better-auth 1.3.21 → 1.3.23

package/dist/shared/{better-auth.BGDp9pBQ.d.cts → better-auth.N3ys23iz.d.cts}

@@ -1,4 +1,4 @@
-import { n as BetterAuthPlugin, B as BetterAuthOptions, ah as InferFieldsInputClient, af as InferFieldsOutput, U as User, S as Session, c as Auth } from './better-auth._WE9Fhqj.cjs';
+import { n as BetterAuthPlugin, B as BetterAuthOptions, ah as InferFieldsInputClient, af as InferFieldsOutput, U as User, S as Session, c as Auth } from './better-auth.DImZeRKY.cjs';
 import { BetterFetchOption, BetterFetchResponse, BetterFetch, BetterFetchPlugin } from '@better-fetch/fetch';
 import { WritableAtom, Atom } from 'nanostores';
 import { U as UnionToIntersection, H as HasRequiredKeys, a as Prettify, L as LiteralString, S as StripEmptyObjects } from './better-auth.DTtXpZYr.cjs';

package/dist/shared/{better-auth.BA4t8YCt.cjs → better-auth.RAAuA8D-.cjs}

@@ -683,7 +683,12 @@ async function generateState(c, link) {
     maxAge: 5 * 60 * 1e3
     // 5 minutes
   });
-  c.setCookie(stateCookie.name, state, stateCookie.attributes);
+  await c.setSignedCookie(
+    stateCookie.name,
+    state,
+    c.context.secret,
+    stateCookie.attributes
+  );
   const data = JSON.stringify({
     callbackURL,
     codeVerifier,
@@ -745,7 +750,10 @@ async function parseState(c) {
     parsedData.errorURL = `${c.context.baseURL}/error`;
   }
   const stateCookie = c.context.createAuthCookie("state");
-  const stateCookieValue = c.getCookie(stateCookie.name);
+  const stateCookieValue = await c.getSignedCookie(
+    stateCookie.name,
+    c.context.secret
+  );
   if (!stateCookieValue || stateCookieValue !== state) {
     const errorURL = c.context.options.onAPIError?.errorURL || `${c.context.baseURL}/error`;
     throw c.redirect(`${errorURL}?error=state_mismatch`);

package/dist/shared/{better-auth.BHPr8J54.d.mts → better-auth.XefKa8DI.d.mts}

@@ -2611,7 +2611,7 @@ declare const cognito: (options: CognitoOptions) => {
     } | null>;
     options: CognitoOptions;
 };
-declare const getCognitoPublicKey: (kid: string, region: string, userPoolId: string) => Promise<CryptoKey | Uint8Array<ArrayBufferLike>>;
+declare const getCognitoPublicKey: (kid: string, region: string, userPoolId: string) => Promise<Uint8Array<ArrayBufferLike> | CryptoKey>;
 
 interface AtlassianProfile {
     account_type?: string;
@@ -2775,7 +2775,7 @@ declare const apple: (options: AppleOptions) => {
     } | null>;
     options: AppleOptions;
 };
-declare const getApplePublicKey: (kid: string) => Promise<CryptoKey | Uint8Array<ArrayBufferLike>>;
+declare const getApplePublicKey: (kid: string) => Promise<Uint8Array<ArrayBufferLike> | CryptoKey>;
 
 declare const socialProviders: {
     apple: (options: AppleOptions) => {

package/dist/shared/{better-auth.HsL9NWdo.d.mts → better-auth.bvByA6N5.d.mts}

@@ -1,4 +1,4 @@
-import { n as BetterAuthPlugin, B as BetterAuthOptions, ah as InferFieldsInputClient, af as InferFieldsOutput, U as User, S as Session, c as Auth } from './better-auth.BFegHNjn.mjs';
+import { n as BetterAuthPlugin, B as BetterAuthOptions, ah as InferFieldsInputClient, af as InferFieldsOutput, U as User, S as Session, c as Auth } from './better-auth.CFtgxZkB.mjs';
 import { BetterFetchOption, BetterFetchResponse, BetterFetch, BetterFetchPlugin } from '@better-fetch/fetch';
 import { WritableAtom, Atom } from 'nanostores';
 import { U as UnionToIntersection, H as HasRequiredKeys, a as Prettify, L as LiteralString, S as StripEmptyObjects } from './better-auth.DTtXpZYr.mjs';

package/dist/shared/{better-auth.D2NikySY.mjs → better-auth.dKMb7G3x.mjs}

@@ -1,7 +1,7 @@
 import * as z from 'zod';
 import { SignJWT } from 'jose';
 import { APIError } from 'better-call';
-import './better-auth.DAXvGuBK.mjs';
+import './better-auth.DGV8LtRu.mjs';
 import { g as getSessionFromCtx, a as createAuthEndpoint, c as createAuthMiddleware, s as sessionMiddleware } from './better-auth.CIqzVuC5.mjs';
 import './better-auth.CiuwFiHM.mjs';
 import { base64Url, base64 } from '@better-auth/utils/base64';

