better-auth 1.3.1 → 1.3.2

package/dist/shared/{better-auth.BP6KhZxK.mjs → better-auth.D1SaVuxk.mjs}

@@ -3,7 +3,7 @@ import { importJWK, SignJWT, generateKeyPair, exportJWK } from 'jose';
 import { B as BetterAuthError } from './better-auth.DdzSJf-n.mjs';
 import { symmetricEncrypt, symmetricDecrypt } from '../crypto/index.mjs';
 import 'better-call';
-import { i as createAuthMiddleware, j as createAuthEndpoint, l as sessionMiddleware } from './better-auth.BOumacvv.mjs';
+import { i as createAuthMiddleware, j as createAuthEndpoint, l as sessionMiddleware } from './better-auth.D4HhkCZJ.mjs';
 import 'zod/v4';
 import './better-auth.8zoxzg-F.mjs';
 import '@better-auth/utils/base64';

package/dist/shared/{better-auth.BOumacvv.mjs → better-auth.D4HhkCZJ.mjs}

@@ -1516,12 +1516,13 @@ async function validateAuthorizationCode({
   options.clientKey && body.set("client_key", options.clientKey);
   deviceId && body.set("device_id", deviceId);
   body.set("redirect_uri", options.redirectURI || redirectURI);
+  body.set("client_id", options.clientId);
   if (authentication === "basic") {
-    requestHeaders["authorization"] = base64.encode(
+    const encodedCredentials = base64.encode(
       `${options.clientId}:${options.clientSecret}`
     );
+    requestHeaders["authorization"] = `Basic ${encodedCredentials}`;
   } else {
-    body.set("client_id", options.clientId);
     body.set("client_secret", options.clientSecret);
   }
   for (const [key, value] of Object.entries(additionalParams)) {
@@ -2654,7 +2655,7 @@ const twitter = (options) => {
       return validateAuthorizationCode({
         code,
         codeVerifier,
-        authentication: "post",
+        authentication: "basic",
         redirectURI,
         options,
         tokenEndpoint: "https://api.x.com/2/oauth2/token"

package/dist/shared/{better-auth.PchrD52N.d.cts → better-auth.DEgvs2nh.d.cts}

@@ -1,4 +1,4 @@
-import { G as GenericEndpointContext } from './better-auth.Cgjn2thr.cjs';
+import { G as GenericEndpointContext } from './better-auth.CiGummYu.cjs';
 
 declare function generateState(c: GenericEndpointContext, link?: {
     email: string;

package/dist/shared/{better-auth._di0pH6c.mjs → better-auth.DGaVMVAI.mjs}

@@ -1,4 +1,4 @@
-import { i as createAuthMiddleware, l as sessionMiddleware } from './better-auth.BOumacvv.mjs';
+import { i as createAuthMiddleware, l as sessionMiddleware } from './better-auth.D4HhkCZJ.mjs';
 import 'better-call';
 import * as z from 'zod/v4';
 import './better-auth.8zoxzg-F.mjs';

package/dist/shared/{better-auth.PS9uuCnX.d.ts → better-auth.DPa2nz5L.d.ts}

@@ -1,5 +1,5 @@
 import { L as LiteralString, a as Prettify } from './better-auth.ZSfSbnQT.js';
-import * as zod_v4 from 'zod/v4';
+import * as z from 'zod/v4';
 import * as jose from 'jose';
 
 interface OAuth2Tokens {
@@ -2801,8 +2801,8 @@ declare const socialProviders: {
     };
 };
 declare const socialProviderList: ["github", ...(keyof typeof socialProviders)[]];
-declare const SocialProviderListEnum: zod_v4.ZodType<SocialProviderList[number] | (string & {})>;
-type SocialProvider = zod_v4.infer<typeof SocialProviderListEnum>;
+declare const SocialProviderListEnum: z.ZodType<SocialProviderList[number] | (string & {})>;
+type SocialProvider = z.infer<typeof SocialProviderListEnum>;
 type SocialProviders = {
     [K in SocialProviderList[number]]?: Prettify<Parameters<(typeof socialProviders)[K]>[0] & {
         enabled?: boolean;

