better-auth 1.2.0-beta.5 → 1.2.0-beta.6

package/dist/{chunk-OLGASOBP.cjs → chunk-UZNKBUDH.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkWKXM7XUV_cjs = require('./chunk-WKXM7XUV.cjs');
+var chunkN7UWN6ND_cjs = require('./chunk-N7UWN6ND.cjs');
 var chunkV6HE2MP7_cjs = require('./chunk-V6HE2MP7.cjs');
 var zod = require('zod');
 
@@ -16,7 +16,7 @@ var multiSession = (options) => {
   return {
     id: "multi-session",
     endpoints: {
-      listDeviceSessions: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      listDeviceSessions: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/multi-session/list-device-sessions",
         {
           method: "GET",
@@ -39,7 +39,7 @@ var multiSession = (options) => {
           return ctx.json(validSessions);
         }
       ),
-      setActiveSession: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      setActiveSession: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/multi-session/set-active",
         {
           method: "POST",
@@ -49,7 +49,7 @@ var multiSession = (options) => {
             })
           }),
           requireHeaders: true,
-          use: [chunkWKXM7XUV_cjs.sessionMiddleware],
+          use: [chunkN7UWN6ND_cjs.sessionMiddleware],
           metadata: {
             openapi: {
               description: "Set the active session",
@@ -81,7 +81,7 @@ var multiSession = (options) => {
             ctx.context.secret
           );
           if (!sessionCookie) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               message: ERROR_CODES.INVALID_SESSION_TOKEN
             });
           }
@@ -91,7 +91,7 @@ var multiSession = (options) => {
               ...ctx.context.authCookies.sessionToken.options,
               maxAge: 0
             });
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               message: ERROR_CODES.INVALID_SESSION_TOKEN
             });
           }
@@ -99,7 +99,7 @@ var multiSession = (options) => {
           return ctx.json(session);
         }
       ),
-      revokeDeviceSession: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      revokeDeviceSession: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/multi-session/revoke",
         {
           method: "POST",
@@ -109,7 +109,7 @@ var multiSession = (options) => {
             })
           }),
           requireHeaders: true,
-          use: [chunkWKXM7XUV_cjs.sessionMiddleware],
+          use: [chunkN7UWN6ND_cjs.sessionMiddleware],
           metadata: {
             openapi: {
               description: "Revoke a device session",
@@ -141,7 +141,7 @@ var multiSession = (options) => {
             ctx.context.secret
           );
           if (!sessionCookie) {
-            throw new chunkWKXM7XUV_cjs.APIError("UNAUTHORIZED", {
+            throw new chunkN7UWN6ND_cjs.APIError("UNAUTHORIZED", {
               message: ERROR_CODES.INVALID_SESSION_TOKEN
             });
           }
@@ -188,7 +188,7 @@ var multiSession = (options) => {
       after: [
         {
           matcher: () => true,
-          handler: chunkWKXM7XUV_cjs.createAuthMiddleware(async (ctx) => {
+          handler: chunkN7UWN6ND_cjs.createAuthMiddleware(async (ctx) => {
             const cookieString = ctx.context.responseHeaders?.get("set-cookie");
             if (!cookieString) return;
             const setCookies = chunkV6HE2MP7_cjs.parseSetCookieHeader(cookieString);
@@ -220,7 +220,7 @@ var multiSession = (options) => {
         },
         {
           matcher: (context) => context.path === "/sign-out",
-          handler: chunkWKXM7XUV_cjs.createAuthMiddleware(async (ctx) => {
+          handler: chunkN7UWN6ND_cjs.createAuthMiddleware(async (ctx) => {
             const cookieHeader = ctx.headers?.get("cookie");
             if (!cookieHeader) return;
             const cookies = Object.fromEntries(chunkV6HE2MP7_cjs.parseCookies(cookieHeader));

package/dist/{chunk-7S7YLBK4.js → chunk-V56HFQQX.js}

@@ -1,4 +1,4 @@
-import { createAuthEndpoint, APIError } from './chunk-R62AOMGV.js';
+import { createAuthEndpoint, APIError } from './chunk-SCXZXQTZ.js';
 import { setSessionCookie } from './chunk-QQGZ3XGI.js';
 import { z } from 'zod';
 import { betterFetch } from '@better-fetch/fetch';

package/dist/{chunk-HCHSHY7R.cjs → chunk-WD65CNWK.cjs}

@@ -1,7 +1,7 @@
 'use strict';
 