package/dist/shared/{better-auth.7zTmTxT4.d.cts → better-auth.v_lf-jeY.d.cts}

@@ -2611,7 +2611,7 @@ declare const cognito: (options: CognitoOptions) => {
     } | null>;
     options: CognitoOptions;
 };
-declare const getCognitoPublicKey: (kid: string, region: string, userPoolId: string) => Promise<CryptoKey | Uint8Array<ArrayBufferLike>>;
+declare const getCognitoPublicKey: (kid: string, region: string, userPoolId: string) => Promise<Uint8Array<ArrayBufferLike> | CryptoKey>;
 
 interface AtlassianProfile {
     account_type?: string;
@@ -2775,7 +2775,7 @@ declare const apple: (options: AppleOptions) => {
     } | null>;
     options: AppleOptions;
 };
-declare const getApplePublicKey: (kid: string) => Promise<CryptoKey | Uint8Array<ArrayBufferLike>>;
+declare const getApplePublicKey: (kid: string) => Promise<Uint8Array<ArrayBufferLike> | CryptoKey>;
 
 declare const socialProviders: {
     apple: (options: AppleOptions) => {

package/dist/social-providers/index.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
 require('zod');
-const socialProviders_index = require('../shared/better-auth.BA4t8YCt.cjs');
+const socialProviders_index = require('../shared/better-auth.RAAuA8D-.cjs');
 require('../shared/better-auth.CWoe8tep.cjs');
 require('better-call');
 require('../shared/better-auth.C1hdVENX.cjs');

package/dist/social-providers/index.d.cts

@@ -1,3 +1,3 @@
-export { at as AccountStatus, g as AppleNonConformUser, h as AppleOptions, A as AppleProfile, l as AtlassianOptions, k as AtlassianProfile, n as CognitoOptions, C as CognitoProfile, q as DiscordOptions, D as DiscordProfile, u as DropboxOptions, t as DropboxProfile, w as FacebookOptions, F as FacebookProfile, z as FigmaOptions, y as FigmaProfile, E as GithubOptions, G as GithubProfile, R as GitlabOptions, Q as GitlabProfile, V as GoogleOptions, U as GoogleProfile, aA as HuggingFaceOptions, az as HuggingFaceProfile, aG as KakaoOptions, aF as KakaoProfile, Y as KickOptions, X as KickProfile, aL as LineIdTokenPayload, aN as LineOptions, aM as LineUserInfo, I as LinearOptions, L as LinearProfile, M as LinkedInOptions, K as LinkedInProfile, as as LoginType, _ as MicrosoftEntraIDProfile, $ as MicrosoftOptions, aJ as NaverOptions, aI as NaverProfile, a2 as NotionOptions, a1 as NotionProfile, aR as PayPalOptions, aP as PayPalProfile, aQ as PayPalTokenResponse, av as PhoneNumber, au as PronounOption, a5 as RedditOptions, a4 as RedditProfile, a8 as RobloxOptions, a7 as RobloxProfile, ab as SalesforceOptions, aa as SalesforceProfile, aD as SlackOptions, aC as SlackProfile, f as SocialProvider, c as SocialProviderList, e as SocialProviderListEnum, S as SocialProviders, ae as SpotifyOptions, ad as SpotifyProfile, ah as TiktokOptions, ag as TiktokProfile, ak as TwitchOptions, aj as TwitchProfile, an as TwitterOption, am as TwitterProfile, aq as VkOption, ap as VkProfile, ax as ZoomOptions, aw as ZoomProfile, i as apple, m as atlassian, o as cognito, r as discord, v as dropbox, x as facebook, B as figma, j as getApplePublicKey, p as getCognitoPublicKey, H as github, T as gitlab, W as google, aB as huggingface, aH as kakao, Z as kick, aO as line, J as linear, N as linkedin, a0 as microsoft, aK as naver, a3 as notion, aS as paypal, a6 as reddit, a9 as roblox, ac as salesforce, aE as slack, d as socialProviderList, s as socialProviders, af as spotify, ai as tiktok, al as twitch, ao as twitter, ar as vk, ay as zoom } from '../shared/better-auth.7zTmTxT4.cjs';
+export { at as AccountStatus, g as AppleNonConformUser, h as AppleOptions, A as AppleProfile, l as AtlassianOptions, k as AtlassianProfile, n as CognitoOptions, C as CognitoProfile, q as DiscordOptions, D as DiscordProfile, u as DropboxOptions, t as DropboxProfile, w as FacebookOptions, F as FacebookProfile, z as FigmaOptions, y as FigmaProfile, E as GithubOptions, G as GithubProfile, R as GitlabOptions, Q as GitlabProfile, V as GoogleOptions, U as GoogleProfile, aA as HuggingFaceOptions, az as HuggingFaceProfile, aG as KakaoOptions, aF as KakaoProfile, Y as KickOptions, X as KickProfile, aL as LineIdTokenPayload, aN as LineOptions, aM as LineUserInfo, I as LinearOptions, L as LinearProfile, M as LinkedInOptions, K as LinkedInProfile, as as LoginType, _ as MicrosoftEntraIDProfile, $ as MicrosoftOptions, aJ as NaverOptions, aI as NaverProfile, a2 as NotionOptions, a1 as NotionProfile, aR as PayPalOptions, aP as PayPalProfile, aQ as PayPalTokenResponse, av as PhoneNumber, au as PronounOption, a5 as RedditOptions, a4 as RedditProfile, a8 as RobloxOptions, a7 as RobloxProfile, ab as SalesforceOptions, aa as SalesforceProfile, aD as SlackOptions, aC as SlackProfile, f as SocialProvider, c as SocialProviderList, e as SocialProviderListEnum, S as SocialProviders, ae as SpotifyOptions, ad as SpotifyProfile, ah as TiktokOptions, ag as TiktokProfile, ak as TwitchOptions, aj as TwitchProfile, an as TwitterOption, am as TwitterProfile, aq as VkOption, ap as VkProfile, ax as ZoomOptions, aw as ZoomProfile, i as apple, m as atlassian, o as cognito, r as discord, v as dropbox, x as facebook, B as figma, j as getApplePublicKey, p as getCognitoPublicKey, H as github, T as gitlab, W as google, aB as huggingface, aH as kakao, Z as kick, aO as line, J as linear, N as linkedin, a0 as microsoft, aK as naver, a3 as notion, aS as paypal, a6 as reddit, a9 as roblox, ac as salesforce, aE as slack, d as socialProviderList, s as socialProviders, af as spotify, ai as tiktok, al as twitch, ao as twitter, ar as vk, ay as zoom } from '../shared/better-auth.v_lf-jeY.cjs';
 import 'zod';
 import '../shared/better-auth.DTtXpZYr.cjs';

