better-auth 1.0.9-beta.2 → 1.0.9-beta.4

package/dist/index.cjs

@@ -1,6 +1,6 @@
-"use strict";var Ee=Object.defineProperty;var Ir=Object.getOwnPropertyDescriptor;var Sr=Object.getOwnPropertyNames;var Pr=Object.prototype.hasOwnProperty;var Or=(e,t)=>{for(var r in t)Ee(e,r,{get:t[r],enumerable:!0})},Lr=(e,t,r,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let i of Sr(t))!Pr.call(e,i)&&i!==r&&Ee(e,i,{get:()=>t[i],enumerable:!(n=Ir(t,i))||n.enumerable});return e};var _r=e=>Lr(Ee({},"__esModule",{value:!0}),e);var cn={};Or(cn,{BetterAuthError:()=>L,HIDE_METADATA:()=>W,MissingDependencyError:()=>Se,betterAuth:()=>dn,capitalizeFirstLetter:()=>$r,createCookieGetter:()=>ge,createLogger:()=>de,deleteSessionCookie:()=>j,generateId:()=>N,generateState:()=>ae,getCookies:()=>Pe,levels:()=>ye,logger:()=>I,parseCookies:()=>Nr,parseSetCookieHeader:()=>qr,parseState:()=>_e,setSessionCookie:()=>P,shouldPublishLog:()=>ht});module.exports=_r(cn);var T=require("better-call");var We=require("better-call");var G=require("better-call"),Ke=(0,G.createMiddleware)(async()=>({})),ne=(0,G.createMiddlewareCreator)({use:[Ke,(0,G.createMiddleware)(async()=>({}))]}),k=(0,G.createEndpointCreator)({use:[Ke]});var Ze=ne(async e=>{if(e.request?.method!=="POST")return;let{body:t,query:r,context:n}=e,i=e.headers?.get("origin")||e.headers?.get("referer")||"",o=t?.callbackURL||r?.callbackURL,a=t?.redirectTo,u=r?.currentURL,c=n.trustedOrigins,s=e.headers?.has("cookie"),d=(p,m)=>m.includes("*")?new RegExp("^"+m.replace(/\*/g,"[^/]+").replace(/\./g,"\\.")+"$").test(p):p.startsWith(m),l=(p,m)=>{if(!p)return;if(!c.some(g=>d(p,g)||p?.startsWith("/")&&m!=="origin"&&!p.includes(":")))throw e.context.logger.error(`Invalid ${m}: ${p}`),e.context.logger.info(`If it's a valid URL, please add ${p} to trustedOrigins in your auth config
-`,`Current list of trustedOrigins: ${c}`),new We.APIError("FORBIDDEN",{message:`Invalid ${m}`})};s&&!e.context.options.advanced?.disableCSRFCheck&&l(i,"origin"),o&&l(o,"callbackURL"),a&&l(a,"redirectURL"),u&&l(u,"currentURL")});var S=require("better-call"),v=require("zod");var Ye=require("oslo"),Xe=require("oslo/encoding");var le=require("oslo/crypto");function Ie(e,t){let r=new Uint8Array(e),n=new Uint8Array(t);if(r.length!==n.length)return!1;let i=0;for(let o=0;o<r.length;o++)i|=r[o]^n[o];return i===0}async function Cr({value:e,secret:t}){return new le.HMAC("SHA-256").sign(new TextEncoder().encode(t),new TextEncoder().encode(e)).then(n=>Buffer.from(n).toString("base64"))}function Dr({value:e,signature:t,secret:r}){return new le.HMAC("SHA-256").verify(new TextEncoder().encode(r),Buffer.from(t,"base64"),new TextEncoder().encode(e))}var pe={sign:Cr,verify:Dr};var L=class extends Error{constructor(t,r){super(t),this.name="BetterAuthError",this.message=t,this.cause=r,this.stack=""}},Se=class extends L{constructor(t){super(`The package "${t}" is required. Make sure it is installed.`,t)}};var q=(e,t="ms")=>new Date(Date.now()+(t==="sec"?e*1e3:e));var fe=Object.create(null),oe=e=>globalThis.process?.env||globalThis.Deno?.env.toObject()||globalThis.__env__||(e?fe:globalThis),_=new Proxy(fe,{get(e,t){return oe()[t]??fe[t]},has(e,t){let r=oe();return t in r||t in fe},set(e,t,r){let n=oe(!0);return n[t]=r,!0},deleteProperty(e,t){if(!t)return!1;let r=oe(!0);return delete r[t],!0},ownKeys(){let e=oe(!0);return Object.keys(e)}});function Br(e){return e?e!=="false":!1}var me=typeof process<"u"&&process.env&&process.env.NODE_ENV||"",ie=me==="production",Qe=me==="dev"||me==="development",Je=me==="test"||Br(_.TEST);function qr(e){let t=new Map;return e.split(", ").forEach(n=>{let i=n.split(";").map(l=>l.trim()),[o,...a]=i,[u,...c]=o.split("="),s=c.join("=");if(!u||s===void 0){console.warn(`Malformed cookie: ${n}`);return}let d={value:s};a.forEach(l=>{let[p,...m]=l.split("="),f=m.join("="),g=p.trim().toLowerCase();switch(g){case"max-age":d["max-age"]=f?parseInt(f.trim(),10):void 0;break;case"expires":d.expires=f?new Date(f.trim()):void 0;break;case"domain":d.domain=f?f.trim():void 0;break;case"path":d.path=f?f.trim():void 0;break;case"secure":d.secure=!0;break;case"httponly":d.httponly=!0;break;case"samesite":d.samesite=f?f.trim().toLowerCase():void 0;break;default:d[g]=f?f.trim():!0;break}}),t.set(u,d)}),t}function ge(e){let r=(e.advanced?.useSecureCookies!==void 0?e.advanced?.useSecureCookies:e.baseURL!==void 0?!!e.baseURL.startsWith("https://"):ie)?"__Secure-":"",n=!!e.advanced?.crossSubDomainCookies?.enabled,i=n?e.advanced?.crossSubDomainCookies?.domain||(e.baseURL?new URL(e.baseURL).hostname:void 0):void 0;if(n&&!i)throw new L("baseURL is required when crossSubdomainCookies are enabled");function o(a,u={}){let c=e.advanced?.cookiePrefix||"better-auth",s=e.advanced?.cookies?.[a]?.name||`${c}.${a}`,d=e.advanced?.cookies?.[a]?.attributes;return{name:`${r}${s}`,attributes:{secure:!!r,sameSite:"lax",path:"/",httpOnly:!0,...n?{domain:i}:{},...e.advanced?.defaultCookieAttributes,...u,...d}}}return o}function Pe(e){let t=ge(e),r=e.session?.expiresIn||new Ye.TimeSpan(7,"d").seconds(),n=t("session_token",{maxAge:r}),i=t("session_data",{maxAge:e.session?.cookieCache?.maxAge||60*5}),o=t("dont_remember");return{sessionToken:{name:n.name,options:n.attributes},sessionData:{name:i.name,options:i.attributes},dontRememberToken:{name:o.name,options:o.attributes}}}async function P(e,t,r,n){let i=e.context.authCookies.sessionToken.options,o=r?void 0:e.context.sessionConfig.expiresIn,a=await K(e).catch(()=>null);a&&a.session.userId===t.session.userId&&a.session.token!==t.session.token&&await e.context.internalAdapter.deleteSession(a.session.token),await e.setSignedCookie(e.context.authCookies.sessionToken.name,t.session.token,e.context.secret,{...i,maxAge:o,...n}),r&&await e.setSignedCookie(e.context.authCookies.dontRememberToken.name,"true",e.context.secret,e.context.authCookies.dontRememberToken.options),e.context.options.session?.cookieCache?.enabled&&e.setCookie(e.context.authCookies.sessionData.name,JSON.stringify(Xe.base64url.encode(new TextEncoder().encode(JSON.stringify({session:t,expiresAt:q(e.context.authCookies.sessionData.options.maxAge||60,"sec").getTime(),signature:await pe.sign({value:JSON.stringify(t),secret:e.context.secret})})))),e.context.authCookies.sessionData.options),e.context.options.secondaryStorage&&await e.context.secondaryStorage?.set(t.session.token,JSON.stringify({user:t.user,session:t.session}),Math.floor((new Date(t.session.expiresAt).getTime()-Date.now())/1e3))}function j(e){e.setCookie(e.context.authCookies.sessionToken.name,"",{...e.context.authCookies.sessionToken.options,maxAge:0}),e.setCookie(e.context.authCookies.sessionData.name,"",{...e.context.authCookies.sessionData.options,maxAge:0}),e.setCookie(e.context.authCookies.dontRememberToken.name,"",{...e.context.authCookies.dontRememberToken.options,maxAge:0})}function Nr(e){let t=e.split("; "),r=new Map;return t.forEach(n=>{let[i,o]=n.split("=");r.set(i,o)}),r}var st=require("@better-fetch/fetch"),at=require("better-call"),Q=require("jose"),dt=require("oslo/jwt");var et=require("oslo/crypto"),tt=require("oslo/encoding");async function rt(e){let t=await(0,et.sha256)(new TextEncoder().encode(e));return tt.base64url.encode(new Uint8Array(t),{includePadding:!1})}function nt(e){return{tokenType:e.token_type,accessToken:e.access_token,refreshToken:e.refresh_token,accessTokenExpiresAt:e.expires_in?q(e.expires_in,"sec"):void 0,scopes:e?.scope?typeof e.scope=="string"?e.scope.split(" "):e.scope:[],idToken:e.id_token}}async function R({id:e,options:t,authorizationEndpoint:r,state:n,codeVerifier:i,scopes:o,claims:a,redirectURI:u}){let c=new URL(r);if(c.searchParams.set("response_type","code"),c.searchParams.set("client_id",t.clientId),c.searchParams.set("state",n),c.searchParams.set("scope",o.join(" ")),c.searchParams.set("redirect_uri",t.redirectURI||u),i){let s=await rt(i);c.searchParams.set("code_challenge_method","S256"),c.searchParams.set("code_challenge",s)}if(a){let s=a.reduce((d,l)=>(d[l]=null,d),{});c.searchParams.set("claims",JSON.stringify({id_token:{email:null,email_verified:null,...s}}))}return c}var ot=require("@better-fetch/fetch");async function x({code:e,codeVerifier:t,redirectURI:r,options:n,tokenEndpoint:i,authentication:o}){let a=new URLSearchParams,u={"content-type":"application/x-www-form-urlencoded",accept:"application/json","user-agent":"better-auth"};if(a.set("grant_type","authorization_code"),a.set("code",e),t&&a.set("code_verifier",t),a.set("redirect_uri",r),o==="basic"){let l=btoa(`${n.clientId}:${n.clientSecret}`);u.authorization=`Basic ${l}`}else a.set("client_id",n.clientId),a.set("client_secret",n.clientSecret);let{data:c,error:s}=await(0,ot.betterFetch)(i,{method:"POST",body:a,headers:u});if(s)throw s;return nt(c)}var he=require("oslo/oauth2"),$=require("zod"),Le=require("better-call");function jr(e){try{return new URL(e).pathname!=="/"}catch{throw new L(`Invalid base URL: ${e}. Please provide a valid base URL.`)}}function Oe(e,t="/api/auth"){return jr(e)?e:(t=t.startsWith("/")?t:`/${t}`,`${e}${t}`)}function se(e,t){if(e)return Oe(e,t);let r=_.BETTER_AUTH_URL||_.NEXT_PUBLIC_BETTER_AUTH_URL||_.PUBLIC_BETTER_AUTH_URL||_.NUXT_PUBLIC_BETTER_AUTH_URL||_.NUXT_PUBLIC_AUTH_URL||(_.BASE_URL!=="/"?_.BASE_URL:void 0);if(r)return Oe(r,t);if(typeof window<"u"&&window.location)return Oe(window.location.origin,t)}function it(e){try{return new URL(e).origin}catch{return null}}async function ae(e,t){let r=e.body?.callbackURL||(e.query?.currentURL?it(e.query?.currentURL):"")||e.context.options.baseURL;if(!r)throw new Le.APIError("BAD_REQUEST",{message:"callbackURL is required"});let n=(0,he.generateCodeVerifier)(),i=(0,he.generateState)(),o=JSON.stringify({callbackURL:r,codeVerifier:n,errorURL:e.body?.errorCallbackURL||e.query?.currentURL,link:t,expiresAt:Date.now()+10*60*1e3}),a=new Date;a.setMinutes(a.getMinutes()+10);let u=await e.context.internalAdapter.createVerificationValue({value:o,identifier:i,expiresAt:a});if(!u)throw e.context.logger.error("Unable to create verification. Make sure the database adapter is properly working and there is a verification table in the database"),new Le.APIError("INTERNAL_SERVER_ERROR",{message:"Unable to create verification"});return{state:u.identifier,codeVerifier:n}}async function _e(e){let t=e.query.state||e.body.state,r=await e.context.internalAdapter.findVerificationValue(t);if(!r)throw e.context.logger.error("State Mismatch. Verification not found",{state:t}),e.redirect(`${e.context.baseURL}/error?error=please_restart_the_process`);let n=$.z.object({callbackURL:$.z.string(),codeVerifier:$.z.string(),errorURL:$.z.string().optional(),expiresAt:$.z.number(),link:$.z.object({email:$.z.string(),userId:$.z.string()}).optional()}).parse(JSON.parse(r.value));if(n.errorURL||(n.errorURL=`${e.context.baseURL}/error`),n.expiresAt<Date.now())throw await e.context.internalAdapter.deleteVerificationValue(r.id),e.context.logger.error("State expired.",{state:t}),e.redirect(`${e.context.baseURL}/error?error=please_restart_the_process`);return await e.context.internalAdapter.deleteVerificationValue(r.id),n}var ct=e=>{let t="https://appleid.apple.com/auth/token";return{id:"apple",name:"Apple",createAuthorizationURL({state:r,scopes:n,redirectURI:i}){let o=n||["email","name"];return e.scope&&o.push(...e.scope),new URL(`https://appleid.apple.com/auth/authorize?client_id=${e.clientId}&response_type=code&redirect_uri=${i||e.redirectURI}&scope=${o.join(" ")}&state=${r}&response_mode=form_post`)},validateAuthorizationCode:async({code:r,codeVerifier:n,redirectURI:i})=>x({code:r,codeVerifier:n,redirectURI:e.redirectURI||i,options:e,tokenEndpoint:t}),async verifyIdToken(r,n){if(e.disableIdTokenSignIn)return!1;if(e.verifyIdToken)return e.verifyIdToken(r,n);let i=(0,Q.decodeProtectedHeader)(r),{kid:o,alg:a}=i;if(!o||!a)return!1;let u=await Fr(o),{payload:c}=await(0,Q.jwtVerify)(r,u,{algorithms:[a],issuer:"https://appleid.apple.com",audience:e.clientId,maxTokenAge:"1h"});return["email_verified","is_private_email"].forEach(s=>{c[s]!==void 0&&(c[s]=!!c[s])}),n&&c.nonce!==n?!1:!!c},async getUserInfo(r){if(e.getUserInfo)return e.getUserInfo(r);if(!r.idToken)return null;let n=(0,dt.parseJWT)(r.idToken)?.payload;if(!n)return null;let i=n.user?`${n.user.name.firstName} ${n.user.name.lastName}`:n.email;return{user:{id:n.sub,name:i,emailVerified:!1,email:n.email},data:n}}}},Fr=async e=>{let t="https://appleid.apple.com",r="/auth/keys",{data:n}=await(0,st.betterFetch)(`${t}${r}`);if(!n?.keys)throw new at.APIError("BAD_REQUEST",{message:"Keys not found"});let i=n.keys.find(o=>o.kid===e);if(!i)throw new Error(`JWK with kid ${e} not found`);return await(0,Q.importJWK)(i,i.alg)};var ut=require("@better-fetch/fetch");var lt=e=>({id:"discord",name:"Discord",createAuthorizationURL({state:t,scopes:r,redirectURI:n}){let i=r||["identify","email"];return e.scope&&i.push(...e.scope),new URL(`https://discord.com/api/oauth2/authorize?scope=${i.join("+")}&response_type=code&client_id=${e.clientId}&redirect_uri=${encodeURIComponent(e.redirectURI||n)}&state=${t}`)},validateAuthorizationCode:async({code:t,redirectURI:r})=>x({code:t,redirectURI:e.redirectURI||r,options:e,tokenEndpoint:"https://discord.com/api/oauth2/token"}),async getUserInfo(t){if(e.getUserInfo)return e.getUserInfo(t);let{data:r,error:n}=await(0,ut.betterFetch)("https://discord.com/api/users/@me",{headers:{authorization:`Bearer ${t.accessToken}`}});if(n)return null;if(r.avatar===null){let i=r.discriminator==="0"?Number(BigInt(r.id)>>BigInt(22))%6:parseInt(r.discriminator)%5;r.image_url=`https://cdn.discordapp.com/embed/avatars/${i}.png`}else{let i=r.avatar.startsWith("a_")?"gif":"png";r.image_url=`https://cdn.discordapp.com/avatars/${r.id}/${r.avatar}.${i}`}return{user:{id:r.id,name:r.display_name||r.username||"",email:r.email,emailVerified:r.verified,image:r.image_url},data:r}}});var pt=require("@better-fetch/fetch");var ft=e=>({id:"facebook",name:"Facebook",async createAuthorizationURL({state:t,scopes:r,redirectURI:n}){let i=r||["email","public_profile"];return e.scope&&i.push(...e.scope),await R({id:"facebook",options:e,authorizationEndpoint:"https://www.facebook.com/v21.0/dialog/oauth",scopes:i,state:t,redirectURI:n})},validateAuthorizationCode:async({code:t,redirectURI:r})=>x({code:t,redirectURI:e.redirectURI||r,options:e,tokenEndpoint:"https://graph.facebook.com/oauth/access_token"}),async getUserInfo(t){if(e.getUserInfo)return e.getUserInfo(t);let{data:r,error:n}=await(0,pt.betterFetch)("https://graph.facebook.com/me?fields=id,name,email,picture",{auth:{type:"Bearer",token:t.accessToken}});return n?null:{user:{id:r.id,name:r.name,email:r.email,image:r.picture.data.url,emailVerified:r.email_verified},data:r}}});var Ce=require("@better-fetch/fetch");var mt=e=>{let t="https://github.com/login/oauth/access_token";return{id:"github",name:"GitHub",createAuthorizationURL({state:r,scopes:n,codeVerifier:i,redirectURI:o}){let a=n||["user:email"];return e.scope&&a.push(...e.scope),R({id:"github",options:e,authorizationEndpoint:"https://github.com/login/oauth/authorize",scopes:a,state:r,redirectURI:o})},validateAuthorizationCode:async({code:r,redirectURI:n})=>x({code:r,redirectURI:e.redirectURI||n,options:e,tokenEndpoint:t}),async getUserInfo(r){if(e.getUserInfo)return e.getUserInfo(r);let{data:n,error:i}=await(0,Ce.betterFetch)("https://api.github.com/user",{headers:{"User-Agent":"better-auth",authorization:`Bearer ${r.accessToken}`}});if(i)return null;let o=!1;if(!n.email){let{data:a,error:u}=await(0,Ce.betterFetch)("https://api.github.com/user/emails",{headers:{authorization:`Bearer ${r.accessToken}`,"User-Agent":"better-auth"}});u||(n.email=(a.find(c=>c.primary)??a[0])?.email,o=a.find(c=>c.email===n.email)?.verified??!1)}return{user:{id:n.id.toString(),name:n.name||n.login,email:n.email,image:n.avatar_url,emailVerified:o},data:n}}}};var yt=require("oslo/jwt");var gt=require("consola"),ye=["info","success","warn","error","debug"];function ht(e,t){return ye.indexOf(t)<=ye.indexOf(e)}var Vr=(0,gt.createConsola)({formatOptions:{date:!1,colors:!0,compact:!0},defaults:{tag:"Better Auth"}}),de=e=>{let t=e?.disabled!==!0,r=e?.level??"error",n=(i,o,a=[])=>{if(!(!t||!ht(r,i))){if(!e||typeof e.log!="function"){Vr[i]("",o,...a);return}e.log(i==="success"?"info":i,o,a)}};return Object.fromEntries(ye.map(i=>[i,(...[o,...a])=>n(i,o,a)]))},I=de();var wt=require("@better-fetch/fetch"),bt=e=>({id:"google",name:"Google",async createAuthorizationURL({state:t,scopes:r,codeVerifier:n,redirectURI:i}){if(!e.clientId||!e.clientSecret)throw I.error("Client Id and Client Secret is required for Google. Make sure to provide them in the options."),new L("CLIENT_ID_AND_SECRET_REQUIRED");if(!n)throw new L("codeVerifier is required for Google");let o=r||["email","profile","openid"];e.scope&&o.push(...e.scope);let a=await R({id:"google",options:e,authorizationEndpoint:"https://accounts.google.com/o/oauth2/auth",scopes:o,state:t,codeVerifier:n,redirectURI:i});return e.accessType&&a.searchParams.set("access_type",e.accessType),e.prompt&&a.searchParams.set("prompt",e.prompt),a},validateAuthorizationCode:async({code:t,codeVerifier:r,redirectURI:n})=>x({code:t,codeVerifier:r,redirectURI:e.redirectURI||n,options:e,tokenEndpoint:"https://oauth2.googleapis.com/token"}),async verifyIdToken(t,r){if(e.disableIdTokenSignIn)return!1;if(e.verifyIdToken)return e.verifyIdToken(t,r);let n=`https://www.googleapis.com/oauth2/v3/tokeninfo?id_token=${t}`,{data:i}=await(0,wt.betterFetch)(n);return i?i.aud===e.clientId&&i.iss==="https://accounts.google.com":!1},async getUserInfo(t){if(e.getUserInfo)return e.getUserInfo(t);if(!t.idToken)return null;let r=(0,yt.parseJWT)(t.idToken)?.payload;return{user:{id:r.sub,name:r.name,email:r.email,image:r.picture,emailVerified:r.email_verified},data:r}}});var At=require("@better-fetch/fetch"),kt=require("oslo/jwt");var xt=e=>{let t=e.tenantId||"common",r=`https://login.microsoftonline.com/${t}/oauth2/v2.0/authorize`,n=`https://login.microsoftonline.com/${t}/oauth2/v2.0/token`;return{id:"microsoft",name:"Microsoft EntraID",createAuthorizationURL(i){let o=i.scopes||["openid","profile","email","User.Read"];return e.scope&&o.push(...e.scope),R({id:"microsoft",options:e,authorizationEndpoint:r,state:i.state,codeVerifier:i.codeVerifier,scopes:o,redirectURI:i.redirectURI})},validateAuthorizationCode({code:i,codeVerifier:o,redirectURI:a}){return x({code:i,codeVerifier:o,redirectURI:e.redirectURI||a,options:e,tokenEndpoint:n})},async getUserInfo(i){if(e.getUserInfo)return e.getUserInfo(i);if(!i.idToken)return null;let o=(0,kt.parseJWT)(i.idToken)?.payload,a=e.profilePhotoSize||48;return await(0,At.betterFetch)(`https://graph.microsoft.com/v1.0/me/photos/${a}x${a}/$value`,{headers:{Authorization:`Bearer ${i.accessToken}`},async onResponse(u){if(!(e.disableProfilePhoto||!u.response.ok))try{let s=await u.response.clone().arrayBuffer(),d=Buffer.from(s).toString("base64");o.picture=`data:image/jpeg;base64, ${d}`}catch(c){I.error(c&&typeof c=="object"&&"name"in c?c.name:"",c)}}}),{user:{id:o.sub,name:o.name,email:o.email,image:o.picture,emailVerified:!0},data:o}}}};var vt=require("@better-fetch/fetch");var Rt=e=>({id:"spotify",name:"Spotify",createAuthorizationURL({state:t,scopes:r,codeVerifier:n,redirectURI:i}){let o=r||["user-read-email"];return e.scope&&o.push(...e.scope),R({id:"spotify",options:e,authorizationEndpoint:"https://accounts.spotify.com/authorize",scopes:o,state:t,codeVerifier:n,redirectURI:i})},validateAuthorizationCode:async({code:t,codeVerifier:r,redirectURI:n})=>x({code:t,codeVerifier:r,redirectURI:e.redirectURI||n,options:e,tokenEndpoint:"https://accounts.spotify.com/api/token"}),async getUserInfo(t){if(e.getUserInfo)return e.getUserInfo(t);let{data:r,error:n}=await(0,vt.betterFetch)("https://api.spotify.com/v1/me",{method:"GET",headers:{Authorization:`Bearer ${t.accessToken}`}});return n?null:{user:{id:r.id,name:r.display_name,email:r.email,image:r.images[0]?.url,emailVerified:!1},data:r}}});function $r(e){return e.charAt(0).toUpperCase()+e.slice(1)}var W={isAction:!1};var Ut=require("nanoid"),N=e=>(0,Ut.nanoid)(e);var Tt=require("oslo/jwt");var Et=e=>({id:"twitch",name:"Twitch",createAuthorizationURL({state:t,scopes:r,redirectURI:n}){let i=r||["user:read:email","openid"];return e.scope&&i.push(...e.scope),R({id:"twitch",redirectURI:n,options:e,authorizationEndpoint:"https://id.twitch.tv/oauth2/authorize",scopes:i,state:t,claims:e.claims||["email","email_verified","preferred_username","picture"]})},validateAuthorizationCode:async({code:t,redirectURI:r})=>x({code:t,redirectURI:e.redirectURI||r,options:e,tokenEndpoint:"https://id.twitch.tv/oauth2/token"}),async getUserInfo(t){if(e.getUserInfo)return e.getUserInfo(t);let r=t.idToken;if(!r)return I.error("No idToken found in token"),null;let n=(0,Tt.parseJWT)(r)?.payload;return{user:{id:n.sub,name:n.preferred_username,email:n.email,image:n.picture,emailVerified:!1},data:n}}});var It=require("@better-fetch/fetch");var St=e=>({id:"twitter",name:"Twitter",createAuthorizationURL(t){let r=t.scopes||["users.read","tweet.read","offline.access"];return e.scope&&r.push(...e.scope),R({id:"twitter",options:e,authorizationEndpoint:"https://x.com/i/oauth2/authorize",scopes:r,state:t.state,codeVerifier:t.codeVerifier,redirectURI:t.redirectURI})},validateAuthorizationCode:async({code:t,codeVerifier:r,redirectURI:n})=>x({code:t,codeVerifier:r,authentication:"basic",redirectURI:e.redirectURI||n,options:e,tokenEndpoint:"https://api.x.com/2/oauth2/token"}),async getUserInfo(t){if(e.getUserInfo)return e.getUserInfo(t);let{data:r,error:n}=await(0,It.betterFetch)("https://api.x.com/2/users/me?user.fields=profile_image_url",{method:"GET",headers:{Authorization:`Bearer ${t.accessToken}`}});return n?null:{user:{id:r.data.id,name:r.data.name,email:r.data.username||null,image:r.data.profile_image_url,emailVerified:r.data.verified||!1},data:r}}});var Pt=require("@better-fetch/fetch");var Ot=e=>{let t="https://api.dropboxapi.com/oauth2/token";return{id:"dropbox",name:"Dropbox",createAuthorizationURL:async({state:r,scopes:n,codeVerifier:i,redirectURI:o})=>{let a=n||["account_info.read"];return e.scope&&a.push(...e.scope),await R({id:"dropbox",options:e,authorizationEndpoint:"https://www.dropbox.com/oauth2/authorize",scopes:a,state:r,redirectURI:o,codeVerifier:i})},validateAuthorizationCode:async({code:r,codeVerifier:n,redirectURI:i})=>await x({code:r,codeVerifier:n,redirectURI:e.redirectURI||i,options:e,tokenEndpoint:t}),async getUserInfo(r){if(e.getUserInfo)return e.getUserInfo(r);let{data:n,error:i}=await(0,Pt.betterFetch)("https://api.dropboxapi.com/2/users/get_current_account",{method:"POST",headers:{Authorization:`Bearer ${r.accessToken}`}});return i?null:{user:{id:n.account_id,name:n.name?.display_name,email:n.email,emailVerified:n.email_verified||!1,image:n.profile_photo_url},data:n}}}};var Lt=require("@better-fetch/fetch");var _t=e=>{let t="https://www.linkedin.com/oauth/v2/authorization",r="https://www.linkedin.com/oauth/v2/accessToken";return{id:"linkedin",name:"Linkedin",createAuthorizationURL:async({state:n,scopes:i,redirectURI:o})=>{let a=i||["profile","email","openid"];return e.scope&&a.push(...e.scope),await R({id:"linkedin",options:e,authorizationEndpoint:t,scopes:a,state:n,redirectURI:o})},validateAuthorizationCode:async({code:n,redirectURI:i})=>await x({code:n,redirectURI:e.redirectURI||i,options:e,tokenEndpoint:r}),async getUserInfo(n){let{data:i,error:o}=await(0,Lt.betterFetch)("https://api.linkedin.com/v2/userinfo",{method:"GET",headers:{Authorization:`Bearer ${n.accessToken}`}});return o?null:{user:{id:i.sub,name:i.name,email:i.email,emailVerified:i.email_verified||!1,image:i.picture},data:i}}}};var Ct=require("@better-fetch/fetch");var De=(e="")=>e.split("://").map(t=>t.replace(/\/{2,}/g,"/")).join("://"),zr=e=>{let t=e||"https://gitlab.com";return{authorizationEndpoint:De(`${t}/oauth/authorize`),tokenEndpoint:De(`${t}/oauth/token`),userinfoEndpoint:De(`${t}/api/v4/user`)}},Dt=e=>{let{authorizationEndpoint:t,tokenEndpoint:r,userinfoEndpoint:n}=zr(e.issuer),i="gitlab";return{id:i,name:"Gitlab",createAuthorizationURL:async({state:a,scopes:u,codeVerifier:c,redirectURI:s})=>{let d=u||["read_user"];return e.scope&&d.push(...e.scope),await R({id:i,options:e,authorizationEndpoint:t,scopes:d,state:a,redirectURI:s,codeVerifier:c})},validateAuthorizationCode:async({code:a,redirectURI:u,codeVerifier:c})=>x({code:a,redirectURI:e.redirectURI||u,options:e,codeVerifier:c,tokenEndpoint:r}),async getUserInfo(a){if(e.getUserInfo)return e.getUserInfo(a);let{data:u,error:c}=await(0,Ct.betterFetch)(n,{headers:{authorization:`Bearer ${a.accessToken}`}});return c||u.state!