@protobase/server 0.1.3 → 0.1.4

package/dist/better-auth/create-auth.d.ts

@@ -31,7 +31,14 @@ export type CreateAuthOptions = {
    * Default none.
    */
   socialProviders?: BetterAuthOptions['socialProviders'];
+  /** Encrypt the OAuth access, refresh and ID tokens Better Auth stores for social sign-ins, with `secret`. Default off. */
+  encryptOAuthTokens?: boolean;
+  /** Runs after a user is created, by any route: `createUser`, an admin, or a social sign-up. Default none. */
+  onUserCreated?: UserCreatedHook;
 };
+type UserCreateHooks = NonNullable<NonNullable<NonNullable<BetterAuthOptions['databaseHooks']>['user']>['create']>;
+/** Better Auth's `databaseHooks.user.create.after`: the created user (with its `role`) and the request context, `null` outside a request. */
+export type UserCreatedHook = NonNullable<UserCreateHooks['after']>;
 /** The configured roles with `admin` first; `admin` is added when missing. */
 export declare const normalizeRoles: (roles?: string[]) => string[];
 export declare const createAuth: (options: CreateAuthOptions) => import("better-auth").Auth<{
@@ -1181,6 +1188,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
   databaseHooks: {
     user: {
       create: {
+        after?: ((user: import("better-auth").User & Record<string, unknown>, context: import("better-auth").GenericEndpointContext | null) => Promise<void>) | undefined;
         before: (user: {
           id: string;
           createdAt: Date;
@@ -1224,6 +1232,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       handler: () => void;
     };
   };
+  account?: {
+    encryptOAuthTokens: true;
+  } | undefined;
   socialProviders?: import("better-auth").SocialProviders | undefined;
   database: any;
   baseURL: string;

package/dist/better-auth/create-auth.js

@@ -44,6 +44,7 @@ const betterAuthOptions = (options, { roles, defaultRole, mailer }) => {
 			...mailer && passwordResetOptions(mailer)
 		},
 		...options.socialProviders && { socialProviders: options.socialProviders },
+		...options.encryptOAuthTokens && { account: { encryptOAuthTokens: true } },
 		plugins: [admin({
 			defaultRole: defaultRole ?? "unassigned",
 			roles: Object.fromEntries(roles.map((role) => [role, role === "admin" ? adminAc : userAc]))
@@ -56,12 +57,15 @@ const betterAuthOptions = (options, { roles, defaultRole, mailer }) => {
 				role: user.role
 			})
 		} })],
-		databaseHooks: { user: { create: { before: async (user) => {
-			const given = String(user.role ?? "").split(",").map((name) => name.trim()).filter(Boolean);
-			const unknown = given.find((name) => !roles.includes(name));
-			if (given.length === 0 || unknown !== void 0) throw new APIError("BAD_REQUEST", { message: `Choose a role for the new user: ${roles.join(", ")}` });
-			return { data: user };
-		} } } },
+		databaseHooks: { user: { create: {
+			before: async (user) => {
+				const given = String(user.role ?? "").split(",").map((name) => name.trim()).filter(Boolean);
+				const unknown = given.find((name) => !roles.includes(name));
+				if (given.length === 0 || unknown !== void 0) throw new APIError("BAD_REQUEST", { message: `Choose a role for the new user: ${roles.join(", ")}` });
+				return { data: user };
+			},
+			...options.onUserCreated && { after: options.onUserCreated }
+		} } },
 		rateLimit: {
 			enabled: true,
 			window: 60,

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { AdminAuth, CreateAuthOptions, createAuth, normalizeRoles } from "./better-auth/create-auth.js";
+import { AdminAuth, CreateAuthOptions, UserCreatedHook, createAuth, normalizeRoles } from "./better-auth/create-auth.js";
 import { ResourceSource, configExports } from "./resource-source.js";
 import { Admin, AdminOptions, AuditEvent, AuditQueue, Authenticator, PipelineHook, ScanGuardMode, Session, TenantValue, User, ViewSource, WriteEvent, WriteOperation } from "./types.js";
 import { CreateAdminInput, createAdmin } from "./create-admin.js";
@@ -8,4 +8,4 @@ import { HttpProblem, badRequest, forbidden, notFound, unauthorized } from "./pr
 import { BetterAuthAuthenticatorOptions, betterAuthAuthenticator } from "./better-auth/authenticator.js";
 import { NewUser, StoredUser, createUser, deleteUser, hasUsers, listUsers, parseRoles, roleChoices, setUserBanned, setUserRole } from "./better-auth/users.js";
 import { IssueTokenOptions, issueToken, maxTokenTtlSeconds } from "./better-auth/tokens.js";
-export { type Admin, type AdminAuth, type AdminOptions, type AuditEvent, type AuditQueue, type Authenticator, type BetterAuthAuthenticatorOptions, type CreateAdminInput, type CreateAuthOptions, HttpProblem, type IssueTokenOptions, type JwtOptions, type NewUser, type PipelineHook, type ResourceSource, type ScanGuardMode, type Session, type StoredUser, type TenantValue, type User, type ViewSource, type WriteEvent, type WriteOperation, badRequest, betterAuthAuthenticator, configExports, consoleAuditQueue, createAdmin, createAuth, createUser, deleteUser, forbidden, hasUsers, issueToken, jwtAuthenticator, listUsers, maxTokenTtlSeconds, normalizeRoles, notFound, parseRoles, roleChoices, setUserBanned, setUserRole, unauthorized };
+export { type Admin, type AdminAuth, type AdminOptions, type AuditEvent, type AuditQueue, type Authenticator, type BetterAuthAuthenticatorOptions, type CreateAdminInput, type CreateAuthOptions, HttpProblem, type IssueTokenOptions, type JwtOptions, type NewUser, type PipelineHook, type ResourceSource, type ScanGuardMode, type Session, type StoredUser, type TenantValue, type User, type UserCreatedHook, type ViewSource, type WriteEvent, type WriteOperation, badRequest, betterAuthAuthenticator, configExports, consoleAuditQueue, createAdmin, createAuth, createUser, deleteUser, forbidden, hasUsers, issueToken, jwtAuthenticator, listUsers, maxTokenTtlSeconds, normalizeRoles, notFound, parseRoles, roleChoices, setUserBanned, setUserRole, unauthorized };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/server",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
   "license": "Apache-2.0",
   "repository": {
@@ -32,9 +32,9 @@
     "kysely": "^0.29.6",
     "nodemailer": "^10.0.16",
     "zod": "^4.6.5",
-    "@protobase/layout": "0.1.3",
-    "@protobase/query": "0.1.3",
-    "@protobase/schema": "0.1.3"
+    "@protobase/layout": "0.1.4",
+    "@protobase/schema": "0.1.4",
+    "@protobase/query": "0.1.4"
   },
   "scripts": {
     "build": "tsdown"