better-auth 1.2.0-beta.1 → 1.2.0-beta.10

package/dist/{chunk-EM73ZZSP.cjs → chunk-DURU7ZRA.cjs}

@@ -2,7 +2,7 @@
 
 var chunkZBKCS3KP_cjs = require('./chunk-ZBKCS3KP.cjs');
 var chunkEHFDU6IF_cjs = require('./chunk-EHFDU6IF.cjs');
-var chunkPIWBUHRB_cjs = require('./chunk-PIWBUHRB.cjs');
+var chunkN7UWN6ND_cjs = require('./chunk-N7UWN6ND.cjs');
 var chunkV6HE2MP7_cjs = require('./chunk-V6HE2MP7.cjs');
 var chunkB5UCLTPZ_cjs = require('./chunk-B5UCLTPZ.cjs');
 var chunkG2LZ73E2_cjs = require('./chunk-G2LZ73E2.cjs');
@@ -14,7 +14,7 @@ var otp = require('@better-auth/utils/otp');
 // src/plugins/two-factor/constant.ts
 var TWO_FACTOR_COOKIE_NAME = "two_factor";
 var TRUST_DEVICE_COOKIE_NAME = "trust_device";
-var verifyTwoFactorMiddleware = chunkPIWBUHRB_cjs.createAuthMiddleware(
+var verifyTwoFactorMiddleware = chunkN7UWN6ND_cjs.createAuthMiddleware(
   {
     body: zod.z.object({
       /**
@@ -26,7 +26,7 @@ var verifyTwoFactorMiddleware = chunkPIWBUHRB_cjs.createAuthMiddleware(
     })
   },
   async (ctx) => {
-    const session = await chunkPIWBUHRB_cjs.getSessionFromCtx(ctx);
+    const session = await chunkN7UWN6ND_cjs.getSessionFromCtx(ctx);
     if (!session) {
       const cookieName = ctx.context.createAuthCookie(TWO_FACTOR_COOKIE_NAME);
       const userId = await ctx.getSignedCookie(
@@ -172,7 +172,7 @@ var backupCode2fa = (options) => {
   return {
     id: "backup_code",
     endpoints: {
-      verifyBackupCode: chunkPIWBUHRB_cjs.createAuthEndpoint(
+      verifyBackupCode: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/two-factor/verify-backup-code",
         {
           method: "POST",
@@ -241,14 +241,14 @@ var backupCode2fa = (options) => {
           });
         }
       ),
-      generateBackupCodes: chunkPIWBUHRB_cjs.createAuthEndpoint(
+      generateBackupCodes: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/two-factor/generate-backup-codes",
         {
           method: "POST",
           body: zod.z.object({
             password: zod.z.string()
           }),
-          use: [chunkPIWBUHRB_cjs.sessionMiddleware]
+          use: [chunkN7UWN6ND_cjs.sessionMiddleware]
         },
         async (ctx) => {
           const user = ctx.context.session.user;
@@ -280,7 +280,7 @@ var backupCode2fa = (options) => {
           });
         }
       ),
-      viewBackupCodes: chunkPIWBUHRB_cjs.createAuthEndpoint(
+      viewBackupCodes: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/two-factor/view-backup-codes",
         {
           method: "GET",
@@ -331,7 +331,7 @@ var otp2fa = (options) => {
     period: (options?.period || 3) * 60 * 1e3
   };
   const twoFactorTable = "twoFactor";
-  const send2FaOTP = chunkPIWBUHRB_cjs.createAuthEndpoint(
+  const send2FaOTP = chunkN7UWN6ND_cjs.createAuthEndpoint(
     "/two-factor/send-otp",
     {
       method: "POST",
@@ -402,7 +402,7 @@ var otp2fa = (options) => {
       return ctx.json({ status: true });
     }
   );
-  const verifyOTP = chunkPIWBUHRB_cjs.createAuthEndpoint(
+  const verifyOTP = chunkN7UWN6ND_cjs.createAuthEndpoint(
     "/two-factor/verify-otp",
     {
       method: "POST",
@@ -493,11 +493,11 @@ var totp2fa = (options) => {
     period: options?.period || 30
   };
   const twoFactorTable = "twoFactor";
-  const generateTOTP = chunkPIWBUHRB_cjs.createAuthEndpoint(
+  const generateTOTP = chunkN7UWN6ND_cjs.createAuthEndpoint(
     "/totp/generate",
     {
       method: "POST",
-      use: [chunkPIWBUHRB_cjs.sessionMiddleware],
+      use: [chunkN7UWN6ND_cjs.sessionMiddleware],
       metadata: {
         openapi: {
           summary: "Generate TOTP code",
@@ -553,11 +553,11 @@ var totp2fa = (options) => {
       return { code };
     }
   );
-  const getTOTPURI = chunkPIWBUHRB_cjs.createAuthEndpoint(
+  const getTOTPURI = chunkN7UWN6ND_cjs.createAuthEndpoint(
     "/two-factor/get-totp-uri",
     {
       method: "POST",
-      use: [chunkPIWBUHRB_cjs.sessionMiddleware],
+      use: [chunkN7UWN6ND_cjs.sessionMiddleware],
       body: zod.z.object({
         password: zod.z.string({
           description: "User password"
@@ -625,7 +625,7 @@ var totp2fa = (options) => {
       };
     }
   );
-  const verifyTOTP = chunkPIWBUHRB_cjs.createAuthEndpoint(
+  const verifyTOTP = chunkN7UWN6ND_cjs.createAuthEndpoint(
     "/two-factor/verify-totp",
     {
       method: "POST",
@@ -779,7 +779,7 @@ var twoFactor = (options) => {
       ...totp.endpoints,
       ...otp$1.endpoints,
       ...backupCode.endpoints,
-      enableTwoFactor: chunkPIWBUHRB_cjs.createAuthEndpoint(
+      enableTwoFactor: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/two-factor/enable",