=="active"||u.locked?null:{user:{id:u.id.toString(),name:u.name??u.username,email:u.email,image:u.avatar_url,emailVerified:!0},data:u}}}};var Be={apple:ct,discord:lt,facebook:ft,github:mt,microsoft:xt,google:bt,spotify:Rt,twitch:Et,twitter:St,dropbox:Ot,linkedin:_t,gitlab:Dt},we=Object.keys(Be);var Vt=require("oslo"),be=require("oslo/jwt"),B=require("zod");var X=require("better-call");var F=require("better-call");var Y=require("zod");function J(e){try{return JSON.parse(e)}catch{return null}}var qe=()=>k("/get-session",{method:"GET",query:Y.z.optional(Y.z.object({disableCookieCache:Y.z.boolean({description:"Disable cookie cache and fetch session from database"}).optional()})),requireHeaders:!0,metadata:{openapi:{description:"Get the current session",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{session:{type:"object",properties:{token:{type:"string"},userId:{type:"string"},expiresAt:{type:"string"}}},user:{type:"object",$ref:"#/components/schemas/User"}}}}}}}}}},async e=>{try{let t=await e.getSignedCookie(e.context.authCookies.sessionToken.name,e.context.secret);if(!t)return e.json(null);let r=e.getCookie(e.context.authCookies.sessionData.name),n=r?J(Buffer.from(r,"base64").toString()):null;if(n&&!await pe.verify({value:JSON.stringify(n.session),signature:n?.signature,secret:e.context.secret}))return j(e),e.json(null);let i=await e.getSignedCookie(e.context.authCookies.dontRememberToken.name,e.context.secret);if(n?.session&&e.context.options.session?.cookieCache?.enabled&&!e.query?.disableCookieCache){let d=n.session;if(n.expiresAt<Date.now()||d.session.expiresAt<new Date){let p=e.context.authCookies.sessionData.name;e.setCookie(p,"",{maxAge:0})}else return e.json(d)}let o=await e.context.internalAdapter.findSession(t);if(e.context.session=o,!o||o.session.expiresAt<new Date)return j(e),o&&await e.context.internalAdapter.deleteSession(o.session.token),e.json(null);if(i)return e.json(o);let a=e.context.sessionConfig.expiresIn,u=e.context.sessionConfig.updateAge;if(o.session.expiresAt.valueOf()-a*1e3+u*1e3<=Date.now()){let d=await e.context.internalAdapter.updateSession(o.session.token,{expiresAt:q(e.context.sessionConfig.expiresIn,"sec")});if(!d)return j(e),e.json(null,{status:401});let l=(d.expiresAt.valueOf()-Date.now())/1e3;return await P(e,{session:d,user:o.user},!1,{maxAge:l}),e.json({session:d,user:o.user})}return e.json(o)}catch(t){throw e.context.logger.error("INTERNAL_SERVER_ERROR",t),new F.APIError("INTERNAL_SERVER_ERROR",{message:"internal server error"})}}),K=async e=>{if(e.context.session)return e.context.session;let t=await qe()({...e,_flag:"json",headers:e.headers});return e.context.session=t,t},D=ne(async e=>{let t=await K(e);if(!t?.session)throw new F.APIError("UNAUTHORIZED");return{session:t}}),Bt=ne(async e=>{let t=await K(e);if(!t?.session)throw new F.APIError("UNAUTHORIZED");if(e.context.sessionConfig.freshAge===0)return{session:t};let r=e.context.sessionConfig.freshAge,n=t.session.createdAt.valueOf(),i=Date.now();if(!(n+r*1e3>i))throw new F.APIError("FORBIDDEN",{message:"Session is not fresh"});return{session:t}}),qt=()=>k("/list-sessions",{method:"GET",use:[D],requireHeaders:!0,metadata:{openapi:{description:"List all active sessions for the user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"array",items:{type:"object",properties:{token:{type:"string"},userId:{type:"string"},expiresAt:{type:"string"}}}}}}}}}}},async e=>{let r=(await e.context.internalAdapter.listSessions(e.context.session.user.id)).filter(n=>n.expiresAt>new Date);return e.json(r)}),Nt=k("/revoke-session",{method:"POST",body:Y.z.object({token:Y.z.string({description:"The token to revoke"})}),use:[D],requireHeaders:!0,metadata:{openapi:{description:"Revoke a single session",requestBody:{content:{"application/json":{schema:{type:"object",properties:{token:{type:"string"}},required:["token"]}}}}}}},async e=>{let t=e.body.token,r=await e.context.internalAdapter.findSession(t);if(!r)throw new F.APIError("BAD_REQUEST",{message:"Session not found"});if(r.session.userId!==e.context.session.user.id)throw new F.APIError("UNAUTHORIZED");try{await e.context.internalAdapter.deleteSession(t)}catch(n){throw e.context.logger.error(n&&typeof n=="object"&&"name"in n?n.name:"",n),new F.APIError("INTERNAL_SERVER_ERROR")}return e.json({status:!0})}),jt=k("/revoke-sessions",{method:"POST",use:[D],requireHeaders:!0,metadata:{openapi:{description:"Revoke all sessions for the user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{status:{type:"boolean"}},required:["status"]}}}}}}}},async e=>{try{await e.context.internalAdapter.deleteSessions(e.context.session.user.id)}catch(t){throw e.context.logger.error(t&&typeof t=="object"&&"name"in t?t.name:"",t),new F.APIError("INTERNAL_SERVER_ERROR")}return e.json({status:!0})}),Ft=k("/revoke-other-sessions",{method:"POST",requireHeaders:!0,use:[D],metadata:{openapi:{description:"Revoke all other sessions for the user except the current one",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{status:{type:"boolean"}}}}}}}}}},async e=>{let t=e.context.session;if(!t.user)throw new F.APIError("UNAUTHORIZED");let i=(await e.context.internalAdapter.listSessions(t.user.id)).filter(o=>o.expiresAt>new Date).filter(o=>o.token!==e.context.session.session.token);return await Promise.all(i.map(o=>e.context.internalAdapter.deleteSession(o.token))),e.json({status:!0})});async function z(e,t,r){return await(0,be.createJWT)("HS256",Buffer.from(e),{email:t.toLowerCase(),updateTo:r},{expiresIn:new Vt.TimeSpan(1,"h"),issuer:"better-auth",subject:"verify-email",audiences:[t],includeIssuedTimestamp:!0})}async function Mr(e,t){if(!e.context.options.emailVerification?.sendVerificationEmail)throw e.context.logger.error("Verification email isn't enabled."),new X.APIError("BAD_REQUEST",{message:"Verification email isn't enabled"});let r=await z(e.context.secret,t.email),n=`${e.context.baseURL}/verify-email?token=${r}&callbackURL=${e.body.callbackURL||e.query?.currentURL||"/"}`;await e.context.options.emailVerification.sendVerificationEmail({user:t,url:n,token:r},e.request)}var $t=k("/send-verification-email",{method:"POST",query:B.z.object({currentURL:B.z.string({description:"The URL to use for email verification callback"}).optional()}).optional(),body:B.z.object({email:B.z.string({description:"The email to send the verification email to"}).email(),callbackURL:B.z.string({description:"The URL to use for email verification callback"}).optional()}),metadata:{openapi:{description:"Send a verification email to the user",requestBody:{content:{"application/json":{schema:{type:"object",properties:{email:{type:"string",description:"The email to send the verification email to"},callbackURL:{type:"string",description:"The URL to use for email verification callback"}},required:["email"]}}}},responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{status:{type:"boolean"}}}}}}}}}},async e=>{if(!e.context.options.emailVerification?.sendVerificationEmail)throw e.context.logger.error("Verification email isn't enabled."),new X.APIError("BAD_REQUEST",{message:"Verification email isn't enabled"});let{email:t}=e.body,r=await e.context.internalAdapter.findUserByEmail(t);if(!r)throw new X.APIError("BAD_REQUEST",{message:"User not found"});return await Mr(e,r.user),e.json({status:!0})}),zt=k("/verify-email",{method:"GET",query:B.z.object({token:B.z.string({description:"The token to verify the email"}),callbackURL:B.z.string({description:"The URL to redirect to after email verification"}).optional()}),metadata:{openapi:{description:"Verify the email of the user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{user:{type:"object"},status:{type:"boolean"}},required:["user","status"]}}}}}}}},async e=>{function t(u){throw e.query.callbackURL?e.redirect(`${e.query.callbackURL}?error=${u}`):new X.APIError("UNAUTHORIZED",{message:u})}let{token:r}=e.query,n;try{n=await(0,be.validateJWT)("HS256",Buffer.from(e.context.secret),r)}catch(u){return e.context.logger.error("Failed to verify email",u),t("invalid_token")}let o=B.z.object({email:B.z.string().email(),updateTo:B.z.string().optional()}).parse(n.payload),a=await e.context.internalAdapter.findUserByEmail(o.email);if(!a)return t("user_not_found");if(o.updateTo){let u=await K(e);if(!u){if(e.query.callbackURL)throw e.redirect(`${e.query.callbackURL}?error=unauthorized`);return t("unauthorized")}if(u.user.email!==o.email){if(e.query.callbackURL)throw e.redirect(`${e.query.callbackURL}?error=unauthorized`);return t("unauthorized")}let c=await e.context.internalAdapter.updateUserByEmail(o.email,{email:o.updateTo});if(await e.context.options.emailVerification?.sendVerificationEmail?.({user:c,url:`${e.context.baseURL}/verify-email?token=${r}`,token:r},e.request),e.query.callbackURL)throw e.redirect(e.query.callbackURL);return e.json({user:c,status:!0})}if(await e.context.internalAdapter.updateUserByEmail(o.email,{emailVerified:!0}),e.context.options.emailVerification?.autoSignInAfterVerification&&!await K(e)){let c=await e.context.internalAdapter.createSession(a.user.id,e.request);if(!c)throw new X.APIError("INTERNAL_SERVER_ERROR",{message:"Failed to create session"});await P(e,{session:c,user:a.user})}if(e.query.callbackURL)throw e.redirect(e.query.callbackURL);return e.json({user:null,status:!0})});async function Ae(e,{userInfo:t,account:r,callbackURL:n}){let i=await e.context.internalAdapter.findUserByEmail(t.email.toLowerCase(),{includeAccounts:!0}).catch(u=>{throw I.error(`Better auth was unable to query your database.
-Error: `,u),e.redirect(`${e.context.baseURL}/error?error=internal_server_error`)}),o=i?.user;if(i){let u=i.accounts.find(c=>c.providerId===r.providerId);if(u){let c=Object.fromEntries(Object.entries({accessToken:r.accessToken,idToken:r.idToken,refreshToken:r.refreshToken,accessTokenExpiresAt:r.accessTokenExpiresAt,refreshTokenExpiresAt:r.refreshTokenExpiresAt}).filter(([s,d])=>d!==void 0));Object.keys(c).length>0&&await e.context.internalAdapter.updateAccount(u.id,c)}else{if(!e.context.options.account?.accountLinking?.trustedProviders?.includes(r.providerId)&&!t.emailVerified||e.context.options.account?.accountLinking?.enabled===!1)return Qe&&I.warn(`User already exist but account isn't linked to ${r.providerId}. To read more about how account linking works in Better Auth see https://www.better-auth.com/docs/concepts/users-accounts#account-linking.`),{error:"account not linked",data:null};try{await e.context.internalAdapter.linkAccount({providerId:r.providerId,accountId:t.id.toString(),userId:i.user.id,accessToken:r.accessToken,idToken:r.idToken,refreshToken:r.refreshToken,accessTokenExpiresAt:r.accessTokenExpiresAt,refreshTokenExpiresAt:r.refreshTokenExpiresAt,scope:r.scope})}catch(d){return I.error("Unable to link account",d),{error:"unable to link account",data:null}}}}else try{let u=t.emailVerified||!1;if(o=await e.context.internalAdapter.createOAuthUser({...t,id:void 0,emailVerified:u,email:t.email.toLowerCase()},{accessToken:r.accessToken,idToken:r.idToken,refreshToken:r.refreshToken,accessTokenExpiresAt:r.accessTokenExpiresAt,refreshTokenExpiresAt:r.refreshTokenExpiresAt,scope:r.scope,providerId:r.providerId,accountId:t.id.toString()}).then(c=>c?.user),!u&&o&&e.context.options.emailVerification?.sendOnSignUp){let c=await z(e.context.secret,o.email),s=`${e.context.baseURL}/verify-email?token=${c}&callbackURL=${n}`;await e.context.options.emailVerification?.sendVerificationEmail?.({user:o,url:s,token:c},e.request)}}catch(u){return I.error("Unable to create user",u),{error:"unable to create user",data:null}}if(!o)return{error:"unable to create user",data:null};let a=await e.context.internalAdapter.createSession(o.id,e.request);return a?{data:{session:a,user:o},error:null}:{error:"unable to create session",data:null}}var Mt=k("/sign-in/social",{method:"POST",query:v.z.object({currentURL:v.z.string().optional()}).optional(),body:v.z.object({callbackURL:v.z.string({description:"Callback URL to redirect to after the user has signed in"}).optional(),errorCallbackURL:v.z.string({description:"Callback URL to redirect to if an error happens"}).optional(),provider:v.z.enum(we,{description:"OAuth2 provider to use"}),disableRedirect:v.z.boolean({description:"Disable automatic redirection to the provider. Useful for handling the redirection yourself"}).optional(),idToken:v.z.optional(v.z.object({token:v.z.string({description:"ID token from the provider"}),nonce:v.z.string({description:"Nonce used to generate the token"}).optional(),accessToken:v.z.string({description:"Access token from the provider"}).optional(),refreshToken:v.z.string({description:"Refresh token from the provider"}).optional(),expiresAt:v.z.number({description:"Expiry date of the token"}).optional()}),{description:"ID token from the provider to sign in the user with id token"})}),metadata:{openapi:{description:"Sign in with a social provider",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{session:{type:"string"},user:{type:"object"},url:{type:"string"},redirect:{type:"boolean"}},required:["session","user","url","redirect"]}}}}}}}},async e=>{let t=e.context.socialProviders.find(o=>o.id===e.body.provider);if(!t)throw e.context.logger.error("Provider not found. Make sure to add the provider in your auth config",{provider:e.body.provider}),new S.APIError("NOT_FOUND",{message:"Provider not found"});if(e.body.idToken){if(!t.verifyIdToken)throw e.context.logger.error("Provider does not support id token verification",{provider:e.body.provider}),new S.APIError("NOT_FOUND",{message:"Provider does not support id token verification"});let{token:o,nonce:a}=e.body.idToken;if(!await t.verifyIdToken(o,a))throw e.context.logger.error("Invalid id token",{provider:e.body.provider}),new S.APIError("UNAUTHORIZED",{message:"Invalid id token"});let c=await t.getUserInfo({idToken:o,accessToken:e.body.idToken.accessToken,refreshToken:e.body.idToken.refreshToken});if(!c||!c?.user)throw e.context.logger.error("Failed to get user info",{provider:e.body.provider}),new S.APIError("UNAUTHORIZED",{message:"Failed to get user info"});if(!c.user.email)throw e.context.logger.error("User email not found",{provider:e.body.provider}),new S.APIError("UNAUTHORIZED",{message:"User email not found"});let s=await Ae(e,{userInfo:{email:c.user.email,id:c.user.id,name:c.user.name||"",image:c.user.image,emailVerified:c.user.emailVerified||!1},account:{providerId:t.id,accountId:c.user.id,accessToken:e.body.idToken.accessToken}});if(s.error)throw new S.APIError("UNAUTHORIZED",{message:s.error});return await P(e,s.data),e.json({session:s.data.session,user:s.data.user,url:`${e.body.callbackURL||e.query?.currentURL||e.context.options.baseURL}`,redirect:!0})}let{codeVerifier:r,state:n}=await ae(e),i=await t.createAuthorizationURL({state:n,codeVerifier:r,redirectURI:`${e.context.baseURL}/callback/${t.id}`});return e.json({url:i.toString(),redirect:!e.body.disableRedirect})}),Ht=k("/sign-in/email",{method:"POST",body:v.z.object({email:v.z.string({description:"Email of the user"}),password:v.z.string({description:"Password of the user"}),callbackURL:v.z.string({description:"Callback URL to use as a redirect for email verification"}).optional(),rememberMe:v.z.boolean({description:"If this is false, the session will not be remembered. Default is `true`."}).default(!0).optional()}),metadata:{openapi:{description:"Sign in with email and password",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{session:{type:"string"},user:{type:"object"},url:{type:"string"},redirect:{type:"boolean"}},required:["session","user","url","redirect"]}}}}}}}},async e=>{if(!e.context.options?.emailAndPassword?.enabled)throw e.context.logger.error("Email and password is not enabled. Make sure to enable it in the options on you `auth.ts` file. Check `https://better-auth.com/docs/authentication/email-password` for more!"),new S.APIError("BAD_REQUEST",{message:"Email and password is not enabled"});let{email:t,password:r}=e.body;if(!v.z.string().email().safeParse(t).success)throw new S.APIError("BAD_REQUEST",{message:"Invalid email"});let i=await e.context.internalAdapter.findUserByEmail(t,{includeAccounts:!0});if(!i)throw await e.context.password.hash(r),e.context.logger.error("User not found",{email:t}),new S.APIError("UNAUTHORIZED",{message:"Invalid email or password"});let o=i.accounts.find(s=>s.providerId==="credential");if(!o)throw e.context.logger.error("Credential account not found",{email:t}),new S.APIError("UNAUTHORIZED",{message:"Invalid email or password"});let a=o?.password;if(!a)throw e.context.logger.error("Password not found",{email:t}),new S.APIError("UNAUTHORIZED",{message:"Unexpected error"});if(!await e.context.password.verify({hash:a,password:r}))throw e.context.logger.error("Invalid password"),new S.APIError("UNAUTHORIZED",{message:"Invalid email or password"});if(e.context.options?.emailAndPassword?.requireEmailVerification&&!i.user.emailVerified){if(!e.context.options?.emailVerification?.sendVerificationEmail)throw new S.APIError("UNAUTHORIZED",{message:"Email is not verified."});let s=await z(e.context.secret,i.user.email),d=`${e.context.baseURL}/verify-email?token=${s}&callbackURL=${e.body.callbackURL||"/"}`;throw await e.context.options.emailVerification.sendVerificationEmail({user:i.user,url:d,token:s},e.request),e.context.logger.error("Email not verified",{email:t}),new S.APIError("FORBIDDEN",{message:"Email is not verified. Check your email for a verification link"})}let c=await e.context.internalAdapter.createSession(i.user.id,e.headers,e.body.rememberMe===!1);if(!c)throw e.context.logger.error("Failed to create session"),new S.APIError("UNAUTHORIZED",{message:"Failed to create session"});return await P(e,{session:c,user:i.user},e.body.rememberMe===!1),e.json({user:i.user,session:c,redirect:!!e.body.callbackURL,url:e.body.callbackURL})});var ee=require("zod");var ke=ee.z.object({code:ee.z.string().optional(),error:ee.z.string().optional(),errorMessage:ee.z.string().optional(),state:ee.z.string().optional()}),Gt=k("/callback/:id",{method:["GET","POST"],body:ke.optional(),query:ke.optional(),metadata:W},async e=>{let t;try{if(e.method==="GET")t=ke.parse(e.query);else if(e.method==="POST")t=ke.parse(e.body);else throw new Error("Unsupported method")}catch(y){throw e.context.logger.error("INVALID_CALLBACK_REQUEST",y),e.redirect(`${e.context.baseURL}/error?error=invalid_callback_request`)}let{code:r,error:n,state:i}=t;if(!i)throw e.context.logger.error("State not found"),e.redirect(`${e.context.baseURL}/error?error=state_not_found`);if(!r)throw e.context.logger.error("Code not found"),e.redirect(`${e.context.baseURL}/error?error=${n||"no_code"}`);let o=e.context.socialProviders.find(y=>y.id===e.params.id);if(!o)throw e.context.logger.error("Oauth provider with id",e.params.id,"not found"),e.redirect(`${e.context.baseURL}/error?error=oauth_provider_not_found`);let{codeVerifier:a,callbackURL:u,link:c,errorURL:s}=await _e(e),d;try{d=await o.validateAuthorizationCode({code:r,codeVerifier:a,redirectURI:`${e.context.baseURL}/callback/${o.id}`})}catch(y){throw e.context.logger.error("",y),e.redirect(`${e.context.baseURL}/error?error=please_restart_the_process`)}let l=await o.getUserInfo(d).then(y=>y?.user);function p(y){let w=s||u||`${e.context.baseURL}/error`;throw w.includes("?")?w=`${w}&error=${y}`:w=`${w}?error=${y}`,e.redirect(w)}if(!l)return e.context.logger.error("Unable to get user info"),p("unable_to_get_user_info");if(!l.email)return e.context.logger.error("Provider did not return email. This could be due to misconfiguration in the provider settings."),p("email_not_found");if(!u)throw e.context.logger.error("No callback URL found"),e.redirect(`${e.context.baseURL}/error?error=please_restart_the_process`);if(c){if(c.email!