 var chunk2X5G64P2_cjs = require('./chunk-2X5G64P2.cjs');
-var chunkWKXM7XUV_cjs = require('./chunk-WKXM7XUV.cjs');
+var chunkN7UWN6ND_cjs = require('./chunk-N7UWN6ND.cjs');
 var chunkU4I57HJ4_cjs = require('./chunk-U4I57HJ4.cjs');
 var chunkV6HE2MP7_cjs = require('./chunk-V6HE2MP7.cjs');
 var chunkH74YRRNV_cjs = require('./chunk-H74YRRNV.cjs');
@@ -453,12 +453,12 @@ var getOrgAdapter = (context, options) => {
 };
 
 // src/plugins/organization/call.ts
-var orgMiddleware = chunkWKXM7XUV_cjs.createAuthMiddleware(async (ctx) => {
+var orgMiddleware = chunkN7UWN6ND_cjs.createAuthMiddleware(async (ctx) => {
   return {};
 });
-var orgSessionMiddleware = chunkWKXM7XUV_cjs.createAuthMiddleware(
+var orgSessionMiddleware = chunkN7UWN6ND_cjs.createAuthMiddleware(
   {
-    use: [chunkWKXM7XUV_cjs.sessionMiddleware]
+    use: [chunkN7UWN6ND_cjs.sessionMiddleware]
   },
   async (ctx) => {
     const session = ctx.context.session;
@@ -536,7 +536,7 @@ var hasPermission = (input) => {
 };
 
