
|
7
|
-
* Better Auth instance type (flexible)
|
|
8
|
-
* Uses minimal typing to avoid tight coupling with better-auth package
|
|
9
|
-
*/
|
|
10
2
|
export type BetterAuthInstance = {
|
|
11
3
|
api: any;
|
|
12
4
|
[key: string]: any;
|
|
@@ -77,24 +69,19 @@ export declare function mcpSessionToContextSession(mcpSession: McpSession): {
|
|
|
77
69
|
* ```
|
|
78
70
|
*/
|
|
79
71
|
export declare function hasScopes(session: McpSession, requiredScopes: string[]): boolean;
|
|
80
|
-
/**
|
|
81
|
-
* Check if MCP session is expired
|
|
82
|
-
*/
|
|
83
72
|
export declare function isSessionExpired(session: McpSession): boolean;
|
|
84
73
|
/**
|
|
85
|
-
*
|
|
86
|
-
* Exposes OAuth authorization server metadata for MCP clients
|
|
74
|
+
* Exposes OAuth authorization server metadata for MCP clients.
|
|
87
75
|
*
|
|
88
|
-
*
|
|
89
|
-
*
|
|
90
|
-
*
|
|
76
|
+
* Place at `/.well-known/oauth-authorization-server/route.ts`. Better Auth
|
|
77
|
+
* already handles `/api/auth/.well-known/oauth-authorization-server`, but
|
|
78
|
+
* some clients may fail to parse the `WWW-Authenticate` header.
|
|
91
79
|
*/
|
|
92
80
|
export declare function createOAuthDiscoveryHandler(_auth: BetterAuthInstance): (req: Request) => Promise<Response>;
|
|
93
81
|
/**
|
|
94
|
-
*
|
|
95
|
-
* Exposes OAuth protected resource metadata for MCP clients
|
|
82
|
+
* Exposes OAuth protected resource metadata for MCP clients.
|
|
96
83
|
*
|
|
97
|
-
*
|
|
84
|
+
* Place at `/.well-known/oauth-protected-resource/route.ts`.
|
|
98
85
|
*/
|
|
99
86
|
export declare function createOAuthProtectedResourceHandler(_auth: BetterAuthInstance): (req: Request) => Promise<Response>;
|
|
100
87
|
//# sourceMappingURL=better-auth.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"better-auth.d.ts","sourceRoot":"","sources":["../../src/mcp/better-auth.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"better-auth.d.ts","sourceRoot":"","sources":["../../src/mcp/better-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAE9E,MAAM,MAAM,kBAAkB,GAAG;IAE/B,GAAG,EAAE,GAAG,CAAA;IAER,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CACnB,CAAA;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,kBAAkB,GAAG,kBAAkB,CAIvF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,kBAAkB,EACxB,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAC3E,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAiBrC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,UAAU,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAIrF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAGhF;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAG7D;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,kBAAkB,SAChD,OAAO,uBAQ3B;AAED;;;;GAIG;AACH,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,kBAAkB,SACxD,OAAO,uBAQ3B"}
|
package/dist/mcp/better-auth.js
CHANGED
|
@@ -1,7 +1,3 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Better Auth integration for MCP OAuth authentication
|
|
3
|
-
* Provides session handling and authentication utilities
|
|
4
|
-
*/
|
|
5
1
|
/**
|
|
6
2
|
* Create Better Auth MCP session adapter
|
|
7
3
|
* Converts Better Auth instance into MCP session provider
|
|
@@ -47,12 +43,10 @@ export function createBetterAuthMcpAdapter(auth) {
|
|
|
47
43
|
*/
|
|
48
44
|
export function withMcpAuth(auth, handler) {
|
|
49
45
|
return async (req) => {
|
|
50
|
-
// Extract MCP session from Better Auth
|
|
51
46
|
const session = await auth.api.getMcpSession({
|
|
52
