better-auth 1.2.6-beta.7 → 1.2.7-beta.1

package/dist/plugins/bearer/index.d.ts

@@ -1,8 +1,8 @@
 import * as better_call from 'better-call';
-import { H as HookEndpointContext } from '../../shared/better-auth.DU2QNVc_.js';
-import '../../shared/better-auth.Bi8FQwDD.js';
+import { H as HookEndpointContext } from '../../shared/better-auth.CA2hFK4N.js';
+import '../../shared/better-auth.CYegVoq1.js';
 import 'zod';
-import '../../shared/better-auth.BANAxdkL.js';
+import '../../shared/better-auth.DNTAFSt1.js';
 import 'jose';
 import 'kysely';
 import 'better-sqlite3';

package/dist/plugins/bearer/index.mjs

@@ -3,10 +3,10 @@ import '../../shared/better-auth.8zoxzg-F.mjs';
 import '@better-auth/utils/base64';
 import { createHMAC } from '@better-auth/utils/hmac';
 import { parseSetCookieHeader } from '../../cookies/index.mjs';
-import { c as createAuthMiddleware } from '../../shared/better-auth.D4jH-sJA.mjs';
+import { c as createAuthMiddleware } from '../../shared/better-auth.CWwVo_61.mjs';
 import 'zod';
-import '../../shared/better-auth.CepcSj5H.mjs';
-import '../../shared/better-auth.DH3YjMQH.mjs';
+import '../../shared/better-auth.Cc72UxUH.mjs';
+import '../../shared/better-auth.Cqykj82J.mjs';
 import 'defu';
 import '../../shared/better-auth.DdzSJf-n.mjs';
 import '../../shared/better-auth.CW6D9eSx.mjs';

package/dist/plugins/captcha/index.cjs

@@ -2,22 +2,31 @@
 
 const fetch = require('@better-fetch/fetch');
 
-const defaultEndpoints = ["/sign-up", "/sign-in", "/forget-password"];
+const defaultEndpoints = [
+  "/sign-up/email",
+  "/sign-in/email",
+  "/forget-password"
+];
 const Providers = {
   CLOUDFLARE_TURNSTILE: "cloudflare-turnstile",
-  GOOGLE_RECAPTCHA: "google-recaptcha"
+  GOOGLE_RECAPTCHA: "google-recaptcha",
+  HCAPTCHA: "hcaptcha"
 };
 const siteVerifyMap = {
   [Providers.CLOUDFLARE_TURNSTILE]: "https://challenges.cloudflare.com/turnstile/v0/siteverify",
-  [Providers.GOOGLE_RECAPTCHA]: "https://www.google.com/recaptcha/api/siteverify"
+  [Providers.GOOGLE_RECAPTCHA]: "https://www.google.com/recaptcha/api/siteverify",
+  [Providers.HCAPTCHA]: "https://api.hcaptcha.com/siteverify"
 };
 
-const CAPTCHA_ERROR_CODES = {
-  MISSING_RESPONSE: "Missing CAPTCHA response",
-  SERVICE_UNAVAILABLE: "CAPTCHA service unavailable",
+const EXTERNAL_ERROR_CODES = {
   VERIFICATION_FAILED: "Captcha verification failed",
+  MISSING_RESPONSE: "Missing CAPTCHA response",
   UNKNOWN_ERROR: "Something went wrong"
 };
+const INTERNAL_ERROR_CODES = {
+  MISSING_SECRET_KEY: "Missing secret key",
+  SERVICE_UNAVAILABLE: "CAPTCHA service unavailable"
+};
 
 const middlewareResponse = ({ message, status }) => ({
   response: new Response(
@@ -33,59 +42,100 @@ const middlewareResponse = ({ message, status }) => ({
 const cloudflareTurnstile = async ({
   siteVerifyURL,
   captchaResponse,
-  secretKey
+  secretKey,
+  remoteIP
 }) => {
-  const response = await fetch.betterFetch(
-    siteVerifyURL,
-    {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({
-        secret: secretKey,
-        response: captchaResponse
-      })
-    }
-  );
+  const response = await fetch.betterFetch(siteVerifyURL, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({
+      secret: secretKey,
+      response: captchaResponse,
+      ...remoteIP && { remoteip: remoteIP }
+    })
+  });
   if (!response.data || response.error) {
-    return middlewareResponse({
-      message: CAPTCHA_ERROR_CODES.SERVICE_UNAVAILABLE,
-      status: 503
-    });
+    throw new Error(INTERNAL_ERROR_CODES.SERVICE_UNAVAILABLE);
   }
   if (!response.data.success) {
     return middlewareResponse({
-      message: CAPTCHA_ERROR_CODES.VERIFICATION_FAILED,
+      message: EXTERNAL_ERROR_CODES.VERIFICATION_FAILED,
       status: 403
     });
   }
   return void 0;
 };
 
