@protobase/server 0.15.4 → 0.16.0

package/dist/better-auth/create-auth.d.ts

@@ -28,7 +28,11 @@ export type CreateAuthOptions = {
    * passes in `PROTOBASE_PASSKEY_DOMAIN`, when set, and to the host of `baseURL` otherwise.
    */
   passkeyDomain?: string;
-  /** The name authenticator apps and passkey prompts show for this app. Default `Protobase`. */
+  /**
+   * The app's name: authenticator apps and passkey prompts show it, the auth emails name the app with it, and the
+   * default mailer sends them from it, as the sender's display name. Defaults to the name the platform passes in
+   * `PROTOBASE_APP_NAME`, when set, and to `Protobase` otherwise (without a sender's display name).
+   */
   appName?: string;
   /** Signs cookies and encrypts the JWT private keys. Generate with `openssl rand -base64 32`. */
   secret: string;
@@ -57,9 +61,10 @@ export type CreateAuthOptions = {
   /** Sign-in attempts allowed per minute and client, default 5; also the sign-up requests allowed. */
   signInPerMinute?: number;
   /**
-   * Sends the password-reset email and the emailed sign-in and two-factor codes; without a mailer none of them is
-   * offered. Defaults to SMTP with the settings the platform passes in `PROTOBASE_SMTP_URL` and `PROTOBASE_MAIL_FROM`
-   * (see `readMailSettings`), when set; `false` turns mail off whatever the environment says.
+   * Sends the auth emails: the password-reset email, the emailed sign-in and two-factor codes, and those of sign-up,
+   * staff sign-in and invitations; without a mailer none of them is offered. Defaults to SMTP with the settings the
+   * platform passes in `PROTOBASE_SMTP_URL` and `PROTOBASE_MAIL_FROM` (see `readMailSettings`), when set; `false`
+   * turns mail off whatever the environment says.
    */
   mailer?: Mailer | false;
   /**
@@ -743,7 +748,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               expiresAt: Date;
               token: string;
               ipAddress?: string | null | undefined;
-              userAgent? /** Open sign-up is on and offered: the app asks for it, and can mail the codes. */ : string | null | undefined;
+              userAgent?: string | null | undefined;
             };
           };
         }>>[];
@@ -2717,10 +2722,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           email: string;
           emailVerified: boolean;
           name: string;
-          image? /**
-           * Turns on organizations: people work in one at a time, records of `.tenant` resources are scoped to it, and roles
-           * are held globally (on the user) or per membership. Off by default: the app works as one organization.
-           */ : string | null | undefined;
+          image?: string | null | undefined;
         } & Record<string, any>;
       }>;
       signInEmailOTP: import("better-auth").StrictEndpoint<"/sign-in/email-otp", {
@@ -3039,11 +3041,19 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         sent: boolean;
       }>;
-      createSignUpAccount: import("better-auth").StrictEndpoint<string, {
+      verifySignUpCode: import("better-auth").StrictEndpoint<string, {
         method: "POST";
         body: import("zod").ZodObject<{
           email: import("zod").ZodPipe<import("zod").ZodString, import("zod").ZodEmail>;
           code: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+      }, {
+        ticket: string;
+      }>;
+      createSignUpAccount: import("better-auth").StrictEndpoint<string, {
+        method: "POST";
+        body: import("zod").ZodObject<{
+          ticket: import("zod").ZodString;
           name: import("zod").ZodString;
           password: import("zod").ZodOptional<import("zod").ZodString>;
         }, import("zod/v4/core").$strip>;
@@ -3141,15 +3151,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
                 email: string;
                 emailVerified: boolean;
                 name: string;
-                image?
-                /**
-                 * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-                 * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-                 */
-                /**
-                 * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-                 * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-                 */ : string | null | undefined;
+                image?: string | null | undefined;
               };
             };
           }>>[];
@@ -3173,15 +3175,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
                 email: string;
                 emailVerified: boolean;
                 name: string;
-                image?
-                /**
-                 * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-                 * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-                 */
-                /**
-                 * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-                 * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-                 */ : string | null | undefined;
+                image?: string | null | undefined;
               };
             };
           }>>[];
@@ -3204,15 +3198,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               email: string;
               emailVerified: boolean;
               name: string;
-              image?
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */ : string | null | undefined;
+              image?: string | null | undefined;
             };
           } & {
             session: {
@@ -3267,15 +3253,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
                 email: string;
                 emailVerified: boolean;
                 name: string;
-                image?
-                /**
-                 * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-                 * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-                 */
-                /**
-                 * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-                 * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-                 */ : string | null | undefined;
+                image?: string | null | undefined;
               };
             };
           }>>[];
@@ -3299,15 +3277,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
                 email: string;
                 emailVerified: boolean;
                 name: string;
-                image?
-                /**
-                 * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-                 * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-                 */
-                /**
