better-auth 1.2.0-beta.5 → 1.2.0-beta.6

package/dist/{chunk-C5LREWPU.cjs → chunk-HUDPJXOF.cjs}

@@ -1,7 +1,7 @@
 'use strict';
 
 var chunkJUPDDQC4_cjs = require('./chunk-JUPDDQC4.cjs');
-var chunkWKXM7XUV_cjs = require('./chunk-WKXM7XUV.cjs');
+var chunkN7UWN6ND_cjs = require('./chunk-N7UWN6ND.cjs');
 var chunkV6HE2MP7_cjs = require('./chunk-V6HE2MP7.cjs');
 var chunkG2LZ73E2_cjs = require('./chunk-G2LZ73E2.cjs');
 var chunk2HPSCSV7_cjs = require('./chunk-2HPSCSV7.cjs');
@@ -23,7 +23,7 @@ var emailOTP = (options) => {
   return {
     id: "email-otp",
     endpoints: {
-      sendVerificationOTP: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      sendVerificationOTP: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/email-otp/send-verification-otp",
         {
           method: "POST",
@@ -63,7 +63,7 @@ var emailOTP = (options) => {
             ctx.context.logger.error(
               "send email verification is not implemented"
             );
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               message: "send email verification is not implemented"
             });
           }
@@ -110,7 +110,7 @@ var emailOTP = (options) => {
           });
         }
       ),
-      createVerificationOTP: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      createVerificationOTP: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/email-otp/create-verification-otp",
         {
           method: "POST",
@@ -152,7 +152,7 @@ var emailOTP = (options) => {
           return otp;
         }
       ),
-      getVerificationOTP: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      getVerificationOTP: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/email-otp/get-verification-otp",
         {
           method: "GET",
@@ -201,7 +201,7 @@ var emailOTP = (options) => {
           });
         }
       ),
-      verifyEmailOTP: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      verifyEmailOTP: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/email-otp/verify-email",
         {
           method: "POST",
@@ -240,7 +240,7 @@ var emailOTP = (options) => {
           const email = ctx.body.email;
           const emailRegex = /^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$/;
           if (!emailRegex.test(email)) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               message: ERROR_CODES.INVALID_EMAIL
             });
           }
@@ -248,18 +248,18 @@ var emailOTP = (options) => {
             `email-verification-otp-${email}`
           );
           if (!verificationValue) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               message: ERROR_CODES.INVALID_OTP
             });
           }
           if (verificationValue.expiresAt < /* @__PURE__ */ new Date()) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               message: ERROR_CODES.OTP_EXPIRED
             });
           }
           const otp = ctx.body.otp;
           if (verificationValue.value !== otp) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               message: ERROR_CODES.INVALID_OTP
             });
           }
@@ -268,7 +268,7 @@ var emailOTP = (options) => {
           );
           const user = await ctx.context.internalAdapter.findUserByEmail(email);
           if (!user) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               message: ERROR_CODES.USER_NOT_FOUND
             });
           }
@@ -317,7 +317,7 @@ var emailOTP = (options) => {
           });
         }
       ),
-      signInEmailOTP: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      signInEmailOTP: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/sign-in/email-otp",
         {
           method: "POST",
@@ -361,18 +361,18 @@ var emailOTP = (options) => {
             `sign-in-otp-${email}`
           );
           if (!verificationValue) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               message: ERROR_CODES.INVALID_OTP
             });
           }
           if (verificationValue.expiresAt < /* @__PURE__ */ new Date()) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               message: ERROR_CODES.OTP_EXPIRED
             });
           }
           const otp = ctx.body.otp;
           if (verificationValue.value !== otp) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               message: ERROR_CODES.INVALID_OTP
             });
           }
@@ -382,7 +382,7 @@ var emailOTP = (options) => {
           const user = await ctx.context.internalAdapter.findUserByEmail(email);
           if (!user) {
             if (opts.disableSignUp) {
-              throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+              throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
                 message: ERROR_CODES.USER_NOT_FOUND
               });
             }
@@ -439,7 +439,7 @@ var emailOTP = (options) => {
           });
         }
       ),
-      forgetPasswordEmailOTP: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      forgetPasswordEmailOTP: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/forget-password/email-otp",
         {
           method: "POST",
@@ -475,7 +475,7 @@ var emailOTP = (options) => {
           const email = ctx.body.email;
           const user = await ctx.context.internalAdapter.findUserByEmail(email);
           if (!user) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               message: ERROR_CODES.USER_NOT_FOUND
             });
           }
@@ -498,7 +498,7 @@ var emailOTP = (options) => {
           });
         }
       ),
-      resetPasswordEmailOTP: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      resetPasswordEmailOTP: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/email-otp/reset-password",
         {
           method: "POST",
@@ -545,7 +545,7 @@ var emailOTP = (options) => {
             }
           );
           if (!user) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               message: ERROR_CODES.USER_NOT_FOUND
             });
           }
@@ -553,18 +553,18 @@ var emailOTP = (options) => {
             `forget-password-otp-${email}`
           );
           if (!verificationValue) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               message: ERROR_CODES.INVALID_OTP
             });
           }
           if (verificationValue.expiresAt < /* @__PURE__ */ new Date()) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               message: ERROR_CODES.OTP_EXPIRED
             });
           }
           const otp = ctx.body.otp;
           if (verificationValue.value !== otp) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               message: ERROR_CODES.INVALID_OTP
             });
           }
@@ -602,7 +602,7 @@ var emailOTP = (options) => {
           matcher(context) {
             return !!(context.path?.startsWith("/sign-up") && opts.sendVerificationOnSignUp);
           },
-          handler: chunkWKXM7XUV_cjs.createAuthMiddleware(async (ctx) => {
+          handler: chunkN7UWN6ND_cjs.createAuthMiddleware(async (ctx) => {
             const response = await chunkJUPDDQC4_cjs.getEndpointResponse(ctx);
             const email = response?.user.email;
             if (email) {

