@protobase/server 0.46.13 → 0.46.15

package/dist/better-auth/create-auth.d.ts

@@ -74,6 +74,12 @@ export type CreateAuthOptions = {
    * with everything else allowed. Checked at startup as an admin's save is. Default everything allowed.
    */
   signInPolicy?: Partial<SignInPolicy>;
+  /**
+   * What the sign-in page leads with: `password`, the email address and a password, with emailing a code below it; or
+   * `emailCode`, the address and "Email me a sign-in code", with the password behind "Use a password", for apps whose
+   * people mostly never set one. Only while the policy leaves both on; default `password`.
+   */
+  signInFirst?: 'password' | 'emailCode';
   /** Sign-in attempts allowed per minute and client, default 5; also the sign-up requests allowed. */
   signInPerMinute?: number;
   /**
@@ -467,7 +473,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               expiresAt: Date;
               token: string;
               ipAddress?: string | null | undefined;
-              userAgent?: string | null | undefined;
+              userAgent?
+              /** Sign-in attempts allowed per minute and client, default 5; also the sign-up requests allowed. */
+              /** Sign-in attempts allowed per minute and client, default 5; also the sign-up requests allowed. */ : string | null | undefined;
             };
           };
         }>>[];
@@ -8820,6 +8828,8 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
   mail: boolean;
   /** The policy until an admin saves one. */
   signInPolicy: SignInPolicy;
+  /** What the sign-in page leads with (`signInFirst`). */
+  signInFirst: "password" | "emailCode";
   passwordReset: boolean;
   /** New passwords are checked against Have I Been Pwned's list of leaked ones (`leakedPasswords`). */
   leakedPasswords: boolean;

package/dist/better-auth/create-auth.js

@@ -391,6 +391,8 @@ const createAuth = (options) => {
 		mail: Boolean(mailer),
 		/** The policy until an admin saves one. */
 		signInPolicy,
+		/** What the sign-in page leads with (`signInFirst`). */
+		signInFirst: options.signInFirst ?? "password",
 		passwordReset: Boolean(mailer),
 		/** New passwords are checked against Have I Been Pwned's list of leaked ones (`leakedPasswords`). */
 		leakedPasswords: Boolean(options.leakedPasswords),

package/dist/better-auth/status-route.js

@@ -9,7 +9,7 @@ import { Hono } from "hono";
 * `GET {authBase}/status`: `needsAdmin` while the admin store has no user, so a login page can say how to create one;
 * `signInMethods`, the ways to sign in the sign-in policy leaves on (`password`, `emailCode`, `passkey`), so it offers
 * only those; `passwordReset` when reset mail can be sent and passwords are on, so it offers "Forgot password?" only
-* then; `changeEmail` when mail can be sent, so the account page offers to change the address with an emailed code; `signUp` when the app has open sign-up, so it offers "Create an account"; the ids of the `socialProviders` people can sign in with, so it offers "Continue with GitHub" when `github` is
+* then; `signInFirst: 'emailCode'` when the app has the sign-in page lead with an emailed code and the policy leaves both it and passwords on; `changeEmail` when mail can be sent, so the account page offers to change the address with an emailed code; `signUp` when the app has open sign-up, so it offers "Create an account"; the ids of the `socialProviders` people can sign in with, so it offers "Continue with GitHub" when `github` is
 * one; `platformSignIn`, the id and name of the platform's provider when it is one of them; `samlProviders`, the id and name of each SAML provider, when the app has any; `staffSignIn`, the
 * operator provider's name, when staff can sign in as people; `passkeyDomains`, when people have passkeys for more than
 * one of the app's hosts, the RP IDs a passkey sign-in can ask for, the passkey domain first; with organizations, who may create them and the roles
@@ -37,6 +37,7 @@ const statusRoute = (auth, { anonymous = false, plugins = [], locale } = {}) =>
 			needsAdmin: !await hasUsers(auth),
 			signInMethods,
 			passwordReset: auth.passwordReset && policy.password === "allowed",
+			...auth.signInFirst === "emailCode" && signInMethods.includes("emailCode") && signInMethods.includes("password") && { signInFirst: "emailCode" },
 			...auth.mail && { changeEmail: true },
 			...auth.signUp && { signUp: true },
 			socialProviders,

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.46.13";
+var version = "0.46.15";
 //#endregion
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/server",
-  "version": "0.46.13",
+  "version": "0.46.15",
   "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
   "license": "Apache-2.0",
   "repository": {
@@ -36,9 +36,9 @@
     "@better-auth/passkey": "^1.7.12",
     "@better-auth/sso": "^1.7.12",
     "@modelcontextprotocol/server": "^2.3.1",
-    "@protobase/layout": "0.46.13",
-    "@protobase/query": "0.46.13",
-    "@protobase/schema": "0.46.13",
+    "@protobase/layout": "0.46.15",
+    "@protobase/query": "0.46.15",
+    "@protobase/schema": "0.46.15",
     "@react-email/render": "^2.1.0",
     "@scalar/hono-api-reference": "^0.12.10",
     "@sentry/core": "^11.7.0",