         {
           method: "POST",
@@ -788,7 +788,7 @@ var twoFactor = (options) => {
               description: "User password"
             }).min(8)
           }),
-          use: [chunkPIWBUHRB_cjs.sessionMiddleware],
+          use: [chunkN7UWN6ND_cjs.sessionMiddleware],
           metadata: {
             openapi: {
               summary: "Enable two factor authentication",
@@ -830,7 +830,7 @@ var twoFactor = (options) => {
           });
           if (!isPasswordValid) {
             throw new betterCall.APIError("BAD_REQUEST", {
-              message: chunkPIWBUHRB_cjs.BASE_ERROR_CODES.INVALID_PASSWORD
+              message: chunkN7UWN6ND_cjs.BASE_ERROR_CODES.INVALID_PASSWORD
             });
           }
           const secret = chunkG2LZ73E2_cjs.generateRandomString(32);
@@ -887,7 +887,7 @@ var twoFactor = (options) => {
           return ctx.json({ totpURI, backupCodes: backupCodes.backupCodes });
         }
       ),
-      disableTwoFactor: chunkPIWBUHRB_cjs.createAuthEndpoint(
+      disableTwoFactor: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/two-factor/disable",
         {
           method: "POST",
@@ -896,7 +896,7 @@ var twoFactor = (options) => {
               description: "User password"
             }).min(8)
           }),
-          use: [chunkPIWBUHRB_cjs.sessionMiddleware],
+          use: [chunkN7UWN6ND_cjs.sessionMiddleware],
           metadata: {
             openapi: {
               summary: "Disable two factor authentication",
@@ -972,7 +972,7 @@ var twoFactor = (options) => {
           matcher(context) {
             return context.path === "/sign-in/email" || context.path === "/sign-in/username" || context.path === "/sign-in/phone-number";
           },
-          handler: chunkPIWBUHRB_cjs.createAuthMiddleware(async (ctx) => {
+          handler: chunkN7UWN6ND_cjs.createAuthMiddleware(async (ctx) => {
             const data = ctx.context.newSession;
             if (!data) {
               return;

package/dist/{chunk-MGJLVQOV.js → chunk-EQYRCOOF.js}

@@ -90,13 +90,16 @@ function getWithHooks(adapter, ctx) {
     for (const hook of hooks || []) {
       const toRun = hook[model]?.create?.before;
       if (toRun) {
-        const result = await toRun(data);
+        const result = await toRun(actualData);
         if (result === false) {
           return null;
         }
         const isObject = typeof result === "object" && "data" in result;
         if (isObject) {
-          actualData = result.data;
+          actualData = {
+            ...actualData,
+            ...result.data
+          };
         }
       }
     }
@@ -272,6 +275,12 @@ var createInternalAdapter = (adapter, ctx) => {
       });
       return users;
     },
+    countTotalUsers: async () => {
+      const total = await adapter.count({
+        model: "user"
+      });
+      return total;
+    },
     deleteUser: async (userId) => {
       if (secondaryStorage) {
         await secondaryStorage.delete(`active-sessions-${userId}`);
@@ -795,6 +804,18 @@ var createInternalAdapter = (adapter, ctx) => {
         },
         limit: 1
       });
+      if (!options.verification?.disableCleanup) {
+        await adapter.deleteMany({
+          model: "verification",
+          where: [
+            {
+              field: "expiresAt",
+              value: (/* @__PURE__ */ new Date()).toISOString(),
+              operator: "lt"
+            }
+          ]
+        });
+      }
       const lastVerification = verification[0];
       return lastVerification;
     },
@@ -1249,6 +1270,9 @@ var memoryAdapter = (db) => (options) => {
       }
       return table.map((record) => transformOutput(record, model));
     },
+    count: async ({ model }) => {
+      return db[model].length;
+    },
     update: async ({ model, where, update }) => {
       const table = db[model];
       const res = convertWhereClause(where, table, model);
@@ -1858,6 +1882,19 @@ var kyselyAdapter = (db, config) => (opts) => {
       const res = await query.execute();
       return res.length;
     },
+    async count(data) {
+      const { model, where } = data;
+      const { and, or } = convertWhereClause(model, where);
+      let query = db.selectFrom(getModelName(model)).select(db.fn.count("id").as("count"));
+      if (and) {
+        query = query.where((eb) => eb.and(and.map((expr) => expr(eb))));
+      }
+      if (or) {
+        query = query.where((eb) => eb.or(or.map((expr) => expr(eb))));
+      }
+      const res = await query.execute();
+      return res[0].count;
+    },
     async delete(data) {
       const { model, where } = data;