47
|
headers: req.headers,
|
|
53
48
|
});
|
|
54
49
|
if (!session) {
|
|
55
|
-
// Return 401 with WWW-Authenticate header for OAuth clients
|
|
56
50
|
return new Response(null, {
|
|
57
51
|
status: 401,
|
|
58
52
|
headers: {
|
|
@@ -60,7 +54,6 @@ export function withMcpAuth(auth, handler) {
|
|
|
60
54
|
},
|
|
61
55
|
});
|
|
62
56
|
}
|
|
63
|
-
// Call handler with authenticated session
|
|
64
57
|
return handler(req, session);
|
|
65
58
|
};
|
|
66
59
|
}
|
|
@@ -96,25 +89,20 @@ export function hasScopes(session, requiredScopes) {
|
|
|
96
89
|
return false;
|
|
97
90
|
return requiredScopes.every((scope) => session.scopes.includes(scope));
|
|
98
91
|
}
|
|
99
|
-
/**
|
|
100
|
-
* Check if MCP session is expired
|
|
101
|
-
*/
|
|
102
92
|
export function isSessionExpired(session) {
|
|
103
93
|
if (!session.expiresAt)
|
|
104
94
|
return false;
|
|
105
95
|
return new Date() > session.expiresAt;
|
|
106
96
|
}
|
|
107
97
|
/**
|
|
108
|
-
*
|
|
109
|
-
* Exposes OAuth authorization server metadata for MCP clients
|
|
98
|
+
* Exposes OAuth authorization server metadata for MCP clients.
|
|
110
99
|
*
|
|
111
|
-
*
|
|
112
|
-
*
|
|
113
|
-
*
|
|
100
|
+
* Place at `/.well-known/oauth-authorization-server/route.ts`. Better Auth
|
|
101
|
+
* already handles `/api/auth/.well-known/oauth-authorization-server`, but
|
|
102
|
+
* some clients may fail to parse the `WWW-Authenticate` header.
|
|
114
103
|
*/
|
|
115
104
|
export function createOAuthDiscoveryHandler(_auth) {
|
|
116
105
|
return async (req) => {
|
|
117
|
-
// Delegate to Better Auth's built-in handler
|
|
118
106
|
const authPath = '/api/auth/.well-known/oauth-authorization-server';
|
|
119
107
|
const authUrl = new URL(authPath, req.url);
|
|
120
108
|
return fetch(authUrl.toString(), {
|
|
@@ -123,14 +111,12 @@ export function createOAuthDiscoveryHandler(_auth) {
|
|
|
123
111
|
};
|
|
124
112
|
}
|
|
125
113
|
/**
|
|
126
|
-
*
|
|
127
|
-
* Exposes OAuth protected resource metadata for MCP clients
|
|
114
|
+
* Exposes OAuth protected resource metadata for MCP clients.
|
|
128
115
|
*
|
|
129
|
-
*
|
|
116
|
+
* Place at `/.well-known/oauth-protected-resource/route.ts`.
|
|
130
117
|
*/
|
|
131
118
|
export function createOAuthProtectedResourceHandler(_auth) {
|
|
132
119
|
return async (req) => {
|
|
133
|
-
// Delegate to Better Auth's built-in handler
|
|
134
120
|
const authPath = '/api/auth/.well-known/oauth-protected-resource';
|
|
135
121
|
const authUrl = new URL(authPath, req.url);
|
|
136
122
|
return fetch(authUrl.toString(), {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"better-auth.js","sourceRoot":"","sources":["../../src/mcp/better-auth.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"better-auth.js","sourceRoot":"","sources":["../../src/mcp/better-auth.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAwB;IACjE,OAAO,KAAK,EAAE,OAAgB,EAA8B,EAAE;QAC5D,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IAClD,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,WAAW,CACzB,IAAwB,EACxB,OAA4E;IAE5E,OAAO,KAAK,EAAE,GAAY,EAAE,EAAE;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;YAC3C,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC,CAAA;QAEF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;gBACxB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE;oBACP,kBAAkB,EAAE,2CAA2C;iBAChE;aACF,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IAC9B,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,0BAA0B,CAAC,UAAsB;IAC