better-auth 0.2.9-beta.8 → 0.2.9

package/dist/adapters/drizzle.d.ts

@@ -1,4 +1,4 @@
-import { A as Adapter } from '../index-PjYlcsPD.js';
+import { A as Adapter } from '../index-C9S3KShG.js';
 import 'kysely';
 import '../index-JM-i6hLs.js';
 import 'arctic';

package/dist/adapters/mongodb.d.ts

@@ -1,5 +1,5 @@
 import { Db } from 'mongodb';
-import { W as Where } from '../index-PjYlcsPD.js';
+import { W as Where } from '../index-C9S3KShG.js';
 import 'kysely';
 import '../index-JM-i6hLs.js';
 import 'arctic';

package/dist/adapters/prisma.d.ts

@@ -1,4 +1,4 @@
-import { A as Adapter } from '../index-PjYlcsPD.js';
+import { A as Adapter } from '../index-C9S3KShG.js';
 import 'kysely';
 import '../index-JM-i6hLs.js';
 import 'arctic';

package/dist/api.d.ts

@@ -1,4 +1,4 @@
-export { e as AuthEndpoint, f as AuthMiddleware, n as callbackOAuth, L as changePassword, d as createAuthEndpoint, c as createAuthMiddleware, D as createEmailVerificationToken, V as csrfMiddleware, N as deleteUser, Q as error, y as forgetPassword, z as forgetPasswordCallback, O as getCSRFToken, l as getEndpoints, p as getSession, q as getSessionFromCtx, u as listSessions, T as ok, o as optionsMiddleware, C as resetPassword, v as revokeSession, w as revokeSessions, r as router, E as sendVerificationEmail, t as sessionMiddleware, M as setPassword, m as signInEmail, s as signInOAuth, x as signOut, U as signUpEmail, K as updateUser, J as verifyEmail } from './index-PjYlcsPD.js';
+export { e as AuthEndpoint, f as AuthMiddleware, n as callbackOAuth, L as changePassword, d as createAuthEndpoint, c as createAuthMiddleware, D as createEmailVerificationToken, V as csrfMiddleware, N as deleteUser, Q as error, y as forgetPassword, z as forgetPasswordCallback, O as getCSRFToken, l as getEndpoints, p as getSession, q as getSessionFromCtx, u as listSessions, T as ok, o as optionsMiddleware, C as resetPassword, v as revokeSession, w as revokeSessions, r as router, E as sendVerificationEmail, t as sessionMiddleware, M as setPassword, m as signInEmail, s as signInOAuth, x as signOut, U as signUpEmail, K as updateUser, J as verifyEmail } from './index-C9S3KShG.js';
 import 'zod';
 import './helper-DPDj8Nix.js';
 import 'better-call';

package/dist/cli.js

@@ -200,7 +200,7 @@ import {
 var createKyselyAdapter = async (config) => {
   const db = config.database;
   let dialect = void 0;
-  let databaseType = void 0;
+  let databaseType = "sqlite";
   if ("createDriver" in db) {
     dialect = db;
     if (dialect instanceof SqliteDialect) {
@@ -239,9 +239,9 @@ var createKyselyAdapter = async (config) => {
 };
 
 // src/cli/commands/migrate.ts
-import ora2 from "ora";
+import ora from "ora";
 import chalk from "chalk";
-import prompts2 from "prompts";
+import prompts from "prompts";
 
 // src/cli/utils/get-migration.ts
 import "kysely";
@@ -607,16 +607,6 @@ async function getMigrations(config) {
   return { toBeCreated, toBeAdded, runMigrations, compileMigrations };
 }
 
-// src/cli/utils/install-dep.ts
-import ora from "ora";
-import prompts from "prompts";
-
-// src/cli/utils/get-package-manager.ts
-import { detect } from "@antfu/ni";
-
-// src/cli/utils/install-dep.ts
-import { execa } from "execa";
-
 // src/cli/commands/migrate.ts
 var migrate = new Command("migrate").option(
   "-c, --cwd <cwd>",
@@ -653,7 +643,7 @@ var migrate = new Command("migrate").option(
     logger.error("Invalid database configuration.");
     process.exit(1);
   }
-  const spinner = ora2("preparing migration...").start();
+  const spinner = ora("preparing migration...").start();
   const { toBeAdded, toBeCreated, runMigrations } = await getMigrations(config);
   if (!toBeAdded.length && !toBeCreated.length) {
     spinner.stop();
@@ -671,7 +661,7 @@ var migrate = new Command("migrate").option(
       chalk.white("table.")
     );
   }
-  const { migrate: migrate2 } = await prompts2({
+  const { migrate: migrate2 } = await prompts({
     type: "confirm",
     name: "migrate",
     message: "Are you sure you want to run these migrations?",
@@ -693,8 +683,8 @@ import { Command as Command2 } from "commander";
 import { z as z2 } from "zod";
 import { existsSync as existsSync3 } from "fs";
 import path4 from "path";
-import ora3 from "ora";
-import prompts3 from "prompts";
+import ora2 from "ora";
+import prompts2 from "prompts";
 