-                 * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-                 * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-                 */ : string | null | undefined;
+                image?: string | null | undefined;
               };
             };
           }>>[];
@@ -3330,15 +3300,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               email: string;
               emailVerified: boolean;
               name: string;
-              image?
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */ : string | null | undefined;
+              image?: string | null | undefined;
             };
           } & {
             session: {
@@ -3393,15 +3355,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               email: string;
               emailVerified: boolean;
               name: string;
-              image?
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */ : string | null | undefined;
+              image?: string | null | undefined;
             };
           };
         }>>[];
@@ -3506,15 +3460,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               email: string;
               emailVerified: boolean;
               name: string;
-              image?
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */ : string | null | undefined;
+              image?: string | null | undefined;
             };
           };
         }>>[];
@@ -3542,15 +3488,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               email: string;
               emailVerified: boolean;
               name: string;
-              image?
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */ : string | null | undefined;
+              image?: string | null | undefined;
             };
           };
         }>>[];
@@ -3579,15 +3517,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
                 email: string;
                 emailVerified: boolean;
                 name: string;
-                image?
-                /**
-                 * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-                 * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-                 */
-                /**
-                 * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-                 * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-                 */ : string | null | undefined;
+                image?: string | null | undefined;
               };
             };
           }>>[];
@@ -3611,15 +3541,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
                 email: string;
                 emailVerified: boolean;
                 name: string;
-                image?
-                /**
-                 * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-                 * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-                 */
-                /**
-                 * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-                 * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-                 */ : string | null | undefined;
+                image?: string | null | undefined;
               };
             };
           }>>[];
@@ -3642,15 +3564,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               email: string;
               emailVerified: boolean;
               name: string;
-              image?
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */ : string | null | undefined;
+              image?: string | null | undefined;
             };
           } & {
             session: {
@@ -3747,15 +3661,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               email: string;
               emailVerified: boolean;
               name: string;
-              image?
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */ : string | null | undefined;
+              image?: string | null | undefined;
             };
           };
         }>>[];
@@ -3787,15 +3693,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               email: string;
               emailVerified: boolean;
               name: string;
-              image?
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */ : string | null | undefined;
+              image?: string | null | undefined;
             };
           };
         }>>[];
@@ -4123,15 +4021,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               email: string;
               emailVerified: boolean;
               name: string;
-              image?
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */ : string | null | undefined;
+              image?: string | null | undefined;
             };
           };
         }>>[];
@@ -4170,15 +4060,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               email: string;
               emailVerified: boolean;
               name: string;
-              image?
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */ : string | null | undefined;
+              image?: string | null | undefined;
             };
           };
         }>>[];
@@ -4213,15 +4095,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               email: string;
               emailVerified: boolean;
               name: string;
-              image?
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */ : string | null | undefined;
+              image?: string | null | undefined;
             };
           };
         }>>[];
@@ -4261,15 +4135,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               email: string;
               emailVerified: boolean;
               name: string;
-              image?
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */ : string | null | undefined;
+              image?: string | null | undefined;
             };
           };
         }>>[];
@@ -4326,15 +4192,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               email: string;
               emailVerified: boolean;
               name: string;
-              image?
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */
-              /**
-               * The role of a user created without one. Optional: when unset, and more than one role besides `admin` exists,
-               * creating a user without a role is an error that asks for one. With exactly one other role, that role is the default.
-               */ : string | null | undefined;
+              image?: string | null | undefined;
             };
           };
         }>>[];
@@ -4430,6 +4288,10 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
         window: number;
         max: number;
       };
+      [signUpPaths.verifyCode]: {
+        window: number;
+        max: number;
+      };
       [signUpPaths.create]: {
         window: number;
         max: number;