package/dist/{chunk-DSB4P3WF.cjs → chunk-IUGQVFPG.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkWKXM7XUV_cjs = require('./chunk-WKXM7XUV.cjs');
+var chunkN7UWN6ND_cjs = require('./chunk-N7UWN6ND.cjs');
 var chunkV6HE2MP7_cjs = require('./chunk-V6HE2MP7.cjs');
 var chunkG2LZ73E2_cjs = require('./chunk-G2LZ73E2.cjs');
 var zod = require('zod');
@@ -10,7 +10,7 @@ var magicLink = (options) => {
   return {
     id: "magic-link",
     endpoints: {
-      signInMagicLink: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      signInMagicLink: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/sign-in/magic-link",
         {
           method: "POST",
@@ -55,11 +55,11 @@ var magicLink = (options) => {
             const user = await ctx.context.internalAdapter.findUserByEmail(email);
             if (!user) {
               throw new betterCall.APIError("BAD_REQUEST", {
-                message: chunkWKXM7XUV_cjs.BASE_ERROR_CODES.USER_NOT_FOUND
+                message: chunkN7UWN6ND_cjs.BASE_ERROR_CODES.USER_NOT_FOUND
               });
             }
           }
-          const verificationToken = chunkG2LZ73E2_cjs.generateRandomString(32, "a-z", "A-Z");
+          const verificationToken = options?.generateToken ? await options.generateToken(email) : chunkG2LZ73E2_cjs.generateRandomString(32, "a-z", "A-Z");
           await ctx.context.internalAdapter.createVerificationValue({
             identifier: verificationToken,
             value: JSON.stringify({ email, name: ctx.body.name }),
@@ -81,7 +81,7 @@ var magicLink = (options) => {
           });
         }
       ),
-      magicLinkVerify: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      magicLinkVerify: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/magic-link/verify",
         {
           method: "GET",
@@ -93,7 +93,7 @@ var magicLink = (options) => {
               description: "URL to redirect after magic link verification, if not provided will return session"
             }).optional()
           }),
-          use: [chunkWKXM7XUV_cjs.originCheck((ctx) => ctx.query.callbackURL)],
+          use: [chunkN7UWN6ND_cjs.originCheck((ctx) => ctx.query.callbackURL)],
           requireHeaders: true,
           metadata: {
             openapi: {