 // src/adapters/kysely-adapter/index.ts
 function convertWhere(w) {
@@ -1025,7 +1015,7 @@ var generate = new Command2("generate").option(
     );
     return;
   }
-  const spinner = ora3("preparing schema...").start();
+  const spinner = ora2("preparing schema...").start();
   const adapter = await getAdapter(config, true).catch((e) => {
     logger.error(e.message);
     process.exit(1);
@@ -1060,7 +1050,7 @@ var generate = new Command2("generate").option(
     process.exit(0);
   }
   if (append || overwrite) {
-    const { confirm: confirm2 } = await prompts3({
+    const { confirm: confirm2 } = await prompts2({
       type: "confirm",
       name: "confirm",
       message: `The file ${fileName} already exists. Do you want to ${chalk2.yellow(
@@ -1086,7 +1076,7 @@ var generate = new Command2("generate").option(
       process.exit(1);
     }
   }
-  const { confirm } = await prompts3({
+  const { confirm } = await prompts2({
     type: "confirm",
     name: "confirm",
     message: `Do you want to generate the schema to ${chalk2.yellow(

package/dist/client/plugins.d.ts

@@ -2,14 +2,14 @@ import * as nanostores from 'nanostores';
 import { A as AccessControl, S as StatementsPrimitive, R as Role } from '../statement-CfnyN34h.js';
 import * as _better_fetch_fetch from '@better-fetch/fetch';
 import { BetterFetchOption } from '@better-fetch/fetch';
-import { o as organization, e as Organization, M as Member, I as Invitation, u as username, m as magicLink, d as phoneNumber } from '../index-CzTRLQrX.js';
-export { g as getPasskeyActions, c as passkeyClient, a as twoFactorClient } from '../index-CzTRLQrX.js';
+import { o as organization, e as Organization, M as Member, I as Invitation, u as username, m as magicLink, d as phoneNumber } from '../index-C3owlKu1.js';
+export { g as getPasskeyActions, c as passkeyClient, a as twoFactorClient } from '../index-C3owlKu1.js';
 import { P as Prettify } from '../helper-DPDj8Nix.js';
 import '../index-JM-i6hLs.js';
 import 'arctic';
 import 'zod';
 import 'better-call';
-import '../index-PjYlcsPD.js';
+import '../index-C9S3KShG.js';
 import 'kysely';
 import 'better-sqlite3';
 import 'mysql2';

package/dist/client.d.ts

@@ -6,7 +6,7 @@ import { BetterFetch, BetterFetchError, BetterFetchOption } from '@better-fetch/
 import { U as UnionToIntersection, P as Prettify, S as StripEmptyObjects } from './helper-DPDj8Nix.js';
 import { ClientOptions, InferClientAPI, InferActions, InferAdditionalFromClient, InferSessionFromClient, InferUserFromClient, BetterAuthClientPlugin, IsSignal } from './types.js';
 export { AtomListener, InferPluginsFromClient } from './types.js';
-import './index-PjYlcsPD.js';
+import './index-C9S3KShG.js';
 import 'kysely';
 import './index-JM-i6hLs.js';
 import 'arctic';