package/dist/social-providers/index.d.mts

@@ -1,3 +1,3 @@
-export { at as AccountStatus, g as AppleNonConformUser, h as AppleOptions, A as AppleProfile, l as AtlassianOptions, k as AtlassianProfile, n as CognitoOptions, C as CognitoProfile, q as DiscordOptions, D as DiscordProfile, u as DropboxOptions, t as DropboxProfile, w as FacebookOptions, F as FacebookProfile, z as FigmaOptions, y as FigmaProfile, E as GithubOptions, G as GithubProfile, R as GitlabOptions, Q as GitlabProfile, V as GoogleOptions, U as GoogleProfile, aA as HuggingFaceOptions, az as HuggingFaceProfile, aG as KakaoOptions, aF as KakaoProfile, Y as KickOptions, X as KickProfile, aL as LineIdTokenPayload, aN as LineOptions, aM as LineUserInfo, I as LinearOptions, L as LinearProfile, M as LinkedInOptions, K as LinkedInProfile, as as LoginType, _ as MicrosoftEntraIDProfile, $ as MicrosoftOptions, aJ as NaverOptions, aI as NaverProfile, a2 as NotionOptions, a1 as NotionProfile, aR as PayPalOptions, aP as PayPalProfile, aQ as PayPalTokenResponse, av as PhoneNumber, au as PronounOption, a5 as RedditOptions, a4 as RedditProfile, a8 as RobloxOptions, a7 as RobloxProfile, ab as SalesforceOptions, aa as SalesforceProfile, aD as SlackOptions, aC as SlackProfile, f as SocialProvider, c as SocialProviderList, e as SocialProviderListEnum, S as SocialProviders, ae as SpotifyOptions, ad as SpotifyProfile, ah as TiktokOptions, ag as TiktokProfile, ak as TwitchOptions, aj as TwitchProfile, an as TwitterOption, am as TwitterProfile, aq as VkOption, ap as VkProfile, ax as ZoomOptions, aw as ZoomProfile, i as apple, m as atlassian, o as cognito, r as discord, v as dropbox, x as facebook, B as figma, j as getApplePublicKey, p as getCognitoPublicKey, H as github, T as gitlab, W as google, aB as huggingface, aH as kakao, Z as kick, aO as line, J as linear, N as linkedin, a0 as microsoft, aK as naver, a3 as notion, aS as paypal, a6 as reddit, a9 as roblox, ac as salesforce, aE as slack, d as socialProviderList, s as socialProviders, af as spotify, ai as tiktok, al as twitch, ao as twitter, ar as vk, ay as zoom } from '../shared/better-auth.BHPr8J54.mjs';
+export { at as AccountStatus, g as AppleNonConformUser, h as AppleOptions, A as AppleProfile, l as AtlassianOptions, k as AtlassianProfile, n as CognitoOptions, C as CognitoProfile, q as DiscordOptions, D as DiscordProfile, u as DropboxOptions, t as DropboxProfile, w as FacebookOptions, F as FacebookProfile, z as FigmaOptions, y as FigmaProfile, E as GithubOptions, G as GithubProfile, R as GitlabOptions, Q as GitlabProfile, V as GoogleOptions, U as GoogleProfile, aA as HuggingFaceOptions, az as HuggingFaceProfile, aG as KakaoOptions, aF as KakaoProfile, Y as KickOptions, X as KickProfile, aL as LineIdTokenPayload, aN as LineOptions, aM as LineUserInfo, I as LinearOptions, L as LinearProfile, M as LinkedInOptions, K as LinkedInProfile, as as LoginType, _ as MicrosoftEntraIDProfile, $ as MicrosoftOptions, aJ as NaverOptions, aI as NaverProfile, a2 as NotionOptions, a1 as NotionProfile, aR as PayPalOptions, aP as PayPalProfile, aQ as PayPalTokenResponse, av as PhoneNumber, au as PronounOption, a5 as RedditOptions, a4 as RedditProfile, a8 as RobloxOptions, a7 as RobloxProfile, ab as SalesforceOptions, aa as SalesforceProfile, aD as SlackOptions, aC as SlackProfile, f as SocialProvider, c as SocialProviderList, e as SocialProviderListEnum, S as SocialProviders, ae as SpotifyOptions, ad as SpotifyProfile, ah as TiktokOptions, ag as TiktokProfile, ak as TwitchOptions, aj as TwitchProfile, an as TwitterOption, am as TwitterProfile, aq as VkOption, ap as VkProfile, ax as ZoomOptions, aw as ZoomProfile, i as apple, m as atlassian, o as cognito, r as discord, v as dropbox, x as facebook, B as figma, j as getApplePublicKey, p as getCognitoPublicKey, H as github, T as gitlab, W as google, aB as huggingface, aH as kakao, Z as kick, aO as line, J as linear, N as linkedin, a0 as microsoft, aK as naver, a3 as notion, aS as paypal, a6 as reddit, a9 as roblox, ac as salesforce, aE as slack, d as socialProviderList, s as socialProviders, af as spotify, ai as tiktok, al as twitch, ao as twitter, ar as vk, ay as zoom } from '../shared/better-auth.XefKa8DI.mjs';
 import 'zod';
 import '../shared/better-auth.DTtXpZYr.mjs';