package/dist/{chunk-K46S33M5.cjs → chunk-K6WRBJAV.cjs}

@@ -1,13 +1,13 @@
 'use strict';
 
-var chunkWKXM7XUV_cjs = require('./chunk-WKXM7XUV.cjs');
+var chunkN7UWN6ND_cjs = require('./chunk-N7UWN6ND.cjs');
 var zod = require('zod');
 
 var customSession = (fn, options) => {
   return {
     id: "custom-session",
     endpoints: {
-      getSession: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      getSession: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/get-session",
         {
           method: "GET",
@@ -30,7 +30,7 @@ var customSession = (fn, options) => {
           )
         },
         async (ctx) => {
-          const session = await chunkWKXM7XUV_cjs.getSessionFromCtx(ctx);
+          const session = await chunkN7UWN6ND_cjs.getSessionFromCtx(ctx);
           if (!session) {
             return ctx.json(null);
           }

package/dist/{chunk-C37NPGBI.cjs → chunk-KAEQXMEV.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkWKXM7XUV_cjs = require('./chunk-WKXM7XUV.cjs');
+var chunkN7UWN6ND_cjs = require('./chunk-N7UWN6ND.cjs');
 var chunkV6HE2MP7_cjs = require('./chunk-V6HE2MP7.cjs');
 var chunkG2LZ73E2_cjs = require('./chunk-G2LZ73E2.cjs');
 var jose = require('jose');
@@ -136,7 +136,7 @@ async function authorize(ctx, options) {
       error: "invalid_request"
     });
   }
-  const session = await chunkWKXM7XUV_cjs.getSessionFromCtx(ctx);
+  const session = await chunkN7UWN6ND_cjs.getSessionFromCtx(ctx);
   if (!session) {
     await ctx.setSignedCookie(
       "oidc_login_prompt",
@@ -392,7 +392,7 @@ var oidcProvider = (options) => {
           matcher() {
             return true;
           },
-          handler: chunkWKXM7XUV_cjs.createAuthMiddleware(async (ctx) => {
+          handler: chunkN7UWN6ND_cjs.createAuthMiddleware(async (ctx) => {
             const cookie = await ctx.getSignedCookie(
               "oidc_login_prompt",
               ctx.context.secret
@@ -427,7 +427,7 @@ var oidcProvider = (options) => {
       ]
     },
     endpoints: {
-      getOpenIdConfig: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      getOpenIdConfig: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/.well-known/openid-configuration",
         {
           method: "GET"
@@ -437,7 +437,7 @@ var oidcProvider = (options) => {
           return ctx.json(metadata);
         }
       ),
-      oAuth2authorize: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      oAuth2authorize: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/oauth2/authorize",
         {
           method: "GET",
@@ -447,14 +447,14 @@ var oidcProvider = (options) => {
           return authorize(ctx, opts);
         }
       ),
-      oAuthConsent: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      oAuthConsent: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/oauth2/consent",
         {
           method: "POST",
           body: zod.z.object({
             accept: zod.z.boolean()
           }),
-          use: [chunkWKXM7XUV_cjs.sessionMiddleware]
+          use: [chunkN7UWN6ND_cjs.sessionMiddleware]
         },
         async (ctx) => {
           const storedCode = await ctx.getSignedCookie(
@@ -462,27 +462,27 @@ var oidcProvider = (options) => {
             ctx.context.secret
           );
           if (!storedCode) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "No consent prompt found",
               error: "invalid_grant"
             });
           }
           const verification = await ctx.context.internalAdapter.findVerificationValue(storedCode);
           if (!verification) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "Invalid code",
               error: "invalid_grant"
             });
           }
           if (verification.expiresAt < /* @__PURE__ */ new Date()) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "Code expired",
               error: "invalid_grant"
             });
           }
           const value = JSON.parse(verification.value);
           if (!value.requireConsent || !value.state) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "Consent not required",
               error: "invalid_grant"
             });
@@ -528,7 +528,7 @@ var oidcProvider = (options) => {
           });
         }
       ),
-      oAuth2token: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      oAuth2token: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/oauth2/token",
         {
           method: "POST",
@@ -540,7 +540,7 @@ var oidcProvider = (options) => {
         async (ctx) => {
           let { body } = ctx;
           if (!body) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               error_description: "request body not found",
               error: "invalid_request"
             });
@@ -549,7 +549,7 @@ var oidcProvider = (options) => {