package/dist/{index-CzTRLQrX.d.ts → index-C3owlKu1.d.ts}

@@ -5,7 +5,7 @@ import { P as Prettify } from './helper-DPDj8Nix.js';
 import { A as AccessControl, R as Role, S as StatementsPrimitive, g as defaultRoles } from './statement-CfnyN34h.js';
 import * as _better_fetch_fetch from '@better-fetch/fetch';
 import { BetterFetch, BetterFetchOption } from '@better-fetch/fetch';
-import { H as HookEndpointContext } from './index-PjYlcsPD.js';
+import { H as HookEndpointContext } from './index-C9S3KShG.js';
 import * as nanostores from 'nanostores';
 import { atom } from 'nanostores';
 import * as _simplewebauthn_types from '@simplewebauthn/types';
@@ -3680,13 +3680,6 @@ interface PasskeyOptions {
         webAuthnChallengeCookie?: string;
     };
 }
-type WebAuthnCookieType = {
-    expectedChallenge: string;
-    userData: {
-        id: string;
-    };
-    callbackURL?: string;
-};
 type Passkey = {
     id: string;
     name?: string;
@@ -4636,4 +4629,4 @@ declare const phoneNumber: (options?: {
     };
 };
 
-export { type Invitation as I, type Member as M, type OrganizationOptions as O, type PasskeyOptions as P, type WebAuthnCookieType as W, twoFactorClient as a, type Passkey as b, passkeyClient as c, phoneNumber as d, type Organization as e, getPasskeyActions as g, magicLink as m, organization as o, passkey as p, twoFactor as t, username as u };
+export { type Invitation as I, type Member as M, type OrganizationOptions as O, type PasskeyOptions as P, twoFactorClient as a, type Passkey as b, passkeyClient as c, phoneNumber as d, type Organization as e, getPasskeyActions as g, magicLink as m, organization as o, passkey as p, twoFactor as t, username as u };