-const googleReCAPTCHA = async ({
+const encodeToURLParams = (obj) => {
+  if (typeof obj !== "object" || obj === null || Array.isArray(obj)) {
+    throw new Error("Input must be a non-null object.");
+  }
+  const params = new URLSearchParams();
+  for (const [key, value] of Object.entries(obj)) {
+    if (value !== void 0 && value !== null) {
+      params.append(key, String(value));
+    }
+  }
+  return params.toString();
+};
+
+const isV3 = (response) => {
+  return "score" in response && typeof response.score === "number";
+};
+const googleRecaptcha = async ({
   siteVerifyURL,
   captchaResponse,
-  secretKey
+  secretKey,
+  minScore = 0.5,
+  remoteIP
 }) => {
   const response = await fetch.betterFetch(
     siteVerifyURL,
     {
       method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      body: encodeToURLParams({
         secret: secretKey,
-        response: captchaResponse
+        response: captchaResponse,
+        ...remoteIP && { remoteip: remoteIP }
       })
     }
   );
   if (!response.data || response.error) {
+    throw new Error(INTERNAL_ERROR_CODES.SERVICE_UNAVAILABLE);
+  }
+  if (!response.data.success || isV3(response.data) && response.data.score < minScore) {
     return middlewareResponse({
-      message: CAPTCHA_ERROR_CODES.SERVICE_UNAVAILABLE,
-      status: 503
+      message: EXTERNAL_ERROR_CODES.VERIFICATION_FAILED,
+      status: 403
     });
   }
+  return void 0;
+};
+
+const hCaptcha = async ({
+  siteVerifyURL,
+  captchaResponse,
+  secretKey,
+  siteKey,
+  remoteIP
+}) => {
+  const response = await fetch.betterFetch(siteVerifyURL, {
+    method: "POST",
+    headers: { "Content-Type": "application/x-www-form-urlencoded" },
+    body: encodeToURLParams({
+      secret: secretKey,
+      response: captchaResponse,
+      ...siteKey && { sitekey: siteKey },
+      ...remoteIP && { remoteip: remoteIP }
+    })
+  });
+  if (!response.data || response.error) {
+    throw new Error(INTERNAL_ERROR_CODES.SERVICE_UNAVAILABLE);
+  }
   if (!response.data.success) {
     return middlewareResponse({
-      message: CAPTCHA_ERROR_CODES.VERIFICATION_FAILED,
+      message: EXTERNAL_ERROR_CODES.VERIFICATION_FAILED,
       status: 403
     });
   }
@@ -94,37 +144,52 @@ const googleReCAPTCHA = async ({
 