==l.email.toLowerCase())return p("email_doesn't_match");if(!await e.context.internalAdapter.createAccount({userId:c.userId,providerId:o.id,accountId:l.id}))return p("unable_to_link_account");let w;try{w=new URL(u).toString()}catch{w=u}throw e.redirect(w)}let m=await Ae(e,{userInfo:{id:l.id,email:l.email,name:l.name||"",image:l.image,emailVerified:l.emailVerified||!1},account:{providerId:o.id,accountId:l.id,...d,scope:d.scopes?.join(",")},callbackURL:u});if(m.error)return e.context.logger.error(m.error.split(" ").join("_")),p(m.error.split(" ").join("_"));let{session:f,user:g}=m.data;await P(e,{session:f,user:g});let h;try{h=new URL(u).toString()}catch{h=u}throw e.redirect(h)});var Pi=require("zod");var Kt=require("better-call"),Wt=k("/sign-out",{method:"POST",requireHeaders:!0,metadata:{openapi:{description:"Sign out the current user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{success:{type:"boolean"}}}}}}}}}},async e=>{let t=await e.getSignedCookie(e.context.authCookies.sessionToken.name,e.context.secret);if(!t)throw j(e),new Kt.APIError("BAD_REQUEST",{message:"Session not found"});return await e.context.internalAdapter.deleteSession(t),j(e),e.json({success:!0})});var C=require("zod");var xe=require("better-call");function Zt(e,t,r){let n=t?new URL(t,e.baseURL):new URL(`${e.baseURL}/error`);return r&&Object.entries(r).forEach(([i,o])=>n.searchParams.set(i,o)),n.href}function Hr(e,t,r){let n=new URL(t,e.baseURL);return r&&Object.entries(r).forEach(([i,o])=>n.searchParams.set(i,o)),n.href}var Qt=k("/forget-password",{method:"POST",body:C.z.object({email:C.z.string({description:"The email address of the user to send a password reset email to"}).email(),redirectTo:C.z.string({description:"The URL to redirect the user to reset their password. If the token isn't valid or expired, it'll be redirected with a query parameter `?error=INVALID_TOKEN`. If the token is valid, it'll be redirected with a query parameter `?token=VALID_TOKEN"}).optional()}),metadata:{openapi:{description:"Send a password reset email to the user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{status:{type:"boolean"}}}}}}}}}},async e=>{if(!e.context.options.emailAndPassword?.sendResetPassword)throw e.context.logger.error("Reset password isn't enabled.Please pass an emailAndPassword.sendResetPasswordToken function in your auth config!"),new xe.APIError("BAD_REQUEST",{message:"Reset password isn't enabled"});let{email:t,redirectTo:r}=e.body,n=await e.context.internalAdapter.findUserByEmail(t,{includeAccounts:!0});if(!n)return e.context.logger.error("Reset Password: User not found",{email:t}),e.json({status:!1},{body:{status:!0}});let i=60*60*1,o=q(e.context.options.emailAndPassword.resetPasswordTokenExpiresIn||i,"sec"),a=N(24);await e.context.internalAdapter.createVerificationValue({value:n.user.id.toString(),identifier:`reset-password:${a}`,expiresAt:o});let u=`${e.context.baseURL}/reset-password/${a}?callbackURL=${r}`;return await e.context.options.emailAndPassword.sendResetPassword({user:n.user,url:u,token:a},e.request),e.json({status:!0})}),Jt=k("/reset-password/:token",{method:"GET",query:C.z.object({callbackURL:C.z.string({description:"The URL to redirect the user to reset their password"})}),metadata:{openapi:{description:"Redirects the user to the callback URL with the token",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{token:{type:"string"}}}}}}}}}},async e=>{let{token:t}=e.params,{callbackURL:r}=e.query;if(!t||!r)throw e.redirect(Zt(e.context,r,{error:"INVALID_TOKEN"}));let n=await e.context.internalAdapter.findVerificationValue(`reset-password:${t}`);throw!n||n.expiresAt<new Date?e.redirect(Zt(e.context,r,{error:"INVALID_TOKEN"})):e.redirect(Hr(e.context,r,{token:t}))}),Yt=k("/reset-password",{query:C.z.optional(C.z.object({token:C.z.string().optional(),currentURL:C.z.string().optional()})),method:"POST",body:C.z.object({newPassword:C.z.string({description:"The new password to set"}),token:C.z.string({description:"The token to reset the password"}).optional()}),metadata:{openapi:{description:"Reset the password for a user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{status:{type:"boolean"}}}}}}}}}},async e=>{let t=e.body.token||e.query?.token||(e.query?.currentURL?new URL(e.query.currentURL).searchParams.get("token"):"");if(!t)throw new xe.APIError("BAD_REQUEST",{message:"Token not found"});let{newPassword:r}=e.body,n=`reset-password:${t}`,i=await e.context.internalAdapter.findVerificationValue(n);if(!i||i.expiresAt<new Date)throw new xe.APIError("BAD_REQUEST",{message:"Invalid token"});await e.context.internalAdapter.deleteVerificationValue(i.id);let o=i.value,a=await e.context.password.hash(r);return(await e.context.internalAdapter.findAccounts(o)).find(s=>s.providerId==="credential")?(await e.context.internalAdapter.updatePassword(o,a),e.json({status:!0})):(await e.context.internalAdapter.createAccount({userId:o,providerId:"credential",password:a,accountId:o}),e.json({status:!0}))});var E=require("zod");var O=require("better-call");var A=require("zod"),Xt=require("better-call"),ji=A.z.object({id:A.z.string(),providerId:A.z.string(),accountId:A.z.string(),userId:A.z.string(),accessToken:A.z.string().nullish(),refreshToken:A.z.string().nullish(),idToken:A.z.string().nullish(),accessTokenExpiresAt:A.z.date().nullish(),refreshTokenExpiresAt:A.z.date().nullish(),scope:A.z.string().nullish(),password:A.z.string().nullish(),createdAt:A.z.date().default(()=>new Date),updatedAt:A.z.date().default(()=>new Date)}),Fi=A.z.object({id:A.z.string(),email:A.z.string().transform(e=>e.toLowerCase()),emailVerified:A.z.boolean().default(!1),name:A.z.string(),image:A.z.string().nullish(),createdAt:A.z.date().default(()=>new Date),updatedAt:A.z.date().default(()=>new Date)}),Vi=A.z.object({id:A.z.string(),userId:A.z.string(),expiresAt:A.z.date(),createdAt:A.z.date().default(()=>new Date),updatedAt:A.z.date().default(()=>new Date),token:A.z.string(),ipAddress:A.z.string().nullish(),userAgent:A.z.string().nullish()}),$i=A.z.object({id:A.z.string(),value:A.z.string(),createdAt:A.z.date().default(()=>new Date),updatedAt:A.z.date().default(()=>new Date),expiresAt:A.z.date(),identifier:A.z.string()});function er(e,t){let r=t.fields,n={};for(let i in e){let o=r[i];if(!o){n[i]=e[i];continue}o.returned!==!1&&(n[i]=e[i])}return n}function Ne(e,t){let r={...t==="user"?e.user?.additionalFields:{},...t==="session"?e.session?.additionalFields:{}};for(let n of e.plugins||[])n.schema&&n.schema[t]&&(r={...r,...n.schema[t].fields});return r}function je(e,t){let r=Ne(e,"user");return er(t,{fields:r})}function ve(e,t){let r=Ne(e,"session");return er(t,{fields:r})}function Gr(e,t){let r=t.action||"create",n=t.fields,i={};for(let o in n){if(o in e){if(n[o].input===!1){if(n[o].defaultValue){i[o]=n[o].defaultValue;continue}continue}if(n[o].validator?.input&&e[o]!==void 0){i[o]=n[o].validator.input.parse(e[o]);continue}i[o]=e[o];continue}if(n[o].defaultValue&&r==="create"){i[o]=n[o].defaultValue;continue}if(n[o].required&&r==="create")throw new Xt.APIError("BAD_REQUEST",{message:`${o} is required`})}return i}function Re(e,t,r){let n=Ne(e,"user");return Gr(t||{},{fields:n,action:r})}var tr=()=>k("/update-user",{method:"POST",body:E.z.record(E.z.string(),E.z.any()),use:[D],metadata:{openapi:{description:"Update the current user",requestBody:{content:{"application/json":{schema:{type:"object",properties:{name:{type:"string",description:"The name of the user"},image:{type:"string",description:"The image of the user"}}}}}},responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{user:{type:"object"}}}}}}}}}},async e=>{let t=e.body;if(t.email)throw new O.APIError("BAD_REQUEST",{message:"You can't update email"});let{name:r,image:n,...i}=t,o=e.context.session;if(n===void 0&&!r&&Object.keys(i).length===0)return e.json({user:o.user});let a=Re(e.context.options,i,"update"),u=await e.context.internalAdapter.updateUserByEmail(o.user.email,{name:r,image:n,...a});return await P(e,{session:o.session,user:u}),e.json({user:u})}),rr=k("/change-password",{method:"POST",body:E.z.object({newPassword:E.z.string({description:"The new password to set"}),currentPassword:E.z.string({description:"The current password"}),revokeOtherSessions:E.z.boolean({description:"Revoke all other sessions"}).optional()}),use:[D],metadata:{openapi:{description:"Change the password of the user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{user:{description:"The user object",$ref:"#/components/schemas/User"}}}}}}}}}},async e=>{let{newPassword:t,currentPassword:r,revokeOtherSessions:n}=e.body,i=e.context.session,o=e.context.password.config.minPasswordLength;if(t.length<o)throw e.context.logger.error("Password is too short"),new O.APIError("BAD_REQUEST",{message:"Password is too short"});let a=e.context.password.config.maxPasswordLength;if(t.length>a)throw e.context.logger.error("Password is too long"),new O.APIError("BAD_REQUEST",{message:"Password too long"});let c=(await e.context.internalAdapter.findAccounts(i.user.id)).find(l=>l.providerId==="credential"&&l.password);if(!c||!c.password)throw new O.APIError("BAD_REQUEST",{message:"User does not have a password"});let s=await e.context.password.hash(t);if(!await e.context.password.verify({hash:c.password,password:r}))throw new O.APIError("BAD_REQUEST",{message:"Incorrect password"});if(await e.context.internalAdapter.updateAccount(c.id,{password:s}),n){await e.context.internalAdapter.deleteSessions(i.user.id);let l=await e.context.internalAdapter.createSession(i.user.id,e.headers);if(!l)throw new O.APIError("INTERNAL_SERVER_ERROR",{message:"Unable to create session"});await P(e,{session:l,user:i.user})}return e.json(i.user)}),nr=k("/set-password",{method:"POST",body:E.z.object({newPassword:E.z.string()}),metadata:{SERVER_ONLY:!0},use:[D]},async e=>{let{newPassword:t}=e.body,r=e.context.session,n=e.context.password.config.minPasswordLength;if(t.length<n)throw e.context.logger.error("Password is too short"),new O.APIError("BAD_REQUEST",{message:"Password is too short"});let i=e.context.password.config.maxPasswordLength;if(t.length>i)throw e.context.logger.error("Password is too long"),new O.APIError("BAD_REQUEST",{message:"Password too long"});let a=(await e.context.internalAdapter.findAccounts(r.user.id)).find(c=>c.providerId==="credential"&&c.password),u=await e.context.password.hash(t);if(!a)return await e.context.internalAdapter.linkAccount({userId:r.user.id,providerId:"credential",accountId:r.user.id,password:u}),e.json(r.user);throw new O.APIError("BAD_REQUEST",{message:"user already has a password"})}),or=k("/delete-user",{method:"POST",body:E.z.object({password:E.z.string({description:"The password of the user"})}),use:[Bt],metadata:{openapi:{description:"Delete the user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object"}}}}}}}},async e=>{let t=e.context.session;return await e.context.internalAdapter.deleteUser(t.user.id),await e.context.internalAdapter.deleteSessions(t.user.id),j(e),e.json(null)}),ir=k("/change-email",{method:"POST",query:E.z.object({currentURL:E.z.string().optional()}).optional(),body:E.z.object({newEmail:E.z.string({description:"The new email to set"}).email(),callbackURL:E.z.string({description:"The URL to redirect to after email verification"}).optional()}),use:[D],metadata:{openapi:{responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{user:{type:"object"},status:{type:"boolean"}}}}}}}}}},async e=>{if(!e.context.options.user?.changeEmail?.enabled)throw e.context.logger.error("Change email is disabled."),new O.APIError("BAD_REQUEST",{message:"Change email is disabled"});if(e.body.newEmail===e.context.session.user.email)throw e.context.logger.error("Email is the same"),new O.APIError("BAD_REQUEST",{message:"Email is the same"});if(await e.context.internalAdapter.findUserByEmail(e.body.newEmail))throw e.context.logger.error("Email already exists"),new O.APIError("BAD_REQUEST",{message:"Couldn't update your email"});if(e.context.session.user.emailVerified!==!0){let i=await e.context.internalAdapter.updateUserByEmail(e.context.session.user.email,{email:e.body.newEmail});return e.json({user:i,status:!0})}if(!e.context.options.user.changeEmail.sendChangeEmailVerification)throw e.context.logger.error("Verification email isn't enabled."),new O.APIError("BAD_REQUEST",{message:"Verification email isn't enabled"});let r=await z(e.context.secret,e.context.session.user.email,e.body.newEmail),n=`${e.context.baseURL}/verify-email?token=${r}&callbackURL=${e.body.callbackURL||e.query?.currentURL||"/"}`;return await e.context.options.user.changeEmail.sendChangeEmailVerification({user:e.context.session.user,newEmail:e.body.newEmail,url:n,token:r},e.request),e.json({user:null,status:!0})});var Kr=(e="Unknown")=>`<!DOCTYPE html>
+"use strict";var Ee=Object.defineProperty;var Ir=Object.getOwnPropertyDescriptor;var Sr=Object.getOwnPropertyNames;var Pr=Object.prototype.hasOwnProperty;var Or=(e,t)=>{for(var r in t)Ee(e,r,{get:t[r],enumerable:!0})},Lr=(e,t,r,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let i of Sr(t))!Pr.call(e,i)&&i!==r&&Ee(e,i,{get:()=>t[i],enumerable:!(n=Ir(t,i))||n.enumerable});return e};var _r=e=>Lr(Ee({},"__esModule",{value:!0}),e);var cn={};Or(cn,{BetterAuthError:()=>L,HIDE_METADATA:()=>W,MissingDependencyError:()=>Se,betterAuth:()=>dn,capitalizeFirstLetter:()=>$r,createCookieGetter:()=>ge,createLogger:()=>de,deleteSessionCookie:()=>j,generateId:()=>q,generateState:()=>ae,getCookies:()=>Pe,levels:()=>ye,logger:()=>I,parseCookies:()=>qr,parseSetCookieHeader:()=>Nr,parseState:()=>_e,setSessionCookie:()=>P,shouldPublishLog:()=>ht});module.exports=_r(cn);var T=require("better-call");var We=require("better-call");var G=require("better-call"),Ke=(0,G.createMiddleware)(async()=>({})),ne=(0,G.createMiddlewareCreator)({use:[Ke,(0,G.createMiddleware)(async()=>({}))]}),k=(0,G.createEndpointCreator)({use:[Ke]});var Ze=ne(async e=>{if(e.request?.method!=="POST")return;let{body:t,query:r,context:n}=e,i=e.headers?.get("origin")||e.headers?.get("referer")||"",o=t?.callbackURL||r?.callbackURL,a=t?.redirectTo,u=r?.currentURL,c=n.trustedOrigins,s=e.headers?.has("cookie"),d=(p,m)=>m.includes("*")?new RegExp("^"+m.replace(/\*/g,"[^/]+").replace(/\./g,"\\.")+"$").test(p):p.startsWith(m),l=(p,m)=>{if(!p)return;if(!c.some(g=>d(p,g)||p?.startsWith("/")&&m!=="origin"&&!p.includes(":")))throw e.context.logger.error(`Invalid ${m}: ${p}`),e.context.logger.info(`If it's a valid URL, please add ${p} to trustedOrigins in your auth config
+`,`Current list of trustedOrigins: ${c}`),new We.APIError("FORBIDDEN",{message:`Invalid ${m}`})};s&&!e.context.options.advanced?.disableCSRFCheck&&l(i,"origin"),o&&l(o,"callbackURL"),a&&l(a,"redirectURL"),u&&l(u,"currentURL")});var S=require("better-call"),v=require("zod");var Ye=require("oslo"),Xe=require("oslo/encoding");var le=require("oslo/crypto");function Ie(e,t){let r=new Uint8Array(e),n=new Uint8Array(t);if(r.length!==n.length)return!1;let i=0;for(let o=0;o<r.length;o++)i|=r[o]^n[o];return i===0}async function Cr({value:e,secret:t}){return new le.HMAC("SHA-256").sign(new TextEncoder().encode(t),new TextEncoder().encode(e)).then(n=>Buffer.from(n).toString("base64"))}function Dr({value:e,signature:t,secret:r}){return new le.HMAC("SHA-256").verify(new TextEncoder().encode(r),Buffer.from(t,"base64"),new TextEncoder().encode(e))}var pe={sign:Cr,verify:Dr};var L=class extends Error{constructor(t,r){super(t),this.name="BetterAuthError",this.message=t,this.cause=r,this.stack=""}},Se=class extends L{constructor(t){super(`The package "${t}" is required. Make sure it is installed.`,t)}};var N=(e,t="ms")=>new Date(Date.now()+(t==="sec"?e*1e3:e));var fe=Object.create(null),oe=e=>globalThis.process?.env||globalThis.Deno?.env.toObject()||globalThis.__env__||(e?fe:globalThis),_=new Proxy(fe,{get(e,t){return oe()[t]??fe[t]},has(e,t){let r=oe();return t in r||t in fe},set(e,t,r){let n=oe(!0);return n[t]=r,!0},deleteProperty(e,t){if(!t)return!1;let r=oe(!0);return delete r[t],!0},ownKeys(){let e=oe(!0);return Object.keys(e)}});function Br(e){return e?e!=="false":!1}var me=typeof process<"u"&&process.env&&process.env.NODE_ENV||"",ie=me==="production",Qe=me==="dev"||me==="development",Je=me==="test"||Br(_.TEST);function Nr(e){let t=new Map;return e.split(", ").forEach(n=>{let i=n.split(";").map(l=>l.trim()),[o,...a]=i,[u,...c]=o.split("="),s=c.join("=");if(!u||s===void 0){console.warn(`Malformed cookie: ${n}`);return}let d={value:s};a.forEach(l=>{let[p,...m]=l.split("="),f=m.join("="),g=p.trim().toLowerCase();switch(g){case"max-age":d["max-age"]=f?parseInt(f.trim(),10):void 0;break;case"expires":d.expires=f?new Date(f.trim()):void 0;break;case"domain":d.domain=f?f.trim():void 0;break;case"path":d.path=f?f.trim():void 0;break;case"secure":d.secure=!0;break;case"httponly":d.httponly=!0;break;case"samesite":d.samesite=f?f.trim().toLowerCase():void 0;break;default:d[g]=f?f.trim():!0;break}}),t.set(u,d)}),t}function ge(e){let r=(e.advanced?.useSecureCookies!==void 0?e.advanced?.useSecureCookies:e.baseURL!==void 0?!!e.baseURL.startsWith("https://"):ie)?"__Secure-":"",n=!!e.advanced?.crossSubDomainCookies?.enabled,i=n?e.advanced?.crossSubDomainCookies?.domain||(e.baseURL?new URL(e.baseURL).hostname:void 0):void 0;if(n&&!i)throw new L("baseURL is required when crossSubdomainCookies are enabled");function o(a,u={}){let c=e.advanced?.cookiePrefix||"better-auth",s=e.advanced?.cookies?.[a]?.name||`${c}.${a}`,d=e.advanced?.cookies?.[a]?.attributes;return{name:`${r}${s}`,attributes:{secure:!!r,sameSite:"lax",path:"/",httpOnly:!0,...n?{domain:i}:{},...e.advanced?.defaultCookieAttributes,...u,...d}}}return o}function Pe(e){let t=ge(e),r=e.session?.expiresIn||new Ye.TimeSpan(7,"d").seconds(),n=t("session_token",{maxAge:r}),i=t("session_data",{maxAge:e.session?.cookieCache?.maxAge||60*5}),o=t("dont_remember");return{sessionToken:{name:n.name,options:n.attributes},sessionData:{name:i.name,options:i.attributes},dontRememberToken:{name:o.name,options:o.attributes}}}async function P(e,t,r,n){let i=e.context.authCookies.sessionToken.options,o=r?void 0:e.context.sessionConfig.expiresIn,a=await K(e).catch(()=>null);a&&a.session.userId===t.session.userId&&a.session.token!==t.session.token&&await e.context.internalAdapter.deleteSession(a.session.token),await e.setSignedCookie(e.context.authCookies.sessionToken.name,t.session.token,e.context.secret,{...i,maxAge:o,...n}),r&&await e.setSignedCookie(e.context.authCookies.dontRememberToken.name,"true",e.context.secret,e.context.authCookies.dontRememberToken.options),e.context.options.session?.cookieCache?.enabled&&e.setCookie(e.context.authCookies.sessionData.name,JSON.stringify(Xe.base64url.encode(new TextEncoder().encode(JSON.stringify({session:t,expiresAt:N(e.context.authCookies.sessionData.options.maxAge||60,"sec").getTime(),signature:await pe.sign({value:JSON.stringify(t),secret:e.context.secret})})))),e.context.authCookies.sessionData.options),e.context.options.secondaryStorage&&await e.context.secondaryStorage?.set(t.session.token,JSON.stringify({user:t.user,session:t.session}),Math.floor((new Date(t.session.expiresAt).getTime()-Date.now())/1e3))}function j(e){e.setCookie(e.context.authCookies.sessionToken.name,"",{...e.context.authCookies.sessionToken.options,maxAge:0}),e.setCookie(e.context.authCookies.sessionData.name,"",{...e.context.authCookies.sessionData.options,maxAge:0}),e.setCookie(e.context.authCookies.dontRememberToken.name,"",{...e.context.authCookies.dontRememberToken.options,maxAge:0})}function qr(e){let t=e.split("; "),r=new Map;return t.forEach(n=>{let[i,o]=n.split("=");r.set(i,o)}),r}var st=require("@better-fetch/fetch"),at=require("better-call"),Q=require("jose"),dt=require("oslo/jwt");var et=require("oslo/crypto"),tt=require("oslo/encoding");async function rt(e){let t=await(0,et.sha256)(new TextEncoder().encode(e));return tt.base64url.encode(new Uint8Array(t),{includePadding:!1})}function nt(e){return{tokenType:e.token_type,accessToken:e.access_token,refreshToken:e.refresh_token,accessTokenExpiresAt:e.expires_in?N(e.expires_in,"sec"):void 0,scopes:e?.scope?typeof e.scope=="string"?e.scope.split(" "):e.scope:[],idToken:e.id_token}}async function R({id:e,options:t,authorizationEndpoint:r,state:n,codeVerifier:i,scopes:o,claims:a,redirectURI:u}){let c=new URL(r);if(c.searchParams.set("response_type","code"),c.searchParams.set("client_id",t.clientId),c.searchParams.set("state",n),c.searchParams.set("scope",o.join(" ")),c.searchParams.set("redirect_uri",t.redirectURI||u),i){let s=await rt(i);c.searchParams.set("code_challenge_method","S256"),c.searchParams.set("code_challenge",s)}if(a){let s=a.reduce((d,l)=>(d[l]=null,d),{});c.searchParams.set("claims",JSON.stringify({id_token:{email:null,email_verified:null,...s}}))}return c}var ot=require("@better-fetch/fetch");async function x({code:e,codeVerifier:t,redirectURI:r,options:n,tokenEndpoint:i,authentication:o}){let a=new URLSearchParams,u={"content-type":"application/x-www-form-urlencoded",accept:"application/json","user-agent":"better-auth"};if(a.set("grant_type","authorization_code"),a.set("code",e),t&&a.set("code_verifier",t),a.set("redirect_uri",r),o==="basic"){let l=btoa(`${n.clientId}:${n.clientSecret}`);u.authorization=`Basic ${l}`}else a.set("client_id",n.clientId),a.set("client_secret",n.clientSecret);let{data:c,error:s}=await(0,ot.betterFetch)(i,{method:"POST",body:a,headers:u});if(s)throw s;return nt(c)}var he=require("oslo/oauth2"),$=require("zod"),Le=require("better-call");function jr(e){try{return new URL(e).pathname!=="/"}catch{throw new L(`Invalid base URL: ${e}. Please provide a valid base URL.`)}}function Oe(e,t="/api/auth"){return jr(e)?e:(t=t.startsWith("/")?t:`/${t}`,`${e}${t}`)}function se(e,t){if(e)return Oe(e,t);let r=_.BETTER_AUTH_URL||_.NEXT_PUBLIC_BETTER_AUTH_URL||_.PUBLIC_BETTER_AUTH_URL||_.NUXT_PUBLIC_BETTER_AUTH_URL||_.NUXT_PUBLIC_AUTH_URL||(_.BASE_URL!=="/"?_.BASE_URL:void 0);if(r)return Oe(r,t);if(typeof window<"u"&&window.location)return Oe(window.location.origin,t)}function it(e){try{return new URL(e).origin}catch{return null}}async function ae(e,t){let r=e.body?.callbackURL||(e.query?.currentURL?it(e.query?.currentURL):"")||e.context.options.baseURL;if(!r)throw new Le.APIError("BAD_REQUEST",{message:"callbackURL is required"});let n=(0,he.generateCodeVerifier)(),i=(0,he.generateState)(),o=JSON.stringify({callbackURL:r,codeVerifier:n,errorURL:e.body?.errorCallbackURL||e.query?.currentURL,link:t,expiresAt:Date.now()+10*60*1e3}),a=new Date;a.setMinutes(a.getMinutes()+10);let u=await e.context.internalAdapter.createVerificationValue({value:o,identifier:i,expiresAt:a});if(!u)throw e.context.logger.error("Unable to create verification. Make sure the database adapter is properly working and there is a verification table in the database"),new Le.APIError("INTERNAL_SERVER_ERROR",{message:"Unable to create verification"});return{state:u.identifier,codeVerifier:n}}async function _e(e){let t=e.query.state||e.body.state,r=await e.context.internalAdapter.findVerificationValue(t);if(!r)throw e.context.logger.error("State Mismatch. Verification not found",{state:t}),e.redirect(`${e.context.baseURL}/error?error=please_restart_the_process`);let n=$.z.object({callbackURL:$.z.string(),codeVerifier:$.z.string(),errorURL:$.z.string().optional(),expiresAt:$.z.number(),link:$.z.object({email:$.z.string(),userId:$.z.string()}).optional()}).parse(JSON.parse(r.value));if(n.errorURL||(n.errorURL=`${e.context.baseURL}/error`),n.expiresAt<Date.now())throw await e.context.internalAdapter.deleteVerificationValue(r.id),e.context.logger.error("State expired.",{state:t}),e.redirect(`${e.context.baseURL}/error?error=please_restart_the_process`);return await e.context.internalAdapter.deleteVerificationValue(r.id),n}var ct=e=>{let t="https://appleid.apple.com/auth/token";return{id:"apple",name:"Apple",createAuthorizationURL({state:r,scopes:n,redirectURI:i}){let o=n||["email","name"];return e.scope&&o.push(...e.scope),new URL(`https://appleid.apple.com/auth/authorize?client_id=${e.clientId}&response_type=code&redirect_uri=${i||e.redirectURI}&scope=${o.join(" ")}&state=${r}&response_mode=form_post`)},validateAuthorizationCode:async({code:r,codeVerifier:n,redirectURI:i})=>x({code:r,codeVerifier:n,redirectURI:e.redirectURI||i,options:e,tokenEndpoint:t}),async verifyIdToken(r,n){if(e.disableIdTokenSignIn)return!1;if(e.verifyIdToken)return e.verifyIdToken(r,n);let i=(0,Q.decodeProtectedHeader)(r),{kid:o,alg:a}=i;if(!o||!a)return!1;let u=await Fr(o),{payload:c}=await(0,Q.jwtVerify)(r,u,{algorithms:[a],issuer:"https://appleid.apple.com",audience:e.clientId,maxTokenAge:"1h"});return["email_verified","is_private_email"].forEach(s=>{c[s]!