package/dist/social-providers/index.d.ts

@@ -1,3 +1,3 @@
-export { at as AccountStatus, g as AppleNonConformUser, h as AppleOptions, A as AppleProfile, l as AtlassianOptions, k as AtlassianProfile, n as CognitoOptions, C as CognitoProfile, q as DiscordOptions, D as DiscordProfile, u as DropboxOptions, t as DropboxProfile, w as FacebookOptions, F as FacebookProfile, z as FigmaOptions, y as FigmaProfile, E as GithubOptions, G as GithubProfile, R as GitlabOptions, Q as GitlabProfile, V as GoogleOptions, U as GoogleProfile, aA as HuggingFaceOptions, az as HuggingFaceProfile, aG as KakaoOptions, aF as KakaoProfile, Y as KickOptions, X as KickProfile, aL as LineIdTokenPayload, aN as LineOptions, aM as LineUserInfo, I as LinearOptions, L as LinearProfile, M as LinkedInOptions, K as LinkedInProfile, as as LoginType, _ as MicrosoftEntraIDProfile, $ as MicrosoftOptions, aJ as NaverOptions, aI as NaverProfile, a2 as NotionOptions, a1 as NotionProfile, aR as PayPalOptions, aP as PayPalProfile, aQ as PayPalTokenResponse, av as PhoneNumber, au as PronounOption, a5 as RedditOptions, a4 as RedditProfile, a8 as RobloxOptions, a7 as RobloxProfile, ab as SalesforceOptions, aa as SalesforceProfile, aD as SlackOptions, aC as SlackProfile, f as SocialProvider, c as SocialProviderList, e as SocialProviderListEnum, S as SocialProviders, ae as SpotifyOptions, ad as SpotifyProfile, ah as TiktokOptions, ag as TiktokProfile, ak as TwitchOptions, aj as TwitchProfile, an as TwitterOption, am as TwitterProfile, aq as VkOption, ap as VkProfile, ax as ZoomOptions, aw as ZoomProfile, i as apple, m as atlassian, o as cognito, r as discord, v as dropbox, x as facebook, B as figma, j as getApplePublicKey, p as getCognitoPublicKey, H as github, T as gitlab, W as google, aB as huggingface, aH as kakao, Z as kick, aO as line, J as linear, N as linkedin, a0 as microsoft, aK as naver, a3 as notion, aS as paypal, a6 as reddit, a9 as roblox, ac as salesforce, aE as slack, d as socialProviderList, s as socialProviders, af as spotify, ai as tiktok, al as twitch, ao as twitter, ar as vk, ay as zoom } from '../shared/better-auth.C6qXK08w.js';
+export { at as AccountStatus, g as AppleNonConformUser, h as AppleOptions, A as AppleProfile, l as AtlassianOptions, k as AtlassianProfile, n as CognitoOptions, C as CognitoProfile, q as DiscordOptions, D as DiscordProfile, u as DropboxOptions, t as DropboxProfile, w as FacebookOptions, F as FacebookProfile, z as FigmaOptions, y as FigmaProfile, E as GithubOptions, G as GithubProfile, R as GitlabOptions, Q as GitlabProfile, V as GoogleOptions, U as GoogleProfile, aA as HuggingFaceOptions, az as HuggingFaceProfile, aG as KakaoOptions, aF as KakaoProfile, Y as KickOptions, X as KickProfile, aL as LineIdTokenPayload, aN as LineOptions, aM as LineUserInfo, I as LinearOptions, L as LinearProfile, M as LinkedInOptions, K as LinkedInProfile, as as LoginType, _ as MicrosoftEntraIDProfile, $ as MicrosoftOptions, aJ as NaverOptions, aI as NaverProfile, a2 as NotionOptions, a1 as NotionProfile, aR as PayPalOptions, aP as PayPalProfile, aQ as PayPalTokenResponse, av as PhoneNumber, au as PronounOption, a5 as RedditOptions, a4 as RedditProfile, a8 as RobloxOptions, a7 as RobloxProfile, ab as SalesforceOptions, aa as SalesforceProfile, aD as SlackOptions, aC as SlackProfile, f as SocialProvider, c as SocialProviderList, e as SocialProviderListEnum, S as SocialProviders, ae as SpotifyOptions, ad as SpotifyProfile, ah as TiktokOptions, ag as TiktokProfile, ak as TwitchOptions, aj as TwitchProfile, an as TwitterOption, am as TwitterProfile, aq as VkOption, ap as VkProfile, ax as ZoomOptions, aw as ZoomProfile, i as apple, m as atlassian, o as cognito, r as discord, v as dropbox, x as facebook, B as figma, j as getApplePublicKey, p as getCognitoPublicKey, H as github, T as gitlab, W as google, aB as huggingface, aH as kakao, Z as kick, aO as line, J as linear, N as linkedin, a0 as microsoft, aK as naver, a3 as notion, aS as paypal, a6 as reddit, a9 as roblox, ac as salesforce, aE as slack, d as socialProviderList, s as socialProviders, af as spotify, ai as tiktok, al as twitch, ao as twitter, ar as vk, ay as zoom } from '../shared/better-auth.4SXCyo06.js';
 import 'zod';
 import '../shared/better-auth.DTtXpZYr.js';