 const captcha = (options) => ({
   id: "captcha",
-  onRequest: async (request) => {
+  onRequest: async (request, ctx) => {
     try {
-      if (request.method !== "POST") return void 0;
       const endpoints = options.endpoints?.length ? options.endpoints : defaultEndpoints;
       if (!endpoints.some((endpoint) => request.url.includes(endpoint)))
-        return;
+        return void 0;
+      if (!options.secretKey) {
+        throw new Error(INTERNAL_ERROR_CODES.MISSING_SECRET_KEY);
+      }
       const captchaResponse = request.headers.get("x-captcha-response");
+      const remoteUserIP = request.headers.get("x-captcha-user-remote-ip") ?? void 0;
       if (!captchaResponse) {
         return middlewareResponse({
-          message: CAPTCHA_ERROR_CODES.MISSING_RESPONSE,
+          message: EXTERNAL_ERROR_CODES.MISSING_RESPONSE,
           status: 400
         });
       }
       const siteVerifyURL = options.siteVerifyURLOverride || siteVerifyMap[options.provider];
+      const handlerParams = {
+        siteVerifyURL,
+        captchaResponse,
+        secretKey: options.secretKey,
+        remoteIP: remoteUserIP
+      };
       if (options.provider === Providers.CLOUDFLARE_TURNSTILE) {
-        return await cloudflareTurnstile({
-          secretKey: options.secretKey,
-          captchaResponse,
-          siteVerifyURL
-        });
+        return await cloudflareTurnstile(handlerParams);
       }
       if (options.provider === Providers.GOOGLE_RECAPTCHA) {
-        return await googleReCAPTCHA({
-          secretKey: options.secretKey,
-          captchaResponse,
-          siteVerifyURL
+        return await googleRecaptcha({
+          ...handlerParams,
+          minScore: options.minScore
+        });
+      }
+      if (options.provider === Providers.HCAPTCHA) {
+        return await hCaptcha({
+          ...handlerParams,
+          siteKey: options.siteKey
         });
       }
     } catch (_error) {
+      const errorMessage = _error instanceof Error ? _error.message : void 0;
+      ctx.logger.error(errorMessage ?? "Unknown error", {
+        endpoint: request.url,
+        message: _error
+      });
       return middlewareResponse({
-        message: CAPTCHA_ERROR_CODES.UNKNOWN_ERROR,
+        message: EXTERNAL_ERROR_CODES.UNKNOWN_ERROR,
         status: 500
       });
     }

package/dist/plugins/captcha/index.d.cts

@@ -1,21 +1,41 @@
+import { l as AuthContext } from '../../shared/better-auth.BcU1Kjyq.cjs';
+import '../../shared/better-auth.CYegVoq1.cjs';
+import 'zod';
+import '../../shared/better-auth.DTiSPWEk.cjs';
+import 'jose';
+import 'kysely';
+import 'better-call';
+import 'better-sqlite3';
+
 declare const Providers: {
     readonly CLOUDFLARE_TURNSTILE: "cloudflare-turnstile";
     readonly GOOGLE_RECAPTCHA: "google-recaptcha";
+    readonly HCAPTCHA: "hcaptcha";
 };
 
-type Provider = (typeof Providers)[keyof typeof Providers];
-
-interface CaptchaOptions {
-    provider: Provider;
+interface BaseCaptchaOptions {
     secretKey: string;
     endpoints?: string[];
     siteVerifyURLOverride?: string;
 }
+interface GoogleRecaptchaOptions extends BaseCaptchaOptions {
+    provider: typeof Providers.GOOGLE_RECAPTCHA;
+    minScore?: number;
+}
+interface CloudflareTurnstileOptions extends BaseCaptchaOptions {
+    provider: typeof Providers.CLOUDFLARE_TURNSTILE;
+}
+interface HCaptchaOptions extends BaseCaptchaOptions {
+    provider: typeof Providers.HCAPTCHA;
+    siteKey?: string;
+}
+type CaptchaOptions = GoogleRecaptchaOptions | CloudflareTurnstileOptions | HCaptchaOptions;
+
 declare const captcha: (options: CaptchaOptions) => {
     id: "captcha";
-    onRequest: (request: Request) => Promise<{
+    onRequest: (request: Request, ctx: AuthContext) => Promise<{
         response: Response;
     } | undefined>;
 };
 
-export { type CaptchaOptions, captcha };
+export { captcha };

package/dist/plugins/captcha/index.d.mts

@@ -1,21 +1,41 @@
+import { l as AuthContext } from '../../shared/better-auth.DQ7OSJbI.mjs';
+import '../../shared/better-auth.CYegVoq1.mjs';
+import 'zod';
+import '../../shared/better-auth.B88xucNq.mjs';
+import 'jose';
+import 'kysely';
+import 'better-call';
+import 'better-sqlite3';
+
 declare const Providers: {
     readonly CLOUDFLARE_TURNSTILE: "cloudflare-turnstile";
     readonly GOOGLE_RECAPTCHA: "google-recaptcha";
+    readonly HCAPTCHA: "hcaptcha";
 };
 