/D,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;KAC1B,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS,CAAC,OAAmB,EAAE,cAAwB;IACrE,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACjC,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;AACzE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAmB;IAClD,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO,KAAK,CAAA;IACpC,OAAO,IAAI,IAAI,EAAE,GAAG,OAAO,CAAC,SAAS,CAAA;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAyB;IACnE,OAAO,KAAK,EAAE,GAAY,EAAE,EAAE;QAC5B,MAAM,QAAQ,GAAG,kDAAkD,CAAA;QACnE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,CAAA;QAE1C,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE;YAC/B,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC,CAAA;IACJ,CAAC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mCAAmC,CAAC,KAAyB;IAC3E,OAAO,KAAK,EAAE,GAAY,EAAE,EAAE;QAC5B,MAAM,QAAQ,GAAG,gDAAgD,CAAA;QACjE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,CAAA;QAE1C,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE;YAC/B,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC,CAAA;IACJ,CAAC,CAAA;AACH,CAAC"}
|
package/dist/plugins/index.d.ts
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
/**
|
|
2
|
-
*
|
|
3
|
-
*
|
|
4
|
-
*
|
|
2
|
+
* better-auth 1.7 split the MCP plugin out of `better-auth/plugins` into its
|
|
3
|
+
* own `@better-auth/mcp` package (an optional peer of this package) — see the
|
|
4
|
+
* 1.7.1 upgrade note in the auth package's CHANGELOG.
|
|
5
5
|
*/
|
|
6
|
-
export { mcp } from 'better-auth/
|
|
6
|
+
export { mcp } from '@better-auth/mcp';
|
|
7
7
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/plugins/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/plugins/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA"}
|
package/dist/plugins/index.js
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
/**
|
|
2
|
-
*
|
|
3
|
-
*
|
|
4
|
-
*
|
|
2
|
+
* better-auth 1.7 split the MCP plugin out of `better-auth/plugins` into its
|
|
3
|
+
* own `@better-auth/mcp` package (an optional peer of this package) — see the
|
|
4
|
+
* 1.7.1 upgrade note in the auth package's CHANGELOG.
|
|
5
5
|
*/
|
|
6
|
-
export { mcp } from 'better-auth/
|
|
6
|
+
export { mcp } from '@better-auth/mcp';
|
|
7
7
|
//# sourceMappingURL=index.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/plugins/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/plugins/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA"}
|
package/dist/runtime/types.d.ts
CHANGED
|
@@ -1,23 +1,16 @@
|
|
|
1
1
|
/**
|
|
2
|
-
*
|
|
3
|
-
*
|
|
4
|
-
*/
|
|
5
|
-
/**
|
|
6
|
-
* Runtime services provided by the auth plugin
|
|
7
|
-
* Available via context.plugins.auth
|
|
2
|
+
* Runtime services provided by the auth plugin, available via
|
|
3
|
+
* `context.plugins.auth`.
|
|
8
4
|
*/
|
|
9
5
|
export interface AuthRuntimeServices {
|
|
10
6
|
/**
|
|
11
|
-
* Get user by ID.
|
|
12
7
|
* Resolves through the plugin runtime's `sudo` helper, so the result does
|
|
13
8
|
* not depend on the application's User list access policy (ADR-0013).
|
|
14
9
|
*
|
|
15
|
-
* @param userId - The ID of the user to fetch
|
|
16
10
|
* @returns User object or null if not found
|
|
17
11
|
*/
|
|
18
12
|
getUser: (userId: string) => Promise<unknown>;
|
|
19
13
|
/**
|
|
20
|
-
* Get current user from session.
|
|
21
14
|
* Extracts userId from session and fetches user data through the plugin
|
|
22
15
|
* runtime's `sudo` helper — see {@link getUser}.
