@protobase/server 0.46.10 → 0.46.12

package/dist/better-auth/auth-logger.js

@@ -0,0 +1,11 @@
+import { createLogger } from "better-auth";
+//#region src/better-auth/auth-logger.ts
+const schemaReports = [/^Database schema mismatch/, /^Could not validate the database schema/];
+const output = createLogger();
+/** Better Auth's logger, without its reports on the store's schema. */
+const authLogger = { log: (level, message, ...args) => {
+	if (schemaReports.some((report) => report.test(message))) return;
+	output[level](message, ...args);
+} };
+//#endregion
+export { authLogger };

package/dist/better-auth/auth-mail/change-email-code-email.js

@@ -25,7 +25,7 @@ const ChangeEmailCodeEmail = ({ app, code, lifetime }) => /* @__PURE__ */ jsxs(E
 /** The email to the new address with the code that moves the account to it. */
 const changeEmailCodeEmail = defineEmail({
 	name: "change-email-code",
-	subject: ({ app }) => `Confirm your new ${app.name} address`,
+	subject: ({ app, code }) => `${code} confirms your new ${app.name} address`,
 	component: ChangeEmailCodeEmail
 });
 //#endregion

package/dist/better-auth/auth-mail/sign-in-code-email.js

@@ -25,7 +25,7 @@ const SignInCodeEmail = ({ app, code, lifetime }) => /* @__PURE__ */ jsxs(EmailL
 /** The email with a code to sign in with instead of a password. */
 const signInCodeEmail = defineEmail({
 	name: "sign-in-code",
-	subject: ({ app }) => `Your ${app.name} sign-in code`,
+	subject: ({ app, code }) => `${code} is your ${app.name} sign-in code`,
 	component: SignInCodeEmail
 });
 //#endregion

package/dist/better-auth/auth-mail/sign-up-code-email.js

@@ -25,7 +25,7 @@ const SignUpCodeEmail = ({ app, code, lifetime }) => /* @__PURE__ */ jsxs(EmailL
 /** The email with the code that makes an account for the address. */
 const signUpCodeEmail = defineEmail({
 	name: "sign-up-code",
-	subject: ({ app }) => `Your code to create an account with ${app.name}`,
+	subject: ({ app, code }) => `${code} is your code to create an account with ${app.name}`,
 	component: SignUpCodeEmail
 });
 //#endregion

package/dist/better-auth/auth-mail/two-factor-code-email.js

@@ -25,7 +25,7 @@ const TwoFactorCodeEmail = ({ app, code, lifetime }) => /* @__PURE__ */ jsxs(Ema
 /** The email with the second step of a sign-in, for an account with two-factor authentication by email. */
 const twoFactorCodeEmail = defineEmail({
 	name: "two-factor-code",
-	subject: ({ app }) => `Your ${app.name} verification code`,
+	subject: ({ app, code }) => `${code} is your ${app.name} verification code`,
 	component: TwoFactorCodeEmail
 });
 //#endregion

package/dist/better-auth/cookie-prefix.js

@@ -0,0 +1,9 @@
+//#region src/better-auth/cookie-prefix.ts
+/** The prefix of the app's cookie names: Better Auth's own, with the port of an http `baseURL` that names one. */
+const cookiePrefixOf = (baseURL) => {
+	const { protocol, port } = new URL(baseURL);
+	if (protocol !== "http:" || !port) return "better-auth";
+	return `better-auth-${port}`;
+};
+//#endregion
+export { cookiePrefixOf };

package/dist/better-auth/create-auth.d.ts

@@ -8748,6 +8748,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       generateId: "uuid";
     } | undefined;
     useSecureCookies: boolean;
+    cookiePrefix: string;
     defaultCookieAttributes: {
       sameSite: "lax";
       secure: boolean;
@@ -8759,6 +8760,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
   socialProviders?: import("better-auth").SocialProviders | undefined;
   appName: string;
   database: any;
+  logger: import("better-auth").Logger;
   baseURL: string | {
     allowedHosts: string[];
     fallback: string;