-type Provider = (typeof Providers)[keyof typeof Providers];
-
-interface CaptchaOptions {
-    provider: Provider;
+interface BaseCaptchaOptions {
     secretKey: string;
     endpoints?: string[];
     siteVerifyURLOverride?: string;
 }
+interface GoogleRecaptchaOptions extends BaseCaptchaOptions {
+    provider: typeof Providers.GOOGLE_RECAPTCHA;
+    minScore?: number;
+}
+interface CloudflareTurnstileOptions extends BaseCaptchaOptions {
+    provider: typeof Providers.CLOUDFLARE_TURNSTILE;
+}
+interface HCaptchaOptions extends BaseCaptchaOptions {
+    provider: typeof Providers.HCAPTCHA;
+    siteKey?: string;
+}
+type CaptchaOptions = GoogleRecaptchaOptions | CloudflareTurnstileOptions | HCaptchaOptions;
+
 declare const captcha: (options: CaptchaOptions) => {
     id: "captcha";
-    onRequest: (request: Request) => Promise<{
+    onRequest: (request: Request, ctx: AuthContext) => Promise<{
         response: Response;
     } | undefined>;
 };
 
-export { type CaptchaOptions, captcha };
+export { captcha };

package/dist/plugins/captcha/index.d.ts

@@ -1,21 +1,41 @@
+import { l as AuthContext } from '../../shared/better-auth.CA2hFK4N.js';
+import '../../shared/better-auth.CYegVoq1.js';
+import 'zod';
+import '../../shared/better-auth.DNTAFSt1.js';
+import 'jose';
+import 'kysely';
+import 'better-call';
+import 'better-sqlite3';
+
 declare const Providers: {
     readonly CLOUDFLARE_TURNSTILE: "cloudflare-turnstile";
     readonly GOOGLE_RECAPTCHA: "google-recaptcha";
+    readonly HCAPTCHA: "hcaptcha";
 };
 
-type Provider = (typeof Providers)[keyof typeof Providers];
-
-interface CaptchaOptions {
-    provider: Provider;
+interface BaseCaptchaOptions {
     secretKey: string;
     endpoints?: string[];
     siteVerifyURLOverride?: string;
 }
+interface GoogleRecaptchaOptions extends BaseCaptchaOptions {
+    provider: typeof Providers.GOOGLE_RECAPTCHA;
+    minScore?: number;
+}
+interface CloudflareTurnstileOptions extends BaseCaptchaOptions {
+    provider: typeof Providers.CLOUDFLARE_TURNSTILE;
+}
+interface HCaptchaOptions extends BaseCaptchaOptions {
+    provider: typeof Providers.HCAPTCHA;
+    siteKey?: string;
+}
+type CaptchaOptions = GoogleRecaptchaOptions | CloudflareTurnstileOptions | HCaptchaOptions;
+
 declare const captcha: (options: CaptchaOptions) => {
     id: "captcha";
-    onRequest: (request: Request) => Promise<{
+    onRequest: (request: Request, ctx: AuthContext) => Promise<{
         response: Response;
     } | undefined>;
 };
 
-export { type CaptchaOptions, captcha };
+export { captcha };

package/dist/plugins/captcha/index.mjs

@@ -1,21 +1,30 @@
 import { betterFetch } from '@better-fetch/fetch';
 
-const defaultEndpoints = ["/sign-up", "/sign-in", "/forget-password"];
+const defaultEndpoints = [
+  "/sign-up/email",
+  "/sign-in/email",
+  "/forget-password"
+];
 const Providers = {
   CLOUDFLARE_TURNSTILE: "cloudflare-turnstile",
-  GOOGLE_RECAPTCHA: "google-recaptcha"
+  GOOGLE_RECAPTCHA: "google-recaptcha",
+  HCAPTCHA: "hcaptcha"
 };
 const siteVerifyMap = {
   [Providers.CLOUDFLARE_TURNSTILE]: "https://challenges.cloudflare.com/turnstile/v0/siteverify",
-  [Providers.GOOGLE_RECAPTCHA]: "https://www.google.com/recaptcha/api/siteverify"
+  [Providers.GOOGLE_RECAPTCHA]: "https://www.google.com/recaptcha/api/siteverify",
+  [Providers.HCAPTCHA]: "https://api.hcaptcha.com/siteverify"
 };
 