==void 0&&(c[s]=!!c[s])}),n&&c.nonce!==n?!1:!!c},async getUserInfo(r){if(e.getUserInfo)return e.getUserInfo(r);if(!r.idToken)return null;let n=(0,dt.parseJWT)(r.idToken)?.payload;if(!n)return null;let i=n.user?`${n.user.name.firstName} ${n.user.name.lastName}`:n.email;return{user:{id:n.sub,name:i,emailVerified:!1,email:n.email},data:n}}}},Fr=async e=>{let t="https://appleid.apple.com",r="/auth/keys",{data:n}=await(0,st.betterFetch)(`${t}${r}`);if(!n?.keys)throw new at.APIError("BAD_REQUEST",{message:"Keys not found"});let i=n.keys.find(o=>o.kid===e);if(!i)throw new Error(`JWK with kid ${e} not found`);return await(0,Q.importJWK)(i,i.alg)};var ut=require("@better-fetch/fetch");var lt=e=>({id:"discord",name:"Discord",createAuthorizationURL({state:t,scopes:r,redirectURI:n}){let i=r||["identify","email"];return e.scope&&i.push(...e.scope),new URL(`https://discord.com/api/oauth2/authorize?scope=${i.join("+")}&response_type=code&client_id=${e.clientId}&redirect_uri=${encodeURIComponent(e.redirectURI||n)}&state=${t}`)},validateAuthorizationCode:async({code:t,redirectURI:r})=>x({code:t,redirectURI:e.redirectURI||r,options:e,tokenEndpoint:"https://discord.com/api/oauth2/token"}),async getUserInfo(t){if(e.getUserInfo)return e.getUserInfo(t);let{data:r,error:n}=await(0,ut.betterFetch)("https://discord.com/api/users/@me",{headers:{authorization:`Bearer ${t.accessToken}`}});if(n)return null;if(r.avatar===null){let i=r.discriminator==="0"?Number(BigInt(r.id)>>BigInt(22))%6:parseInt(r.discriminator)%5;r.image_url=`https://cdn.discordapp.com/embed/avatars/${i}.png`}else{let i=r.avatar.startsWith("a_")?"gif":"png";r.image_url=`https://cdn.discordapp.com/avatars/${r.id}/${r.avatar}.${i}`}return{user:{id:r.id,name:r.display_name||r.username||"",email:r.email,emailVerified:r.verified,image:r.image_url},data:r}}});var pt=require("@better-fetch/fetch");var ft=e=>({id:"facebook",name:"Facebook",async createAuthorizationURL({state:t,scopes:r,redirectURI:n}){let i=r||["email","public_profile"];return e.scope&&i.push(...e.scope),await R({id:"facebook",options:e,authorizationEndpoint:"https://www.facebook.com/v21.0/dialog/oauth",scopes:i,state:t,redirectURI:n})},validateAuthorizationCode:async({code:t,redirectURI:r})=>x({code:t,redirectURI:e.redirectURI||r,options:e,tokenEndpoint:"https://graph.facebook.com/oauth/access_token"}),async getUserInfo(t){if(e.getUserInfo)return e.getUserInfo(t);let{data:r,error:n}=await(0,pt.betterFetch)("https://graph.facebook.com/me?fields=id,name,email,picture",{auth:{type:"Bearer",token:t.accessToken}});return n?null:{user:{id:r.id,name:r.name,email:r.email,image:r.picture.data.url,emailVerified:r.email_verified},data:r}}});var Ce=require("@better-fetch/fetch");var mt=e=>{let t="https://github.com/login/oauth/access_token";return{id:"github",name:"GitHub",createAuthorizationURL({state:r,scopes:n,codeVerifier:i,redirectURI:o}){let a=n||["user:email"];return e.scope&&a.push(...e.scope),R({id:"github",options:e,authorizationEndpoint:"https://github.com/login/oauth/authorize",scopes:a,state:r,redirectURI:o})},validateAuthorizationCode:async({code:r,redirectURI:n})=>x({code:r,redirectURI:e.redirectURI||n,options:e,tokenEndpoint:t}),async getUserInfo(r){if(e.getUserInfo)return e.getUserInfo(r);let{data:n,error:i}=await(0,Ce.betterFetch)("https://api.github.com/user",{headers:{"User-Agent":"better-auth",authorization:`Bearer ${r.accessToken}`}});if(i)return null;let o=!1;if(!n.email){let{data:a,error:u}=await(0,Ce.betterFetch)("https://api.github.com/user/emails",{headers:{authorization:`Bearer ${r.accessToken}`,"User-Agent":"better-auth"}});u||(n.email=(a.find(c=>c.primary)??a[0])?.email,o=a.find(c=>c.email===n.email)?.verified??!1)}return{user:{id:n.id.toString(),name:n.name||n.login,email:n.email,image:n.avatar_url,emailVerified:o},data:n}}}};var yt=require("oslo/jwt");var gt=require("consola"),ye=["info","success","warn","error","debug"];function ht(e,t){return ye.indexOf(t)<=ye.indexOf(e)}var Vr=(0,gt.createConsola)({formatOptions:{date:!1,colors:!0,compact:!0},defaults:{tag:"Better Auth"}}),de=e=>{let t=e?.disabled!==!0,r=e?.level??"error",n=(i,o,a=[])=>{if(!(!t||!ht(r,i))){if(!e||typeof e.log!="function"){Vr[i]("",o,...a);return}e.log(i==="success"?"info":i,o,a)}};return Object.fromEntries(ye.map(i=>[i,(...[o,...a])=>n(i,o,a)]))},I=de();var wt=require("@better-fetch/fetch"),bt=e=>({id:"google",name:"Google",async createAuthorizationURL({state:t,scopes:r,codeVerifier:n,redirectURI:i}){if(!e.clientId||!e.clientSecret)throw I.error("Client Id and Client Secret is required for Google. Make sure to provide them in the options."),new L("CLIENT_ID_AND_SECRET_REQUIRED");if(!n)throw new L("codeVerifier is required for Google");let o=r||["email","profile","openid"];e.scope&&o.push(...e.scope);let a=await R({id:"google",options:e,authorizationEndpoint:"https://accounts.google.com/o/oauth2/auth",scopes:o,state:t,codeVerifier:n,redirectURI:i});return e.accessType&&a.searchParams.set("access_type",e.accessType),e.prompt&&a.searchParams.set("prompt",e.prompt),a},validateAuthorizationCode:async({code:t,codeVerifier:r,redirectURI:n})=>x({code:t,codeVerifier:r,redirectURI:e.redirectURI||n,options:e,tokenEndpoint:"https://oauth2.googleapis.com/token"}),async verifyIdToken(t,r){if(e.disableIdTokenSignIn)return!1;if(e.verifyIdToken)return e.verifyIdToken(t,r);let n=`https://www.googleapis.com/oauth2/v3/tokeninfo?id_token=${t}`,{data:i}=await(0,wt.betterFetch)(n);return i?i.aud===e.clientId&&i.iss==="https://accounts.google.com":!1},async getUserInfo(t){if(e.getUserInfo)return e.getUserInfo(t);if(!t.idToken)return null;let r=(0,yt.parseJWT)(t.idToken)?.payload;return{user:{id:r.sub,name:r.name,email:r.email,image:r.picture,emailVerified:r.email_verified},data:r}}});var At=require("@better-fetch/fetch"),kt=require("oslo/jwt");var xt=e=>{let t=e.tenantId||"common",r=`https://login.microsoftonline.com/${t}/oauth2/v2.0/authorize`,n=`https://login.microsoftonline.com/${t}/oauth2/v2.0/token`;return{id:"microsoft",name:"Microsoft EntraID",createAuthorizationURL(i){let o=i.scopes||["openid","profile","email","User.Read"];return e.scope&&o.push(...e.scope),R({id:"microsoft",options:e,authorizationEndpoint:r,state:i.state,codeVerifier:i.codeVerifier,scopes:o,redirectURI:i.redirectURI})},validateAuthorizationCode({code:i,codeVerifier:o,redirectURI:a}){return x({code:i,codeVerifier:o,redirectURI:e.redirectURI||a,options:e,tokenEndpoint:n})},async getUserInfo(i){if(e.getUserInfo)return e.getUserInfo(i);if(!i.idToken)return null;let o=(0,kt.parseJWT)(i.idToken)?.payload,a=e.profilePhotoSize||48;return await(0,At.betterFetch)(`https://graph.microsoft.com/v1.0/me/photos/${a}x${a}/$value`,{headers:{Authorization:`Bearer ${i.accessToken}`},async onResponse(u){if(!(e.disableProfilePhoto||!u.response.ok))try{let s=await u.response.clone().arrayBuffer(),d=Buffer.from(s).toString("base64");o.picture=`data:image/jpeg;base64, ${d}`}catch(c){I.error(c&&typeof c=="object"&&"name"in c?c.name:"",c)}}}),{user:{id:o.sub,name:o.name,email:o.email,image:o.picture,emailVerified:!0},data:o}}}};var vt=require("@better-fetch/fetch");var Rt=e=>({id:"spotify",name:"Spotify",createAuthorizationURL({state:t,scopes:r,codeVerifier:n,redirectURI:i}){let o=r||["user-read-email"];return e.scope&&o.push(...e.scope),R({id:"spotify",options:e,authorizationEndpoint:"https://accounts.spotify.com/authorize",scopes:o,state:t,codeVerifier:n,redirectURI:i})},validateAuthorizationCode:async({code:t,codeVerifier:r,redirectURI:n})=>x({code:t,codeVerifier:r,redirectURI:e.redirectURI||n,options:e,tokenEndpoint:"https://accounts.spotify.com/api/token"}),async getUserInfo(t){if(e.getUserInfo)return e.getUserInfo(t);let{data:r,error:n}=await(0,vt.betterFetch)("https://api.spotify.com/v1/me",{method:"GET",headers:{Authorization:`Bearer ${t.accessToken}`}});return n?null:{user:{id:r.id,name:r.display_name,email:r.email,image:r.images[0]?.url,emailVerified:!1},data:r}}});function $r(e){return e.charAt(0).toUpperCase()+e.slice(1)}var W={isAction:!1};var Ut=require("nanoid"),q=e=>(0,Ut.nanoid)(e);var Tt=require("oslo/jwt");var Et=e=>({id:"twitch",name:"Twitch",createAuthorizationURL({state:t,scopes:r,redirectURI:n}){let i=r||["user:read:email","openid"];return e.scope&&i.push(...e.scope),R({id:"twitch",redirectURI:n,options:e,authorizationEndpoint:"https://id.twitch.tv/oauth2/authorize",scopes:i,state:t,claims:e.claims||["email","email_verified","preferred_username","picture"]})},validateAuthorizationCode:async({code:t,redirectURI:r})=>x({code:t,redirectURI:e.redirectURI||r,options:e,tokenEndpoint:"https://id.twitch.tv/oauth2/token"}),async getUserInfo(t){if(e.getUserInfo)return e.getUserInfo(t);let r=t.idToken;if(!r)return I.error("No idToken found in token"),null;let n=(0,Tt.parseJWT)(r)?.payload;return{user:{id:n.sub,name:n.preferred_username,email:n.email,image:n.picture,emailVerified:!1},data:n}}});var It=require("@better-fetch/fetch");var St=e=>({id:"twitter",name:"Twitter",createAuthorizationURL(t){let r=t.scopes||["users.read","tweet.read","offline.access"];return e.scope&&r.push(...e.scope),R({id:"twitter",options:e,authorizationEndpoint:"https://x.com/i/oauth2/authorize",scopes:r,state:t.state,codeVerifier:t.codeVerifier,redirectURI:t.redirectURI})},validateAuthorizationCode:async({code:t,codeVerifier:r,redirectURI:n})=>x({code:t,codeVerifier:r,authentication:"basic",redirectURI:e.redirectURI||n,options:e,tokenEndpoint:"https://api.x.com/2/oauth2/token"}),async getUserInfo(t){if(e.getUserInfo)return e.getUserInfo(t);let{data:r,error:n}=await(0,It.betterFetch)("https://api.x.com/2/users/me?user.fields=profile_image_url",{method:"GET",headers:{Authorization:`Bearer ${t.accessToken}`}});return n?null:{user:{id:r.data.id,name:r.data.name,email:r.data.username||null,image:r.data.profile_image_url,emailVerified:r.data.verified||!1},data:r}}});var Pt=require("@better-fetch/fetch");var Ot=e=>{let t="https://api.dropboxapi.com/oauth2/token";return{id:"dropbox",name:"Dropbox",createAuthorizationURL:async({state:r,scopes:n,codeVerifier:i,redirectURI:o})=>{let a=n||["account_info.read"];return e.scope&&a.push(...e.scope),await R({id:"dropbox",options:e,authorizationEndpoint:"https://www.dropbox.com/oauth2/authorize",scopes:a,state:r,redirectURI:o,codeVerifier:i})},validateAuthorizationCode:async({code:r,codeVerifier:n,redirectURI:i})=>await x({code:r,codeVerifier:n,redirectURI:e.redirectURI||i,options:e,tokenEndpoint:t}),async getUserInfo(r){if(e.getUserInfo)return e.getUserInfo(r);let{data:n,error:i}=await(0,Pt.betterFetch)("https://api.dropboxapi.com/2/users/get_current_account",{method:"POST",headers:{Authorization:`Bearer ${r.accessToken}`}});return i?null:{user:{id:n.account_id,name:n.name?.display_name,email:n.email,emailVerified:n.email_verified||!1,image:n.profile_photo_url},data:n}}}};var Lt=require("@better-fetch/fetch");var _t=e=>{let t="https://www.linkedin.com/oauth/v2/authorization",r="https://www.linkedin.com/oauth/v2/accessToken";return{id:"linkedin",name:"Linkedin",createAuthorizationURL:async({state:n,scopes:i,redirectURI:o})=>{let a=i||["profile","email","openid"];return e.scope&&a.push(...e.scope),await R({id:"linkedin",options:e,authorizationEndpoint:t,scopes:a,state:n,redirectURI:o})},validateAuthorizationCode:async({code:n,redirectURI:i})=>await x({code:n,redirectURI:e.redirectURI||i,options:e,tokenEndpoint:r}),async getUserInfo(n){let{data:i,error:o}=await(0,Lt.betterFetch)("https://api.linkedin.com/v2/userinfo",{method:"GET",headers:{Authorization:`Bearer ${n.accessToken}`}});return o?null:{user:{id:i.sub,name:i.name,email:i.email,emailVerified:i.email_verified||!1,image:i.picture},data:i}}}};var Ct=require("@better-fetch/fetch");var De=(e="")=>e.split("://").map(t=>t.replace(/\/{2,}/g,"/")).join("://"),zr=e=>{let t=e||"https://gitlab.com";return{authorizationEndpoint:De(`${t}/oauth/authorize`),tokenEndpoint:De(`${t}/oauth/token`),userinfoEndpoint:De(`${t}/api/v4/user`)}},Dt=e=>{let{authorizationEndpoint:t,tokenEndpoint:r,userinfoEndpoint:n}=zr(e.issuer),i="gitlab";return{id:i,name:"Gitlab",createAuthorizationURL:async({state:a,scopes:u,codeVerifier:c,redirectURI:s})=>{let d=u||["read_user"];return e.scope&&d.push(...e.scope),await R({id:i,options:e,authorizationEndpoint:t,scopes:d,state:a,redirectURI:s,codeVerifier:c})},validateAuthorizationCode:async({code:a,redirectURI:u,codeVerifier:c})=>x({code:a,redirectURI:e.redirectURI||u,options:e,codeVerifier:c,tokenEndpoint:r}),async getUserInfo(a){if(e.getUserInfo)return e.getUserInfo(a);let{data:u,error:c}=await(0,Ct.betterFetch)(n,{headers:{authorization:`Bearer ${a.accessToken}`}});return c||u.state!=="active"||u.locked?null:{user:{id:u.id.toString(),name:u.name??u.username,email:u.email,image:u.avatar_url,emailVerified:!0},data:u}}}};var Be={apple:ct,discord:lt,facebook:ft,github:mt,microsoft:xt,google:bt,spotify:Rt,twitch:Et,twitter:St,dropbox:Ot,linkedin:_t,gitlab:Dt},we=Object.keys(Be);var Vt=require("oslo"),be=require("oslo/jwt"),B=require("zod");var X=require("better-call");var F=require("better-call");var Y=require("zod");function J(e){try{return JSON.parse(e)}catch{return null}}var Ne=()=>k("/get-session",{method:"GET",query:Y.z.optional(Y.z.object({disableCookieCache:Y.z.boolean({description:"Disable cookie cache and fetch session from database"}).optional()})),requireHeaders:!0,metadata:{openapi:{description:"Get the current session",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{session:{type:"object",properties:{token:{type:"string"},userId:{type:"string"},expiresAt:{type:"string"}}},user:{type:"object",$ref:"#/components/schemas/User"}}}}}}}}}},async e=>{try{let t=await e.getSignedCookie(e.context.authCookies.sessionToken.name,e.context.secret);if(!t)return e.json(null);let r=e.getCookie(e.context.authCookies.sessionData.name),n=r?J(Buffer.from(r,"base64").toString()):null;if(n&&!await pe.verify({value:JSON.stringify(n.session),signature:n?.signature,secret:e.context.secret}))return j(e),e.json(null);let i=await e.getSignedCookie(e.context.authCookies.dontRememberToken.name,e.context.secret);if(n?.session&&e.context.options.session?.cookieCache?.enabled&&!e.query?.disableCookieCache){let d=n.session;if(n.expiresAt<Date.now()||d.session.expiresAt<new Date){let p=e.context.authCookies.sessionData.name;e.setCookie(p,"",{maxAge:0})}else return e.json(d)}let o=await e.context.internalAdapter.findSession(t);if(e.context.session=o,!o||o.session.expiresAt<new Date)return j(e),o&&await e.context.internalAdapter.deleteSession(o.session.token),e.json(null);if(i)return e.json(o);let a=e.context.sessionConfig.expiresIn,u=e.context.sessionConfig.updateAge;if(o.session.expiresAt.valueOf()-a*1e3+u*1e3<=Date.now()){let d=await e.context.internalAdapter.updateSession(o.session.token,{expiresAt:N(e.context.sessionConfig.expiresIn,"sec")});if(!d)return j(e),e.json(null,{status:401});let l=(d.expiresAt.valueOf()-Date.now())/1e3;return await P(e,{session:d,user:o.user},!1,{maxAge:l}),e.json({session:d,user:o.user})}return e.json(o)}catch(t){throw e.context.logger.error("INTERNAL_SERVER_ERROR",t),new F.APIError("INTERNAL_SERVER_ERROR",{message:"internal server error"})}}),K=async e=>{if(e.context.session)return e.context.session;let t=await Ne()({...e,_flag:"json",headers:e.headers});return e.context.session=t,t},D=ne(async e=>{let t=await K(e);if(!t?.session)throw new F.APIError("UNAUTHORIZED");return{session:t}}),Bt=ne(async e=>{let t=await K(e);if(!t?.session)throw new F.APIError("UNAUTHORIZED");if(e.context.sessionConfig.freshAge===0)return{session:t};let r=e.context.sessionConfig.freshAge,n=t.session.createdAt.valueOf(),i=Date.now();if(!(n+r*1e3>i))throw new F.APIError("FORBIDDEN",{message:"Session is not fresh"});return{session:t}}),Nt=()=>k("/list-sessions",{method:"GET",use:[D],requireHeaders:!0,metadata:{openapi:{description:"List all active sessions for the user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"array",items:{type:"object",properties:{token:{type:"string"},userId:{type:"string"},expiresAt:{type:"string"}}}}}}}}}}},async e=>{let r=(await e.context.internalAdapter.listSessions(e.context.session.user.id)).filter(n=>n.expiresAt>new Date);return e.json(r)}),qt=k("/revoke-session",{method:"POST",body:Y.z.object({token:Y.z.string({description:"The token to revoke"})}),use:[D],requireHeaders:!0,metadata:{openapi:{description:"Revoke a single session",requestBody:{content:{"application/json":{schema:{type:"object",properties:{token:{type:"string"}},required:["token"]}}}}}}},async e=>{let t=e.body.token,r=await e.context.internalAdapter.findSession(t);if(!r)throw new F.APIError("BAD_REQUEST",{message:"Session not found"});if(r.session.userId!==e.context.session.user.id)throw new F.APIError("UNAUTHORIZED");try{await e.context.internalAdapter.deleteSession(t)}catch(n){throw e.context.logger.error(n&&typeof n=="object"&&"name"in n?n.name:"",n),new F.APIError("INTERNAL_SERVER_ERROR")}return e.json({status:!0})}),jt=k("/revoke-sessions",{method:"POST",use:[D],requireHeaders:!0,metadata:{openapi:{description:"Revoke all sessions for the user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{status:{type:"boolean"}},required:["status"]}}}}}}}},async e=>{try{await e.context.internalAdapter.deleteSessions(e.context.session.user.id)}catch(t){throw e.context.logger.error(t&&typeof t=="object"&&"name"in t?t.name:"",t),new F.APIError("INTERNAL_SERVER_ERROR")}return e.json({status:!0})}),Ft=k("/revoke-other-sessions",{method:"POST",requireHeaders:!0,use:[D],metadata:{openapi:{description:"Revoke all other sessions for the user except the current one",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{status:{type:"boolean"}}}}}}}}}},async e=>{let t=e.context.session;if(!t.user)throw new F.APIError("UNAUTHORIZED");let i=(await e.context.internalAdapter.listSessions(t.user.id)).filter(o=>o.expiresAt>new Date).filter(o=>o.token!==e.context.session.session.token);return await Promise.all(i.map(o=>e.context.internalAdapter.deleteSession(o.token))),e.json({status:!0})});async function z(e,t,r){return await(0,be.createJWT)("HS256",Buffer.from(e),{email:t.toLowerCase(),updateTo:r},{expiresIn:new Vt.TimeSpan(1,"h"),issuer:"better-auth",subject:"verify-email",audiences:[t],includeIssuedTimestamp:!0})}async function Mr(e,t){if(!e.context.options.emailVerification?.sendVerificationEmail)throw e.context.logger.error("Verification email isn't enabled."),new X.APIError("BAD_REQUEST",{message:"Verification email isn't enabled"});let r=await z(e.context.secret,t.email),n=`${e.context.baseURL}/verify-email?token=${r}&callbackURL=${e.body.callbackURL||e.query?.currentURL||"/"}`;await e.context.options.emailVerification.sendVerificationEmail({user:t,url:n,token:r},e.request)}var $t=k("/send-verification-email",{method:"POST",query:B.z.object({currentURL:B.z.string({description:"The URL to use for email verification callback"}).optional()}).optional(),body:B.z.object({email:B.z.string({description:"The email to send the verification email to"}).email(),callbackURL:B.z.string({description:"The URL to use for email verification callback"}).optional()}),metadata:{openapi:{description:"Send a verification email to the user",requestBody:{content:{"application/json":{schema:{type:"object",properties:{email:{type:"string",description:"The email to send the verification email to"},callbackURL:{type:"string",description:"The URL to use for email verification callback"}},required:["email"]}}}},responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{status:{type:"boolean"}}}}}}}}}},async e=>{if(!e.context.options.emailVerification?.sendVerificationEmail)throw e.context.logger.error("Verification email isn't enabled."),new X.APIError("BAD_REQUEST",{message:"Verification email isn't enabled"});let{email:t}=e.body,r=await e.context.internalAdapter.findUserByEmail(t);if(!r)throw new X.APIError("BAD_REQUEST",{message:"User not found"});return await Mr(e,r.user),e.json({status:!0})}),zt=k("/verify-email",{method:"GET",query:B.z.object({token:B.z.string({description:"The token to verify the email"}),callbackURL:B.z.string({description:"The URL to redirect to after email verification"}).optional()}),metadata:{openapi:{description:"Verify the email of the user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{user:{type:"object"},status:{type:"boolean"}},required:["user","status"]}}}}}}}},async e=>{function t(u){throw e.query.callbackURL?e.redirect(`${e.query.callbackURL}?error=${u}`):new X.APIError("UNAUTHORIZED",{message:u})}let{token:r}=e.query,n;try{n=await(0,be.validateJWT)("HS256",Buffer.from(e.context.secret),r)}catch(u){return e.context.logger.error("Failed to verify email",u),t("invalid_token")}let o=B.z.object({email:B.z.string().email(),updateTo:B.z.string().optional()}).parse(n.payload),a=await e.context.internalAdapter.findUserByEmail(o.email);if(!a)return t("user_not_found");if(o.updateTo){let u=await K(e);if(!u){if(e.query.callbackURL)throw e.redirect(`${e.query.callbackURL}?error=unauthorized`);return t("unauthorized")}if(u.user.email!==o.email){if(e.query.callbackURL)throw e.redirect(`${e.query.callbackURL}?error=unauthorized`);return t("unauthorized")}let c=await e.context.internalAdapter.updateUserByEmail(o.email,{email:o.updateTo});if(await e.context.options.emailVerification?.sendVerificationEmail?.({user:c,url:`${e.context.baseURL}/verify-email?token=${r}`,token:r},e.request),e.query.callbackURL)throw e.redirect(e.query.callbackURL);return e.json({user:c,status:!0})}if(await e.context.internalAdapter.updateUserByEmail(o.email,{emailVerified:!0}),e.context.options.emailVerification?.autoSignInAfterVerification&&!await K(e)){let c=await e.context.internalAdapter.createSession(a.user.id,e.request);if(!c)throw new X.APIError("INTERNAL_SERVER_ERROR",{message:"Failed to create session"});await P(e,{session:c,user:a.user})}if(e.query.callbackURL)throw e.redirect(e.query.callbackURL);return e.json({user:null,status:!0})});async function Ae(e,{userInfo:t,account:r,callbackURL:n}){let i=await e.context.internalAdapter.findUserByEmail(t.email.toLowerCase(),{includeAccounts:!0}).catch(u=>{throw I.error(`Better auth was unable to query your database.