 // src/plugins/organization/routes/crud-invites.ts
-var createInvitation = (option) => chunkWKXM7XUV_cjs.createAuthEndpoint(
+var createInvitation = (option) => chunkN7UWN6ND_cjs.createAuthEndpoint(
   "/organization/invite-member",
   {
     method: "POST",
@@ -697,7 +697,7 @@ var createInvitation = (option) => chunkWKXM7XUV_cjs.createAuthEndpoint(
     return ctx.json(invitation);
   }
 );
-var acceptInvitation = chunkWKXM7XUV_cjs.createAuthEndpoint(
+var acceptInvitation = chunkN7UWN6ND_cjs.createAuthEndpoint(
   "/organization/accept-invitation",
   {
     method: "POST",
@@ -775,7 +775,7 @@ var acceptInvitation = chunkWKXM7XUV_cjs.createAuthEndpoint(
     });
   }
 );
-var rejectInvitation = chunkWKXM7XUV_cjs.createAuthEndpoint(
+var rejectInvitation = chunkN7UWN6ND_cjs.createAuthEndpoint(
   "/organization/reject-invitation",
   {
     method: "POST",
@@ -835,7 +835,7 @@ var rejectInvitation = chunkWKXM7XUV_cjs.createAuthEndpoint(
     });
   }
 );
-var cancelInvitation = chunkWKXM7XUV_cjs.createAuthEndpoint(
+var cancelInvitation = chunkN7UWN6ND_cjs.createAuthEndpoint(
   "/organization/cancel-invitation",
   {
     method: "POST",
@@ -903,7 +903,7 @@ var cancelInvitation = chunkWKXM7XUV_cjs.createAuthEndpoint(
     return ctx.json(canceledI);
   }
 );
-var getInvitation = chunkWKXM7XUV_cjs.createAuthEndpoint(
+var getInvitation = chunkN7UWN6ND_cjs.createAuthEndpoint(
   "/organization/get-invitation",
   {
     method: "GET",
@@ -977,7 +977,7 @@ var getInvitation = chunkWKXM7XUV_cjs.createAuthEndpoint(
     }
   },
   async (ctx) => {
-    const session = await chunkWKXM7XUV_cjs.getSessionFromCtx(ctx);
+    const session = await chunkN7UWN6ND_cjs.getSessionFromCtx(ctx);
     if (!session) {
       throw new betterCall.APIError("UNAUTHORIZED", {
         message: "Not authenticated"
@@ -1020,7 +1020,7 @@ var getInvitation = chunkWKXM7XUV_cjs.createAuthEndpoint(
     });
   }
 );
-var addMember = () => chunkWKXM7XUV_cjs.createAuthEndpoint(
+var addMember = () => chunkN7UWN6ND_cjs.createAuthEndpoint(
   "/organization/add-member",
   {
     method: "POST",
@@ -1035,7 +1035,7 @@ var addMember = () => chunkWKXM7XUV_cjs.createAuthEndpoint(
     }
   },
   async (ctx) => {
-    const session = ctx.body.userId ? await chunkWKXM7XUV_cjs.getSessionFromCtx(ctx).catch((e) => null) : null;
+    const session = ctx.body.userId ? await chunkN7UWN6ND_cjs.getSessionFromCtx(ctx).catch((e) => null) : null;
     const orgId = ctx.body.organizationId || session?.session.activeOrganizationId;
     if (!orgId) {
       return ctx.json(null, {
@@ -1051,7 +1051,7 @@ var addMember = () => chunkWKXM7XUV_cjs.createAuthEndpoint(
     );
     if (!user) {
       throw new betterCall.APIError("BAD_REQUEST", {
-        message: chunkWKXM7XUV_cjs.BASE_ERROR_CODES.USER_NOT_FOUND
+        message: chunkN7UWN6ND_cjs.BASE_ERROR_CODES.USER_NOT_FOUND
       });
     }
     const alreadyMember = await adapter.findMemberByEmail({
@@ -1073,7 +1073,7 @@ var addMember = () => chunkWKXM7XUV_cjs.createAuthEndpoint(
     return ctx.json(createdMember);
   }
 );
-var removeMember = chunkWKXM7XUV_cjs.createAuthEndpoint(
+var removeMember = chunkN7UWN6ND_cjs.createAuthEndpoint(
   "/organization/remove-member",
   {
     method: "POST",
@@ -1192,7 +1192,7 @@ var removeMember = chunkWKXM7XUV_cjs.createAuthEndpoint(
     });
   }
 );
-var updateMemberRole = (option) => chunkWKXM7XUV_cjs.createAuthEndpoint(
+var updateMemberRole = (option) => chunkN7UWN6ND_cjs.createAuthEndpoint(
   "/organization/update-member-role",
   {
     method: "POST",
@@ -1301,7 +1301,7 @@ var updateMemberRole = (option) => chunkWKXM7XUV_cjs.createAuthEndpoint(
     return ctx.json(updatedMember);
   }
 );
-var getActiveMember = chunkWKXM7XUV_cjs.createAuthEndpoint(
+var getActiveMember = chunkN7UWN6ND_cjs.createAuthEndpoint(
   "/organization/get-active-member",
   {
     method: "GET",
@@ -1366,7 +1366,55 @@ var getActiveMember = chunkWKXM7XUV_cjs.createAuthEndpoint(
     return ctx.json(member);
   }
 );
-var createOrganization = chunkWKXM7XUV_cjs.createAuthEndpoint(
+var leaveOrganization = chunkN7UWN6ND_cjs.createAuthEndpoint(
+  "/organization/leave",
+  {
+    method: "POST",
+    body: zod.z.object({
+      organizationId: zod.z.string()
+    }),
+    use: [chunkN7UWN6ND_cjs.sessionMiddleware, orgMiddleware]
+  },
+  async (ctx) => {
+    const session = ctx.context.session;
+    const adapter = getOrgAdapter(ctx.context);
+    const member = await adapter.findMemberByOrgId({
+      userId: session.user.id,
+      organizationId: ctx.body.organizationId
+    });
+    if (!member) {