package/dist/better-auth/create-auth.js

@@ -7,6 +7,8 @@ import { signInPolicyPlugin } from "./policy-plugin.js";
 import { goTrueSessionsPlugin } from "../gotrue/sessions-plugin.js";
 import { endReplacedSession } from "./end-replaced-session.js";
 import { authBasePath } from "./auth-base-path.js";
+import { authLogger } from "./auth-logger.js";
+import { cookiePrefixOf } from "./cookie-prefix.js";
 import { mobileRequests } from "./mobile-requests.js";
 import { passwordLength } from "./new-account-password.js";
 import { platformMailer } from "../mail/platform-mailer.js";
@@ -132,6 +134,7 @@ const betterAuthOptions = (options, { origins = [], passkeyDomain, roles, defini
 	return {
 		appName,
 		database: options.database,
+		logger: authLogger,
 		baseURL: multiHostBaseURL(options.baseURL, origins),
 		basePath: authBasePath,
 		secret: options.secret,
@@ -297,6 +300,7 @@ const betterAuthOptions = (options, { origins = [], passkeyDomain, roles, defini
 		},
 		advanced: {
 			useSecureCookies: secure,
+			cookiePrefix: cookiePrefixOf(options.baseURL),
 			defaultCookieAttributes: {
 				sameSite: "lax",
 				secure

package/dist/better-auth/sign-in-mail.js

@@ -1,6 +1,6 @@
 import { sendAuthEmail } from "./auth-mail/send-auth-email.js";
-const codeLifetimeMinutes = 5;
-const codeLifetime = "5 minutes";
+const codeLifetimeMinutes = 10;
+const codeLifetime = "10 minutes";
 /**
 * Better Auth's email OTP plugin for signing in and changing the address: never a sign-up, codes stored hashed, sent
 * with `mail`. A new address gets its own email, with the code that moves the account to it. The plugin's other uses
@@ -8,7 +8,7 @@ const codeLifetime = "5 minutes";
 */
 const emailCodeOptions = (mail) => ({
 	disableSignUp: true,
-	expiresIn: 300,
+	expiresIn: 600,
 	storeOTP: "hashed",
 	changeEmail: { enabled: true },
 	sendVerificationOTP: ({ email, otp, type }, ctx) => sendAuthEmail(mail, type === "change-email" ? "changeEmailCodeEmail" : "signInCodeEmail", email, {

package/dist/better-auth/sign-up/sign-up-code.js

@@ -1,5 +1,5 @@
 import { APIError } from "better-auth/api";
-const signUpCodeLifetime = "5 minutes";
+const signUpCodeLifetime = "10 minutes";
 const allowedAttempts = 3;
 const identifierOf = (email) => `sign-up-otp-${email}`;
 /** The SHA-256 of `secret`, base64: what the store keeps of a code or a ticket. */
@@ -26,7 +26,7 @@ const issueSignUpCode = async (context, email) => {
 	await context.internalAdapter.createVerificationValue({
 		identifier,
 		value: `${await hashOf(code)}:0`,
-		expiresAt: new Date(Date.now() + 3e5)
+		expiresAt: new Date(Date.now() + 6e5)
 	});
 	return code;
 };

package/dist/better-auth/users.js

@@ -30,7 +30,10 @@ const checkAccounts = async (auth, accounts) => {
 const createUser = async (auth, input) => {
 	const first = !await hasUsers(auth);
 	const requested = input.role ?? auth.defaultRole;
-	if (!first && requested === void 0) throw new Error(`A role is required: choose one of ${auth.roles.join(", ")}`);
+	if (!first && requested === void 0) {
+		if (await (await auth.$context).internalAdapter.findUserByEmail(input.email.toLowerCase())) throw new Error(`A user with email ${input.email} exists already; use another email`);
+		throw new Error(`A role is required: choose one of ${auth.roles.join(", ")}`);
+	}
 	const role = first ? "admin" : checkRoles(auth, requested).join(",");
 	const accounts = input.accounts ?? [];
 	await checkAccounts(auth, accounts);

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.46.10";
+var version = "0.46.12";
 //#endregion
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/server",
-  "version": "0.46.10",
+  "version": "0.46.12",
   "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
   "license": "Apache-2.0",
   "repository": {
@@ -36,9 +36,9 @@
     "@better-auth/passkey": "^1.7.12",
     "@better-auth/sso": "^1.7.12",
     "@modelcontextprotocol/server": "^2.3.1",
-    "@protobase/layout": "0.46.10",
-    "@protobase/query": "0.46.10",
-    "@protobase/schema": "0.46.10",
+    "@protobase/layout": "0.46.12",
+    "@protobase/query": "0.46.12",
+    "@protobase/schema": "0.46.12",
     "@react-email/render": "^2.1.0",
     "@scalar/hono-api-reference": "^0.12.10",
     "@sentry/core": "^11.7.0",