package/dist/{index-PjYlcsPD.d.ts → index-C9S3KShG.d.ts}

@@ -1243,17 +1243,17 @@ declare const signInOAuth: {
             /**
              * OAuth2 provider to use`
              */
-            provider: z.ZodEnum<["github", ...("github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter")[]]>;
+            provider: z.ZodEnum<["github", ...("apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter")[]]>;
             /**
              * If this is true the session will only be valid for the current browser session
              */
             dontRememberMe: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
         }, "strip", z.ZodTypeAny, {
-            provider: "github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter";
+            provider: "apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter";
             callbackURL?: string | undefined;
             dontRememberMe?: boolean | undefined;
         }, {
-            provider: "github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter";
+            provider: "apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter";
             callbackURL?: string | undefined;
             dontRememberMe?: boolean | undefined;
         }>;
@@ -1286,17 +1286,17 @@ declare const signInOAuth: {
             /**
              * OAuth2 provider to use`
              */
-            provider: z.ZodEnum<["github", ...("github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter")[]]>;
+            provider: z.ZodEnum<["github", ...("apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter")[]]>;
             /**
              * If this is true the session will only be valid for the current browser session
              */
             dontRememberMe: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
         }, "strip", z.ZodTypeAny, {
-            provider: "github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter";
+            provider: "apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter";
             callbackURL?: string | undefined;
             dontRememberMe?: boolean | undefined;
         }, {
-            provider: "github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter";
+            provider: "apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter";
             callbackURL?: string | undefined;
             dontRememberMe?: boolean | undefined;
         }>;
@@ -2445,14 +2445,14 @@ declare function getEndpoints<C extends AuthContext, Option extends BetterAuthOp
                 }>>;
                 body: zod.ZodObject<{
                     callbackURL: zod.ZodOptional<zod.ZodString>;
-                    provider: zod.ZodEnum<["github", ...("github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter")[]]>;
+                    provider: zod.ZodEnum<["github", ...("apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter")[]]>;
                     dontRememberMe: zod.ZodOptional<zod.ZodDefault<zod.ZodBoolean>>;
                 }, "strip", zod.ZodTypeAny, {
-                    provider: "github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter";
+                    provider: "apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter";
                     callbackURL?: string | undefined;
                     dontRememberMe?: boolean | undefined;
                 }, {
-                    provider: "github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter";
+                    provider: "apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter";
                     callbackURL?: string | undefined;
                     dontRememberMe?: boolean | undefined;
                 }>;
@@ -2475,14 +2475,14 @@ declare function getEndpoints<C extends AuthContext, Option extends BetterAuthOp
                 }>>;
                 body: zod.ZodObject<{
                     callbackURL: zod.ZodOptional<zod.ZodString>;
-                    provider: zod.ZodEnum<["github", ...("github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter")[]]>;
+                    provider: zod.ZodEnum<["github", ...("apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter")[]]>;
                     dontRememberMe: zod.ZodOptional<zod.ZodDefault<zod.ZodBoolean>>;
                 }, "strip", zod.ZodTypeAny, {
-                    provider: "github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter";
+                    provider: "apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter";
                     callbackURL?: string | undefined;
                     dontRememberMe?: boolean | undefined;
                 }, {
-                    provider: "github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter";
+                    provider: "apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter";
                     callbackURL?: string | undefined;
                     dontRememberMe?: boolean | undefined;
                 }>;
@@ -3507,14 +3507,14 @@ declare const router: <C extends AuthContext, Option extends BetterAuthOptions>(
                 }>>;
                 body: zod.ZodObject<{
                     callbackURL: zod.ZodOptional<zod.ZodString>;
-                    provider: zod.ZodEnum<["github", ...("github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter")[]]>;
+                    provider: zod.ZodEnum<["github", ...("apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter")[]]>;
                     dontRememberMe: zod.ZodOptional<zod.ZodDefault<zod.ZodBoolean>>;
                 }, "strip", zod.ZodTypeAny, {
-                    provider: "github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter";
+                    provider: "apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter";
                     callbackURL?: string | undefined;
                     dontRememberMe?: boolean | undefined;
                 }, {
-                    provider: "github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter";
+                    provider: "apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter";
                     callbackURL?: string | undefined;
                     dontRememberMe?: boolean | undefined;
                 }>;
@@ -3537,14 +3537,14 @@ declare const router: <C extends AuthContext, Option extends BetterAuthOptions>(
                 }>>;
                 body: zod.ZodObject<{
                     callbackURL: zod.ZodOptional<zod.ZodString>;
-                    provider: zod.ZodEnum<["github", ...("github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter")[]]>;
+                    provider: zod.ZodEnum<["github", ...("apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter")[]]>;
                     dontRememberMe: zod.ZodOptional<zod.ZodDefault<zod.ZodBoolean>>;
                 }, "strip", zod.ZodTypeAny, {
-                    provider: "github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter";
+                    provider: "apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter";
                     callbackURL?: string | undefined;
                     dontRememberMe?: boolean | undefined;
                 }, {
-                    provider: "github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter";
+                    provider: "apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter";
                     callbackURL?: string | undefined;
                     dontRememberMe?: boolean | undefined;
                 }>;
@@ -4571,14 +4571,14 @@ declare const betterAuth: <O extends BetterAuthOptions>(options: O) => {
                 }>>;
                 body: zod.ZodObject<{
                     callbackURL: zod.ZodOptional<zod.ZodString>;
-                    provider: zod.ZodEnum<["github", ...("github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter")[]]>;
+                    provider: zod.ZodEnum<["github", ...("apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter")[]]>;
                     dontRememberMe: zod.ZodOptional<zod.ZodDefault<zod.ZodBoolean>>;
                 }, "strip", zod.ZodTypeAny, {
-                    provider: "github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter";
+                    provider: "apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter";
                     callbackURL?: string | undefined;
                     dontRememberMe?: boolean | undefined;
                 }, {
-                    provider: "github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter";
+                    provider: "apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter";
                     callbackURL?: string | undefined;
                     dontRememberMe?: boolean | undefined;
                 }>;
@@ -4601,14 +4601,14 @@ declare const betterAuth: <O extends BetterAuthOptions>(options: O) => {
                 }>>;
                 body: zod.ZodObject<{
                     callbackURL: zod.ZodOptional<zod.ZodString>;
-                    provider: zod.ZodEnum<["github", ...("github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter")[]]>;
+                    provider: zod.ZodEnum<["github", ...("apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter")[]]>;
                     dontRememberMe: zod.ZodOptional<zod.ZodDefault<zod.ZodBoolean>>;
                 }, "strip", zod.ZodTypeAny, {
-                    provider: "github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter";
+                    provider: "apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter";
                     callbackURL?: string | undefined;
                     dontRememberMe?: boolean | undefined;
                 }, {
-                    provider: "github" | "apple" | "discord" | "facebook" | "google" | "spotify" | "twitch" | "twitter";
+                    provider: "apple" | "discord" | "facebook" | "github" | "google" | "spotify" | "twitch" | "twitter";
                     callbackURL?: string | undefined;
                     dontRememberMe?: boolean | undefined;
                 }>;