-const CAPTCHA_ERROR_CODES = {
-  MISSING_RESPONSE: "Missing CAPTCHA response",
-  SERVICE_UNAVAILABLE: "CAPTCHA service unavailable",
+const EXTERNAL_ERROR_CODES = {
   VERIFICATION_FAILED: "Captcha verification failed",
+  MISSING_RESPONSE: "Missing CAPTCHA response",
   UNKNOWN_ERROR: "Something went wrong"
 };
+const INTERNAL_ERROR_CODES = {
+  MISSING_SECRET_KEY: "Missing secret key",
+  SERVICE_UNAVAILABLE: "CAPTCHA service unavailable"
+};
 
 const middlewareResponse = ({ message, status }) => ({
   response: new Response(
@@ -31,59 +40,100 @@ const middlewareResponse = ({ message, status }) => ({
 const cloudflareTurnstile = async ({
   siteVerifyURL,
   captchaResponse,
-  secretKey
+  secretKey,
+  remoteIP
 }) => {
-  const response = await betterFetch(
-    siteVerifyURL,
-    {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({
-        secret: secretKey,
-        response: captchaResponse
-      })
-    }
-  );
+  const response = await betterFetch(siteVerifyURL, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({
+      secret: secretKey,
+      response: captchaResponse,
+      ...remoteIP && { remoteip: remoteIP }
+    })
+  });
   if (!response.data || response.error) {
-    return middlewareResponse({
-      message: CAPTCHA_ERROR_CODES.SERVICE_UNAVAILABLE,
-      status: 503
-    });
+    throw new Error(INTERNAL_ERROR_CODES.SERVICE_UNAVAILABLE);
   }
   if (!response.data.success) {
     return middlewareResponse({
-      message: CAPTCHA_ERROR_CODES.VERIFICATION_FAILED,
+      message: EXTERNAL_ERROR_CODES.VERIFICATION_FAILED,
       status: 403
     });
   }
   return void 0;
 };
 
-const googleReCAPTCHA = async ({
+const encodeToURLParams = (obj) => {
+  if (typeof obj !== "object" || obj === null || Array.isArray(obj)) {
+    throw new Error("Input must be a non-null object.");
+  }
+  const params = new URLSearchParams();
+  for (const [key, value] of Object.entries(obj)) {
+    if (value !== void 0 && value !== null) {
+      params.append(key, String(value));
+    }
+  }
+  return params.toString();
+};
+
+const isV3 = (response) => {
+  return "score" in response && typeof response.score === "number";
+};
+const googleRecaptcha = async ({
   siteVerifyURL,
   captchaResponse,
-  secretKey
+  secretKey,
+  minScore = 0.5,
+  remoteIP
 }) => {
   const response = await betterFetch(
     siteVerifyURL,
     {
       method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      body: encodeToURLParams({
         secret: secretKey,
-        response: captchaResponse
+        response: captchaResponse,
+        ...remoteIP && { remoteip: remoteIP }
       })
     }
   );
   if (!response.data || response.error) {
+    throw new Error(INTERNAL_ERROR_CODES.SERVICE_UNAVAILABLE);
+  }
+  if (!response.data.success || isV3(response.data) && response.data.score < minScore) {
     return middlewareResponse({
-      message: CAPTCHA_ERROR_CODES.SERVICE_UNAVAILABLE,
-      status: 503
+      message: EXTERNAL_ERROR_CODES.VERIFICATION_FAILED,
+      status: 403
     });
   }
+  return void 0;
+};
+
+const hCaptcha = async ({
+  siteVerifyURL,
+  captchaResponse,
+  secretKey,
+  siteKey,
+  remoteIP
+}) => {
+  const response = await betterFetch(siteVerifyURL, {
+    method: "POST",
+    headers: { "Content-Type": "application/x-www-form-urlencoded" },
+    body: encodeToURLParams({
+      secret: secretKey,
+      response: captchaResponse,
+      ...siteKey && { sitekey: siteKey },
+      ...remoteIP && { remoteip: remoteIP }
+    })
+  });
+  if (!response.data || response.error) {
+    throw new Error(INTERNAL_ERROR_CODES.SERVICE_UNAVAILABLE);
+  }
   if (!response.data.success) {
     return middlewareResponse({
-      message: CAPTCHA_ERROR_CODES.VERIFICATION_FAILED,
+      message: EXTERNAL_ERROR_CODES.VERIFICATION_FAILED,
       status: 403
     });
   }
@@ -92,37 +142,52 @@ const googleReCAPTCHA = async ({
 