+Error: `,u),e.redirect(`${e.context.baseURL}/error?error=internal_server_error`)}),o=i?.user;if(i){let u=i.accounts.find(c=>c.providerId===r.providerId);if(u){let c=Object.fromEntries(Object.entries({accessToken:r.accessToken,idToken:r.idToken,refreshToken:r.refreshToken,accessTokenExpiresAt:r.accessTokenExpiresAt,refreshTokenExpiresAt:r.refreshTokenExpiresAt}).filter(([s,d])=>d!==void 0));Object.keys(c).length>0&&await e.context.internalAdapter.updateAccount(u.id,c)}else{if(!e.context.options.account?.accountLinking?.trustedProviders?.includes(r.providerId)&&!t.emailVerified||e.context.options.account?.accountLinking?.enabled===!1)return Qe&&I.warn(`User already exist but account isn't linked to ${r.providerId}. To read more about how account linking works in Better Auth see https://www.better-auth.com/docs/concepts/users-accounts#account-linking.`),{error:"account not linked",data:null};try{await e.context.internalAdapter.linkAccount({providerId:r.providerId,accountId:t.id.toString(),userId:i.user.id,accessToken:r.accessToken,idToken:r.idToken,refreshToken:r.refreshToken,accessTokenExpiresAt:r.accessTokenExpiresAt,refreshTokenExpiresAt:r.refreshTokenExpiresAt,scope:r.scope})}catch(d){return I.error("Unable to link account",d),{error:"unable to link account",data:null}}}}else try{let u=t.emailVerified||!1;if(o=await e.context.internalAdapter.createOAuthUser({...t,id:void 0,emailVerified:u,email:t.email.toLowerCase()},{accessToken:r.accessToken,idToken:r.idToken,refreshToken:r.refreshToken,accessTokenExpiresAt:r.accessTokenExpiresAt,refreshTokenExpiresAt:r.refreshTokenExpiresAt,scope:r.scope,providerId:r.providerId,accountId:t.id.toString()}).then(c=>c?.user),!u&&o&&e.context.options.emailVerification?.sendOnSignUp){let c=await z(e.context.secret,o.email),s=`${e.context.baseURL}/verify-email?token=${c}&callbackURL=${n}`;await e.context.options.emailVerification?.sendVerificationEmail?.({user:o,url:s,token:c},e.request)}}catch(u){return I.error("Unable to create user",u),{error:"unable to create user",data:null}}if(!o)return{error:"unable to create user",data:null};let a=await e.context.internalAdapter.createSession(o.id,e.request);return a?{data:{session:a,user:o},error:null}:{error:"unable to create session",data:null}}var Mt=k("/sign-in/social",{method:"POST",query:v.z.object({currentURL:v.z.string().optional()}).optional(),body:v.z.object({callbackURL:v.z.string({description:"Callback URL to redirect to after the user has signed in"}).optional(),errorCallbackURL:v.z.string({description:"Callback URL to redirect to if an error happens"}).optional(),provider:v.z.enum(we,{description:"OAuth2 provider to use"}),disableRedirect:v.z.boolean({description:"Disable automatic redirection to the provider. Useful for handling the redirection yourself"}).optional(),idToken:v.z.optional(v.z.object({token:v.z.string({description:"ID token from the provider"}),nonce:v.z.string({description:"Nonce used to generate the token"}).optional(),accessToken:v.z.string({description:"Access token from the provider"}).optional(),refreshToken:v.z.string({description:"Refresh token from the provider"}).optional(),expiresAt:v.z.number({description:"Expiry date of the token"}).optional()}),{description:"ID token from the provider to sign in the user with id token"})}),metadata:{openapi:{description:"Sign in with a social provider",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{session:{type:"string"},user:{type:"object"},url:{type:"string"},redirect:{type:"boolean"}},required:["session","user","url","redirect"]}}}}}}}},async e=>{let t=e.context.socialProviders.find(o=>o.id===e.body.provider);if(!t)throw e.context.logger.error("Provider not found. Make sure to add the provider in your auth config",{provider:e.body.provider}),new S.APIError("NOT_FOUND",{message:"Provider not found"});if(e.body.idToken){if(!t.verifyIdToken)throw e.context.logger.error("Provider does not support id token verification",{provider:e.body.provider}),new S.APIError("NOT_FOUND",{message:"Provider does not support id token verification"});let{token:o,nonce:a}=e.body.idToken;if(!await t.verifyIdToken(o,a))throw e.context.logger.error("Invalid id token",{provider:e.body.provider}),new S.APIError("UNAUTHORIZED",{message:"Invalid id token"});let c=await t.getUserInfo({idToken:o,accessToken:e.body.idToken.accessToken,refreshToken:e.body.idToken.refreshToken});if(!c||!c?.user)throw e.context.logger.error("Failed to get user info",{provider:e.body.provider}),new S.APIError("UNAUTHORIZED",{message:"Failed to get user info"});if(!c.user.email)throw e.context.logger.error("User email not found",{provider:e.body.provider}),new S.APIError("UNAUTHORIZED",{message:"User email not found"});let s=await Ae(e,{userInfo:{email:c.user.email,id:c.user.id,name:c.user.name||"",image:c.user.image,emailVerified:c.user.emailVerified||!1},account:{providerId:t.id,accountId:c.user.id,accessToken:e.body.idToken.accessToken}});if(s.error)throw new S.APIError("UNAUTHORIZED",{message:s.error});return await P(e,s.data),e.json({session:s.data.session,user:s.data.user})}let{codeVerifier:r,state:n}=await ae(e),i=await t.createAuthorizationURL({state:n,codeVerifier:r,redirectURI:`${e.context.baseURL}/callback/${t.id}`});return e.json({url:i.toString(),redirect:!e.body.disableRedirect})}),Ht=k("/sign-in/email",{method:"POST",body:v.z.object({email:v.z.string({description:"Email of the user"}),password:v.z.string({description:"Password of the user"}),callbackURL:v.z.string({description:"Callback URL to use as a redirect for email verification"}).optional(),rememberMe:v.z.boolean({description:"If this is false, the session will not be remembered. Default is `true`."}).default(!0).optional()}),metadata:{openapi:{description:"Sign in with email and password",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{session:{type:"string"},user:{type:"object"},url:{type:"string"},redirect:{type:"boolean"}},required:["session","user","url","redirect"]}}}}}}}},async e=>{if(!e.context.options?.emailAndPassword?.enabled)throw e.context.logger.error("Email and password is not enabled. Make sure to enable it in the options on you `auth.ts` file. Check `https://better-auth.com/docs/authentication/email-password` for more!"),new S.APIError("BAD_REQUEST",{message:"Email and password is not enabled"});let{email:t,password:r}=e.body;if(!v.z.string().email().safeParse(t).success)throw new S.APIError("BAD_REQUEST",{message:"Invalid email"});let i=await e.context.internalAdapter.findUserByEmail(t,{includeAccounts:!0});if(!i)throw await e.context.password.hash(r),e.context.logger.error("User not found",{email:t}),new S.APIError("UNAUTHORIZED",{message:"Invalid email or password"});let o=i.accounts.find(s=>s.providerId==="credential");if(!o)throw e.context.logger.error("Credential account not found",{email:t}),new S.APIError("UNAUTHORIZED",{message:"Invalid email or password"});let a=o?.password;if(!a)throw e.context.logger.error("Password not found",{email:t}),new S.APIError("UNAUTHORIZED",{message:"Unexpected error"});if(!await e.context.password.verify({hash:a,password:r}))throw e.context.logger.error("Invalid password"),new S.APIError("UNAUTHORIZED",{message:"Invalid email or password"});if(e.context.options?.emailAndPassword?.requireEmailVerification&&!i.user.emailVerified){if(!e.context.options?.emailVerification?.sendVerificationEmail)throw new S.APIError("UNAUTHORIZED",{message:"Email is not verified."});let s=await z(e.context.secret,i.user.email),d=`${e.context.baseURL}/verify-email?token=${s}&callbackURL=${e.body.callbackURL||"/"}`;throw await e.context.options.emailVerification.sendVerificationEmail({user:i.user,url:d,token:s},e.request),e.context.logger.error("Email not verified",{email:t}),new S.APIError("FORBIDDEN",{message:"Email is not verified. Check your email for a verification link"})}let c=await e.context.internalAdapter.createSession(i.user.id,e.headers,e.body.rememberMe===!1);if(!c)throw e.context.logger.error("Failed to create session"),new S.APIError("UNAUTHORIZED",{message:"Failed to create session"});return await P(e,{session:c,user:i.user},e.body.rememberMe===!1),e.json({user:i.user,session:c,redirect:!!e.body.callbackURL,url:e.body.callbackURL})});var ee=require("zod");var ke=ee.z.object({code:ee.z.string().optional(),error:ee.z.string().optional(),errorMessage:ee.z.string().optional(),state:ee.z.string().optional()}),Gt=k("/callback/:id",{method:["GET","POST"],body:ke.optional(),query:ke.optional(),metadata:W},async e=>{let t;try{if(e.method==="GET")t=ke.parse(e.query);else if(e.method==="POST")t=ke.parse(e.body);else throw new Error("Unsupported method")}catch(y){throw e.context.logger.error("INVALID_CALLBACK_REQUEST",y),e.redirect(`${e.context.baseURL}/error?error=invalid_callback_request`)}let{code:r,error:n,state:i}=t;if(!i)throw e.context.logger.error("State not found"),e.redirect(`${e.context.baseURL}/error?error=state_not_found`);if(!r)throw e.context.logger.error("Code not found"),e.redirect(`${e.context.baseURL}/error?error=${n||"no_code"}`);let o=e.context.socialProviders.find(y=>y.id===e.params.id);if(!o)throw e.context.logger.error("Oauth provider with id",e.params.id,"not found"),e.redirect(`${e.context.baseURL}/error?error=oauth_provider_not_found`);let{codeVerifier:a,callbackURL:u,link:c,errorURL:s}=await _e(e),d;try{d=await o.validateAuthorizationCode({code:r,codeVerifier:a,redirectURI:`${e.context.baseURL}/callback/${o.id}`})}catch(y){throw e.context.logger.error("",y),e.redirect(`${e.context.baseURL}/error?error=please_restart_the_process`)}let l=await o.getUserInfo(d).then(y=>y?.user);function p(y){let w=s||u||`${e.context.baseURL}/error`;throw w.includes("?")?w=`${w}&error=${y}`:w=`${w}?error=${y}`,e.redirect(w)}if(!l)return e.context.logger.error("Unable to get user info"),p("unable_to_get_user_info");if(!l.email)return e.context.logger.error("Provider did not return email. This could be due to misconfiguration in the provider settings."),p("email_not_found");if(!u)throw e.context.logger.error("No callback URL found"),e.redirect(`${e.context.baseURL}/error?error=please_restart_the_process`);if(c){if(c.email!==l.email.toLowerCase())return p("email_doesn't_match");if(!await e.context.internalAdapter.createAccount({userId:c.userId,providerId:o.id,accountId:l.id}))return p("unable_to_link_account");let w;try{w=new URL(u).toString()}catch{w=u}throw e.redirect(w)}let m=await Ae(e,{userInfo:{id:l.id,email:l.email,name:l.name||"",image:l.image,emailVerified:l.emailVerified||!1},account:{providerId:o.id,accountId:l.id,...d,scope:d.scopes?.join(",")},callbackURL:u});if(m.error)return e.context.logger.error(m.error.split(" ").join("_")),p(m.error.split(" ").join("_"));let{session:f,user:g}=m.data;await P(e,{session:f,user:g});let h;try{h=new URL(u).toString()}catch{h=u}throw e.redirect(h)});var Pi=require("zod");var Kt=require("better-call"),Wt=k("/sign-out",{method:"POST",requireHeaders:!0,metadata:{openapi:{description:"Sign out the current user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{success:{type:"boolean"}}}}}}}}}},async e=>{let t=await e.getSignedCookie(e.context.authCookies.sessionToken.name,e.context.secret);if(!t)throw j(e),new Kt.APIError("BAD_REQUEST",{message:"Session not found"});return await e.context.internalAdapter.deleteSession(t),j(e),e.json({success:!0})});var C=require("zod");var xe=require("better-call");function Zt(e,t,r){let n=t?new URL(t,e.baseURL):new URL(`${e.baseURL}/error`);return r&&Object.entries(r).forEach(([i,o])=>n.searchParams.set(i,o)),n.href}function Hr(e,t,r){let n=new URL(t,e.baseURL);return r&&Object.entries(r).forEach(([i,o])=>n.searchParams.set(i,o)),n.href}var Qt=k("/forget-password",{method:"POST",body:C.z.object({email:C.z.string({description:"The email address of the user to send a password reset email to"}).email(),redirectTo:C.z.string({description:"The URL to redirect the user to reset their password. If the token isn't valid or expired, it'll be redirected with a query parameter `?error=INVALID_TOKEN`. If the token is valid, it'll be redirected with a query parameter `?token=VALID_TOKEN"}).optional()}),metadata:{openapi:{description:"Send a password reset email to the user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{status:{type:"boolean"}}}}}}}}}},async e=>{if(!e.context.options.emailAndPassword?.sendResetPassword)throw e.context.logger.error("Reset password isn't enabled.Please pass an emailAndPassword.sendResetPasswordToken function in your auth config!"),new xe.APIError("BAD_REQUEST",{message:"Reset password isn't enabled"});let{email:t,redirectTo:r}=e.body,n=await e.context.internalAdapter.findUserByEmail(t,{includeAccounts:!0});if(!n)return e.context.logger.error("Reset Password: User not found",{email:t}),e.json({status:!1},{body:{status:!0}});let i=60*60*1,o=N(e.context.options.emailAndPassword.resetPasswordTokenExpiresIn||i,"sec"),a=q(24);await e.context.internalAdapter.createVerificationValue({value:n.user.id.toString(),identifier:`reset-password:${a}`,expiresAt:o});let u=`${e.context.baseURL}/reset-password/${a}?callbackURL=${r}`;return await e.context.options.emailAndPassword.sendResetPassword({user:n.user,url:u,token:a},e.request),e.json({status:!0})}),Jt=k("/reset-password/:token",{method:"GET",query:C.z.object({callbackURL:C.z.string({description:"The URL to redirect the user to reset their password"})}),metadata:{openapi:{description:"Redirects the user to the callback URL with the token",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{token:{type:"string"}}}}}}}}}},async e=>{let{token:t}=e.params,{callbackURL:r}=e.query;if(!t||!r)throw e.redirect(Zt(e.context,r,{error:"INVALID_TOKEN"}));let n=await e.context.internalAdapter.findVerificationValue(`reset-password:${t}`);throw!n||n.expiresAt<new Date?e.redirect(Zt(e.context,r,{error:"INVALID_TOKEN"})):e.redirect(Hr(e.context,r,{token:t}))}),Yt=k("/reset-password",{query:C.z.optional(C.z.object({token:C.z.string().optional(),currentURL:C.z.string().optional()})),method:"POST",body:C.z.object({newPassword:C.z.string({description:"The new password to set"}),token:C.z.string({description:"The token to reset the password"}).optional()}),metadata:{openapi:{description:"Reset the password for a user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{status:{type:"boolean"}}}}}}}}}},async e=>{let t=e.body.token||e.query?.token||(e.query?.currentURL?new URL(e.query.currentURL).searchParams.get("token"):"");if(!t)throw new xe.APIError("BAD_REQUEST",{message:"Token not found"});let{newPassword:r}=e.body,n=`reset-password:${t}`,i=await e.context.internalAdapter.findVerificationValue(n);if(!i||i.expiresAt<new Date)throw new xe.APIError("BAD_REQUEST",{message:"Invalid token"});await e.context.internalAdapter.deleteVerificationValue(i.id);let o=i.value,a=await e.context.password.hash(r);return(await e.context.internalAdapter.findAccounts(o)).find(s=>s.providerId==="credential")?(await e.context.internalAdapter.updatePassword(o,a),e.json({status:!0})):(await e.context.internalAdapter.createAccount({userId:o,providerId:"credential",password:a,accountId:o}),e.json({status:!0}))});var E=require("zod");var O=require("better-call");var A=require("zod"),Xt=require("better-call"),ji=A.z.object({id:A.z.string(),providerId:A.z.string(),accountId:A.z.string(),userId:A.z.string(),accessToken:A.z.string().nullish(),refreshToken:A.z.string().nullish(),idToken:A.z.string().nullish(),accessTokenExpiresAt:A.z.date().nullish(),refreshTokenExpiresAt:A.z.date().nullish(),scope:A.z.string().nullish(),password:A.z.string().nullish(),createdAt:A.z.date().default(()=>new Date),updatedAt:A.z.date().default(()=>new Date)}),Fi=A.z.object({id:A.z.string(),email:A.z.string().transform(e=>e.toLowerCase()),emailVerified:A.z.boolean().default(!1),name:A.z.string(),image:A.z.string().nullish(),createdAt:A.z.date().default(()=>new Date),updatedAt:A.z.date().default(()=>new Date)}),Vi=A.z.object({id:A.z.string(),userId:A.z.string(),expiresAt:A.z.date(),createdAt:A.z.date().default(()=>new Date),updatedAt:A.z.date().default(()=>new Date),token:A.z.string(),ipAddress:A.z.string().nullish(),userAgent:A.z.string().nullish()}),$i=A.z.object({id:A.z.string(),value:A.z.string(),createdAt:A.z.date().default(()=>new Date),updatedAt:A.z.date().default(()=>new Date),expiresAt:A.z.date(),identifier:A.z.string()});function er(e,t){let r=t.fields,n={};for(let i in e){let o=r[i];if(!o){n[i]=e[i];continue}o.returned!==!1&&(n[i]=e[i])}return n}function qe(e,t){let r={...t==="user"?e.user?.additionalFields:{},...t==="session"?e.session?.additionalFields:{}};for(let n of e.plugins||[])n.schema&&n.schema[t]&&(r={...r,...n.schema[t].fields});return r}function je(e,t){let r=qe(e,"user");return er(t,{fields:r})}function ve(e,t){let r=qe(e,"session");return er(t,{fields:r})}function Gr(e,t){let r=t.action||"create",n=t.fields,i={};for(let o in n){if(o in e){if(n[o].input===!1){if(n[o].defaultValue){i[o]=n[o].defaultValue;continue}continue}if(n[o].validator?.input&&e[o]!==void 0){i[o]=n[o].validator.input.parse(e[o]);continue}i[o]=e[o];continue}if(n[o].defaultValue&&r==="create"){i[o]=n[o].defaultValue;continue}if(n[o].required&&r==="create")throw new Xt.APIError("BAD_REQUEST",{message:`${o} is required`})}return i}function Re(e,t,r){let n=qe(e,"user");return Gr(t||{},{fields:n,action:r})}var tr=()=>k("/update-user",{method:"POST",body:E.z.record(E.z.string(),E.z.any()),use:[D],metadata:{openapi:{description:"Update the current user",requestBody:{content:{"application/json":{schema:{type:"object",properties:{name:{type:"string",description:"The name of the user"},image:{type:"string",description:"The image of the user"}}}}}},responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{user:{type:"object"}}}}}}}}}},async e=>{let t=e.body;if(t.email)throw new O.APIError("BAD_REQUEST",{message:"You can't update email"});let{name:r,image:n,...i}=t,o=e.context.session;if(n===void 0&&!r&&Object.keys(i).length===0)return e.json({user:o.user});let a=Re(e.context.options,i,"update"),u=await e.context.internalAdapter.updateUserByEmail(o.user.email,{name:r,image:n,...a});return await P(e,{session:o.session,user:u}),e.json({user:u})}),rr=k("/change-password",{method:"POST",body:E.z.object({newPassword:E.z.string({description:"The new password to set"}),currentPassword:E.z.string({description:"The current password"}),revokeOtherSessions:E.z.boolean({description:"Revoke all other sessions"}).optional()}),use:[D],metadata:{openapi:{description:"Change the password of the user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{user:{description:"The user object",$ref:"#/components/schemas/User"}}}}}}}}}},async e=>{let{newPassword:t,currentPassword:r,revokeOtherSessions:n}=e.body,i=e.context.session,o=e.context.password.config.minPasswordLength;if(t.length<o)throw e.context.logger.error("Password is too short"),new O.APIError("BAD_REQUEST",{message:"Password is too short"});let a=e.context.password.config.maxPasswordLength;if(t.length>a)throw e.context.logger.error("Password is too long"),new O.APIError("BAD_REQUEST",{message:"Password too long"});let c=(await e.context.internalAdapter.findAccounts(i.user.id)).find(l=>l.providerId==="credential"&&l.password);if(!c||!c.password)throw new O.APIError("BAD_REQUEST",{message:"User does not have a password"});let s=await e.context.password.hash(t);if(!await e.context.password.verify({hash:c.password,password:r}))throw new O.APIError("BAD_REQUEST",{message:"Incorrect password"});if(await e.context.internalAdapter.updateAccount(c.id,{password:s}),n){await e.context.internalAdapter.deleteSessions(i.user.id);let l=await e.context.internalAdapter.createSession(i.user.id,e.headers);if(!l)throw new O.APIError("INTERNAL_SERVER_ERROR",{message:"Unable to create session"});await P(e,{session:l,user:i.user})}return e.json(i.user)}),nr=k("/set-password",{method:"POST",body:E.z.object({newPassword:E.z.string()}),metadata:{SERVER_ONLY:!0},use:[D]},async e=>{let{newPassword:t}=e.body,r=e.context.session,n=e.context.password.config.minPasswordLength;if(t.length<n)throw e.context.logger.error("Password is too short"),new O.APIError("BAD_REQUEST",{message:"Password is too short"});let i=e.context.password.config.maxPasswordLength;if(t.length>i)throw e.context.logger.error("Password is too long"),new O.APIError("BAD_REQUEST",{message:"Password too long"});let a=(await e.context.internalAdapter.findAccounts(r.user.id)).find(c=>c.providerId==="credential"&&c.password),u=await e.context.password.hash(t);if(!a)return await e.context.internalAdapter.linkAccount({userId:r.user.id,providerId:"credential",accountId:r.user.id,password:u}),e.json(r.user);throw new O.APIError("BAD_REQUEST",{message:"user already has a password"})}),or=k("/delete-user",{method:"POST",body:E.z.object({password:E.z.string({description:"The password of the user"})}),use:[Bt],metadata:{openapi:{description:"Delete the user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object"}}}}}}}},async e=>{let t=e.context.session;return await e.context.internalAdapter.deleteUser(t.user.id),await e.context.internalAdapter.deleteSessions(t.user.id),j(e),e.json(null)}),ir=k("/change-email",{method:"POST",query:E.z.object({currentURL:E.z.string().optional()}).optional(),body:E.z.object({newEmail:E.z.string({description:"The new email to set"}).email(),callbackURL:E.z.string({description:"The URL to redirect to after email verification"}).optional()}),use:[D],metadata:{openapi:{responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{user:{type:"object"},status:{type:"boolean"}}}}}}}}}},async e=>{if(!e.context.options.user?.changeEmail?.enabled)throw e.context.logger.error("Change email is disabled."),new O.APIError("BAD_REQUEST",{message:"Change email is disabled"});if(e.body.newEmail===e.context.session.user.email)throw e.context.logger.error("Email is the same"),new O.APIError("BAD_REQUEST",{message:"Email is the same"});if(await e.context.internalAdapter.findUserByEmail(e.body.newEmail))throw e.context.logger.error("Email already exists"),new O.APIError("BAD_REQUEST",{message:"Couldn't update your email"});if(e.context.session.user.emailVerified!==!0){let i=await e.context.internalAdapter.updateUserByEmail(e.context.session.user.email,{email:e.body.newEmail});return e.json({user:i,status:!0})}if(!e.context.options.user.changeEmail.sendChangeEmailVerification)throw e.context.logger.error("Verification email isn't enabled."),new O.APIError("BAD_REQUEST",{message:"Verification email isn't enabled"});let r=await z(e.context.secret,e.context.session.user.email,e.body.newEmail),n=`${e.context.baseURL}/verify-email?token=${r}&callbackURL=${e.body.callbackURL||e.query?.currentURL||"/"}`;return await e.context.options.user.changeEmail.sendChangeEmailVerification({user:e.context.session.user,newEmail:e.body.newEmail,url:n,token:r},e.request),e.json({user:null,status:!0})});var Kr=(e="Unknown")=>`<!DOCTYPE html>
 <html lang="en">
 <head>
     <meta charset="UTF-8">
@@ -80,4 +80,4 @@ Error: `,u),e.redirect(`${e.context.baseURL}/error?error=internal_server_error`)
         <div class="error-code">Error Code: <span id="errorCode">${e}</span></div>
     </div>
 </body>