             body = Object.fromEntries(body.entries());
           }
           if (!(body instanceof Object)) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               error_description: "request body is not an object",
               error: "invalid_request"
             });
@@ -565,7 +565,7 @@ var oidcProvider = (options) => {
           } = body;
           if (grant_type === "refresh_token") {
             if (!refresh_token) {
-              throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+              throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
                 error_description: "refresh_token is required",
                 error: "invalid_request"
               });
@@ -580,19 +580,19 @@ var oidcProvider = (options) => {
               ]
             });
             if (!token) {
-              throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+              throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
                 error_description: "invalid refresh token",
                 error: "invalid_grant"
               });
             }
             if (token.clientId !== client_id?.toString()) {
-              throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+              throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
                 error_description: "invalid client_id",
                 error: "invalid_client"
               });
             }
             if (token.refreshTokenExpiresAt < /* @__PURE__ */ new Date()) {
-              throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+              throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
                 error_description: "refresh token expired",
                 error: "invalid_grant"
               });
@@ -628,13 +628,13 @@ var oidcProvider = (options) => {
             });
           }
           if (!code) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               error_description: "code is required",
               error: "invalid_request"
             });
           }
           if (options.requirePKCE && !code_verifier) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               error_description: "code verifier is missing",
               error: "invalid_request"
             });
@@ -643,13 +643,13 @@ var oidcProvider = (options) => {
             code.toString()
           );
           if (!verificationValue) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "invalid code",
               error: "invalid_grant"
             });
           }
           if (verificationValue.expiresAt < /* @__PURE__ */ new Date()) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "code expired",
               error: "invalid_grant"
             });
@@ -658,25 +658,25 @@ var oidcProvider = (options) => {
             verificationValue.id
           );
           if (!client_id || !client_secret) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "client_id and client_secret are required",
               error: "invalid_client"
             });
           }
           if (!grant_type) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               error_description: "grant_type is required",
               error: "invalid_request"
             });
           }
           if (grant_type !== "authorization_code") {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               error_description: "grant_type must be 'authorization_code'",
               error: "unsupported_grant_type"
             });
           }
           if (!redirect_uri) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               error_description: "redirect_uri is required",
               error: "invalid_request"
             });
@@ -695,20 +695,20 @@ var oidcProvider = (options) => {
             };
           });
           if (!client) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "invalid client_id",
               error: "invalid_client"
             });
           }
           if (client.disabled) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "client is disabled",
               error: "invalid_client"
             });
           }
           const isValidSecret = client.clientSecret === client_secret.toString();
           if (!isValidSecret) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "invalid client_secret",
               error: "invalid_client"
             });
@@ -717,19 +717,19 @@ var oidcProvider = (options) => {
             verificationValue.value
           );
           if (value.clientId !== client_id.toString()) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "invalid client_id",
               error: "invalid_client"
             });
           }
           if (value.redirectURI !== redirect_uri.toString()) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "invalid redirect_uri",