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { a as Auth, X as betterAuth } from './index-PjYlcsPD.js';
+export { a as Auth, X as betterAuth } from './index-C9S3KShG.js';
 import 'kysely';
 import './index-JM-i6hLs.js';
 import 'arctic';

package/dist/index.js

@@ -2882,7 +2882,7 @@ import {
 var createKyselyAdapter = async (config2) => {
   const db = config2.database;
   let dialect = void 0;
-  let databaseType = void 0;
+  let databaseType = "sqlite";
   if ("createDriver" in db) {
     dialect = db;
     if (dialect instanceof SqliteDialect) {

package/dist/next-js.d.ts

@@ -1,4 +1,4 @@
-import { a as Auth } from './index-PjYlcsPD.js';
+import { a as Auth } from './index-C9S3KShG.js';
 import { U as User, S as Session } from './index-JM-i6hLs.js';
 import { NextRequest } from 'next/server';
 import 'kysely';

package/dist/next-js.js

@@ -14,9 +14,13 @@ function authMiddleware(options) {
   return async (request) => {
     const url = new URL(request.url).origin;
     const basePath = options?.basePath || "/api/auth";
-    const fullURL = `${url}${basePath}/session`;
+    const fullURL = `${url}${basePath}/user/list-sessions`;
     const res = await betterFetch(fullURL, {
-      headers: request.headers
+      headers: {
+        cookie: request.headers.get("cookie") || ""
+      }
+    }).catch((e) => {
+      return { data: null };
     });
     const session = res.data || null;
     if (options.customRedirect) {

package/dist/node.d.ts

@@ -1,5 +1,5 @@
 import * as http from 'http';
-import { a as Auth } from './index-PjYlcsPD.js';
+import { a as Auth } from './index-C9S3KShG.js';
 import 'kysely';
 import './index-JM-i6hLs.js';
 import 'arctic';

package/dist/plugins.d.ts

@@ -1,7 +1,7 @@
-export { O as OrganizationOptions, b as Passkey, P as PasskeyOptions, W as WebAuthnCookieType, g as getPasskeyActions, m as magicLink, o as organization, p as passkey, c as passkeyClient, d as phoneNumber, t as twoFactor, a as twoFactorClient, u as username } from './index-CzTRLQrX.js';
+export { O as OrganizationOptions, b as Passkey, P as PasskeyOptions, g as getPasskeyActions, m as magicLink, o as organization, p as passkey, c as passkeyClient, d as phoneNumber, t as twoFactor, a as twoFactorClient, u as username } from './index-C3owlKu1.js';
 export { i as ac } from './index-DfAHOgpj.js';
-import { H as HookEndpointContext } from './index-PjYlcsPD.js';
-export { e as AuthEndpoint, f as AuthMiddleware, b as BetterAuthPlugin, P as PluginSchema, d as createAuthEndpoint, c as createAuthMiddleware, o as optionsMiddleware } from './index-PjYlcsPD.js';
+import { H as HookEndpointContext } from './index-C9S3KShG.js';
+export { e as AuthEndpoint, f as AuthMiddleware, b as BetterAuthPlugin, P as PluginSchema, d as createAuthEndpoint, c as createAuthMiddleware, o as optionsMiddleware } from './index-C9S3KShG.js';
 import './index-JM-i6hLs.js';
 import 'arctic';
 import 'zod';

