@protobase/server 0.46.10 → 0.46.11

package/dist/better-auth/auth-mail/change-email-code-email.js

@@ -25,7 +25,7 @@ const ChangeEmailCodeEmail = ({ app, code, lifetime }) => /* @__PURE__ */ jsxs(E
 /** The email to the new address with the code that moves the account to it. */
 const changeEmailCodeEmail = defineEmail({
 	name: "change-email-code",
-	subject: ({ app }) => `Confirm your new ${app.name} address`,
+	subject: ({ app, code }) => `${code} confirms your new ${app.name} address`,
 	component: ChangeEmailCodeEmail
 });
 //#endregion

package/dist/better-auth/auth-mail/sign-in-code-email.js

@@ -25,7 +25,7 @@ const SignInCodeEmail = ({ app, code, lifetime }) => /* @__PURE__ */ jsxs(EmailL
 /** The email with a code to sign in with instead of a password. */
 const signInCodeEmail = defineEmail({
 	name: "sign-in-code",
-	subject: ({ app }) => `Your ${app.name} sign-in code`,
+	subject: ({ app, code }) => `${code} is your ${app.name} sign-in code`,
 	component: SignInCodeEmail
 });
 //#endregion

package/dist/better-auth/auth-mail/sign-up-code-email.js

@@ -25,7 +25,7 @@ const SignUpCodeEmail = ({ app, code, lifetime }) => /* @__PURE__ */ jsxs(EmailL
 /** The email with the code that makes an account for the address. */
 const signUpCodeEmail = defineEmail({
 	name: "sign-up-code",
-	subject: ({ app }) => `Your code to create an account with ${app.name}`,
+	subject: ({ app, code }) => `${code} is your code to create an account with ${app.name}`,
 	component: SignUpCodeEmail
 });
 //#endregion

package/dist/better-auth/auth-mail/two-factor-code-email.js

@@ -25,7 +25,7 @@ const TwoFactorCodeEmail = ({ app, code, lifetime }) => /* @__PURE__ */ jsxs(Ema
 /** The email with the second step of a sign-in, for an account with two-factor authentication by email. */
 const twoFactorCodeEmail = defineEmail({
 	name: "two-factor-code",
-	subject: ({ app }) => `Your ${app.name} verification code`,
+	subject: ({ app, code }) => `${code} is your ${app.name} verification code`,
 	component: TwoFactorCodeEmail
 });
 //#endregion

package/dist/better-auth/cookie-prefix.js

@@ -0,0 +1,9 @@
+//#region src/better-auth/cookie-prefix.ts
+/** The prefix of the app's cookie names: Better Auth's own, with the port of an http `baseURL` that names one. */
+const cookiePrefixOf = (baseURL) => {
+	const { protocol, port } = new URL(baseURL);
+	if (protocol !== "http:" || !port) return "better-auth";
+	return `better-auth-${port}`;
+};
+//#endregion
+export { cookiePrefixOf };

package/dist/better-auth/create-auth.d.ts

@@ -1705,7 +1705,17 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           email: string;
           emailVerified: boolean;
           name: string;
-          image?: string | null | undefined;
+          image?
+          /**
+           * Refuses a new password that appears in a known data breach, by Have I Been Pwned's password list: at sign-up, from
+           * an invitation, and when a password is set, changed, reset or given by an admin. Only the first five characters of
+           * the password's SHA-1 hash leave the server. While the list cannot be reached, setting a password fails. Default off.
+           */
+          /**
+           * Refuses a new password that appears in a known data breach, by Have I Been Pwned's password list: at sign-up, from
+           * an invitation, and when a password is set, changed, reset or given by an admin. Only the first five characters of
+           * the password's SHA-1 hash leave the server. While the list cannot be reached, setting a password fails. Default off.
+           */ : string | null | undefined;
         }) | import("better-auth/plugins").UserWithTwoFactor;
       }>;
       generateBackupCodes: import("better-call").StrictEndpoint<"/two-factor/generate-backup-codes", {
@@ -3771,7 +3781,15 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               userId: string;
               expiresAt: Date;
               token: string;
-              ipAddress?: string | null | undefined;
+              ipAddress?
+              /**
+               * What runs when a user is deleted: `set` a named listener that removes what the app keeps of the user elsewhere,
+               * such as their devices; `run` is for a deletion outside Better Auth's endpoints (`deleteUser`).
+               */
+              /**
+               * What runs when a user is deleted: `set` a named listener that removes what the app keeps of the user elsewhere,
+               * such as their devices; `run` is for a deletion outside Better Auth's endpoints (`deleteUser`).
+               */ : string | null | undefined;
               userAgent?: string | null | undefined;
             };
             user: Record<string, any> & {
@@ -8748,6 +8766,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       generateId: "uuid";
     } | undefined;
     useSecureCookies: boolean;
+    cookiePrefix: string;
     defaultCookieAttributes: {
       sameSite: "lax";
       secure: boolean;