package/dist/social-providers/index.mjs

@@ -1,5 +1,5 @@
 import 'zod';
-export { W as SocialProviderListEnum, X as apple, Z as atlassian, _ as cognito, a0 as discord, a1 as dropbox, a2 as facebook, a3 as figma, Y as getApplePublicKey, $ as getCognitoPublicKey, a4 as github, a7 as gitlab, a8 as google, al as huggingface, an as kakao, a9 as kick, ap as line, a5 as linear, a6 as linkedin, aa as microsoft, ao as naver, ab as notion, aq as paypal, ac as reddit, ad as roblox, ae as salesforce, am as slack, V as socialProviderList, U as socialProviders, af as spotify, ag as tiktok, ah as twitch, ai as twitter, aj as vk, ak as zoom } from '../shared/better-auth.DAXvGuBK.mjs';
+export { W as SocialProviderListEnum, X as apple, Z as atlassian, _ as cognito, a0 as discord, a1 as dropbox, a2 as facebook, a3 as figma, Y as getApplePublicKey, $ as getCognitoPublicKey, a4 as github, a7 as gitlab, a8 as google, al as huggingface, an as kakao, a9 as kick, ap as line, a5 as linear, a6 as linkedin, aa as microsoft, ao as naver, ab as notion, aq as paypal, ac as reddit, ad as roblox, ae as salesforce, am as slack, V as socialProviderList, U as socialProviders, af as spotify, ag as tiktok, ah as twitch, ai as twitter, aj as vk, ak as zoom } from '../shared/better-auth.DGV8LtRu.mjs';
 import '../shared/better-auth.CIqzVuC5.mjs';
 import 'better-call';
 import '../shared/better-auth.CW6D9eSx.mjs';

package/dist/test-utils/index.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
 const vitest = require('vitest');
-const auth = require('../shared/better-auth.CKHG0ATr.cjs');
+const auth = require('../shared/better-auth.CXBPmam_.cjs');
 const vanilla = require('../shared/better-auth.C2xLgiCv.cjs');
 const getMigration = require('../shared/better-auth.ZUJMxXV3.cjs');
 require('../shared/better-auth.B6fIklBU.cjs');
@@ -32,9 +32,9 @@ const require$$0$a = require('url');
 require('better-call');
 require('zod');
 require('../shared/better-auth.CWoe8tep.cjs');
-require('../shared/better-auth.BA4t8YCt.cjs');
+require('../shared/better-auth.RAAuA8D-.cjs');
 require('../shared/better-auth.C0qxpMUS.cjs');
-require('../shared/better-auth.BsV61G-v.cjs');
+require('../shared/better-auth.Fn0ZCxWT.cjs');
 require('../plugins/organization/access/index.cjs');
 require('@better-auth/utils/random');
 require('@better-auth/utils/hash');