+      throw new betterCall.APIError("BAD_REQUEST", {
+        message: ORGANIZATION_ERROR_CODES.MEMBER_NOT_FOUND
+      });
+    }
+    const isOwnerLeaving = member.role === (ctx.context.orgOptions?.creatorRole || "owner");
+    if (isOwnerLeaving) {
+      const members = await ctx.context.adapter.findMany({
+        model: "member",
+        where: [
+          {
+            field: "organizationId",
+            value: ctx.body.organizationId
+          }
+        ]
+      });
+      const owners = members.filter(
+        (member2) => member2.role === (ctx.context.orgOptions?.creatorRole || "owner")
+      );
+      if (owners.length <= 1) {
+        throw new betterCall.APIError("BAD_REQUEST", {
+          message: ORGANIZATION_ERROR_CODES.YOU_CANNOT_LEAVE_THE_ORGANIZATION_AS_THE_ONLY_OWNER
+        });
+      }
+    }
+    await adapter.deleteMember(member.id);
+    if (session.session.activeOrganizationId === ctx.body.organizationId) {
+      await adapter.setActiveOrganization(session.session.token, null);
+    }
+    return ctx.json(member);
+  }
+);
+var createOrganization = chunkN7UWN6ND_cjs.createAuthEndpoint(
   "/organization/create",
   {
     method: "POST",
@@ -1409,7 +1457,7 @@ var createOrganization = chunkWKXM7XUV_cjs.createAuthEndpoint(
     }
   },
   async (ctx) => {
-    const session = await chunkWKXM7XUV_cjs.getSessionFromCtx(ctx);
+    const session = await chunkN7UWN6ND_cjs.getSessionFromCtx(ctx);
     console.log(ctx.request, ctx.headers);
     if (!session && (ctx.request || ctx.headers)) {
       throw new betterCall.APIError("UNAUTHORIZED");
@@ -1469,14 +1517,14 @@ var createOrganization = chunkWKXM7XUV_cjs.createAuthEndpoint(
     return ctx.json(organization2);
   }
 );
-var checkOrganizationSlug = chunkWKXM7XUV_cjs.createAuthEndpoint(
+var checkOrganizationSlug = chunkN7UWN6ND_cjs.createAuthEndpoint(
   "/organization/check-slug",
   {
     method: "POST",
     body: zod.z.object({
       slug: zod.z.string()
     }),
-    use: [chunkWKXM7XUV_cjs.requestOnlySessionMiddleware, orgMiddleware]
+    use: [chunkN7UWN6ND_cjs.requestOnlySessionMiddleware, orgMiddleware]
   },
   async (ctx) => {
     const orgAdapter = getOrgAdapter(ctx.context);
@@ -1491,7 +1539,7 @@ var checkOrganizationSlug = chunkWKXM7XUV_cjs.createAuthEndpoint(
     });
   }
 );
-var updateOrganization = chunkWKXM7XUV_cjs.createAuthEndpoint(
+var updateOrganization = chunkN7UWN6ND_cjs.createAuthEndpoint(
   "/organization/update",
   {
     method: "POST",
@@ -1585,7 +1633,7 @@ var updateOrganization = chunkWKXM7XUV_cjs.createAuthEndpoint(
     return ctx.json(updatedOrg);
   }
 );
-var deleteOrganization = chunkWKXM7XUV_cjs.createAuthEndpoint(
+var deleteOrganization = chunkN7UWN6ND_cjs.createAuthEndpoint(
   "/organization/delete",
   {
     method: "POST",
@@ -1683,7 +1731,7 @@ var deleteOrganization = chunkWKXM7XUV_cjs.createAuthEndpoint(
     return ctx.json(org);
   }
 );
-var getFullOrganization = chunkWKXM7XUV_cjs.createAuthEndpoint(
+var getFullOrganization = chunkN7UWN6ND_cjs.createAuthEndpoint(
   "/organization/get-full-organization",
   {
     method: "GET",
@@ -1748,7 +1796,7 @@ var getFullOrganization = chunkWKXM7XUV_cjs.createAuthEndpoint(
     return ctx.json(organization2);
   }
 );
-var setActiveOrganization = chunkWKXM7XUV_cjs.createAuthEndpoint(
+var setActiveOrganization = chunkN7UWN6ND_cjs.createAuthEndpoint(
   "/organization/set-active",
   {
     method: "POST",
@@ -1836,7 +1884,7 @@ var setActiveOrganization = chunkWKXM7XUV_cjs.createAuthEndpoint(
     return ctx.json(organization2);
   }
 );
-var listOrganizations = chunkWKXM7XUV_cjs.createAuthEndpoint(
+var listOrganizations = chunkN7UWN6ND_cjs.createAuthEndpoint(
   "/organization/list",
   {
     method: "GET",
@@ -1889,7 +1937,8 @@ var organization = (options) => {
     addMember: addMember(),
     removeMember,
     updateMemberRole: updateMemberRole(),
-    getActiveMember
+    getActiveMember,
+    leaveOrganization
   };
   const roles = {
     ...chunk2X5G64P2_cjs.defaultRoles,
@@ -1899,14 +1948,14 @@ var organization = (options) => {
     orgOptions: options || {},
     roles,
     getSession: async (context) => {
-      return await chunkWKXM7XUV_cjs.getSessionFromCtx(context);
+      return await chunkN7UWN6ND_cjs.getSessionFromCtx(context);
     }
   });
   return {
     id: "organization",
     endpoints: {
       ...api,
-      hasPermission: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      hasPermission: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/organization/has-permission",
         {
           method: "POST",