package/dist/shared/{better-auth.VKKx-2JU.mjs → better-auth.DR6QsC6j.mjs}

@@ -1,6 +1,6 @@
 import { APIError } from 'better-call';
 import * as z from 'zod/v4';
-import { j as createAuthEndpoint, k as getSessionFromCtx, l as sessionMiddleware, B as BASE_ERROR_CODES, a2 as requestOnlySessionMiddleware } from './better-auth.BOumacvv.mjs';
+import { j as createAuthEndpoint, k as getSessionFromCtx, l as sessionMiddleware, B as BASE_ERROR_CODES, a2 as requestOnlySessionMiddleware } from './better-auth.D4HhkCZJ.mjs';
 import './better-auth.8zoxzg-F.mjs';
 import '@better-auth/utils/base64';
 import '@better-auth/utils/hmac';
@@ -9,7 +9,7 @@ import './better-auth.n2KFGwjY.mjs';
 import { g as getDate } from './better-auth.CW6D9eSx.mjs';
 import { B as BetterAuthError } from './better-auth.DdzSJf-n.mjs';
 import { p as parseJSON } from './better-auth.ffWeg50w.mjs';
-import { o as orgMiddleware, a as orgSessionMiddleware, t as teamSchema } from './better-auth._di0pH6c.mjs';
+import { o as orgMiddleware, a as orgSessionMiddleware, t as teamSchema } from './better-auth.DGaVMVAI.mjs';
 import { setSessionCookie } from '../cookies/index.mjs';
 import './better-auth.DBGfIDnh.mjs';
 import 'defu';
@@ -312,6 +312,25 @@ const getOrgAdapter = (context, options) => {
       });
       return organization;
     },
+    checkMembership: async ({
+      userId,
+      organizationId
+    }) => {
+      const member = await adapter.findOne({
+        model: "member",
+        where: [
+          {
+            field: "userId",
+            value: userId
+          },
+          {
+            field: "organizationId",
+            value: organizationId
+          }
+        ]
+      });
+      return member;
+    },
     /**
      * @requires db
      */
@@ -2496,23 +2515,26 @@ const setActiveOrganization = (options) => {
         }
         organizationId = sessionOrgId;
       }
-      const organization = await adapter.findFullOrganization({
-        organizationId,
-        isSlug: !!ctx.body.organizationSlug
+      const isMember = await adapter.checkMembership({
+        userId: session.user.id,
+        organizationId
       });
-      const isMember = organization?.members.find(
-        (member) => member.userId === session.user.id
-      );
       if (!isMember) {
         await adapter.setActiveOrganization(session.session.token, null);
         throw new APIError("FORBIDDEN", {
           message: ORGANIZATION_ERROR_CODES.USER_IS_NOT_A_MEMBER_OF_THE_ORGANIZATION
         });
       }
+      let organization = await adapter.findOrganizationById(organizationId);
       if (!organization) {
-        throw new APIError("BAD_REQUEST", {
-          message: ORGANIZATION_ERROR_CODES.ORGANIZATION_NOT_FOUND
-        });
+        if (ctx.body.organizationSlug) {
+          organization = await adapter.findOrganizationBySlug(organizationId);
+        }
+        if (!organization) {
+          throw new APIError("BAD_REQUEST", {
+            message: ORGANIZATION_ERROR_CODES.ORGANIZATION_NOT_FOUND
+          });
+        }
       }
       const updatedSession = await adapter.setActiveOrganization(
         session.session.token,

package/dist/shared/{better-auth.ByEh_r9h.d.mts → better-auth.DbqVX6sp.d.mts}

@@ -1,4 +1,4 @@
-import { h as BetterAuthPlugin, B as BetterAuthOptions, ad as InferFieldsInputClient, ab as InferFieldsOutput, U as User, S as Session, n as Auth } from './better-auth.KpzJUkxw.mjs';
+import { h as BetterAuthPlugin, B as BetterAuthOptions, ad as InferFieldsInputClient, ab as InferFieldsOutput, U as User, S as Session, n as Auth } from './better-auth.CePXeKag.mjs';
 import { BetterFetchOption, BetterFetchResponse, BetterFetch, BetterFetchPlugin } from '@better-fetch/fetch';
 import { WritableAtom, Atom } from 'nanostores';
 import { U as UnionToIntersection, H as HasRequiredKeys, a as Prettify, L as LiteralString, S as StripEmptyObjects } from './better-auth.ZSfSbnQT.mjs';