package/dist/plugins.js

@@ -4981,7 +4981,11 @@ var passkey = (options) => {
       ...options?.advanced
     }
   };
-  const webAuthnChallengeCookieExpiration = 60 * 60 * 24;
+  const expirationTime = new Date(Date.now() + 1e3 * 60 * 5);
+  const currentTime = /* @__PURE__ */ new Date();
+  const maxAgeInSeconds = Math.floor(
+    (expirationTime.getTime() - currentTime.getTime()) / 1e3
+  );
   return {
     id: "passkey",
     endpoints: {
@@ -5027,23 +5031,28 @@ var passkey = (options) => {
               authenticatorAttachment: "platform"
             }
           });
-          const data = {
-            expectedChallenge: options2.challenge,
-            userData: {
-              id: session.user.id
-            }
-          };
+          const id = generateRandomString(32, alphabet("a-z", "0-9"));
           await ctx.setSignedCookie(
             opts.advanced.webAuthnChallengeCookie,
-            JSON.stringify(data),
+            id,
             ctx.context.secret,
             {
               secure: true,
               httpOnly: true,
               sameSite: "lax",
-              maxAge: webAuthnChallengeCookieExpiration
+              maxAge: maxAgeInSeconds
             }
           );
+          await ctx.context.internalAdapter.createVerificationValue({
+            identifier: id,
+            value: JSON.stringify({
+              expectedChallenge: options2.challenge,
+              userData: {
+                id: session.user.id
+              }
+            }),
+            expiresAt: expirationTime
+          });
           return ctx.json(options2, {
             status: 200
           });
@@ -5091,17 +5100,23 @@ var passkey = (options) => {
               id: session?.user.id || ""
             }
           };
+          const id = generateRandomString(32, alphabet("a-z", "0-9"));
           await ctx.setSignedCookie(
             opts.advanced.webAuthnChallengeCookie,
-            JSON.stringify(data),
+            id,
             ctx.context.secret,
             {
               secure: true,
               httpOnly: true,
               sameSite: "lax",
-              maxAge: webAuthnChallengeCookieExpiration
+              maxAge: maxAgeInSeconds
             }
           );
+          await ctx.context.internalAdapter.createVerificationValue({
+            identifier: id,
+            value: JSON.stringify(data),
+            expiresAt: expirationTime
+          });
           return ctx.json(options2, {
             status: 200
           });
@@ -5125,17 +5140,29 @@ var passkey = (options) => {
             });
           }
           const resp = ctx.body.response;
-          const challengeString = await ctx.getSignedCookie(
+          const challengeId = await ctx.getSignedCookie(
             opts.advanced.webAuthnChallengeCookie,
             ctx.context.secret
           );
-          if (!challengeString) {
+          if (!challengeId) {
+            return ctx.json(null, {
+              status: 400,
+              statusText: "No challenge found",
+              body: {
+                message: "No challenge found"
+              }
+            });
+          }
+          const data = await ctx.context.internalAdapter.findVerificationValue(
+            challengeId
+          );
+          if (!data) {
             return ctx.json(null, {
               status: 400
             });
           }
-          const { userData, expectedChallenge } = JSON.parse(
-            challengeString
+          const { expectedChallenge, userData } = JSON.parse(
+            data.value
           );
           if (userData.id !== ctx.context.session.user.id) {
             throw new APIError11("UNAUTHORIZED", {
@@ -5210,17 +5237,25 @@ var passkey = (options) => {
             });
           }
           const resp = ctx.body.response;
-          const challengeString = await ctx.getSignedCookie(
+          const challengeId = await ctx.getSignedCookie(
             opts.advanced.webAuthnChallengeCookie,
             ctx.context.secret
           );
-          if (!challengeString) {
+          if (!challengeId) {
+            return ctx.json(null, {
+              status: 400
+            });
+          }
+          const data = await ctx.context.internalAdapter.findVerificationValue(
+            challengeId
+          );
+          if (!data) {
             return ctx.json(null, {
               status: 400
             });
           }
           const { expectedChallenge, callbackURL } = JSON.parse(
-            challengeString
+            data.value
           );
           const passkey2 = await ctx.context.adapter.findOne({
             model: "passkey",

package/dist/react.d.ts

@@ -3,7 +3,7 @@ import { U as UnionToIntersection, P as Prettify, S as StripEmptyObjects } from
 import { ClientOptions, InferClientAPI, InferActions, InferAdditionalFromClient, BetterAuthClientPlugin, IsSignal } from './types.js';
 import { useStore } from '@nanostores/react';
 import 'zod';
-import './index-PjYlcsPD.js';
+import './index-C9S3KShG.js';
 import 'kysely';
 import './index-JM-i6hLs.js';
 import 'arctic';

package/dist/solid-start.d.ts

@@ -1,4 +1,4 @@
-import { a as Auth } from './index-PjYlcsPD.js';
+import { a as Auth } from './index-C9S3KShG.js';
 import 'kysely';
 import './index-JM-i6hLs.js';
 import 'arctic';

package/dist/solid.d.ts

@@ -3,7 +3,7 @@ import { U as UnionToIntersection, P as Prettify, S as StripEmptyObjects } from
 import { ClientOptions, InferClientAPI, InferActions, InferAdditionalFromClient, BetterAuthClientPlugin, IsSignal } from './types.js';
 import { Accessor } from 'solid-js';
 import 'zod';
-import './index-PjYlcsPD.js';
+import './index-C9S3KShG.js';
 import 'kysely';
 import './index-JM-i6hLs.js';
 import 'arctic';