package/dist/test-utils/index.d.cts

@@ -1,13 +1,13 @@
 import * as nanostores from 'nanostores';
 import * as _better_fetch_fetch from '@better-fetch/fetch';
 import { SuccessContext } from '@better-fetch/fetch';
-import { C as ClientOptions, B as BetterAuthClientPlugin, I as IsSignal, d as InferRoute, c as InferErrorCodes } from '../shared/better-auth.BGDp9pBQ.cjs';
-import { B as BetterAuthOptions, U as User, h as InferAPI, a as Adapter, i as AdditionalSessionFieldsOutput, c as Auth, j as AdditionalUserFieldsOutput, k as InferFieldsFromPlugins, l as InferFieldsFromOptions, m as AdditionalUserFieldsInput, n as BetterAuthPlugin, d as AuthContext, o as InferPluginTypes, p as InferPluginErrorCodes, F as FilterActions, S as Session, s as setCookieToHeader } from '../shared/better-auth._WE9Fhqj.cjs';
+import { C as ClientOptions, B as BetterAuthClientPlugin, I as IsSignal, d as InferRoute, c as InferErrorCodes } from '../shared/better-auth.N3ys23iz.cjs';
+import { B as BetterAuthOptions, U as User, h as InferAPI, a as Adapter, i as AdditionalSessionFieldsOutput, c as Auth, j as AdditionalUserFieldsOutput, k as InferFieldsFromPlugins, l as InferFieldsFromOptions, m as AdditionalUserFieldsInput, n as BetterAuthPlugin, d as AuthContext, o as InferPluginTypes, p as InferPluginErrorCodes, F as FilterActions, S as Session, s as setCookieToHeader } from '../shared/better-auth.DImZeRKY.cjs';
 import * as z from 'zod';
 import * as better_call from 'better-call';
 import { U as UnionToIntersection, S as StripEmptyObjects, a as Prettify } from '../shared/better-auth.DTtXpZYr.cjs';
 import * as zod_v4_core from 'zod/v4/core';
-import { O as OAuth2Tokens, a as OAuth2UserInfo } from '../shared/better-auth.7zTmTxT4.cjs';
+import { O as OAuth2Tokens, a as OAuth2UserInfo } from '../shared/better-auth.v_lf-jeY.cjs';
 import { Kysely } from 'kysely';
 import 'better-sqlite3';
 import 'bun:sqlite';

package/dist/test-utils/index.d.mts

@@ -1,13 +1,13 @@
 import * as nanostores from 'nanostores';
 import * as _better_fetch_fetch from '@better-fetch/fetch';
 import { SuccessContext } from '@better-fetch/fetch';
-import { C as ClientOptions, B as BetterAuthClientPlugin, I as IsSignal, d as InferRoute, c as InferErrorCodes } from '../shared/better-auth.HsL9NWdo.mjs';
-import { B as BetterAuthOptions, U as User, h as InferAPI, a as Adapter, i as AdditionalSessionFieldsOutput, c as Auth, j as AdditionalUserFieldsOutput, k as InferFieldsFromPlugins, l as InferFieldsFromOptions, m as AdditionalUserFieldsInput, n as BetterAuthPlugin, d as AuthContext, o as InferPluginTypes, p as InferPluginErrorCodes, F as FilterActions, S as Session, s as setCookieToHeader } from '../shared/better-auth.BFegHNjn.mjs';
+import { C as ClientOptions, B as BetterAuthClientPlugin, I as IsSignal, d as InferRoute, c as InferErrorCodes } from '../shared/better-auth.bvByA6N5.mjs';
+import { B as BetterAuthOptions, U as User, h as InferAPI, a as Adapter, i as AdditionalSessionFieldsOutput, c as Auth, j as AdditionalUserFieldsOutput, k as InferFieldsFromPlugins, l as InferFieldsFromOptions, m as AdditionalUserFieldsInput, n as BetterAuthPlugin, d as AuthContext, o as InferPluginTypes, p as InferPluginErrorCodes, F as FilterActions, S as Session, s as setCookieToHeader } from '../shared/better-auth.CFtgxZkB.mjs';
 import * as z from 'zod';
 import * as better_call from 'better-call';
 import { U as UnionToIntersection, S as StripEmptyObjects, a as Prettify } from '../shared/better-auth.DTtXpZYr.mjs';
 import * as zod_v4_core from 'zod/v4/core';
-import { O as OAuth2Tokens, a as OAuth2UserInfo } from '../shared/better-auth.BHPr8J54.mjs';
+import { O as OAuth2Tokens, a as OAuth2UserInfo } from '../shared/better-auth.XefKa8DI.mjs';
 import { Kysely } from 'kysely';
 import 'better-sqlite3';
 import 'bun:sqlite';

package/dist/test-utils/index.d.ts

@@ -1,13 +1,13 @@
 import * as nanostores from 'nanostores';
 import * as _better_fetch_fetch from '@better-fetch/fetch';
 import { SuccessContext } from '@better-fetch/fetch';
-import { C as ClientOptions, B as BetterAuthClientPlugin, I as IsSignal, d as InferRoute, c as InferErrorCodes } from '../shared/better-auth.p1cIDE6Y.js';
-import { B as BetterAuthOptions, U as User, h as InferAPI, a as Adapter, i as AdditionalSessionFieldsOutput, c as Auth, j as AdditionalUserFieldsOutput, k as InferFieldsFromPlugins, l as InferFieldsFromOptions, m as AdditionalUserFieldsInput, n as BetterAuthPlugin, d as AuthContext, o as InferPluginTypes, p as InferPluginErrorCodes, F as FilterActions, S as Session, s as setCookieToHeader } from '../shared/better-auth.nTGSkBy-.js';
+import { C as ClientOptions, B as BetterAuthClientPlugin, I as IsSignal, d as InferRoute, c as InferErrorCodes } from '../shared/better-auth.CYEJMfBK.js';
+import { B as BetterAuthOptions, U as User, h as InferAPI, a as Adapter, i as AdditionalSessionFieldsOutput, c as Auth, j as AdditionalUserFieldsOutput, k as InferFieldsFromPlugins, l as InferFieldsFromOptions, m as AdditionalUserFieldsInput, n as BetterAuthPlugin, d as AuthContext, o as InferPluginTypes, p as InferPluginErrorCodes, F as FilterActions, S as Session, s as setCookieToHeader } from '../shared/better-auth.BYvWEjMc.js';
 import * as z from 'zod';
 import * as better_call from 'better-call';
 import { U as UnionToIntersection, S as StripEmptyObjects, a as Prettify } from '../shared/better-auth.DTtXpZYr.js';
 import * as zod_v4_core from 'zod/v4/core';
-import { O as OAuth2Tokens, a as OAuth2UserInfo } from '../shared/better-auth.C6qXK08w.js';
+import { O as OAuth2Tokens, a as OAuth2UserInfo } from '../shared/better-auth.4SXCyo06.js';
 import { Kysely } from 'kysely';
 import 'better-sqlite3';
 import 'bun:sqlite';