-</html>`,sr=k("/error",{method:"GET",metadata:{...W,openapi:{description:"Displays an error page",responses:{200:{description:"Success",content:{"text/html":{schema:{type:"string"}}}}}}}},async e=>{let t=new URL(e.request?.url||"").searchParams.get("error")||"Unknown";return new Response(Kr(t),{headers:{"Content-Type":"text/html"}})});var ar=k("/ok",{method:"GET",metadata:{...W,openapi:{description:"Check if the API is working",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{ok:{type:"boolean"}}}}}}}}}},async e=>e.json({ok:!0}));var Z=require("zod");var V=require("better-call");var dr=()=>k("/sign-up/email",{method:"POST",query:Z.z.object({currentURL:Z.z.string().optional()}).optional(),body:Z.z.record(Z.z.string(),Z.z.any()),metadata:{openapi:{description:"Sign up a user using email and password",requestBody:{content:{"application/json":{schema:{type:"object",properties:{name:{type:"string",description:"The name of the user"},email:{type:"string",description:"The email of the user"},password:{type:"string",description:"The password of the user"},callbackURL:{type:"string",description:"The URL to use for email verification callback"}},required:["name","email","password"]}}}},responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{user:{type:"object"},session:{type:"object"}}}}}}}}}},async e=>{if(!e.context.options.emailAndPassword?.enabled)throw new V.APIError("BAD_REQUEST",{message:"Email and password sign up is not enabled"});let t=e.body,{name:r,email:n,password:i,image:o,callbackURL:a,...u}=t;if(!Z.z.string().email().safeParse(n).success)throw new V.APIError("BAD_REQUEST",{message:"Invalid email"});let s=e.context.password.config.minPasswordLength;if(i.length<s)throw e.context.logger.error("Password is too short"),new V.APIError("BAD_REQUEST",{message:"Password is too short"});let d=e.context.password.config.maxPasswordLength;if(i.length>d)throw e.context.logger.error("Password is too long"),new V.APIError("BAD_REQUEST",{message:"Password is too long"});if((await e.context.internalAdapter.findUserByEmail(n))?.user)throw e.context.logger.info(`Sign-up attempt for existing email: ${n}`),new V.APIError("UNPROCESSABLE_ENTITY",{message:"User with this email already exists"});let p=Re(e.context.options,u),m;try{if(m=await e.context.internalAdapter.createUser({email:n.toLowerCase(),name:r,image:o,...p,emailVerified:!1}),!m)throw new V.APIError("BAD_REQUEST",{message:"Failed to create user"})}catch(h){throw e.context.logger.error("Failed to create user",h),new V.APIError("UNPROCESSABLE_ENTITY",{message:"Failed to create user",details:h})}if(!m)throw new V.APIError("UNPROCESSABLE_ENTITY",{message:"Failed to create user"});let f=await e.context.password.hash(i);if(await e.context.internalAdapter.linkAccount({userId:m.id,providerId:"credential",accountId:m.id,password:f}),e.context.options.emailVerification?.sendOnSignUp){let h=await z(e.context.secret,m.email),y=`${e.context.baseURL}/verify-email?token=${h}&callbackURL=${t.callbackURL||e.query?.currentURL||"/"}`;await e.context.options.emailVerification?.sendVerificationEmail?.({user:m,url:y,token:h},e.request)}if(!e.context.options.emailAndPassword.autoSignIn||e.context.options.emailAndPassword.requireEmailVerification)return e.json({user:m,session:null});let g=await e.context.internalAdapter.createSession(m.id,e.request);if(!g)throw new V.APIError("BAD_REQUEST",{message:"Failed to create session"});return await P(e,{session:g,user:m}),e.json({user:m,session:g})});var te=require("zod");var Fe=require("better-call");var cr=k("/list-accounts",{method:"GET",use:[D],metadata:{openapi:{description:"List all accounts linked to the user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"array",items:{type:"object",properties:{id:{type:"string"},provider:{type:"string"}}}}}}}}}}},async e=>{let t=e.context.session,r=await e.context.internalAdapter.findAccounts(t.user.id);return e.json(r.map(n=>({id:n.id,provider:n.providerId})))}),ur=k("/link-social",{method:"POST",requireHeaders:!0,query:te.z.object({currentURL:te.z.string().optional()}).optional(),body:te.z.object({callbackURL:te.z.string({description:"The URL to redirect to after the user has signed in"}).optional(),provider:te.z.enum(we,{description:"The OAuth2 provider to use"})}),use:[D],metadata:{openapi:{description:"Link a social account to the user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{url:{type:"string"},redirect:{type:"boolean"}},required:["url","redirect"]}}}}}}}},async e=>{let t=e.context.session;if((await e.context.internalAdapter.findAccounts(t.user.id)).find(u=>u.providerId===e.body.provider))throw new Fe.APIError("BAD_REQUEST",{message:"Social Account is already linked."});let i=e.context.socialProviders.find(u=>u.id===e.body.provider);if(!i)throw e.context.logger.error("Provider not found. Make sure to add the provider in your auth config",{provider:e.body.provider}),new Fe.APIError("NOT_FOUND",{message:"Provider not found"});let o=await ae(e,{userId:t.user.id,email:t.user.email}),a=await i.createAuthorizationURL({state:o.state,codeVerifier:o.codeVerifier,redirectURI:`${e.context.baseURL}/callback/${i.id}`});return e.json({url:a.toString(),redirect:!0})});function Ue(e,t){if(t.advanced?.ipAddress?.disableIpTracking)return null;let r="127.0.0.1";if(Je)return r;let i=t.advanced?.ipAddress?.ipAddressHeaders||["x-client-ip","x-forwarded-for","cf-connecting-ip","fastly-client-ip","x-real-ip","x-cluster-client-ip","x-forwarded","forwarded-for","forwarded"],o=e instanceof Request?e.headers:e;for(let a of i){let u=o.get(a);if(typeof u=="string"){let c=u.split(",")[0].trim();if(c)return c}}return null}function Wr(e,t,r){let n=Date.now(),i=t*1e3;return n-r.lastRequest<i&&r.count>=e}function Zr(e){return new Response(JSON.stringify({message:"Too many requests. Please try again later."}),{status:429,statusText:"Too Many Requests",headers:{"X-Retry-After":e.toString()}})}function Qr(e,t){let r=Date.now(),n=t*1e3;return Math.ceil((e+n-r)/1e3)}function Jr(e,t){let r="rateLimit",n=e.adapter;return{get:async i=>await n.findOne({model:r,where:[{field:"key",value:i}]}),set:async(i,o,a)=>{try{a?await n.update({model:t??"rateLimit",where:[{field:"key",value:i}],update:{count:o.count,lastRequest:o.lastRequest}}):await n.create({model:t??"rateLimit",data:{key:i,count:o.count,lastRequest:o.lastRequest}})}catch(u){e.logger.error("Error setting rate limit",u)}}}}var lr=new Map;function Yr(e){return e.rateLimit.storage==="secondary-storage"?{get:async r=>{let n=await e.options.secondaryStorage?.get(r);return n?JSON.parse(n):void 0},set:async(r,n)=>{await e.options.secondaryStorage?.set?.(r,JSON.stringify(n))}}:e.rateLimit.storage==="memory"?{async get(r){return lr.get(r)},async set(r,n,i){lr.set(r,n)}}:Jr(e,e.rateLimit.modelName)}async function pr(e,t){if(!t.rateLimit.enabled)return;let r=t.baseURL,n=e.url.replace(r,"").split("?")[0],i=t.rateLimit.window,o=t.rateLimit.max,a=Ue(e,t.options)+n,c=Xr().find(p=>p.pathMatcher(n));c&&(i=c.window,o=c.max);for(let p of t.options.plugins||[])if(p.rateLimit){let m=p.rateLimit.find(f=>f.pathMatcher(n));if(m){i=m.window,o=m.max;break}}if(t.rateLimit.customRules){let p=t.rateLimit.customRules[n];p&&(i=p.window,o=p.max)}let s=Yr(t),d=await s.get(a),l=Date.now();if(!d)await s.set(a,{key:a,count:1,lastRequest:l});else{let p=l-d.lastRequest;if(Wr(o,i,d)){let m=Qr(d.lastRequest,i);return Zr(m)}else p>i*1e3?await s.set(a,{...d,count:1,lastRequest:l}):await s.set(a,{...d,count:d.count+1,lastRequest:l})}}function Xr(){return[{pathMatcher(t){return t.startsWith("/sign-in")||t.startsWith("/sign-up")||t.startsWith("/change-password")||t.startsWith("/change-email")},window:10,max:3}]}var en=require("better-call");function Ve(e,t){let r=t.plugins?.reduce((u,c)=>({...u,...c.endpoints}),{}),n=t.plugins?.map(u=>u.middlewares?.map(c=>{let s=async d=>c.middleware({...d,context:{...e,...d.context}});return s.path=c.path,s.options=c.middleware.options,s.headers=c.middleware.headers,{path:c.path,middleware:s}})).filter(u=>u!==void 0).flat()||[],o={...{signInSocial:Mt,callbackOAuth:Gt,getSession:qe(),signOut:Wt,signUpEmail:dr(),signInEmail:Ht,forgetPassword:Qt,resetPassword:Yt,verifyEmail:zt,sendVerificationEmail:$t,changeEmail:ir,changePassword:rr,setPassword:nr,updateUser:tr(),deleteUser:or,forgetPasswordCallback:Jt,listSessions:qt(),revokeSession:Nt,revokeSessions:jt,revokeOtherSessions:Ft,linkSocialAccount:ur,listUserAccounts:cr},...r,ok:ar,error:sr},a={};for(let[u,c]of Object.entries(o))a[u]=async(s={})=>{c.headers=new Headers;let d={setHeader(h,y){c.headers.set(h,y)},setCookie(h,y,w){(0,T.setCookie)(c.headers,h,y,w)},getCookie(h,y){let b=s.headers?.get("cookie");return(0,T.getCookie)(b||"",h,y)},getSignedCookie(h,y,w){let b=s.headers;return b?(0,T.getSignedCookie)(b,y,h,w):null},async setSignedCookie(h,y,w,b){await(0,T.setSignedCookie)(c.headers,h,y,w,b)},redirect(h){return c.headers.set("Location",h),new T.APIError("FOUND")},responseHeader:c.headers},l=await e,p={...d,...s,path:c.path,context:{...l,...s.context,endpoint:c}};l.session=null;let m=t.plugins||[];for(let h of m){let y=h.hooks?.before??[];for(let w of y){if(!w.matcher(p))continue;let b=await w.handler(p);if(b&&"context"in b){p={...p,...b.context};continue}if(b)return b}}let f;try{f=await c(p)}catch(h){if(h instanceof T.APIError){let y=t.plugins?.map(w=>{if(w.hooks?.after)return w.hooks.after}).filter(w=>w!==void 0).flat();if(!y?.length)throw h.headers=c.headers,h;p.context.returned=h,p.context.returned.headers=c.headers;for(let w of y||[])if(w.matcher(p))try{let U=await w.handler(p);U&&"response"in U&&(p.context.returned=U.response)}catch(U){if(U instanceof T.APIError){p.context.returned=U;continue}throw U}if(p.context.returned instanceof T.APIError)throw p.context.returned.headers=c.headers,p.context.returned;return p.context.returned}throw h}p.context.returned=f,p.responseHeader=c.headers;for(let h of t.plugins||[])if(h.hooks?.after){for(let y of h.hooks.after)if(y.matcher(p))try{let b=await y.handler(p);b&&(p.context.returned=b)}catch(b){if(b instanceof T.APIError){p.context.returned=b;continue}throw b}}let g=p.context.returned;return g instanceof Response&&c.headers.forEach((h,y)=>{y==="set-cookie"?g.headers.append(y,h):g.headers.set(y,h)}),g},a[u].path=c.path,a[u].method=c.method,a[u].options=c.options,a[u].headers=c.headers;return{api:a,middlewares:n}}var fr=(e,t)=>{let{api:r,middlewares:n}=Ve(e,t),i=new URL(e.baseURL).pathname;return(0,T.createRouter)(r,{extraContext:e,basePath:i,routerMiddleware:[{path:"/**",middleware:Ze},...n],async onRequest(o){for(let a of e.options.plugins||[])if(a.onRequest){let u=await a.onRequest(o,e);if(u&&"response"in u)return u.response}return pr(o,e)},async onResponse(o){for(let a of e.options.plugins||[])if(a.onResponse){let u=await a.onResponse(o,e);if(u)return u.response}return o},onError(o){if(o instanceof T.APIError&&o.status==="FOUND")return;if(t.onAPIError?.throw)throw o;if(t.onAPIError?.onError){t.onAPIError.onError(o,e);return}let a=t.logger?.level,u=a==="error"||a==="warn"||a==="debug"?I:void 0;if(t.logger?.disabled!==!0){if(o&&typeof o=="object"&&"message"in o&&typeof o.message=="string"&&(o.message.includes("no column")||o.message.includes("column")||o.message.includes("relation")||o.message.includes("table")||o.message.includes("does not exist"))){e.logger?.error(o.message),e.logger?.error("If you are seeing this error, it is likely that you need to run the migrations for the database or you need to update your database schema. If you recently updated the package, make sure to run the migrations.");return}o instanceof T.APIError?(o.status==="INTERNAL_SERVER_ERROR"&&e.logger.error(o.status,o),u?.error(o.message)):e.logger?.error(o&&typeof o=="object"&&"name"in o?o.name:"",o)}}})};var Ur=require("defu");var ce=require("oslo/encoding");var mr=require("@noble/hashes/scrypt"),gr=require("uncrypto"),re={N:16384,r:16,p:1,dkLen:64};async function hr(e,t){return await(0,mr.scryptAsync)(e.normalize("NFKC"),t,{N:re.N,p:re.p,r:re.r,dkLen:re.dkLen,maxmem:128*re.N*re.r*2})}var yr=async e=>{let t=(0,ce.encodeHex)((0,gr.getRandomValues)(new Uint8Array(16))),r=await hr(e,t);return`${t}:${(0,ce.encodeHex)(r)}`},wr=async({hash:e,password:t})=>{let[r,n]=e.split(":"),i=await hr(t,r);return Ie(i,(0,ce.decodeHex)(n))};function br(e,t){let r=t.hooks;async function n(a,u,c){let s=a;for(let p of r||[]){let m=p[u]?.create?.before;if(m){let f=await m(a);if(f===!1)return null;typeof f=="object"&&"data"in f&&(s=f.data)}}let d=c?await c.fn(s):null,l=!c||c.executeMainFn?await e.create({model:u,data:s}):d;for(let p of r||[]){let m=p[u]?.create?.after;m&&await m(l)}return l}async function i(a,u,c,s){let d=a;for(let m of r||[]){let f=m[c]?.update?.before;if(f){let g=await f(a);if(g===!1)return null;d=typeof g=="object"?g.data:g}}let l=s?await s.fn(d):null,p=!s||s.executeMainFn?await e.update({model:c,update:d,where:u}):l;for(let m of r||[]){let f=m[c]?.update?.after;f&&await f(p)}return p}async function o(a,u,c,s){let d=a;for(let m of r||[]){let f=m[c]?.update?.before;if(f){let g=await f(a);if(g===!1)return null;d=typeof g=="object"?g.data:g}}let l=s?await s.fn(d):null,p=!s||s.executeMainFn?await e.updateMany({model:c,update:d,where:u}):l;for(let m of r||[]){let f=m[c]?.update?.after;f&&await f(p)}return p}return{createWithHooks:n,updateWithHooks:i,updateManyWithHooks:o}}var $e=(e,t)=>{let r=t.options,n=r.secondaryStorage,i=r.session?.expiresIn||60*60*24*7,{createWithHooks:o,updateWithHooks:a,updateManyWithHooks:u}=br(e,t),c=async s=>{await n?.set(s.token,JSON.stringify({session:s.session,user:s.user}),s.session.expiresAt?Math.floor(((s.session.expiresAt instanceof Date?s.session.expiresAt.getTime():new Date(s.session.expiresAt).getTime())-Date.now())/1e3):i)};return{createOAuthUser:async(s,d)=>{try{let l=await o({createdAt:new Date,updatedAt:new Date,...s},"user"),p=await o({...d,userId:l.id||s.id,createdAt:new Date,updatedAt:new Date},"account");return{user:l,account:p}}catch(l){return console.log(l),null}},createUser:async s=>await o({createdAt:new Date,updatedAt:new Date,emailVerified:!1,...s},"user"),createAccount:async s=>await o({createdAt:new Date,updatedAt:new Date,...s},"account"),listSessions:async s=>{if(n){let l=await n.get(`active-sessions-${s}`);if(!l)return[];let p=J(l)||[],m=Date.now(),f=p.filter(h=>h.expiresAt>m),g=[];for(let h of f){let y=await n.get(h.token);if(y){let w=JSON.parse(y),b=ve(t.options,{...w.session,expiresAt:new Date(w.session.expiresAt)});g.push(b)}}return g}return await e.findMany({model:"session",where:[{field:"userId",value:s}]})},listUsers:async(s,d,l,p)=>await e.findMany({model:"user",limit:s,offset:d,sortBy:l,where:p}),deleteUser:async s=>{await e.deleteMany({model:"session",where:[{field:"userId",value:s}]}),await e.deleteMany({model:"account",where:[{field:"userId",value:s}]}),await e.delete({model:"user",where:[{field:"id",value:s}]})},createSession:async(s,d,l,p)=>{let m=d instanceof Request?d.headers:d,{id:f,...g}=p||{},h={ipAddress:d&&Ue(d,t.options)||"",userAgent:m?.get("user-agent")||"",...g,expiresAt:l?q(60*60*24,"sec"):q(i,"sec"),userId:s,token:N(32),createdAt:new Date,updatedAt:new Date};return await o(h,"session",n?{fn:async()=>{let w=await e.findOne({model:"user",where:[{field:"id",value:s}]});n.set(h.token,JSON.stringify({session:h,user:w}),i);let b=await n.get(`active-sessions-${s}`),U=[],Ge=Date.now();return b&&(U=J(b)||[],U=U.filter(Er=>Er.expiresAt>Ge)),U.push({token:h.token,expiresAt:Ge+i*1e3}),await n.set(`active-sessions-${s}`,JSON.stringify(U),i),h},executeMainFn:r.session?.storeSessionInDatabase}:void 0)},findSession:async s=>{if(n){let f=await n.get(s);if(f){let g=JSON.parse(f),h=ve(t.options,{...g.session,expiresAt:new Date(g.session.expiresAt),createdAt:new Date(g.session.createdAt),updatedAt:new Date(g.session.updatedAt)}),y=je(t.options,{...g.user,createdAt:new Date(g.user.createdAt),updatedAt:new Date(g.user.updatedAt)});return{session:h,user:y}}}let d=await e.findOne({model:"session",where:[{value:s,field:"token"}]});if(!d)return null;let l=await e.findOne({model:"user",where:[{value:d.userId,field:"id"}]});if(!l)return null;let p=ve(t.options,d),m=je(t.options,l);return n&&await c({token:s,user:m,session:p}),{session:p,user:m}},findSessions:async s=>{if(n){let m=[];for(let f of s){let g=await n.get(f);if(g){let h=JSON.parse(g),y={session:{...h.session,expiresAt:new Date(h.session.expiresAt)},user:{...h.user,createdAt:new Date(h.user.createdAt),updatedAt:new Date(h.user.updatedAt)}};m.push(y)}}return m}let d=await e.findMany({model:"session",where:[{field:"token",value:s,operator:"in"}]}),l=d.map(m=>m.userId);if(!l.length)return[];let p=await e.findMany({model:"user",where:[{field:"id",value:l,operator:"in"}]});return d.map(m=>{let f=p.find(g=>g.id===m.userId);return f?{session:m,user:f}:null})},updateSession:async(s,d)=>await a(d,[{field:"token",value:s}],"session",n?{async fn(p){let m=await n.get(s),f=null;if(m){let g=JSON.parse(m);return f={...g.session,...p},await c({token:s,user:g.user,session:f}),f}else return null},executeMainFn:r.session?.storeSessionInDatabase}:void 0),deleteSession:async s=>{if(n){await n.delete(s),r.session?.storeSessionInDatabase&&await e.delete({model:"session",where:[{field:"token",value:s}]});return}await e.delete({model:"session",where:[{field:"token",value:s}]})},deleteSessions:async s=>{if(n){if(typeof s=="string"){let d=await n.get(`active-sessions-${s}`),l=d?J(d):[];if(!l)return;for(let p of l)await n.delete(p.token)}else for(let d of s)await n.get(d)&&await n.delete(d);r.session?.storeSessionInDatabase&&await e.deleteMany({model:"session",where:[{field:Array.isArray(s)?"token":"userId",value:s,operator:Array.isArray(s)?"in":void 0}]});return}await e.deleteMany({model:"session",where:[{field:Array.isArray(s)?"token":"userId",value:s,operator:Array.isArray(s)?"in":void 0}]})},findUserByEmail:async(s,d)=>{let l=await e.findOne({model:"user",where:[{value:s.toLowerCase(),field:"email"}]});if(!l)return null;if(d?.includeAccounts){let p=await e.findMany({model:"account",where:[{value:l.id,field:"userId"}]});return{user:l,accounts:p}}return{user:l,accounts:[]}},findUserById:async s=>await e.findOne({model:"user",where:[{field:"id",value:s}]}),linkAccount:async s=>await o({...s,createdAt:new Date,updatedAt:new Date},"account"),updateUser:async(s,d)=>await a(d,[{field:"id",value:s}],"user"),updateUserByEmail:async(s,d)=>await a(d,[{field:"email",value:s}],"user"),updatePassword:async(s,d)=>{await u({password:d},[{field:"userId",value:s},{field:"providerId",value:"credential"}],"account")},findAccounts:async s=>await e.findMany({model:"account",where:[{field:"userId",value:s}]}),findAccount:async s=>await e.findOne({model:"account",where:[{field:"accountId",value:s}]}),findAccountByUserId:async s=>await e.findMany({model:"account",where:[{field:"userId",value:s}]}),updateAccount:async(s,d)=>await a(d,[{field:"id",value:s}],"account"),createVerificationValue:async s=>await o({createdAt:new Date,updatedAt:new Date,...s},"verification"),findVerificationValue:async s=>(await e.findMany({model:"verification",where:[{field:"identifier",value:s}],sortBy:{field:"createdAt",direction:"desc"},limit:10}))[0],deleteVerificationValue:async s=>{await e.delete({model:"verification",where:[{field:"id",value:s}]})},deleteVerificationByIdentifier:async s=>{await e.delete({model:"verification",where:[{field:"identifier",value:s}]})},updateVerificationValue:async(s,d)=>await a(d,[{field:"id",value:s}],"verification")}};var M=e=>{let t=e.plugins?.reduce((c,s)=>{let d=s.schema;if(!d)return c;for(let[l,p]of Object.entries(d))c[l]={fields:{...c[l]?.fields,...p.fields},modelName:p.modelName||l};return c},{}),r=e.rateLimit?.storage==="database",n={rateLimit:{modelName:e.rateLimit?.modelName||"rateLimit",fields:{key:{type:"string",fieldName:e.rateLimit?.fields?.key||"key"},count:{type:"number",fieldName:e.rateLimit?.fields?.count||"count"},lastRequest:{type:"number",fieldName:e.rateLimit?.fields?.lastRequest||"lastRequest"}}}},{user:i,session:o,account:a,...u}=t||{};return{user:{modelName:e.user?.modelName||"user",fields:{name:{type:"string",required:!0,fieldName:e.user?.fields?.name||"name"},email:{type:"string",unique:!0,required:!0,fieldName:e.user?.fields?.email||"email"},emailVerified:{type:"boolean",defaultValue:()=>!1,required:!0,fieldName:e.user?.fields?.emailVerified||"emailVerified"},image:{type:"string",required:!1,fieldName:e.user?.fields?.image||"image"},createdAt:{type:"date",defaultValue:()=>new Date,required:!0,fieldName:e.user?.fields?.createdAt||"createdAt"},updatedAt:{type:"date",defaultValue:()=>new Date,required:!0,fieldName:e.user?.fields?.updatedAt||"updatedAt"},...i?.fields,...e.user?.additionalFields},order:1},session:{modelName:e.session?.modelName||"session",fields:{expiresAt:{type:"date",required:!0,fieldName:e.session?.fields?.expiresAt||"expiresAt"},token:{type:"string",required:!0,fieldName:e.session?.fields?.token||"token",unique:!0},createdAt:{type:"date",required:!0,fieldName:e.session?.fields?.createdAt||"createdAt"},updatedAt:{type:"date",required:!0,fieldName:e.session?.fields?.updatedAt||"updatedAt"},ipAddress:{type:"string",required:!1,fieldName:e.session?.fields?.ipAddress||"ipAddress"},userAgent:{type:"string",required:!1,fieldName:e.session?.fields?.userAgent||"userAgent"},userId:{type:"string",fieldName:e.session?.fields?.userId||"userId",references:{model:e.user?.modelName||"user",field:"id",onDelete:"cascade"},required:!0},...o?.fields,...e.session?.additionalFields},order:2},account:{modelName:e.account?.modelName||"account",fields:{accountId:{type:"string",required:!0,fieldName:e.account?.fields?.accountId||"accountId"},providerId:{type:"string",required:!0,fieldName:e.account?.fields?.providerId||"providerId"},userId:{type:"string",references:{model:e.user?.modelName||"user",field:"id",onDelete:"cascade"},required:!0,fieldName:e.account?.fields?.userId||"userId"},accessToken:{type:"string",required:!1,fieldName:e.account?.fields?.accessToken||"accessToken"},refreshToken:{type:"string",required:!1,fieldName:e.account?.fields?.refreshToken||"refreshToken"},idToken:{type:"string",required:!1,fieldName:e.account?.fields?.idToken||"idToken"},accessTokenExpiresAt:{type:"date",required:!1,fieldName:e.account?.fields?.accessTokenExpiresAt||"accessTokenExpiresAt"},refreshTokenExpiresAt:{type:"date",required:!1,fieldName:e.account?.fields?.accessTokenExpiresAt||"refreshTokenExpiresAt"},scope:{type:"string",required:!1,fieldName:e.account?.fields?.scope||"scope"},password:{type:"string",required:!1,fieldName:e.account?.fields?.password||"password"},createdAt:{type:"date",required:!0,fieldName:e.account?.fields?.createdAt||"createdAt"},updatedAt:{type:"date",required:!0,fieldName:e.account?.fields?.updatedAt||"updatedAt"},...a?.fields},order:3},verification:{modelName:e.verification?.modelName||"verification",fields:{identifier:{type:"string",required:!0,fieldName:e.verification?.fields?.identifier||"identifier"},value:{type:"string",required:!0,fieldName:e.verification?.fields?.value||"value"},expiresAt:{type:"date",required:!0,fieldName:e.verification?.fields?.expiresAt||"expiresAt"},createdAt:{type:"date",required:!1,defaultValue:()=>new Date,fieldName:e.verification?.fields?.createdAt||"createdAt"},updatedAt:{type:"date",required:!1,defaultValue:()=>new Date,fieldName:e.verification?.fields?.updatedAt||"updatedAt"}},order:4},...u,...r?n:{}}};var tn=require("zod");var ue=require("kysely"),H=require("kysely");function Ar(e){if(!e)return null;if("dialect"in e)return Ar(e.dialect);if("createDriver"in e){if(e instanceof H.SqliteDialect)return"sqlite";if(e instanceof H.MysqlDialect)return"mysql";if(e instanceof H.PostgresDialect)return"postgres";if(e instanceof ue.MssqlDialect)return"mssql"}return"aggregate"in e?"sqlite":"getConnection"in e?"mysql":"connect"in e?"postgres":null}var ze=async e=>{let t=e.database;if(!t)return{kysely:null,databaseType:null};if("db"in t)return{kysely:t.db,databaseType:t.type};if("dialect"in t)return{kysely:new ue.Kysely({dialect:t.dialect}),databaseType:t.type};let r,n=Ar(t);return"createDriver"in t&&(r=t),"aggregate"in t&&(r=new H.SqliteDialect({database:t})),"getConnection"in t&&(r=new H.MysqlDialect(t)),"connect"in t&&(r=new H.PostgresDialect({pool:t})),{kysely:r?new ue.Kysely({dialect:r}):null,databaseType:n}};function Te(e,t,r){return r==="update"?e:e==null&&t.defaultValue?typeof t.defaultValue=="function"?t.defaultValue():t.defaultValue:e}var rn=(e,t,r)=>{let n=M(t);function i(s,d){if(d==="id")return d;let l=n[s].fields[d];return l||console.log("Field not found",s,d),l.fieldName||d}function o(s,d,l){let{type:p="sqlite"}=r||{},m=n[d].fields[l];return m.type==="boolean"&&p==="sqlite"&&s!==null&&s!==void 0?s?1:0:m.type==="date"&&s&&s instanceof Date&&p==="sqlite"?s.toISOString():s}function a(s,d,l){let{type:p="sqlite"}=r||{},m=n[d].fields[l];return m.type==="boolean"&&p==="sqlite"&&s!