package/dist/{chunk-H4A3GCFC.cjs → chunk-XKCN2VRG.cjs}

@@ -1,7 +1,7 @@
 'use strict';
 
 var chunkZBKCS3KP_cjs = require('./chunk-ZBKCS3KP.cjs');
-var chunkWKXM7XUV_cjs = require('./chunk-WKXM7XUV.cjs');
+var chunkN7UWN6ND_cjs = require('./chunk-N7UWN6ND.cjs');
 var chunkV6HE2MP7_cjs = require('./chunk-V6HE2MP7.cjs');
 var chunkB5UCLTPZ_cjs = require('./chunk-B5UCLTPZ.cjs');
 var zod = require('zod');
@@ -42,7 +42,7 @@ var username = (options) => {
   return {
     id: "username",
     endpoints: {
-      signInUsername: chunkWKXM7XUV_cjs.createAuthEndpoint(
+      signInUsername: chunkN7UWN6ND_cjs.createAuthEndpoint(
         "/sign-in/username",
         {
           method: "POST",
@@ -102,7 +102,7 @@ var username = (options) => {
             });
           }
           if (!user.emailVerified && ctx.context.options.emailAndPassword?.requireEmailVerification) {
-            await chunkWKXM7XUV_cjs.sendVerificationEmailFn(ctx, user);
+            await chunkN7UWN6ND_cjs.sendVerificationEmailFn(ctx, user);
             throw new betterCall.APIError("FORBIDDEN", {
               message: ERROR_CODES.EMAIL_NOT_VERIFIED
             });
@@ -151,7 +151,7 @@ var username = (options) => {
             return ctx.json(null, {
               status: 500,
               body: {
-                message: chunkWKXM7XUV_cjs.BASE_ERROR_CODES.FAILED_TO_CREATE_SESSION
+                message: chunkN7UWN6ND_cjs.BASE_ERROR_CODES.FAILED_TO_CREATE_SESSION
               }
             });
           }
@@ -182,7 +182,7 @@ var username = (options) => {
           matcher(context) {
             return context.path === "/sign-up/email";
           },
-          handler: chunkWKXM7XUV_cjs.createAuthMiddleware(async (ctx) => {
+          handler: chunkN7UWN6ND_cjs.createAuthMiddleware(async (ctx) => {
             const username2 = ctx.body.username;
             if (username2) {
               const user = await ctx.context.adapter.findOne({

package/dist/{chunk-QG2HKEKG.js → chunk-XREMX2NV.js}

@@ -1,4 +1,4 @@
-import { createAuthEndpoint, sessionMiddleware, APIError, createAuthMiddleware } from './chunk-R62AOMGV.js';
+import { createAuthEndpoint, sessionMiddleware, APIError, createAuthMiddleware } from './chunk-SCXZXQTZ.js';
 import { parseCookies, setSessionCookie, deleteSessionCookie, parseSetCookieHeader } from './chunk-QQGZ3XGI.js';
 import { z } from 'zod';
 