package/dist/better-auth/create-auth.js

@@ -1,4 +1,5 @@
 import { multiHostBaseURL, readOrigins, resolveOrigins } from "./origins.js";
+import { readAppName } from "../app-name.js";
 import { platformMailer } from "../mail/platform-mailer.js";
 import { readOperatorSettings, resolveOperator } from "./operator-provider.js";
 import { roleDefinitions } from "./organizations/role-definitions.js";
@@ -27,6 +28,8 @@ const platformOperator = () => readOperatorSettings(globalThis.process?.env ?? {
 const platformSignInSettings = () => readPlatformSignIn(globalThis.process?.env ?? {});
 const platformOrigins = () => readOrigins(globalThis.process?.env ?? {});
 const platformPasskeyDomain = () => readPasskeyDomain(globalThis.process?.env ?? {});
+const platformAppName = () => readAppName(globalThis.process?.env ?? {});
+const defaultAppName = "Protobase";
 const tokenLifetime = "15m";
 const authBasePath = "/api/auth";
 /**
@@ -44,12 +47,17 @@ const organizationPaths = ["/organization/set-active", "/organization/accept-inv
 * The options `createAuth` gives Better Auth, with the roles, default role, mailer, operator provider and platform
 * sign-in provider already resolved.
 */
-const betterAuthOptions = (options, { origins = [], passkeyDomain, roles, definitions, defaultRole, mailer, signUpRole, operator, platformSignIn, organizations, context = noContext }) => {
+const betterAuthOptions = (options, { origins = [], passkeyDomain, roles, definitions, defaultRole, appName = defaultAppName, mailer, signUpRole, operator, platformSignIn, organizations, context = noContext }) => {
 	const secure = options.baseURL.startsWith("https://");
 	const signIn = platformSignInFor(platformSignIn, Object.keys(options.socialProviders ?? {}));
 	const hosts = passkeyHosts([options.baseURL, ...origins]);
+	const mail = mailer && {
+		mailer,
+		appName,
+		baseURL: options.baseURL
+	};
 	return {
-		appName: options.appName ?? "Protobase",
+		appName,
 		database: options.database,
 		baseURL: multiHostBaseURL(options.baseURL, origins),
 		basePath: authBasePath,
@@ -64,7 +72,7 @@ const betterAuthOptions = (options, { origins = [], passkeyDomain, roles, defini
 			enabled: true,
 			disableSignUp: true,
 			minPasswordLength: 12,
-			...mailer && passwordResetOptions(mailer)
+			...mail && passwordResetOptions(mail)
 		},
 		...options.socialProviders && { socialProviders: options.socialProviders },
 		user: organizations ? {
@@ -107,18 +115,17 @@ const betterAuthOptions = (options, { origins = [], passkeyDomain, roles, defini
 			twoFactorAfterPasswordOrCode({
 				schema: pluginNames.twoFactor,
 				allowPasswordless: true,
-				...mailer && { otpOptions: twoFactorCodeOptions(mailer) }
+				...mail && { otpOptions: twoFactorCodeOptions(mail) }
 			}),
 			passkeyPlugin({
 				domain: passkeyDomain ?? hosts[0],
 				hosts,
 				formerDomain: hosts[0]
 			}),
-			...mailer ? [emailOTP(emailCodeOptions(mailer))] : [],
-			...mailer && signUpRole ? [signUpPlugin({
+			...mail ? [emailOTP(emailCodeOptions(mail))] : [],
+			...mail && signUpRole ? [signUpPlugin({
 				role: signUpRole,
-				mailer,
-				appName: options.appName ?? "Protobase"
+				mail
 			})] : [],
 			...signIn ? [genericOAuth({ config: [platformSignInProvider(signIn)] })] : [],
 			signInPolicyPlugin({
@@ -132,13 +139,13 @@ const betterAuthOptions = (options, { origins = [], passkeyDomain, roles, defini
 			}),
 			staffSignInPlugin({
 				...operator && { operator },
-				...mailer && { mailer }
+				...mail && { mail }
 			}),
 			rolesPlugin({ definitions }),
 			...organizations ? [organizationPlugin({
 				resolved: organizations,
 				secret: options.secret,
-				...mailer && { mailer },
+				...mail && { mail },
 				context
 			}), protobaseOrganizationPlugin({
 				resolved: organizations,
@@ -186,6 +193,10 @@ const betterAuthOptions = (options, { origins = [], passkeyDomain, roles, defini
 					window: 60,
 					max: options.signInPerMinute ?? 5
 				},
+				[signUpPaths.verifyCode]: {
+					window: 60,
+					max: options.signInPerMinute ?? 5
+				},
 				[signUpPaths.create]: {
 					window: 60,
 					max: options.signInPerMinute ?? 5
@@ -215,7 +226,8 @@ const createAuth = (options) => {
 	const signUpRole = options.signUp && checkSignUpRole(options.signUp.role, roles);
 	const others = roles.filter((role) => role !== "admin");
 	const defaultRole = options.defaultRole ?? (options.organizations ? "user" : others.length === 1 ? others[0] : void 0);
-	const mailer = options.mailer === void 0 ? platformMailer() : options.mailer || void 0;
+	const appName = options.appName ?? platformAppName();
+	const mailer = options.mailer === void 0 ? platformMailer(void 0, appName) : options.mailer || void 0;
 	const provider = options.operator === void 0 ? platformOperator() : options.operator || void 0;
 	const operator = provider && resolveOperator(provider);
 	const signInSettings = options.signInProvider === void 0 ? platformSignInSettings() : options.signInProvider || void 0;
@@ -232,6 +244,7 @@ const createAuth = (options) => {
 		roles,
 		definitions,
 		defaultRole,
+		...appName && { appName },
 		mailer,
 		signUpRole,
 		operator,