==null?s===1:m.type==="date"&&s?new Date(s):s}function u(s){return n[s].modelName}let c=t?.advanced?.generateId===!1;return{transformInput(s,d,l){let p=c||l==="update"?{}:{id:t.advanced?.generateId?t.advanced.generateId({model:d}):s.id||N()},m=n[d].fields;for(let f in m){let g=s[f];p[m[f].fieldName||f]=Te(o(g,d,f),m[f],l)}return p},transformOutput(s,d,l=[]){if(!s)return null;let p=s.id?l.length===0||l.includes("id")?{id:s.id}:{}:{},m=n[d].fields;for(let f in m){if(l.length&&!l.includes(f))continue;let g=m[f];g&&(p[f]=a(s[g.fieldName||f],d,f))}return p},convertWhereClause(s,d){if(!d)return{and:null,or:null};let l={and:[],or:[]};return d.forEach(p=>{let{field:m,value:f,operator:g="=",connector:h="AND"}=p,y=i(s,m),w=b=>g.toLowerCase()==="in"?b(y,"in",Array.isArray(f)?f:[f]):g==="contains"?b(y,"like",`%${f}%`):g==="starts_with"?b(y,"like",`${f}%`):g==="ends_with"?b(y,"like",`%${f}`):g==="eq"?b(y,"=",f):g==="ne"?b(y,"<>",f):g==="gt"?b(y,">",f):g==="gte"?b(y,">=",f):g==="lt"?b(y,"<",f):g==="lte"?b(y,"<=",f):b(y,g,f);h==="OR"?l.or.push(w):l.and.push(w)}),{and:l.and.length?l.and:null,or:l.or.length?l.or:null}},async withReturning(s,d,l,p){let m;if(r?.type!=="mysql")m=await d.returningAll().executeTakeFirst();else{await d.execute();let f=s.id?"id":p[0].field?p[0].field:"id",g=s[f]||p[0].value;m=await e.selectFrom(u(l)).selectAll().where(i(l,f),"=",g).executeTakeFirst()}return m},getModelName:u,getField:i}},kr=(e,t)=>r=>{let{transformInput:n,withReturning:i,transformOutput:o,convertWhereClause:a,getModelName:u,getField:c}=rn(e,r,t);return{id:"kysely",async create(s){let{model:d,data:l,select:p}=s,m=n(l,d,"create"),f=e.insertInto(u(d)).values(m);return o(await i(m,f,d,[]),d,p)},async findOne(s){let{model:d,where:l,select:p}=s,{and:m,or:f}=a(d,l),g=e.selectFrom(u(d)).selectAll();m&&(g=g.where(y=>y.and(m.map(w=>w(y))))),f&&(g=g.where(y=>y.or(f.map(w=>w(y)))));let h=await g.executeTakeFirst();return h?o(h,d,p):null},async findMany(s){let{model:d,where:l,limit:p,offset:m,sortBy:f}=s,{and:g,or:h}=a(d,l),y=e.selectFrom(u(d));g&&(y=y.where(b=>b.and(g.map(U=>U(b))))),h&&(y=y.where(b=>b.or(h.map(U=>U(b))))),y=y.limit(p||100),m&&(y=y.offset(m)),f&&(y=y.orderBy(c(d,f.field),f.direction));let w=await y.selectAll().execute();return w?w.map(b=>o(b,d)):[]},async update(s){let{model:d,where:l,update:p}=s,{and:m,or:f}=a(d,l),g=n(p,d,"update"),h=e.updateTable(u(d)).set(g);return m&&(h=h.where(w=>w.and(m.map(b=>b(w))))),f&&(h=h.where(w=>w.or(f.map(b=>b(w))))),await o(await i(g,h,d,l),d)},async updateMany(s){let{model:d,where:l,update:p}=s,{and:m,or:f}=a(d,l),g=n(p,d,"update"),h=e.updateTable(u(d)).set(g);return m&&(h=h.where(w=>w.and(m.map(b=>b(w))))),f&&(h=h.where(w=>w.or(f.map(b=>b(w))))),(await h.execute()).length},async delete(s){let{model:d,where:l}=s,{and:p,or:m}=a(d,l),f=e.deleteFrom(u(d));p&&(f=f.where(g=>g.and(p.map(h=>h(g))))),m&&(f=f.where(g=>g.or(m.map(h=>h(g))))),await f.execute()},async deleteMany(s){let{model:d,where:l}=s,{and:p,or:m}=a(d,l),f=e.deleteFrom(u(d));return p&&(f=f.where(g=>g.and(p.map(h=>h(g))))),m&&(f=f.where(g=>g.or(m.map(h=>h(g))))),(await f.execute()).length},options:t}};var nn=e=>{let t=M(e);function r(n,i){return i==="id"?i:t[n].fields[i].fieldName||i}return{transformInput(n,i,o){let a=o==="update"?{}:{id:e.advanced?.generateId?e.advanced.generateId({model:i}):n.id||N()},u=t[i].fields;for(let c in u){let s=n[c];s===void 0&&!u[c].defaultValue||(a[u[c].fieldName||c]=Te(s,u[c],o))}return a},transformOutput(n,i,o=[]){if(!n)return null;let a=n.id||n._id?o.length===0||o.includes("id")?{id:n.id}:{}:{},u=t[i].fields;for(let c in u){if(o.length&&!o.includes(c))continue;let s=u[c];s&&(a[c]=n[s.fieldName||c])}return a},convertWhereClause(n,i,o){return i.filter(a=>n.every(u=>{let{field:c,value:s,operator:d}=u,l=r(o,c);if(d==="in"){if(!Array.isArray(s))throw new Error("Value must be an array");return s.includes(a[l])}else return d==="contains"?a[l].includes(s):d==="starts_with"?a[l].startsWith(s):d==="ends_with"?a[l].endsWith(s):a[l]===s}))},getField:r}},xr=e=>t=>{let{transformInput:r,transformOutput:n,convertWhereClause:i,getField:o}=nn(t);return{id:"memory",create:async({model:a,data:u})=>{let c=r(u,a,"create");return e[a].push(c),n(c,a)},findOne:async({model:a,where:u,select:c})=>{let s=e[a],l=i(u,s,a)[0]||null;return n(l,a,c)},findMany:async({model:a,where:u,sortBy:c,limit:s,offset:d})=>{let l=e[a];return u&&(l=i(u,l,a)),c&&(l=l.sort((p,m)=>{let f=o(a,c.field);return c.direction==="asc"?p[f]>m[f]?1:-1:p[f]<m[f]?1:-1})),d!==void 0&&(l=l.slice(d)),s!==void 0&&(l=l.slice(0,s)),l.map(p=>n(p,a))},update:async({model:a,where:u,update:c})=>{let s=e[a],d=i(u,s,a);return d.forEach(l=>{Object.assign(l,r(c,a,"update"))}),n(d[0],a)},delete:async({model:a,where:u})=>{let c=e[a],s=i(u,c,a);e[a]=c.filter(d=>!s.includes(d))},deleteMany:async({model:a,where:u})=>{let c=e[a],s=i(u,c,a),d=0;return e[a]=c.filter(l=>s.includes(l)?(d++,!1):!s.includes(l)),d},updateMany(a){let{model:u,where:c,update:s}=a,d=e[u],l=i(c,d,u);return l.forEach(p=>{Object.assign(p,s)}),l[0]||null}}};async function vr(e){if(!e.database){let n=M(e),i=Object.keys(n).reduce((o,a)=>(o[a]=[],o),{});return I.warn("No database configuration provided. Using memory adapter in development"),xr(i)(e)}if(typeof e.database=="function")return e.database(e);let{kysely:t,databaseType:r}=await ze(e);if(!t)throw new L("Failed to initialize database adapter");return kr(t,{type:r||"sqlite"})(e)}var Me="better-auth-secret-123456789";var He=require("better-call");async function Rr(e,t){let n=(await t.context.internalAdapter.findAccounts(e))?.find(a=>a.providerId==="credential"),i=n?.password;if(!n||!i||!t.body.password)throw new He.APIError("BAD_REQUEST",{message:"No password credential found"});if(!await t.context.password.verify({hash:i,password:t.body.password}))throw new He.APIError("BAD_REQUEST",{message:"Invalid password"});return!0}var Tr=async e=>{let t=await vr(e),r=e.plugins||[],n=sn(e),i=de(e.logger),o=se(e.baseURL,e.basePath),a=e.secret||_.BETTER_AUTH_SECRET||_.AUTH_SECRET||Me;a===Me&&ie&&i.error("You are using the default secret. Please set `BETTER_AUTH_SECRET` in your environment variables or pass `secret` in your auth config."),e={...e,secret:a,baseURL:o?new URL(o).origin:"",basePath:e.basePath||"/api/auth",plugins:r.concat(n),emailAndPassword:{...e.emailAndPassword,enabled:e.emailAndPassword?.enabled??!1,autoSignIn:e.emailAndPassword?.autoSignIn??!0}};let u=Pe(e),c=M(e),s=Object.keys(e.socialProviders||{}).map(m=>{let f=e.socialProviders?.[m];return f.enabled===!1?null:((!f.clientId||!f.clientSecret)&&i.warn(`Social provider ${m} is missing clientId or clientSecret`),Be[m](f))}).filter(m=>m!==null),d=({model:m,size:f})=>typeof e?.advanced?.generateId=="function"?e.advanced.generateId({model:m,size:f}):N(f),l={appName:e.appName||"Better Auth",socialProviders:s,options:e,tables:c,trustedOrigins:an(e),baseURL:o||"",sessionConfig:{updateAge:e.session?.updateAge!==void 0?e.session.updateAge:24*60*60,expiresIn:e.session?.expiresIn||60*60*24*7,freshAge:e.session?.freshAge||60*5},secret:a,rateLimit:{...e.rateLimit,enabled:e.rateLimit?.enabled??ie,window:e.rateLimit?.window||10,max:e.rateLimit?.max||100,storage:e.rateLimit?.storage||e.secondaryStorage?"secondary-storage":"memory"},authCookies:u,logger:i,generateId:d,session:null,secondaryStorage:e.secondaryStorage,password:{hash:e.emailAndPassword?.password?.hash||yr,verify:e.emailAndPassword?.password?.verify||wr,config:{minPasswordLength:e.emailAndPassword?.minPasswordLength||8,maxPasswordLength:e.emailAndPassword?.maxPasswordLength||128},checkPassword:Rr},adapter:t,internalAdapter:$e(t,{options:e,hooks:e.databaseHooks?[e.databaseHooks]:[],generateId:d}),createAuthCookie:ge(e)},{context:p}=on(l);return p};function on(e){let t=e.options,r=t.plugins||[],n=e,i=[];for(let o of r)if(o.init){let a=o.init(e);typeof a=="object"&&(a.options&&(a.options.databaseHooks&&i.push(a.options.databaseHooks),t=(0,Ur.defu)(t,a.options)),a.context&&(n={...n,...a.context}))}return i.push(t.databaseHooks),n.internalAdapter=$e(e.adapter,{options:t,hooks:i.filter(o=>o!==void 0),generateId:e.generateId}),n.options=t,{context:n}}function sn(e){let t=[];return e.advanced?.crossSubDomainCookies?.enabled,t}function an(e){let t=se(e.baseURL,e.basePath);if(!t)return[];let r=[new URL(t).origin];e.trustedOrigins&&r.push(...e.trustedOrigins);let n=_.BETTER_AUTH_TRUSTED_ORIGINS;return n&&r.push(...n.split(",")),r}var dn=e=>{let t=Tr(e),{api:r}=Ve(t,e);return{handler:async n=>{let i=await t,o=i.options.basePath||"/api/auth",a=new URL(n.url);if(!i.options.baseURL){let c=se(void 0,o)||`${a.origin}${o}`;i.options.baseURL=c,i.baseURL=c}i.trustedOrigins=[...e.trustedOrigins||[],i.baseURL,a.origin];let{handler:u}=fr(i,e);return u(n)},api:r,options:e,$context:t,$Infer:{}}};0&&(module.exports={BetterAuthError,HIDE_METADATA,MissingDependencyError,betterAuth,capitalizeFirstLetter,createCookieGetter,createLogger,deleteSessionCookie,generateId,generateState,getCookies,levels,logger,parseCookies,parseSetCookieHeader,parseState,setSessionCookie,shouldPublishLog});
+</html>`,sr=k("/error",{method:"GET",metadata:{...W,openapi:{description:"Displays an error page",responses:{200:{description:"Success",content:{"text/html":{schema:{type:"string"}}}}}}}},async e=>{let t=new URL(e.request?.url||"").searchParams.get("error")||"Unknown";return new Response(Kr(t),{headers:{"Content-Type":"text/html"}})});var ar=k("/ok",{method:"GET",metadata:{...W,openapi:{description:"Check if the API is working",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{ok:{type:"boolean"}}}}}}}}}},async e=>e.json({ok:!0}));var Z=require("zod");var V=require("better-call");var dr=()=>k("/sign-up/email",{method:"POST",query:Z.z.object({currentURL:Z.z.string().optional()}).optional(),body:Z.z.record(Z.z.string(),Z.z.any()),metadata:{openapi:{description:"Sign up a user using email and password",requestBody:{content:{"application/json":{schema:{type:"object",properties:{name:{type:"string",description:"The name of the user"},email:{type:"string",description:"The email of the user"},password:{type:"string",description:"The password of the user"},callbackURL:{type:"string",description:"The URL to use for email verification callback"}},required:["name","email","password"]}}}},responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{user:{type:"object"},session:{type:"object"}}}}}}}}}},async e=>{if(!e.context.options.emailAndPassword?.enabled)throw new V.APIError("BAD_REQUEST",{message:"Email and password sign up is not enabled"});let t=e.body,{name:r,email:n,password:i,image:o,callbackURL:a,...u}=t;if(!Z.z.string().email().safeParse(n).success)throw new V.APIError("BAD_REQUEST",{message:"Invalid email"});let s=e.context.password.config.minPasswordLength;if(i.length<s)throw e.context.logger.error("Password is too short"),new V.APIError("BAD_REQUEST",{message:"Password is too short"});let d=e.context.password.config.maxPasswordLength;if(i.length>d)throw e.context.logger.error("Password is too long"),new V.APIError("BAD_REQUEST",{message:"Password is too long"});if((await e.context.internalAdapter.findUserByEmail(n))?.user)throw e.context.logger.info(`Sign-up attempt for existing email: ${n}`),new V.APIError("UNPROCESSABLE_ENTITY",{message:"User with this email already exists"});let p=Re(e.context.options,u),m;try{if(m=await e.context.internalAdapter.createUser({email:n.toLowerCase(),name:r,image:o,...p,emailVerified:!1}),!m)throw new V.APIError("BAD_REQUEST",{message:"Failed to create user"})}catch(h){throw e.context.logger.error("Failed to create user",h),new V.APIError("UNPROCESSABLE_ENTITY",{message:"Failed to create user",details:h})}if(!m)throw new V.APIError("UNPROCESSABLE_ENTITY",{message:"Failed to create user"});let f=await e.context.password.hash(i);if(await e.context.internalAdapter.linkAccount({userId:m.id,providerId:"credential",accountId:m.id,password:f}),e.context.options.emailVerification?.sendOnSignUp){let h=await z(e.context.secret,m.email),y=`${e.context.baseURL}/verify-email?token=${h}&callbackURL=${t.callbackURL||e.query?.currentURL||"/"}`;await e.context.options.emailVerification?.sendVerificationEmail?.({user:m,url:y,token:h},e.request)}if(!e.context.options.emailAndPassword.autoSignIn||e.context.options.emailAndPassword.requireEmailVerification)return e.json({user:m,session:null});let g=await e.context.internalAdapter.createSession(m.id,e.request);if(!g)throw new V.APIError("BAD_REQUEST",{message:"Failed to create session"});return await P(e,{session:g,user:m}),e.json({user:m,session:g})});var te=require("zod");var Fe=require("better-call");var cr=k("/list-accounts",{method:"GET",use:[D],metadata:{openapi:{description:"List all accounts linked to the user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"array",items:{type:"object",properties:{id:{type:"string"},provider:{type:"string"}}}}}}}}}}},async e=>{let t=e.context.session,r=await e.context.internalAdapter.findAccounts(t.user.id);return e.json(r.map(n=>({id:n.id,provider:n.providerId})))}),ur=k("/link-social",{method:"POST",requireHeaders:!0,query:te.z.object({currentURL:te.z.string().optional()}).optional(),body:te.z.object({callbackURL:te.z.string({description:"The URL to redirect to after the user has signed in"}).optional(),provider:te.z.enum(we,{description:"The OAuth2 provider to use"})}),use:[D],metadata:{openapi:{description:"Link a social account to the user",responses:{200:{description:"Success",content:{"application/json":{schema:{type:"object",properties:{url:{type:"string"},redirect:{type:"boolean"}},required:["url","redirect"]}}}}}}}},async e=>{let t=e.context.session;if((await e.context.internalAdapter.findAccounts(t.user.id)).find(u=>u.providerId===e.body.provider))throw new Fe.APIError("BAD_REQUEST",{message:"Social Account is already linked."});let i=e.context.socialProviders.find(u=>u.id===e.body.provider);if(!i)throw e.context.logger.error("Provider not found. Make sure to add the provider in your auth config",{provider:e.body.provider}),new Fe.APIError("NOT_FOUND",{message:"Provider not found"});let o=await ae(e,{userId:t.user.id,email:t.user.email}),a=await i.createAuthorizationURL({state:o.state,codeVerifier:o.codeVerifier,redirectURI:`${e.context.baseURL}/callback/${i.id}`});return e.json({url:a.toString(),redirect:!0})});function Ue(e,t){if(t.advanced?.ipAddress?.disableIpTracking)return null;let r="127.0.0.1";if(Je)return r;let i=t.advanced?.ipAddress?.ipAddressHeaders||["x-client-ip","x-forwarded-for","cf-connecting-ip","fastly-client-ip","x-real-ip","x-cluster-client-ip","x-forwarded","forwarded-for","forwarded"],o=e instanceof Request?e.headers:e;for(let a of i){let u=o.get(a);if(typeof u=="string"){let c=u.split(",")[0].trim();if(c)return c}}return null}function Wr(e,t,r){let n=Date.now(),i=t*1e3;return n-r.lastRequest<i&&r.count>=e}function Zr(e){return new Response(JSON.stringify({message:"Too many requests. Please try again later."}),{status:429,statusText:"Too Many Requests",headers:{"X-Retry-After":e.toString()}})}function Qr(e,t){let r=Date.now(),n=t*1e3;return Math.ceil((e+n-r)/1e3)}function Jr(e,t){let r="rateLimit",n=e.adapter;return{get:async i=>await n.findOne({model:r,where:[{field:"key",value:i}]}),set:async(i,o,a)=>{try{a?await n.update({model:t??"rateLimit",where:[{field:"key",value:i}],update:{count:o.count,lastRequest:o.lastRequest}}):await n.create({model:t??"rateLimit",data:{key:i,count:o.count,lastRequest:o.lastRequest}})}catch(u){e.logger.error("Error setting rate limit",u)}}}}var lr=new Map;function Yr(e){return e.rateLimit.storage==="secondary-storage"?{get:async r=>{let n=await e.options.secondaryStorage?.get(r);return n?JSON.parse(n):void 0},set:async(r,n)=>{await e.options.secondaryStorage?.set?.(r,JSON.stringify(n))}}:e.rateLimit.storage==="memory"?{async get(r){return lr.get(r)},async set(r,n,i){lr.set(r,n)}}:Jr(e,e.rateLimit.modelName)}async function pr(e,t){if(!t.rateLimit.enabled)return;let r=t.baseURL,n=e.url.replace(r,"").split("?")[0],i=t.rateLimit.window,o=t.rateLimit.max,a=Ue(e,t.options)+n,c=Xr().find(p=>p.pathMatcher(n));c&&(i=c.window,o=c.max);for(let p of t.options.plugins||[])if(p.rateLimit){let m=p.rateLimit.find(f=>f.pathMatcher(n));if(m){i=m.window,o=m.max;break}}if(t.rateLimit.customRules){let p=t.rateLimit.customRules[n];p&&(i=p.window,o=p.max)}let s=Yr(t),d=await s.get(a),l=Date.now();if(!d)await s.set(a,{key:a,count:1,lastRequest:l});else{let p=l-d.lastRequest;if(Wr(o,i,d)){let m=Qr(d.lastRequest,i);return Zr(m)}else p>i*1e3?await s.set(a,{...d,count:1,lastRequest:l}):await s.set(a,{...d,count:d.count+1,lastRequest:l})}}function Xr(){return[{pathMatcher(t){return t.startsWith("/sign-in")||t.startsWith("/sign-up")||t.startsWith("/change-password")||t.startsWith("/change-email")},window:10,max:3}]}var en=require("better-call");function Ve(e,t){let r=t.plugins?.reduce((u,c)=>({...u,...c.endpoints}),{}),n=t.plugins?.map(u=>u.middlewares?.map(c=>{let s=async d=>c.middleware({...d,context:{...e,...d.context}});return s.path=c.path,s.options=c.middleware.options,s.headers=c.middleware.headers,{path:c.path,middleware:s}})).filter(u=>u!==void 0).flat()||[],o={...{signInSocial:Mt,callbackOAuth:Gt,getSession:Ne(),signOut:Wt,signUpEmail:dr(),signInEmail:Ht,forgetPassword:Qt,resetPassword:Yt,verifyEmail:zt,sendVerificationEmail:$t,changeEmail:ir,changePassword:rr,setPassword:nr,updateUser:tr(),deleteUser:or,forgetPasswordCallback:Jt,listSessions:Nt(),revokeSession:qt,revokeSessions:jt,revokeOtherSessions:Ft,linkSocialAccount:ur,listUserAccounts:cr},...r,ok:ar,error:sr},a={};for(let[u,c]of Object.entries(o))a[u]=async(s={})=>{c.headers=new Headers;let d={setHeader(h,y){c.headers.set(h,y)},setCookie(h,y,w){(0,T.setCookie)(c.headers,h,y,w)},getCookie(h,y){let b=s.headers?.get("cookie");return(0,T.getCookie)(b||"",h,y)},getSignedCookie(h,y,w){let b=s.headers;return b?(0,T.getSignedCookie)(b,y,h,w):null},async setSignedCookie(h,y,w,b){await(0,T.setSignedCookie)(c.headers,h,y,w,b)},redirect(h){return c.headers.set("Location",h),new T.APIError("FOUND")},responseHeader:c.headers},l=await e,p={...d,...s,path:c.path,context:{...l,...s.context,endpoint:c}};l.session=null;let m=t.plugins||[];for(let h of m){let y=h.hooks?.before??[];for(let w of y){if(!w.matcher(p))continue;let b=await w.handler(p);if(b&&"context"in b){p={...p,...b.context};continue}if(b)return b}}let f;try{f=await c(p)}catch(h){if(h instanceof T.APIError){let y=t.plugins?.map(w=>{if(w.hooks?.after)return w.hooks.after}).filter(w=>w!==void 0).flat();if(!y?.length)throw h.headers=c.headers,h;p.context.returned=h,p.context.returned.headers=c.headers;for(let w of y||[])if(w.matcher(p))try{let U=await w.handler(p);U&&"response"in U&&(p.context.returned=U.response)}catch(U){if(U instanceof T.APIError){p.context.returned=U;continue}throw U}if(p.context.returned instanceof T.APIError)throw p.context.returned.headers=c.headers,p.context.returned;return p.context.returned}throw h}p.context.returned=f,p.responseHeader=c.headers;for(let h of t.plugins||[])if(h.hooks?.after){for(let y of h.hooks.after)if(y.matcher(p))try{let b=await y.handler(p);b&&(p.context.returned=b)}catch(b){if(b instanceof T.APIError){p.context.returned=b;continue}throw b}}let g=p.context.returned;return g instanceof Response&&c.headers.forEach((h,y)=>{y==="set-cookie"?g.headers.append(y,h):g.headers.set(y,h)}),g},a[u].path=c.path,a[u].method=c.method,a[u].options=c.options,a[u].headers=c.headers;return{api:a,middlewares:n}}var fr=(e,t)=>{let{api:r,middlewares:n}=Ve(e,t),i=new URL(e.baseURL).pathname;return(0,T.createRouter)(r,{extraContext:e,basePath:i,routerMiddleware:[{path:"/**",middleware:Ze},...n],async onRequest(o){for(let a of e.options.plugins||[])if(a.onRequest){let u=await a.onRequest(o,e);if(u&&"response"in u)return u.response}return pr(o,e)},async onResponse(o){for(let a of e.options.plugins||[])if(a.onResponse){let u=await a.onResponse(o,e);if(u)return u.response}return o},onError(o){if(o instanceof T.APIError&&o.status==="FOUND")return;if(t.onAPIError?.throw)throw o;if(t.onAPIError?.onError){t.onAPIError.onError(o,e);return}let a=t.logger?.level,u=a==="error"||a==="warn"||a==="debug"?I:void 0;if(t.logger?.disabled!==!0){if(o&&typeof o=="object"&&"message"in o&&typeof o.message=="string"&&(o.message.includes("no column")||o.message.includes("column")||o.message.includes("relation")||o.message.includes("table")||o.message.includes("does not exist"))){e.logger?.error(o.message),e.logger?.error("If you are seeing this error, it is likely that you need to run the migrations for the database or you need to update your database schema. If you recently updated the package, make sure to run the migrations.");return}o instanceof T.APIError?(o.status==="INTERNAL_SERVER_ERROR"&&e.logger.error(o.status,o),u?.error(o.message)):e.logger?.error(o&&typeof o=="object"&&"name"in o?o.name:"",o)}}})};var Ur=require("defu");var ce=require("oslo/encoding");var mr=require("@noble/hashes/scrypt"),gr=require("uncrypto"),re={N:16384,r:16,p:1,dkLen:64};async function hr(e,t){return await(0,mr.scryptAsync)(e.normalize("NFKC"),t,{N:re.N,p:re.p,r:re.r,dkLen:re.dkLen,maxmem:128*re.N*re.r*2})}var yr=async e=>{let t=(0,ce.encodeHex)((0,gr.getRandomValues)(new Uint8Array(16))),r=await hr(e,t);return`${t}:${(0,ce.encodeHex)(r)}`},wr=async({hash:e,password:t})=>{let[r,n]=e.split(":"),i=await hr(t,r);return Ie(i,(0,ce.decodeHex)(n))};function br(e,t){let r=t.hooks;async function n(a,u,c){let s=a;for(let p of r||[]){let m=p[u]?.create?.before;if(m){let f=await m(a);if(f===!1)return null;typeof f=="object"&&"data"in f&&(s=f.data)}}let d=c?await c.fn(s):null,l=!c||c.executeMainFn?await e.create({model:u,data:s}):d;for(let p of r||[]){let m=p[u]?.create?.after;m&&await m(l)}return l}async function i(a,u,c,s){let d=a;for(let m of r||[]){let f=m[c]?.update?.before;if(f){let g=await f(a);if(g===!1)return null;d=typeof g=="object"?g.data:g}}let l=s?await s.fn(d):null,p=!s||s.executeMainFn?await e.update({model:c,update:d,where:u}):l;for(let m of r||[]){let f=m[c]?.update?.after;f&&await f(p)}return p}async function o(a,u,c,s){let d=a;for(let m of r||[]){let f=m[c]?.update?.before;if(f){let g=await f(a);if(g===!1)return null;d=typeof g=="object"?g.data:g}}let l=s?await s.fn(d):null,p=!s||s.executeMainFn?await e.updateMany({model:c,update:d,where:u}):l;for(let m of r||[]){let f=m[c]?.update?.after;f&&await f(p)}return p}return{createWithHooks:n,updateWithHooks:i,updateManyWithHooks:o}}var $e=(e,t)=>{let r=t.options,n=r.secondaryStorage,i=r.session?.expiresIn||60*60*24*7,{createWithHooks:o,updateWithHooks:a,updateManyWithHooks:u}=br(e,t),c=async s=>{await n?.set(s.token,JSON.stringify({session:s.session,user:s.user}),s.session.expiresAt?Math.floor(((s.session.expiresAt instanceof Date?s.session.expiresAt.getTime():new Date(s.session.expiresAt).getTime())-Date.now())/1e3):i)};return{createOAuthUser:async(s,d)=>{try{let l=await o({createdAt:new Date,updatedAt:new Date,...s},"user"),p=await o({...d,userId:l.id||s.id,createdAt:new Date,updatedAt:new Date},"account");return{user:l,account:p}}catch(l){return console.log(l),null}},createUser:async s=>await o({createdAt:new Date,updatedAt:new Date,emailVerified:!1,...s},"user"),createAccount:async s=>await o({createdAt:new Date,updatedAt:new Date,...s},"account"),listSessions:async s=>{if(n){let l=await n.get(`active-sessions-${s}`);if(!l)return[];let p=J(l)||[],m=Date.now(),f=p.filter(h=>h.expiresAt>m),g=[];for(let h of f){let y=await n.get(h.token);if(y){let w=JSON.parse(y),b=ve(t.options,{...w.session,expiresAt:new Date(w.session.expiresAt)});g.push(b)}}return g}return await e.findMany({model:"session",where:[{field:"userId",value:s}]})},listUsers:async(s,d,l,p)=>await e.findMany({model:"user",limit:s,offset:d,sortBy:l,where:p}),deleteUser:async s=>{await e.deleteMany({model:"session",where:[{field:"userId",value:s}]}),await e.deleteMany({model:"account",where:[{field:"userId",value:s}]}),await e.delete({model:"user",where:[{field:"id",value:s}]})},createSession:async(s,d,l,p)=>{let m=d instanceof Request?d.headers:d,{id:f,...g}=p||{},h={ipAddress:d&&Ue(d,t.options)||"",userAgent:m?.get("user-agent")||"",...g,expiresAt:l?N(60*60*24,"sec"):N(i,"sec"),userId:s,token:q(32),createdAt:new Date,updatedAt:new Date};return await o(h,"session",n?