package/dist/better-auth/create-auth.js

@@ -7,6 +7,7 @@ import { signInPolicyPlugin } from "./policy-plugin.js";
 import { goTrueSessionsPlugin } from "../gotrue/sessions-plugin.js";
 import { endReplacedSession } from "./end-replaced-session.js";
 import { authBasePath } from "./auth-base-path.js";
+import { cookiePrefixOf } from "./cookie-prefix.js";
 import { mobileRequests } from "./mobile-requests.js";
 import { passwordLength } from "./new-account-password.js";
 import { platformMailer } from "../mail/platform-mailer.js";
@@ -297,6 +298,7 @@ const betterAuthOptions = (options, { origins = [], passkeyDomain, roles, defini
 		},
 		advanced: {
 			useSecureCookies: secure,
+			cookiePrefix: cookiePrefixOf(options.baseURL),
 			defaultCookieAttributes: {
 				sameSite: "lax",
 				secure

package/dist/better-auth/sign-in-mail.js

@@ -1,6 +1,6 @@
 import { sendAuthEmail } from "./auth-mail/send-auth-email.js";
-const codeLifetimeMinutes = 5;
-const codeLifetime = "5 minutes";
+const codeLifetimeMinutes = 10;
+const codeLifetime = "10 minutes";
 /**
 * Better Auth's email OTP plugin for signing in and changing the address: never a sign-up, codes stored hashed, sent
 * with `mail`. A new address gets its own email, with the code that moves the account to it. The plugin's other uses
@@ -8,7 +8,7 @@ const codeLifetime = "5 minutes";
 */
 const emailCodeOptions = (mail) => ({
 	disableSignUp: true,
-	expiresIn: 300,
+	expiresIn: 600,
 	storeOTP: "hashed",
 	changeEmail: { enabled: true },
 	sendVerificationOTP: ({ email, otp, type }, ctx) => sendAuthEmail(mail, type === "change-email" ? "changeEmailCodeEmail" : "signInCodeEmail", email, {

package/dist/better-auth/sign-up/sign-up-code.js

@@ -1,5 +1,5 @@
 import { APIError } from "better-auth/api";
-const signUpCodeLifetime = "5 minutes";
+const signUpCodeLifetime = "10 minutes";
 const allowedAttempts = 3;
 const identifierOf = (email) => `sign-up-otp-${email}`;
 /** The SHA-256 of `secret`, base64: what the store keeps of a code or a ticket. */
@@ -26,7 +26,7 @@ const issueSignUpCode = async (context, email) => {
 	await context.internalAdapter.createVerificationValue({
 		identifier,
 		value: `${await hashOf(code)}:0`,
-		expiresAt: new Date(Date.now() + 3e5)
+		expiresAt: new Date(Date.now() + 6e5)
 	});
 	return code;
 };

package/dist/better-auth/users.js

@@ -30,7 +30,10 @@ const checkAccounts = async (auth, accounts) => {
 const createUser = async (auth, input) => {
 	const first = !await hasUsers(auth);
 	const requested = input.role ?? auth.defaultRole;
-	if (!first && requested === void 0) throw new Error(`A role is required: choose one of ${auth.roles.join(", ")}`);
+	if (!first && requested === void 0) {
+		if (await (await auth.$context).internalAdapter.findUserByEmail(input.email.toLowerCase())) throw new Error(`A user with email ${input.email} exists already; use another email`);
+		throw new Error(`A role is required: choose one of ${auth.roles.join(", ")}`);
+	}
 	const role = first ? "admin" : checkRoles(auth, requested).join(",");
 	const accounts = input.accounts ?? [];
 	await checkAccounts(auth, accounts);

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.46.10";
+var version = "0.46.11";
 //#endregion
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/server",
-  "version": "0.46.10",
+  "version": "0.46.11",
   "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
   "license": "Apache-2.0",
   "repository": {
@@ -36,9 +36,9 @@
     "@better-auth/passkey": "^1.7.12",
     "@better-auth/sso": "^1.7.12",
     "@modelcontextprotocol/server": "^2.3.1",
-    "@protobase/layout": "0.46.10",
-    "@protobase/query": "0.46.10",
-    "@protobase/schema": "0.46.10",
+    "@protobase/layout": "0.46.11",
+    "@protobase/query": "0.46.11",
+    "@protobase/schema": "0.46.11",
     "@react-email/render": "^2.1.0",
     "@scalar/hono-api-reference": "^0.12.10",
     "@sentry/core": "^11.7.0",