       const { and, or } = convertWhereClause(model, where);

package/dist/{chunk-3BWJXTLC.cjs → chunk-GSEEAIRZ.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkPIWBUHRB_cjs = require('./chunk-PIWBUHRB.cjs');
+var chunkN7UWN6ND_cjs = require('./chunk-N7UWN6ND.cjs');
 var chunkV6HE2MP7_cjs = require('./chunk-V6HE2MP7.cjs');
 var chunkG2LZ73E2_cjs = require('./chunk-G2LZ73E2.cjs');
 var jose = require('jose');
@@ -136,7 +136,7 @@ async function authorize(ctx, options) {
       error: "invalid_request"
     });
   }
-  const session = await chunkPIWBUHRB_cjs.getSessionFromCtx(ctx);
+  const session = await chunkN7UWN6ND_cjs.getSessionFromCtx(ctx);
   if (!session) {
     await ctx.setSignedCookie(
       "oidc_login_prompt",
@@ -332,7 +332,7 @@ var getMetadata = (ctx, options) => {
     issuer,
     authorization_endpoint: `${baseURL}/oauth2/authorize`,
     token_endpoint: `${baseURL}/oauth2/token`,
-    userInfo_endpoint: `${baseURL}/oauth2/userinfo`,
+    userinfo_endpoint: `${baseURL}/oauth2/userinfo`,
     jwks_uri: `${baseURL}/jwks`,
     registration_endpoint: `${baseURL}/oauth2/register`,
     scopes_supported: ["openid", "profile", "email", "offline_access"],
@@ -392,7 +392,7 @@ var oidcProvider = (options) => {
           matcher() {
             return true;
           },
-          handler: chunkPIWBUHRB_cjs.createAuthMiddleware(async (ctx) => {
+          handler: chunkN7UWN6ND_cjs.createAuthMiddleware(async (ctx) => {
             const cookie = await ctx.getSignedCookie(
               "oidc_login_prompt",
               ctx.context.secret
@@ -427,7 +427,7 @@ var oidcProvider = (options) => {
       ]
     },
     endpoints: {
-      getOpenIdConfig: chunkPIWBUHRB_cjs.createAuthEndpoint(
+      getOpenIdConfig: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/.well-known/openid-configuration",
         {
           method: "GET"
@@ -437,7 +437,7 @@ var oidcProvider = (options) => {
           return ctx.json(metadata);
         }
       ),
-      oAuth2authorize: chunkPIWBUHRB_cjs.createAuthEndpoint(
+      oAuth2authorize: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/oauth2/authorize",
         {
           method: "GET",
@@ -447,14 +447,14 @@ var oidcProvider = (options) => {
           return authorize(ctx, opts);
         }
       ),
-      oAuthConsent: chunkPIWBUHRB_cjs.createAuthEndpoint(
+      oAuthConsent: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/oauth2/consent",
         {
           method: "POST",
           body: zod.z.object({
             accept: zod.z.boolean()
           }),
-          use: [chunkPIWBUHRB_cjs.sessionMiddleware]
+          use: [chunkN7UWN6ND_cjs.sessionMiddleware]
         },
         async (ctx) => {
           const storedCode = await ctx.getSignedCookie(
@@ -462,30 +462,27 @@ var oidcProvider = (options) => {
             ctx.context.secret
           );
           if (!storedCode) {
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "No consent prompt found",
               error: "invalid_grant"
             });
           }
           const verification = await ctx.context.internalAdapter.findVerificationValue(storedCode);
           if (!verification) {
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "Invalid code",
               error: "invalid_grant"
             });
           }
           if (verification.expiresAt < /* @__PURE__ */ new Date()) {
-            await ctx.context.internalAdapter.deleteVerificationValue(
-              verification.id
-            );
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "Code expired",
               error: "invalid_grant"
             });
           }
           const value = JSON.parse(verification.value);
           if (!value.requireConsent || !value.state) {
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "Consent not required",
               error: "invalid_grant"
             });
@@ -531,7 +528,7 @@ var oidcProvider = (options) => {
           });
         }
       ),
-      oAuth2token: chunkPIWBUHRB_cjs.createAuthEndpoint(
+      oAuth2token: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/oauth2/token",
         {
           method: "POST",
@@ -543,7 +540,7 @@ var oidcProvider = (options) => {
         async (ctx) => {
           let { body } = ctx;
           if (!body) {
-            throw new chunkPIWBUHRB_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               error_description: "request body not found",
               error: "invalid_request"
             });
@@ -552,7 +549,7 @@ var oidcProvider = (options) => {
             body = Object.fromEntries(body.entries());