 const captcha = (options) => ({
   id: "captcha",
-  onRequest: async (request) => {
+  onRequest: async (request, ctx) => {
     try {
-      if (request.method !== "POST") return void 0;
       const endpoints = options.endpoints?.length ? options.endpoints : defaultEndpoints;
       if (!endpoints.some((endpoint) => request.url.includes(endpoint)))
-        return;
+        return void 0;
+      if (!options.secretKey) {
+        throw new Error(INTERNAL_ERROR_CODES.MISSING_SECRET_KEY);
+      }
       const captchaResponse = request.headers.get("x-captcha-response");
+      const remoteUserIP = request.headers.get("x-captcha-user-remote-ip") ?? void 0;
       if (!captchaResponse) {
         return middlewareResponse({
-          message: CAPTCHA_ERROR_CODES.MISSING_RESPONSE,
+          message: EXTERNAL_ERROR_CODES.MISSING_RESPONSE,
           status: 400
         });
       }
       const siteVerifyURL = options.siteVerifyURLOverride || siteVerifyMap[options.provider];
+      const handlerParams = {
+        siteVerifyURL,
+        captchaResponse,
+        secretKey: options.secretKey,
+        remoteIP: remoteUserIP
+      };
       if (options.provider === Providers.CLOUDFLARE_TURNSTILE) {
-        return await cloudflareTurnstile({
-          secretKey: options.secretKey,
-          captchaResponse,
-          siteVerifyURL
-        });
+        return await cloudflareTurnstile(handlerParams);
       }
       if (options.provider === Providers.GOOGLE_RECAPTCHA) {
-        return await googleReCAPTCHA({
-          secretKey: options.secretKey,
-          captchaResponse,
-          siteVerifyURL
+        return await googleRecaptcha({
+          ...handlerParams,
+          minScore: options.minScore
+        });
+      }
+      if (options.provider === Providers.HCAPTCHA) {
+        return await hCaptcha({
+          ...handlerParams,
+          siteKey: options.siteKey
         });
       }
     } catch (_error) {
+      const errorMessage = _error instanceof Error ? _error.message : void 0;
+      ctx.logger.error(errorMessage ?? "Unknown error", {
+        endpoint: request.url,
+        message: _error
+      });
       return middlewareResponse({
-        message: CAPTCHA_ERROR_CODES.UNKNOWN_ERROR,
+        message: EXTERNAL_ERROR_CODES.UNKNOWN_ERROR,
         status: 500
       });
     }

package/dist/plugins/custom-session/index.cjs

@@ -2,11 +2,11 @@
 
 const zod = require('zod');
 require('better-call');
-const refreshToken = require('../../shared/better-auth.BDYXUcLv.cjs');
+const refreshToken = require('../../shared/better-auth.Dg0siV5C.cjs');
 require('../../shared/better-auth.DiSjtgs9.cjs');
 require('@better-auth/utils/base64');
 require('@better-auth/utils/hmac');
-require('../../shared/better-auth.C5H9XEzZ.cjs');
+require('../../shared/better-auth.DcWKCjjf.cjs');
 require('../../shared/better-auth.GpOOav9x.cjs');
 require('defu');
 require('../../cookies/index.cjs');
@@ -42,9 +42,6 @@ const customSession = (fn, options) => {
         "/get-session",
         {
           method: "GET",
-          metadata: {
-            CUSTOM_SESSION: true
-          },
           query: zod.z.optional(
             zod.z.object({
               /**
@@ -59,6 +56,28 @@ const customSession = (fn, options) => {
               }).optional()
             })
           ),
+          metadata: {
+            CUSTOM_SESSION: true,
+            openapi: {
+              description: "Get custom session data",
+              responses: {
+                "200": {
+                  description: "Success",
+                  content: {
+                    "application/json": {
+                      schema: {
+                        type: "array",
+                        nullable: true,
+                        items: {
+                          $ref: "#/components/schemas/Session"
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          },
           requireHeaders: true
         },
         async (ctx) => {