package/dist/better-auth/organizations/organization-plugin.js

@@ -1,7 +1,7 @@
 import "./role-definitions.js";
 import { checkAppRoleChange, effectiveRoles, globalRoles, parseAppRoles } from "./app-roles.js";
 import { findMember } from "./store.js";
-import { invitationEmail } from "./invitation-mail.js";
+import { sendAuthEmail } from "../auth-mail/send-auth-email.js";
 import { invitationLink, invitationToken } from "./invitation-token.js";
 import { APIError } from "better-auth/api";
 import { organization } from "better-auth/plugins/organization";
@@ -63,7 +63,7 @@ const mergeHooks = (own, project = {}) => {
 * `creatorAppRoles`, invitations checked against what the inviter may give and mailed with a signed link, and the
 * project's hooks after Protobase's.
 */
-const organizationPlugin = ({ resolved, secret, mailer, context }) => {
+const organizationPlugin = ({ resolved, secret, mail, context }) => {
 	const { definitions } = resolved;
 	const own = {
 		beforeCreateOrganization: async () => ({ data: { id: await resolved.generateId() } }),
@@ -111,15 +111,15 @@ const organizationPlugin = ({ resolved, secret, mailer, context }) => {
 		requireEmailVerificationOnInvitation: true,
 		cancelPendingInvitationsOnReInvite: true,
 		schema: organizationNames,
-		...mailer && { sendInvitationEmail: async ({ invitation, organization, inviter }) => {
+		...mail && { sendInvitationEmail: async ({ invitation, organization, inviter }) => {
 			const token = await invitationToken(secret, invitation);
-			await mailer.send(invitationEmail({
-				to: invitation.email,
+			const url = invitationLink(resolved.invitationUrl, token);
+			await sendAuthEmail(mail, "invitationEmail", invitation.email, {
 				inviter: inviter.user.name || inviter.user.email,
 				organization: organization.name,
-				url: invitationLink(resolved.invitationUrl, token),
-				expiresAt: invitation.expiresAt
-			}));
+				url,
+				expiresAt: new Date(invitation.expiresAt)
+			}, url);
 		} },
 		organizationHooks: mergeHooks(own, resolved.options.hooks)
 	});

package/dist/better-auth/password-reset.js

@@ -1,32 +1,19 @@
+import { sendAuthEmail } from "./auth-mail/send-auth-email.js";
 //#region src/better-auth/password-reset.ts
 /** How long an emailed reset link works, in seconds and in the email's words. */
 const resetLinkLifetimeSeconds = 3600;
 const resetLinkLifetime = "1 hour";
-/** The reset email: the link, how long it works, and that it can be ignored. */
-const resetEmail = ({ to, url }) => ({
-	to,
-	subject: "Reset your password",
-	text: [
-		"Someone asked to reset the password of your account. To choose a new password, open this link:",
-		"",
-		url,
-		"",
-		`The link works for ${resetLinkLifetime}, once.`,
-		"If you did not ask for this, ignore this email: your password stays as it is.",
-		""
-	].join("\n")
-});
 /**
-* Better Auth's own password reset, sending the link with `mailer`. Resetting ends the user's sessions, so a reset
+* Better Auth's own password reset, sending the link with `mail`. Resetting ends the user's sessions, so a reset
 * after a leaked password also signs out whoever used it.
 */
-const passwordResetOptions = (mailer) => ({
+const passwordResetOptions = (mail) => ({
 	resetPasswordTokenExpiresIn: resetLinkLifetimeSeconds,
 	revokeSessionsOnPasswordReset: true,
-	sendResetPassword: ({ user, url }) => mailer.send(resetEmail({
-		to: user.email,
-		url
-	}))
+	sendResetPassword: ({ user, url }) => sendAuthEmail(mail, "resetPasswordEmail", user.email, {
+		url,
+		lifetime: resetLinkLifetime
+	}, url)
 });
 //#endregion
-export { passwordResetOptions, resetEmail, resetLinkLifetimeSeconds };
+export { passwordResetOptions, resetLinkLifetimeSeconds };