package/dist/svelte-kit.d.ts

@@ -1,4 +1,4 @@
-import { a as Auth, B as BetterAuthOptions } from './index-PjYlcsPD.js';
+import { a as Auth, B as BetterAuthOptions } from './index-C9S3KShG.js';
 import 'kysely';
 import './index-JM-i6hLs.js';
 import 'arctic';

package/dist/svelte-kit.js

@@ -8,7 +8,7 @@ var svelteKitHandler = async ({
   resolve
 }) => {
   const { building } = await import("$app/environment").catch((e) => {
-  });
+  }).then((m) => m || {});
   if (building) {
     return resolve(event);
   }

package/dist/svelte.d.ts

@@ -3,7 +3,7 @@ import * as _better_fetch_fetch from '@better-fetch/fetch';
 import { U as UnionToIntersection, P as Prettify, S as StripEmptyObjects } from './helper-DPDj8Nix.js';
 import { ClientOptions, InferClientAPI, InferActions, InferAdditionalFromClient, BetterAuthClientPlugin, IsSignal } from './types.js';
 import 'zod';
-import './index-PjYlcsPD.js';
+import './index-C9S3KShG.js';
 import 'kysely';
 import './index-JM-i6hLs.js';
 import 'arctic';

package/dist/types.d.ts

@@ -1,5 +1,5 @@
-import { b as BetterAuthPlugin, a as Auth, F as FieldAttribute, I as InferFieldOutput } from './index-PjYlcsPD.js';
-export { A as Adapter, k as AuthContext, B as BetterAuthOptions, G as GenericEndpointContext, H as HookEndpointContext, i as InferPluginTypes, h as InferSession, g as InferUser, P as PluginSchema, R as RateLimit, S as SessionAdapter, W as Where, j as init } from './index-PjYlcsPD.js';
+import { b as BetterAuthPlugin, a as Auth, F as FieldAttribute, I as InferFieldOutput } from './index-C9S3KShG.js';
+export { A as Adapter, k as AuthContext, B as BetterAuthOptions, G as GenericEndpointContext, H as HookEndpointContext, i as InferPluginTypes, h as InferSession, g as InferUser, P as PluginSchema, R as RateLimit, S as SessionAdapter, W as Where, j as init } from './index-C9S3KShG.js';
 import { U as UnionToIntersection, H as HasRequiredKeys, P as Prettify, S as StripEmptyObjects, L as LiteralString } from './helper-DPDj8Nix.js';
 export { D as DeepPartial, a as LiteralUnion, R as RequiredKeysOf, W as WithoutEmpty } from './helper-DPDj8Nix.js';
 import { S as Session, U as User } from './index-JM-i6hLs.js';

package/dist/vue.d.ts

@@ -3,7 +3,7 @@ import { U as UnionToIntersection, P as Prettify, S as StripEmptyObjects } from
 import { ClientOptions, InferClientAPI, InferActions, InferAdditionalFromClient, BetterAuthClientPlugin, IsSignal } from './types.js';
 import { Ref, DeepReadonly } from 'vue';
 import 'zod';
-import './index-PjYlcsPD.js';
+import './index-C9S3KShG.js';
 import 'kysely';
 import './index-JM-i6hLs.js';
 import 'arctic';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "better-auth",
-  "version": "0.2.9-beta.8",
+  "version": "0.2.9",
   "description": "The most comprehensive authentication library for TypeScript.",
   "type": "module",
   "main": "./dist/index.js",
@@ -45,10 +45,10 @@
     "@prisma/client": "^5.19.1",
     "@simplewebauthn/types": "^10.0.0",
     "@types/better-sqlite3": "^7.6.11",
-    "better-sqlite3": "^11.3.0",
     "@types/pg": "^8.11.6",
     "@types/prompts": "^2.4.9",
     "@types/react": "^18.3.3",
+    "better-sqlite3": "^11.3.0",
     "drizzle-orm": "^0.33.0",
     "happy-dom": "^15.7.4",
     "hono": "^4.5.4",
@@ -92,6 +92,7 @@
     "dotenv": "^16.4.5",
     "execa": "^9.4.0",
     "jose": "^5.7.0",
+    "js-base64": "^3.7.7",
     "kysely": "^0.27.4",
     "nanoid": "^5.0.7",
     "nanoquery": "^1.3.0",