package/dist/test-utils/index.mjs

@@ -1,5 +1,5 @@
 import { afterAll } from 'vitest';
-import { b as betterAuth } from '../shared/better-auth.DHp6DNTP.mjs';
+import { b as betterAuth } from '../shared/better-auth.C84XtErM.mjs';
 import { c as createAuthClient } from '../shared/better-auth.BoY6Vo7c.mjs';
 import { e as getMigrations, a as getAdapter } from '../shared/better-auth.Bb80Qhal.mjs';
 import '../shared/better-auth.CiuwFiHM.mjs';
@@ -30,9 +30,9 @@ import require$$0$a from 'url';
 import 'better-call';
 import 'zod';
 import '../shared/better-auth.CIqzVuC5.mjs';
-import '../shared/better-auth.DAXvGuBK.mjs';
+import '../shared/better-auth.DGV8LtRu.mjs';
 import '../shared/better-auth.Dlx1jCB2.mjs';
-import '../shared/better-auth.BWSNYlLl.mjs';
+import '../shared/better-auth.CAJUiXTA.mjs';
 import '../plugins/organization/access/index.mjs';
 import '@better-auth/utils/random';
 import '@better-auth/utils/hash';

package/dist/types/index.d.cts

@@ -1,10 +1,10 @@
-export { Q as Account, a as Adapter, $ as AdapterInstance, _ as AdapterSchemaCreation, P as AdditionalSessionFieldsInput, i as AdditionalSessionFieldsOutput, m as AdditionalUserFieldsInput, j as AdditionalUserFieldsOutput, d as AuthContext, v as AuthPluginSchema, B as BetterAuthOptions, n as BetterAuthPlugin, F as FilterActions, a1 as FilteredAPI, G as GenericEndpointContext, H as HookEndpointContext, h as InferAPI, I as InferOptionSchema, p as InferPluginErrorCodes, o as InferPluginTypes, f as InferSession, a2 as InferSessionAPI, e as InferUser, N as Models, R as RateLimit, a0 as SecondaryStorage, S as Session, Z as TransactionAdapter, U as User, V as Verification, Y as Where, X as init } from '../shared/better-auth._WE9Fhqj.cjs';
-export { A as AtomListener, B as BetterAuthClientPlugin, C as ClientOptions, b as InferActions, i as InferAdditionalFromClient, a as InferClientAPI, c as InferErrorCodes, f as InferPluginsFromClient, g as InferSessionFromClient, h as InferUserFromClient, I as IsSignal, S as SessionQueryParams, e as Store } from '../shared/better-auth.BGDp9pBQ.cjs';
+export { Q as Account, a as Adapter, $ as AdapterInstance, _ as AdapterSchemaCreation, P as AdditionalSessionFieldsInput, i as AdditionalSessionFieldsOutput, m as AdditionalUserFieldsInput, j as AdditionalUserFieldsOutput, d as AuthContext, v as AuthPluginSchema, B as BetterAuthOptions, n as BetterAuthPlugin, F as FilterActions, a1 as FilteredAPI, G as GenericEndpointContext, H as HookEndpointContext, h as InferAPI, I as InferOptionSchema, p as InferPluginErrorCodes, o as InferPluginTypes, f as InferSession, a2 as InferSessionAPI, e as InferUser, N as Models, R as RateLimit, a0 as SecondaryStorage, S as Session, Z as TransactionAdapter, U as User, V as Verification, Y as Where, X as init } from '../shared/better-auth.DImZeRKY.cjs';
+export { A as AtomListener, B as BetterAuthClientPlugin, C as ClientOptions, b as InferActions, i as InferAdditionalFromClient, a as InferClientAPI, c as InferErrorCodes, f as InferPluginsFromClient, g as InferSessionFromClient, h as InferUserFromClient, I as IsSignal, S as SessionQueryParams, e as Store } from '../shared/better-auth.N3ys23iz.cjs';
 import 'zod';
 import 'kysely';
 import 'better-call';
 import '../shared/better-auth.DTtXpZYr.cjs';
-import '../shared/better-auth.7zTmTxT4.cjs';
+import '../shared/better-auth.v_lf-jeY.cjs';
 import 'zod/v4/core';
 import 'better-sqlite3';
 import 'bun:sqlite';