|
|
23
16
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;;OAKG;IACH,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAE7C;;;;;OAKG;IACH,cAAc,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;CACvC"}
|
package/dist/runtime/types.js
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":""}
|
package/dist/server/index.d.ts
CHANGED
|
@@ -2,13 +2,9 @@ import { nextCookies } from 'better-auth/next-js';
|
|
|
2
2
|
import type { Auth, BetterAuthOptions, BetterAuthPlugin } from 'better-auth';
|
|
3
3
|
import type { OpenSaasConfig, AccessContext, Session } from '@opensaas/stack-core';
|
|
4
4
|
/**
|
|
5
|
-
*
|
|
6
|
-
*
|
|
7
|
-
*
|
|
8
|
-
* tuple type (rather than the widened `BetterAuthPlugin[]`) is what lets
|
|
9
|
-
* `betterAuth()` re-infer plugin endpoints (e.g. `emailOTP()`'s
|
|
10
|
-
* `api.signInEmailOTP`) and a `customSession()` plugin's replaced session
|
|
11
|
-
* shape from the resulting options object.
|
|
5
|
+
* `BetterAuthOptions['plugins']` narrowed to the app's literal tuple plus the
|
|
6
|
+
* appended `nextCookies()` — see {@link buildBetterAuthOptions}'s tuple-typing
|
|
7
|
+
* doc for why this matters.
|
|
12
8
|
*/
|
|
13
9
|
type ResolvedBetterAuthOptions<TPlugins extends readonly BetterAuthPlugin[]> = Omit<BetterAuthOptions, 'plugins'> & {
|
|
14
10
|
plugins: [...TPlugins, ReturnType<typeof nextCookies>];
|
|
@@ -117,11 +113,8 @@ export declare function createAuth<const TPlugins extends readonly BetterAuthPlu
|
|
|
117
113
|
* outage) into "anonymous" is indistinguishable from a mass sign-out under
|
|
118
114
|
* fail-closed access control, so the caller must see it.
|
|
119
115
|
*
|
|
120
|
-
*
|
|
121
|
-
*
|
|
122
|
-
* await headers() })`. Exported as the single reusable implementation; pass
|
|
123
|
-
* the caller's request headers (e.g. Next.js `await headers()` in a Server
|
|
124
|
-
* Component/action) so a session cookie can actually be resolved.
|
|
116
|
+
* Pass the caller's request headers (e.g. Next.js `await headers()` in a
|
|
117
|
+
* Server Component/action) so a session cookie can actually be resolved.
|
|
125
118
|
*
|
|
126
119
|
* `auth` is typed structurally over just the one member this function reads
|
|
127
120
|
* — `api.getSession` — rather than a single concrete `Auth<Options>`
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACjD,OAAO,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC5E,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAIlF
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACjD,OAAO,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC5E,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAIlF;;;;GAIG;AACH,KAAK,yBAAyB,CAAC,QAAQ,SAAS,SAAS,gBAAgB,EAAE,IAAI,IAAI,CACjF,iBAAiB,EACjB,SAAS,CACV,GAAG;IACF,OAAO,EAAE,CAAC,GAAG,QAAQ,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC,CAAA;CACvD,CAAA;AAkJD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAsB,sBAAsB,CAC1C,cAAc,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,EACxD,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,GAC9C,OAAO,CAAC,iBAAiB,CAAC,CAAA;AAC7B,wBAAsB,sBAAsB,CAAC,KAAK,CAAC,QAAQ,SAAS,SAAS,gBAAgB,EAAE,EAC7F,cAAc,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,EACxD,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,EAC/C,OAAO,EAAE,QAAQ,GAChB,OAAO,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAA;AAwI/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAgB,UAAU,CACxB,cAAc,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,EACxD,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,GAC9C,IAAI,CAAC,iBAAiB,CAAC,CAAA;AAC1B,wBAAgB,UAAU,CAAC,KAAK,CAAC,QAAQ,SAAS,SAAS,gBAAgB,EAAE,EAC3E,cAAc,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,EACxD,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,EAC/C,OAAO,EAAE,QAAQ,GAChB,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAA;AAsH5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAsB,kBAAkB,CAAC,gBAAgB,EACvD,IAAI,EAAE;IAAE,GAAG,EAAE;QAAE,UAAU,EAAE,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,OAAO,CAAA;SAAE,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAA;KAAE,CAAA;CAAE,EACxF,aAAa,EAAE,MAAM,EAAE,EACvB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAoBzB;AAED,YAAY,EAAE,iBAAiB,EAAE,CAAA"}
|