package/dist/{chunk-MHZNWING.js → chunk-ZDYKAJ67.js}

@@ -1,4 +1,4 @@
-import { createAuthEndpoint, handleOAuthUserInfo } from './chunk-R62AOMGV.js';
+import { createAuthEndpoint, handleOAuthUserInfo, sessionMiddleware, BASE_ERROR_CODES } from './chunk-SCXZXQTZ.js';
 import { createAuthorizationURL, validateAuthorizationCode } from './chunk-R42K7GPF.js';
 import { setSessionCookie } from './chunk-QQGZ3XGI.js';
 import { generateState, parseState } from './chunk-ZFUBVSZD.js';
@@ -309,7 +309,7 @@ var genericOAuth = (options) => {
           }
           let tokens = void 0;
           const parsedState = await parseState(ctx);
-          const { callbackURL, codeVerifier, errorURL, newUserURL } = parsedState;
+          const { callbackURL, codeVerifier, errorURL, newUserURL, link } = parsedState;
           const code = ctx.query.code;
           let finalTokenUrl = provider.tokenUrl;
           let finalUserInfoUrl = provider.userInfoUrl;
@@ -361,6 +361,27 @@ var genericOAuth = (options) => {
             );
           }
           const mapUser = provider.mapProfileToUser ? await provider.mapProfileToUser(userInfo) : null;
+          if (link) {
+            if (link.email !== userInfo.email.toLowerCase()) {
+              return redirectOnError("email_doesn't_match");
+            }
+            const newAccount = await ctx.context.internalAdapter.createAccount({
+              userId: link.userId,
+              providerId: provider.providerId,
+              accountId: userInfo.id
+            });
+            if (!newAccount) {
+              return redirectOnError("unable_to_link_account");
+            }
+            let toRedirectTo2;
+            try {
+              const url = callbackURL;
+              toRedirectTo2 = url.toString();
+            } catch {
+              toRedirectTo2 = callbackURL;
+            }
+            throw ctx.redirect(toRedirectTo2);
+          }
           const result = await handleOAuthUserInfo(ctx, {
             userInfo: {
               ...userInfo,
@@ -395,6 +416,93 @@ var genericOAuth = (options) => {
           }
           throw ctx.redirect(toRedirectTo);
         }
+      ),
+      oAuth2LinkAccount: createAuthEndpoint(
+        "/oauth2/link",
+        {
+          method: "POST",
+          body: z.object({
+            providerId: z.string(),
+            callbackURL: z.string()
+          }),
+          use: [sessionMiddleware]
+        },
+        async (c) => {
+          const session = c.context.session;
+          const account = await c.context.internalAdapter.findAccounts(
+            session.user.id
+          );
+          const existingAccount = account.find(
+            (a) => a.providerId === c.body.providerId
+          );
+          if (existingAccount) {
+            throw new APIError("BAD_REQUEST", {
+              message: BASE_ERROR_CODES.SOCIAL_ACCOUNT_ALREADY_LINKED
+            });
+          }
+          const provider = options.config.find(
+            (p) => p.providerId === c.body.providerId
+          );
+          if (!provider) {
+            throw new APIError("NOT_FOUND", {
+              message: BASE_ERROR_CODES.PROVIDER_NOT_FOUND
+            });
+          }
+          const {
+            providerId,
+            clientId,
+            clientSecret,
+            redirectURI,
+            authorizationUrl,
+            discoveryUrl,
+            pkce,
+            scopes
+          } = provider;
+          let finalAuthUrl = authorizationUrl;
+          if (!finalAuthUrl) {
+            if (!discoveryUrl) {
+              throw new APIError("BAD_REQUEST", {
+                message: ERROR_CODES.INVALID_OAUTH_CONFIGURATION
+              });
+            }
+            const discovery = await betterFetch(discoveryUrl, {
+              onError(context) {
+                c.context.logger.error(context.error.message, context.error, {
+                  discoveryUrl
+                });
+              }
+            });
+            if (discovery.data) {
+              finalAuthUrl = discovery.data.authorization_endpoint;
+            }
+          }
+          if (!finalAuthUrl) {
+            throw new APIError("BAD_REQUEST", {
+              message: ERROR_CODES.INVALID_OAUTH_CONFIGURATION
+            });
+          }
+          const state = await generateState(c, {
+            userId: session.user.id,
+            email: session.user.email
+          });
+          const url = await createAuthorizationURL({
+            id: providerId,
+            options: {
+              clientId,
+              clientSecret,
+              redirectURI: redirectURI || `${c.context.baseURL}/oauth2/callback`
+            },
+            authorizationEndpoint: finalAuthUrl,
+            state: state.state,
+            codeVerifier: pkce ? state.codeVerifier : void 0,
+            scopes: scopes || [],
+            redirectURI: `${c.context.baseURL}/oauth2/callback/${providerId}`
+          });
+          return c.json({
+            url: url.toString(),
+            redirect: true
+          });
+        }
       )
     },
     $ERROR_CODES: ERROR_CODES

package/dist/{chunk-6QI5735F.js → chunk-ZKMUJOIP.js}

@@ -1,4 +1,4 @@
-import { createAuthEndpoint, createAuthMiddleware, getSessionFromCtx, APIError } from './chunk-R62AOMGV.js';
+import { createAuthEndpoint, createAuthMiddleware, getSessionFromCtx, APIError } from './chunk-SCXZXQTZ.js';
 import { getOrigin } from './chunk-XFCIANZX.js';
 import { setSessionCookie, parseSetCookieHeader } from './chunk-QQGZ3XGI.js';
 import { mergeSchema } from './chunk-HZBNUY7E.js';