           }
           if (!(body instanceof Object)) {
-            throw new chunkPIWBUHRB_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               error_description: "request body is not an object",
               error: "invalid_request"
             });
@@ -568,7 +565,7 @@ var oidcProvider = (options) => {
           } = body;
           if (grant_type === "refresh_token") {
             if (!refresh_token) {
-              throw new chunkPIWBUHRB_cjs.APIError("BAD_REQUEST", {
+              throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
                 error_description: "refresh_token is required",
                 error: "invalid_request"
               });
@@ -583,19 +580,19 @@ var oidcProvider = (options) => {
               ]
             });
             if (!token) {
-              throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+              throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
                 error_description: "invalid refresh token",
                 error: "invalid_grant"
               });
             }
             if (token.clientId !== client_id?.toString()) {
-              throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+              throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
                 error_description: "invalid client_id",
                 error: "invalid_client"
               });
             }
             if (token.refreshTokenExpiresAt < /* @__PURE__ */ new Date()) {
-              throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+              throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
                 error_description: "refresh token expired",
                 error: "invalid_grant"
               });
@@ -631,13 +628,13 @@ var oidcProvider = (options) => {
             });
           }
           if (!code) {
-            throw new chunkPIWBUHRB_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               error_description: "code is required",
               error: "invalid_request"
             });
           }
           if (options.requirePKCE && !code_verifier) {
-            throw new chunkPIWBUHRB_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               error_description: "code verifier is missing",
               error: "invalid_request"
             });
@@ -646,16 +643,13 @@ var oidcProvider = (options) => {
             code.toString()
           );
           if (!verificationValue) {
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "invalid code",
               error: "invalid_grant"
             });
           }
           if (verificationValue.expiresAt < /* @__PURE__ */ new Date()) {
-            await ctx.context.internalAdapter.deleteVerificationValue(
-              verificationValue.id
-            );
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "code expired",
               error: "invalid_grant"
             });
@@ -664,25 +658,25 @@ var oidcProvider = (options) => {
             verificationValue.id
           );
           if (!client_id || !client_secret) {
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "client_id and client_secret are required",
               error: "invalid_client"
             });
           }
           if (!grant_type) {
-            throw new chunkPIWBUHRB_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               error_description: "grant_type is required",
               error: "invalid_request"
             });
           }
           if (grant_type !== "authorization_code") {
-            throw new chunkPIWBUHRB_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               error_description: "grant_type must be 'authorization_code'",
               error: "unsupported_grant_type"
             });
           }
           if (!redirect_uri) {
-            throw new chunkPIWBUHRB_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               error_description: "redirect_uri is required",
               error: "invalid_request"
             });
@@ -701,20 +695,20 @@ var oidcProvider = (options) => {
             };
           });
           if (!client) {
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "invalid client_id",
               error: "invalid_client"
             });
           }
           if (client.disabled) {
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "client is disabled",
               error: "invalid_client"
             });
           }
           const isValidSecret = client.clientSecret === client_secret.toString();
           if (!isValidSecret) {