{fn:async()=>{let w=await e.findOne({model:"user",where:[{field:"id",value:s}]});n.set(h.token,JSON.stringify({session:h,user:w}),i);let b=await n.get(`active-sessions-${s}`),U=[],Ge=Date.now();return b&&(U=J(b)||[],U=U.filter(Er=>Er.expiresAt>Ge)),U.push({token:h.token,expiresAt:Ge+i*1e3}),await n.set(`active-sessions-${s}`,JSON.stringify(U),i),h},executeMainFn:r.session?.storeSessionInDatabase}:void 0)},findSession:async s=>{if(n){let f=await n.get(s);if(f){let g=JSON.parse(f),h=ve(t.options,{...g.session,expiresAt:new Date(g.session.expiresAt),createdAt:new Date(g.session.createdAt),updatedAt:new Date(g.session.updatedAt)}),y=je(t.options,{...g.user,createdAt:new Date(g.user.createdAt),updatedAt:new Date(g.user.updatedAt)});return{session:h,user:y}}}let d=await e.findOne({model:"session",where:[{value:s,field:"token"}]});if(!d)return null;let l=await e.findOne({model:"user",where:[{value:d.userId,field:"id"}]});if(!l)return null;let p=ve(t.options,d),m=je(t.options,l);return n&&await c({token:s,user:m,session:p}),{session:p,user:m}},findSessions:async s=>{if(n){let m=[];for(let f of s){let g=await n.get(f);if(g){let h=JSON.parse(g),y={session:{...h.session,expiresAt:new Date(h.session.expiresAt)},user:{...h.user,createdAt:new Date(h.user.createdAt),updatedAt:new Date(h.user.updatedAt)}};m.push(y)}}return m}let d=await e.findMany({model:"session",where:[{field:"token",value:s,operator:"in"}]}),l=d.map(m=>m.userId);if(!l.length)return[];let p=await e.findMany({model:"user",where:[{field:"id",value:l,operator:"in"}]});return d.map(m=>{let f=p.find(g=>g.id===m.userId);return f?{session:m,user:f}:null})},updateSession:async(s,d)=>await a(d,[{field:"token",value:s}],"session",n?{async fn(p){let m=await n.get(s),f=null;if(m){let g=JSON.parse(m);return f={...g.session,...p},await c({token:s,user:g.user,session:f}),f}else return null},executeMainFn:r.session?.storeSessionInDatabase}:void 0),deleteSession:async s=>{if(n){await n.delete(s),r.session?.storeSessionInDatabase&&await e.delete({model:"session",where:[{field:"token",value:s}]});return}await e.delete({model:"session",where:[{field:"token",value:s}]})},deleteSessions:async s=>{if(n){if(typeof s=="string"){let d=await n.get(`active-sessions-${s}`),l=d?J(d):[];if(!l)return;for(let p of l)await n.delete(p.token)}else for(let d of s)await n.get(d)&&await n.delete(d);r.session?.storeSessionInDatabase&&await e.deleteMany({model:"session",where:[{field:Array.isArray(s)?"token":"userId",value:s,operator:Array.isArray(s)?"in":void 0}]});return}await e.deleteMany({model:"session",where:[{field:Array.isArray(s)?"token":"userId",value:s,operator:Array.isArray(s)?"in":void 0}]})},findUserByEmail:async(s,d)=>{let l=await e.findOne({model:"user",where:[{value:s.toLowerCase(),field:"email"}]});if(!l)return null;if(d?.includeAccounts){let p=await e.findMany({model:"account",where:[{value:l.id,field:"userId"}]});return{user:l,accounts:p}}return{user:l,accounts:[]}},findUserById:async s=>await e.findOne({model:"user",where:[{field:"id",value:s}]}),linkAccount:async s=>await o({...s,createdAt:new Date,updatedAt:new Date},"account"),updateUser:async(s,d)=>await a(d,[{field:"id",value:s}],"user"),updateUserByEmail:async(s,d)=>await a(d,[{field:"email",value:s}],"user"),updatePassword:async(s,d)=>{await u({password:d},[{field:"userId",value:s},{field:"providerId",value:"credential"}],"account")},findAccounts:async s=>await e.findMany({model:"account",where:[{field:"userId",value:s}]}),findAccount:async s=>await e.findOne({model:"account",where:[{field:"accountId",value:s}]}),findAccountByUserId:async s=>await e.findMany({model:"account",where:[{field:"userId",value:s}]}),updateAccount:async(s,d)=>await a(d,[{field:"id",value:s}],"account"),createVerificationValue:async s=>await o({createdAt:new Date,updatedAt:new Date,...s},"verification"),findVerificationValue:async s=>(await e.findMany({model:"verification",where:[{field:"identifier",value:s}],sortBy:{field:"createdAt",direction:"desc"},limit:10}))[0],deleteVerificationValue:async s=>{await e.delete({model:"verification",where:[{field:"id",value:s}]})},deleteVerificationByIdentifier:async s=>{await e.delete({model:"verification",where:[{field:"identifier",value:s}]})},updateVerificationValue:async(s,d)=>await a(d,[{field:"id",value:s}],"verification")}};var M=e=>{let t=e.plugins?.reduce((c,s)=>{let d=s.schema;if(!d)return c;for(let[l,p]of Object.entries(d))c[l]={fields:{...c[l]?.fields,...p.fields},modelName:p.modelName||l};return c},{}),r=e.rateLimit?.storage==="database",n={rateLimit:{modelName:e.rateLimit?.modelName||"rateLimit",fields:{key:{type:"string",fieldName:e.rateLimit?.fields?.key||"key"},count:{type:"number",fieldName:e.rateLimit?.fields?.count||"count"},lastRequest:{type:"number",fieldName:e.rateLimit?.fields?.lastRequest||"lastRequest"}}}},{user:i,session:o,account:a,...u}=t||{};return{user:{modelName:e.user?.modelName||"user",fields:{name:{type:"string",required:!0,fieldName:e.user?.fields?.name||"name"},email:{type:"string",unique:!0,required:!0,fieldName:e.user?.fields?.email||"email"},emailVerified:{type:"boolean",defaultValue:()=>!1,required:!0,fieldName:e.user?.fields?.emailVerified||"emailVerified"},image:{type:"string",required:!1,fieldName:e.user?.fields?.image||"image"},createdAt:{type:"date",defaultValue:()=>new Date,required:!0,fieldName:e.user?.fields?.createdAt||"createdAt"},updatedAt:{type:"date",defaultValue:()=>new Date,required:!0,fieldName:e.user?.fields?.updatedAt||"updatedAt"},...i?.fields,...e.user?.additionalFields},order:1},session:{modelName:e.session?.modelName||"session",fields:{expiresAt:{type:"date",required:!0,fieldName:e.session?.fields?.expiresAt||"expiresAt"},token:{type:"string",required:!0,fieldName:e.session?.fields?.token||"token",unique:!0},createdAt:{type:"date",required:!0,fieldName:e.session?.fields?.createdAt||"createdAt"},updatedAt:{type:"date",required:!0,fieldName:e.session?.fields?.updatedAt||"updatedAt"},ipAddress:{type:"string",required:!1,fieldName:e.session?.fields?.ipAddress||"ipAddress"},userAgent:{type:"string",required:!1,fieldName:e.session?.fields?.userAgent||"userAgent"},userId:{type:"string",fieldName:e.session?.fields?.userId||"userId",references:{model:e.user?.modelName||"user",field:"id",onDelete:"cascade"},required:!0},...o?.fields,...e.session?.additionalFields},order:2},account:{modelName:e.account?.modelName||"account",fields:{accountId:{type:"string",required:!0,fieldName:e.account?.fields?.accountId||"accountId"},providerId:{type:"string",required:!0,fieldName:e.account?.fields?.providerId||"providerId"},userId:{type:"string",references:{model:e.user?.modelName||"user",field:"id",onDelete:"cascade"},required:!0,fieldName:e.account?.fields?.userId||"userId"},accessToken:{type:"string",required:!1,fieldName:e.account?.fields?.accessToken||"accessToken"},refreshToken:{type:"string",required:!1,fieldName:e.account?.fields?.refreshToken||"refreshToken"},idToken:{type:"string",required:!1,fieldName:e.account?.fields?.idToken||"idToken"},accessTokenExpiresAt:{type:"date",required:!1,fieldName:e.account?.fields?.accessTokenExpiresAt||"accessTokenExpiresAt"},refreshTokenExpiresAt:{type:"date",required:!1,fieldName:e.account?.fields?.accessTokenExpiresAt||"refreshTokenExpiresAt"},scope:{type:"string",required:!1,fieldName:e.account?.fields?.scope||"scope"},password:{type:"string",required:!1,fieldName:e.account?.fields?.password||"password"},createdAt:{type:"date",required:!0,fieldName:e.account?.fields?.createdAt||"createdAt"},updatedAt:{type:"date",required:!0,fieldName:e.account?.fields?.updatedAt||"updatedAt"},...a?.fields},order:3},verification:{modelName:e.verification?.modelName||"verification",fields:{identifier:{type:"string",required:!0,fieldName:e.verification?.fields?.identifier||"identifier"},value:{type:"string",required:!0,fieldName:e.verification?.fields?.value||"value"},expiresAt:{type:"date",required:!0,fieldName:e.verification?.fields?.expiresAt||"expiresAt"},createdAt:{type:"date",required:!1,defaultValue:()=>new Date,fieldName:e.verification?.fields?.createdAt||"createdAt"},updatedAt:{type:"date",required:!1,defaultValue:()=>new Date,fieldName:e.verification?.fields?.updatedAt||"updatedAt"}},order:4},...u,...r?n:{}}};var tn=require("zod");var ue=require("kysely"),H=require("kysely");function Ar(e){if(!e)return null;if("dialect"in e)return Ar(e.dialect);if("createDriver"in e){if(e instanceof H.SqliteDialect)return"sqlite";if(e instanceof H.MysqlDialect)return"mysql";if(e instanceof H.PostgresDialect)return"postgres";if(e instanceof ue.MssqlDialect)return"mssql"}return"aggregate"in e?"sqlite":"getConnection"in e?"mysql":"connect"in e?"postgres":null}var ze=async e=>{let t=e.database;if(!t)return{kysely:null,databaseType:null};if("db"in t)return{kysely:t.db,databaseType:t.type};if("dialect"in t)return{kysely:new ue.Kysely({dialect:t.dialect}),databaseType:t.type};let r,n=Ar(t);return"createDriver"in t&&(r=t),"aggregate"in t&&(r=new H.SqliteDialect({database:t})),"getConnection"in t&&(r=new H.MysqlDialect(t)),"connect"in t&&(r=new H.PostgresDialect({pool:t})),{kysely:r?new ue.Kysely({dialect:r}):null,databaseType:n}};function Te(e,t,r){return r==="update"?e:e==null&&t.defaultValue?typeof t.defaultValue=="function"?t.defaultValue():t.defaultValue:e}var rn=(e,t,r)=>{let n=M(t);function i(s,d){if(d==="id")return d;let l=n[s].fields[d];return l||console.log("Field not found",s,d),l.fieldName||d}function o(s,d,l){let{type:p="sqlite"}=r||{},m=n[d].fields[l];return m.type==="boolean"&&p==="sqlite"&&s!==null&&s!==void 0?s?1:0:m.type==="date"&&s&&s instanceof Date&&p==="sqlite"?s.toISOString():s}function a(s,d,l){let{type:p="sqlite"}=r||{},m=n[d].fields[l];return m.type==="boolean"&&p==="sqlite"&&s!==null?s===1:m.type==="date"&&s?new Date(s):s}function u(s){return n[s].modelName}let c=t?.advanced?.generateId===!1;return{transformInput(s,d,l){let p=c||l==="update"?{}:{id:t.advanced?.generateId?t.advanced.generateId({model:d}):s.id||q()},m=n[d].fields;for(let f in m){let g=s[f];p[m[f].fieldName||f]=Te(o(g,d,f),m[f],l)}return p},transformOutput(s,d,l=[]){if(!s)return null;let p=s.id?l.length===0||l.includes("id")?{id:s.id}:{}:{},m=n[d].fields;for(let f in m){if(l.length&&!l.includes(f))continue;let g=m[f];g&&(p[f]=a(s[g.fieldName||f],d,f))}return p},convertWhereClause(s,d){if(!d)return{and:null,or:null};let l={and:[],or:[]};return d.forEach(p=>{let{field:m,value:f,operator:g="=",connector:h="AND"}=p,y=i(s,m),w=b=>g.toLowerCase()==="in"?b(y,"in",Array.isArray(f)?f:[f]):g==="contains"?b(y,"like",`%${f}%`):g==="starts_with"?b(y,"like",`${f}%`):g==="ends_with"?b(y,"like",`%${f}`):g==="eq"?b(y,"=",f):g==="ne"?b(y,"<>",f):g==="gt"?b(y,">",f):g==="gte"?b(y,">=",f):g==="lt"?b(y,"<",f):g==="lte"?b(y,"<=",f):b(y,g,f);h==="OR"?l.or.push(w):l.and.push(w)}),{and:l.and.length?l.and:null,or:l.or.length?l.or:null}},async withReturning(s,d,l,p){let m;if(r?.type!=="mysql")m=await d.returningAll().executeTakeFirst();else{await d.execute();let f=s.id?"id":p[0].field?p[0].field:"id",g=s[f]||p[0].value;m=await e.selectFrom(u(l)).selectAll().where(i(l,f),"=",g).executeTakeFirst()}return m},getModelName:u,getField:i}},kr=(e,t)=>r=>{let{transformInput:n,withReturning:i,transformOutput:o,convertWhereClause:a,getModelName:u,getField:c}=rn(e,r,t);return{id:"kysely",async create(s){let{model:d,data:l,select:p}=s,m=n(l,d,"create"),f=e.insertInto(u(d)).values(m);return o(await i(m,f,d,[]),d,p)},async findOne(s){let{model:d,where:l,select:p}=s,{and:m,or:f}=a(d,l),g=e.selectFrom(u(d)).selectAll();m&&(g=g.where(y=>y.and(m.map(w=>w(y))))),f&&(g=g.where(y=>y.or(f.map(w=>w(y)))));let h=await g.executeTakeFirst();return h?o(h,d,p):null},async findMany(s){let{model:d,where:l,limit:p,offset:m,sortBy:f}=s,{and:g,or:h}=a(d,l),y=e.selectFrom(u(d));g&&(y=y.where(b=>b.and(g.map(U=>U(b))))),h&&(y=y.where(b=>b.or(h.map(U=>U(b))))),y=y.limit(p||100),m&&(y=y.offset(m)),f&&(y=y.orderBy(c(d,f.field),f.direction));let w=await y.selectAll().execute();return w?w.map(b=>o(b,d)):[]},async update(s){let{model:d,where:l,update:p}=s,{and:m,or:f}=a(d,l),g=n(p,d,"update"),h=e.updateTable(u(d)).set(g);return m&&(h=h.where(w=>w.and(m.map(b=>b(w))))),f&&(h=h.where(w=>w.or(f.map(b=>b(w))))),await o(await i(g,h,d,l),d)},async updateMany(s){let{model:d,where:l,update:p}=s,{and:m,or:f}=a(d,l),g=n(p,d,"update"),h=e.updateTable(u(d)).set(g);return m&&(h=h.where(w=>w.and(m.map(b=>b(w))))),f&&(h=h.where(w=>w.or(f.map(b=>b(w))))),(await h.execute()).length},async delete(s){let{model:d,where:l}=s,{and:p,or:m}=a(d,l),f=e.deleteFrom(u(d));p&&(f=f.where(g=>g.and(p.map(h=>h(g))))),m&&(f=f.where(g=>g.or(m.map(h=>h(g))))),await f.execute()},async deleteMany(s){let{model:d,where:l}=s,{and:p,or:m}=a(d,l),f=e.deleteFrom(u(d));return p&&(f=f.where(g=>g.and(p.map(h=>h(g))))),m&&(f=f.where(g=>g.or(m.map(h=>h(g))))),(await f.execute()).length},options:t}};var nn=e=>{let t=M(e);function r(n,i){return i==="id"?i:t[n].fields[i].fieldName||i}return{transformInput(n,i,o){let a=o==="update"?{}:{id:e.advanced?.generateId?e.advanced.generateId({model:i}):n.id||q()},u=t[i].fields;for(let c in u){let s=n[c];s===void 0&&!u[c].defaultValue||(a[u[c].fieldName||c]=Te(s,u[c],o))}return a},transformOutput(n,i,o=[]){if(!n)return null;let a=n.id||n._id?o.length===0||o.includes("id")?{id:n.id}:{}:{},u=t[i].fields;for(let c in u){if(o.length&&!o.includes(c))continue;let s=u[c];s&&(a[c]=n[s.fieldName||c])}return a},convertWhereClause(n,i,o){return i.filter(a=>n.every(u=>{let{field:c,value:s,operator:d}=u,l=r(o,c);if(d==="in"){if(!Array.isArray(s))throw new Error("Value must be an array");return s.includes(a[l])}else return d==="contains"?a[l].includes(s):d==="starts_with"?a[l].startsWith(s):d==="ends_with"?a[l].endsWith(s):a[l]===s}))},getField:r}},xr=e=>t=>{let{transformInput:r,transformOutput:n,convertWhereClause:i,getField:o}=nn(t);return{id:"memory",create:async({model:a,data:u})=>{let c=r(u,a,"create");return e[a].push(c),n(c,a)},findOne:async({model:a,where:u,select:c})=>{let s=e[a],l=i(u,s,a)[0]||null;return n(l,a,c)},findMany:async({model:a,where:u,sortBy:c,limit:s,offset:d})=>{let l=e[a];return u&&(l=i(u,l,a)),c&&(l=l.sort((p,m)=>{let f=o(a,c.field);return c.direction==="asc"?p[f]>m[f]?1:-1:p[f]<m[f]?1:-1})),d!==void 0&&(l=l.slice(d)),s!==void 0&&(l=l.slice(0,s)),l.map(p=>n(p,a))},update:async({model:a,where:u,update:c})=>{let s=e[a],d=i(u,s,a);return d.forEach(l=>{Object.assign(l,r(c,a,"update"))}),n(d[0],a)},delete:async({model:a,where:u})=>{let c=e[a],s=i(u,c,a);e[a]=c.filter(d=>!s.includes(d))},deleteMany:async({model:a,where:u})=>{let c=e[a],s=i(u,c,a),d=0;return e[a]=c.filter(l=>s.includes(l)?(d++,!1):!s.includes(l)),d},updateMany(a){let{model:u,where:c,update:s}=a,d=e[u],l=i(c,d,u);return l.forEach(p=>{Object.assign(p,s)}),l[0]||null}}};async function vr(e){if(!e.database){let n=M(e),i=Object.keys(n).reduce((o,a)=>(o[a]=[],o),{});return I.warn("No database configuration provided. Using memory adapter in development"),xr(i)(e)}if(typeof e.database=="function")return e.database(e);let{kysely:t,databaseType:r}=await ze(e);if(!t)throw new L("Failed to initialize database adapter");return kr(t,{type:r||"sqlite"})(e)}var Me="better-auth-secret-123456789";var He=require("better-call");async function Rr(e,t){let n=(await t.context.internalAdapter.findAccounts(e))?.find(a=>a.providerId==="credential"),i=n?.password;if(!n||!i||!t.body.password)throw new He.APIError("BAD_REQUEST",{message:"No password credential found"});if(!await t.context.password.verify({hash:i,password:t.body.password}))throw new He.APIError("BAD_REQUEST",{message:"Invalid password"});return!0}var Tr=async e=>{let t=await vr(e),r=e.plugins||[],n=sn(e),i=de(e.logger),o=se(e.baseURL,e.basePath),a=e.secret||_.BETTER_AUTH_SECRET||_.AUTH_SECRET||Me;a===Me&&ie&&i.error("You are using the default secret. Please set `BETTER_AUTH_SECRET` in your environment variables or pass `secret` in your auth config."),e={...e,secret:a,baseURL:o?new URL(o).origin:"",basePath:e.basePath||"/api/auth",plugins:r.concat(n),emailAndPassword:{...e.emailAndPassword,enabled:e.emailAndPassword?.enabled??!1,autoSignIn:e.emailAndPassword?.autoSignIn??!0}};let u=Pe(e),c=M(e),s=Object.keys(e.socialProviders||{}).map(m=>{let f=e.socialProviders?.[m];return f.enabled===!1?null:((!f.clientId||!f.clientSecret)&&i.warn(`Social provider ${m} is missing clientId or clientSecret`),Be[m](f))}).filter(m=>m!==null),d=({model:m,size:f})=>typeof e?.advanced?.generateId=="function"?e.advanced.generateId({model:m,size:f}):q(f),l={appName:e.appName||"Better Auth",socialProviders:s,options:e,tables:c,trustedOrigins:an(e),baseURL:o||"",sessionConfig:{updateAge:e.session?.updateAge!==void 0?e.session.updateAge:24*60*60,expiresIn:e.session?.expiresIn||60*60*24*7,freshAge:e.session?.freshAge||60*5},secret:a,rateLimit:{...e.rateLimit,enabled:e.rateLimit?.enabled??ie,window:e.rateLimit?.window||10,max:e.rateLimit?.max||100,storage:e.rateLimit?.storage||e.secondaryStorage?"secondary-storage":"memory"},authCookies:u,logger:i,generateId:d,session:null,secondaryStorage:e.secondaryStorage,password:{hash:e.emailAndPassword?.password?.hash||yr,verify:e.emailAndPassword?.password?.verify||wr,config:{minPasswordLength:e.emailAndPassword?.minPasswordLength||8,maxPasswordLength:e.emailAndPassword?.maxPasswordLength||128},checkPassword:Rr},adapter:t,internalAdapter:$e(t,{options:e,hooks:e.databaseHooks?[e.databaseHooks]:[],generateId:d}),createAuthCookie:ge(e)},{context:p}=on(l);return p};function on(e){let t=e.options,r=t.plugins||[],n=e,i=[];for(let o of r)if(o.init){let a=o.init(e);typeof a=="object"&&(a.options&&(a.options.databaseHooks&&i.push(a.options.databaseHooks),t=(0,Ur.defu)(t,a.options)),a.context&&(n={...n,...a.context}))}return i.push(t.databaseHooks),n.internalAdapter=$e(e.adapter,{options:t,hooks:i.filter(o=>o!==void 0),generateId:e.generateId}),n.options=t,{context:n}}function sn(e){let t=[];return e.advanced?.crossSubDomainCookies?.enabled,t}function an(e){let t=se(e.baseURL,e.basePath);if(!t)return[];let r=[new URL(t).origin];e.trustedOrigins&&r.push(...e.trustedOrigins);let n=_.BETTER_AUTH_TRUSTED_ORIGINS;return n&&r.push(...n.split(",")),r}var dn=e=>{let t=Tr(e),{api:r}=Ve(t,e);return{handler:async n=>{let i=await t,o=i.options.basePath||"/api/auth",a=new URL(n.url);if(!i.options.baseURL){let c=se(void 0,o)||`${a.origin}${o}`;i.options.baseURL=c,i.baseURL=c}i.trustedOrigins=[...e.trustedOrigins||[],i.baseURL,a.origin];let{handler:u}=fr(i,e);return u(n)},api:r,options:e,$context:t,$Infer:{}}};0&&(module.exports={BetterAuthError,HIDE_METADATA,MissingDependencyError,betterAuth,capitalizeFirstLetter,createCookieGetter,createLogger,deleteSessionCookie,generateId,generateState,getCookies,levels,logger,parseCookies,parseSetCookieHeader,parseState,setSessionCookie,shouldPublishLog});

package/dist/index.d.cts

@@ -1,8 +1,8 @@
-export { l as Adapter, m as AdapterInstance, d as AdditionalSessionFieldsInput, e as AdditionalSessionFieldsOutput, a as AdditionalUserFieldsInput, c as AdditionalUserFieldsOutput, A as Auth, h as AuthContext, q as BetterAuthCookies, B as BetterAuthOptions, j as BetterAuthPlugin, E as EligibleCookies, G as GenericEndpointContext, H as HookEndpointContext, k as InferOptionSchema, g as InferPluginTypes, f as InferSession, I as InferUser, y as LogHandlerParams, L as LogLevel, x as Logger, M as Models, P as PluginSchema, R as RateLimit, n as SecondaryStorage, S as Session, U as User, W as Where, b as betterAuth, o as createCookieGetter, z as createLogger, r as deleteSessionCookie, p as getCookies, i as init, v as levels, C as logger, t as parseCookies, u as parseSetCookieHeader, s as setSessionCookie, w as shouldPublishLog } from './auth-XMAxn5Ae.cjs';
+export { l as Adapter, m as AdapterInstance, d as AdditionalSessionFieldsInput, e as AdditionalSessionFieldsOutput, a as AdditionalUserFieldsInput, c as AdditionalUserFieldsOutput, A as Auth, h as AuthContext, q as BetterAuthCookies, B as BetterAuthOptions, j as BetterAuthPlugin, E as EligibleCookies, G as GenericEndpointContext, H as HookEndpointContext, k as InferOptionSchema, g as InferPluginTypes, f as InferSession, I as InferUser, y as LogHandlerParams, L as LogLevel, x as Logger, M as Models, P as PluginSchema, R as RateLimit, n as SecondaryStorage, S as Session, U as User, W as Where, b as betterAuth, o as createCookieGetter, z as createLogger, r as deleteSessionCookie, p as getCookies, i as init, v as levels, C as logger, t as parseCookies, u as parseSetCookieHeader, s as setSessionCookie, w as shouldPublishLog } from './auth-CRbxCgiW.cjs';
 export { D as DeepPartial, H as HasRequiredKeys, a as LiteralNumber, L as LiteralString, c as LiteralUnion, O as OmitId, P as Prettify, b as PrettifyDeep, R as RequiredKeysOf, S as StripEmptyObjects, U as UnionToIntersection, W as WithoutEmpty } from './helper-D7-GCsit.cjs';
 export { AtomListener, BetterAuthClientPlugin, ClientOptions, InferActions, InferAdditionalFromClient, InferClientAPI, InferPluginsFromClient, InferSessionFromClient, InferUserFromClient, IsSignal, Store } from './types.cjs';
 export { H as HIDE_METADATA } from './hide-metadata-DEHJp1rk.cjs';
-export { g as generateState, p as parseState } from './state-BkCnjHc0.cjs';
+export { g as generateState, p as parseState } from './state-DLdB9N6W.cjs';
 import 'kysely';
 import 'zod';
 import 'better-call';

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-export { l as Adapter, m as AdapterInstance, d as AdditionalSessionFieldsInput, e as AdditionalSessionFieldsOutput, a as AdditionalUserFieldsInput, c as AdditionalUserFieldsOutput, A as Auth, h as AuthContext, q as BetterAuthCookies, B as BetterAuthOptions, j as BetterAuthPlugin, E as EligibleCookies, G as GenericEndpointContext, H as HookEndpointContext, k as InferOptionSchema, g as InferPluginTypes, f as InferSession, I as InferUser, y as LogHandlerParams, L as LogLevel, x as Logger, M as Models, P as PluginSchema, R as RateLimit, n as SecondaryStorage, S as Session, U as User, W as Where, b as betterAuth, o as createCookieGetter, z as createLogger, r as deleteSessionCookie, p as getCookies, i as init, v as levels, C as logger, t as parseCookies, u as parseSetCookieHeader, s as setSessionCookie, w as shouldPublishLog } from './auth-DFawWk0e.js';
+export { l as Adapter, m as AdapterInstance, d as AdditionalSessionFieldsInput, e as AdditionalSessionFieldsOutput, a as AdditionalUserFieldsInput, c as AdditionalUserFieldsOutput, A as Auth, h as AuthContext, q as BetterAuthCookies, B as BetterAuthOptions, j as BetterAuthPlugin, E as EligibleCookies, G as GenericEndpointContext, H as HookEndpointContext, k as InferOptionSchema, g as InferPluginTypes, f as InferSession, I as InferUser, y as LogHandlerParams, L as LogLevel, x as Logger, M as Models, P as PluginSchema, R as RateLimit, n as SecondaryStorage, S as Session, U as User, W as Where, b as betterAuth, o as createCookieGetter, z as createLogger, r as deleteSessionCookie, p as getCookies, i as init, v as levels, C as logger, t as parseCookies, u as parseSetCookieHeader, s as setSessionCookie, w as shouldPublishLog } from './auth-CnCuVMLa.js';
 export { D as DeepPartial, H as HasRequiredKeys, a as LiteralNumber, L as LiteralString, c as LiteralUnion, O as OmitId, P as Prettify, b as PrettifyDeep, R as RequiredKeysOf, S as StripEmptyObjects, U as UnionToIntersection, W as WithoutEmpty } from './helper-D7-GCsit.js';
 export { AtomListener, BetterAuthClientPlugin, ClientOptions, InferActions, InferAdditionalFromClient, InferClientAPI, InferPluginsFromClient, InferSessionFromClient, InferUserFromClient, IsSignal, Store } from './types.js';
 export { H as HIDE_METADATA } from './hide-metadata-DEHJp1rk.js';
-export { g as generateState, p as parseState } from './state-BsON3MFE.js';
+export { g as generateState, p as parseState } from './state-CwZsNu9d.js';
 import 'kysely';
 import 'zod';
 import 'better-call';