               error: "invalid_client"
             });
           }
           if (value.codeChallenge && !code_verifier) {
-            throw new chunkWKXM7XUV_cjs.APIError("BAD_REQUEST", {
+            throw new chunkN7UWN6ND_cjs.APIError("BAD_REQUEST", {
               error_description: "code verifier is missing",
               error: "invalid_request"
             });
@@ -738,7 +738,7 @@ var oidcProvider = (options) => {
             code_verifier
           );
           if (challenge !== value.codeChallenge) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "code verification failed",
               error: "invalid_request"
             });
@@ -773,7 +773,7 @@ var oidcProvider = (options) => {
             value.userId
           );
           if (!user) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "user not found",
               error: "invalid_grant"
             });
@@ -834,7 +834,7 @@ var oidcProvider = (options) => {
           );
         }
       ),
-      oAuth2userInfo: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      oAuth2userInfo: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/oauth2/userinfo",
         {
           method: "GET",
@@ -844,14 +844,14 @@ var oidcProvider = (options) => {
         },
         async (ctx) => {
           if (!ctx.request) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "request not found",
               error: "invalid_request"
             });
           }
           const authorization = ctx.request.headers.get("authorization");
           if (!authorization) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "authorization header not found",
               error: "invalid_request"
             });
@@ -867,13 +867,13 @@ var oidcProvider = (options) => {
             ]
           });
           if (!accessToken) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "invalid access token",
               error: "invalid_token"
             });
           }
           if (accessToken.accessTokenExpiresAt < /* @__PURE__ */ new Date()) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "The Access Token expired",
               error: "invalid_token"
             });
@@ -882,7 +882,7 @@ var oidcProvider = (options) => {
             accessToken.userId
           );
           if (!user) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               error_description: "user not found",
               error: "invalid_token"
             });
@@ -899,7 +899,7 @@ var oidcProvider = (options) => {
           return ctx.json(userClaims);
         }
       ),
-      registerOAuthApplication: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      registerOAuthApplication: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/oauth2/register",
         {
           method: "POST",
@@ -912,9 +912,9 @@ var oidcProvider = (options) => {
         },
         async (ctx) => {
           const body = ctx.body;
-          const session = await chunkWKXM7XUV_cjs.getSessionFromCtx(ctx);
+          const session = await chunkN7UWN6ND_cjs.getSessionFromCtx(ctx);
           if (!session && !options.allowDynamicClientRegistration) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               message: "Unauthorized"
             });
           }
@@ -944,11 +944,11 @@ var oidcProvider = (options) => {
           });
         }
       ),
-      getOAuthClient: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      getOAuthClient: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/oauth2/client/:id",
         {
           method: "GET",
-          use: [chunkWKXM7XUV_cjs.sessionMiddleware]
+          use: [chunkN7UWN6ND_cjs.sessionMiddleware]
         },
         async (ctx) => {
           const client = await ctx.context.adapter.findOne(
@@ -958,7 +958,7 @@ var oidcProvider = (options) => {
             }
           );
           if (!client) {
-            throw new chunkWKXM7XUV_cjs.APIError("NOT_FOUND", {
+            throw new chunkN7UWN6ND_cjs.APIError("NOT_FOUND", {
               error_description: "client not found",
               error: "not_found"
             });

package/dist/{chunk-CV5JTF37.cjs → chunk-KAR56MJZ.cjs}

@@ -92,13 +92,16 @@ function getWithHooks(adapter, ctx) {
     for (const hook of hooks || []) {
       const toRun = hook[model]?.create?.before;
       if (toRun) {
-        const result = await toRun(data);
+        const result = await toRun(actualData);
         if (result === false) {
           return null;
         }
         const isObject = typeof result === "object" && "data" in result;
         if (isObject) {
-          actualData = result.data;
+          actualData = {
+            ...actualData,
+            ...result.data
+          };
         }
       }
     }