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "invalid client_secret",
               error: "invalid_client"
             });
@@ -723,19 +717,19 @@ var oidcProvider = (options) => {
             verificationValue.value
           );
           if (value.clientId !== client_id.toString()) {
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "invalid client_id",
               error: "invalid_client"
             });
           }
           if (value.redirectURI !== redirect_uri.toString()) {
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "invalid redirect_uri",
               error: "invalid_client"
             });
           }
           if (value.codeChallenge && !code_verifier) {
-            throw new chunkPIWBUHRB_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               error_description: "code verifier is missing",
               error: "invalid_request"
             });
@@ -744,7 +738,7 @@ var oidcProvider = (options) => {
             code_verifier
           );
           if (challenge !== value.codeChallenge) {
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "code verification failed",
               error: "invalid_request"
             });
@@ -779,7 +773,7 @@ var oidcProvider = (options) => {
             value.userId
           );
           if (!user) {
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "user not found",
               error: "invalid_grant"
             });
@@ -840,7 +834,7 @@ var oidcProvider = (options) => {
           );
         }
       ),
-      oAuth2userInfo: chunkPIWBUHRB_cjs.createAuthEndpoint(
+      oAuth2userInfo: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/oauth2/userinfo",
         {
           method: "GET",
@@ -850,14 +844,14 @@ var oidcProvider = (options) => {
         },
         async (ctx) => {
           if (!ctx.request) {
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "request not found",
               error: "invalid_request"
             });
           }
           const authorization = ctx.request.headers.get("authorization");
           if (!authorization) {
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "authorization header not found",
               error: "invalid_request"
             });
@@ -873,13 +867,13 @@ var oidcProvider = (options) => {
             ]
           });
           if (!accessToken) {
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "invalid access token",
               error: "invalid_token"
             });
           }
           if (accessToken.accessTokenExpiresAt < /* @__PURE__ */ new Date()) {
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "The Access Token expired",
               error: "invalid_token"
             });
@@ -888,7 +882,7 @@ var oidcProvider = (options) => {
             accessToken.userId
           );
           if (!user) {
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "user not found",
               error: "invalid_token"
             });
@@ -905,7 +899,7 @@ var oidcProvider = (options) => {
           return ctx.json(userClaims);
         }
       ),
-      registerOAuthApplication: chunkPIWBUHRB_cjs.createAuthEndpoint(
+      registerOAuthApplication: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/oauth2/register",
         {
           method: "POST",
@@ -918,9 +912,9 @@ var oidcProvider = (options) => {
         },
         async (ctx) => {
           const body = ctx.body;
-          const session = await chunkPIWBUHRB_cjs.getSessionFromCtx(ctx);
+          const session = await chunkN7UWN6ND_cjs.getSessionFromCtx(ctx);
           if (!session && !options.allowDynamicClientRegistration) {
-            throw new chunkPIWBUHRB_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               message: "Unauthorized"
             });
           }
@@ -950,11 +944,11 @@ var oidcProvider = (options) => {
           });
         }
       ),
-      getOAuthClient: chunkPIWBUHRB_cjs.createAuthEndpoint(
+      getOAuthClient: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/oauth2/client/:id",
         {
           method: "GET",
-          use: [chunkPIWBUHRB_cjs.sessionMiddleware]
+          use: [chunkN7UWN6ND_cjs.sessionMiddleware]
         },
         async (ctx) => {
           const client = await ctx.context.adapter.findOne(
@@ -964,7 +958,7 @@ var oidcProvider = (options) => {
             }
           );
           if (!client) {
-            throw new chunkPIWBUHRB_cjs.APIError("NOT_FOUND", {
+            throw new chunkN7UWN6ND_cjs.APIError("NOT_FOUND", {
               error_description: "client not found",
               error: "not_found"
             });