package/dist/types/index.d.mts

@@ -1,10 +1,10 @@
-export { Q as Account, a as Adapter, $ as AdapterInstance, _ as AdapterSchemaCreation, P as AdditionalSessionFieldsInput, i as AdditionalSessionFieldsOutput, m as AdditionalUserFieldsInput, j as AdditionalUserFieldsOutput, d as AuthContext, v as AuthPluginSchema, B as BetterAuthOptions, n as BetterAuthPlugin, F as FilterActions, a1 as FilteredAPI, G as GenericEndpointContext, H as HookEndpointContext, h as InferAPI, I as InferOptionSchema, p as InferPluginErrorCodes, o as InferPluginTypes, f as InferSession, a2 as InferSessionAPI, e as InferUser, N as Models, R as RateLimit, a0 as SecondaryStorage, S as Session, Z as TransactionAdapter, U as User, V as Verification, Y as Where, X as init } from '../shared/better-auth.BFegHNjn.mjs';
-export { A as AtomListener, B as BetterAuthClientPlugin, C as ClientOptions, b as InferActions, i as InferAdditionalFromClient, a as InferClientAPI, c as InferErrorCodes, f as InferPluginsFromClient, g as InferSessionFromClient, h as InferUserFromClient, I as IsSignal, S as SessionQueryParams, e as Store } from '../shared/better-auth.HsL9NWdo.mjs';
+export { Q as Account, a as Adapter, $ as AdapterInstance, _ as AdapterSchemaCreation, P as AdditionalSessionFieldsInput, i as AdditionalSessionFieldsOutput, m as AdditionalUserFieldsInput, j as AdditionalUserFieldsOutput, d as AuthContext, v as AuthPluginSchema, B as BetterAuthOptions, n as BetterAuthPlugin, F as FilterActions, a1 as FilteredAPI, G as GenericEndpointContext, H as HookEndpointContext, h as InferAPI, I as InferOptionSchema, p as InferPluginErrorCodes, o as InferPluginTypes, f as InferSession, a2 as InferSessionAPI, e as InferUser, N as Models, R as RateLimit, a0 as SecondaryStorage, S as Session, Z as TransactionAdapter, U as User, V as Verification, Y as Where, X as init } from '../shared/better-auth.CFtgxZkB.mjs';
+export { A as AtomListener, B as BetterAuthClientPlugin, C as ClientOptions, b as InferActions, i as InferAdditionalFromClient, a as InferClientAPI, c as InferErrorCodes, f as InferPluginsFromClient, g as InferSessionFromClient, h as InferUserFromClient, I as IsSignal, S as SessionQueryParams, e as Store } from '../shared/better-auth.bvByA6N5.mjs';
 import 'zod';
 import 'kysely';
 import 'better-call';
 import '../shared/better-auth.DTtXpZYr.mjs';
-import '../shared/better-auth.BHPr8J54.mjs';
+import '../shared/better-auth.XefKa8DI.mjs';
 import 'zod/v4/core';
 import 'better-sqlite3';
 import 'bun:sqlite';

package/dist/types/index.d.ts

@@ -1,10 +1,10 @@
-export { Q as Account, a as Adapter, $ as AdapterInstance, _ as AdapterSchemaCreation, P as AdditionalSessionFieldsInput, i as AdditionalSessionFieldsOutput, m as AdditionalUserFieldsInput, j as AdditionalUserFieldsOutput, d as AuthContext, v as AuthPluginSchema, B as BetterAuthOptions, n as BetterAuthPlugin, F as FilterActions, a1 as FilteredAPI, G as GenericEndpointContext, H as HookEndpointContext, h as InferAPI, I as InferOptionSchema, p as InferPluginErrorCodes, o as InferPluginTypes, f as InferSession, a2 as InferSessionAPI, e as InferUser, N as Models, R as RateLimit, a0 as SecondaryStorage, S as Session, Z as TransactionAdapter, U as User, V as Verification, Y as Where, X as init } from '../shared/better-auth.nTGSkBy-.js';
-export { A as AtomListener, B as BetterAuthClientPlugin, C as ClientOptions, b as InferActions, i as InferAdditionalFromClient, a as InferClientAPI, c as InferErrorCodes, f as InferPluginsFromClient, g as InferSessionFromClient, h as InferUserFromClient, I as IsSignal, S as SessionQueryParams, e as Store } from '../shared/better-auth.p1cIDE6Y.js';
+export { Q as Account, a as Adapter, $ as AdapterInstance, _ as AdapterSchemaCreation, P as AdditionalSessionFieldsInput, i as AdditionalSessionFieldsOutput, m as AdditionalUserFieldsInput, j as AdditionalUserFieldsOutput, d as AuthContext, v as AuthPluginSchema, B as BetterAuthOptions, n as BetterAuthPlugin, F as FilterActions, a1 as FilteredAPI, G as GenericEndpointContext, H as HookEndpointContext, h as InferAPI, I as InferOptionSchema, p as InferPluginErrorCodes, o as InferPluginTypes, f as InferSession, a2 as InferSessionAPI, e as InferUser, N as Models, R as RateLimit, a0 as SecondaryStorage, S as Session, Z as TransactionAdapter, U as User, V as Verification, Y as Where, X as init } from '../shared/better-auth.BYvWEjMc.js';
+export { A as AtomListener, B as BetterAuthClientPlugin, C as ClientOptions, b as InferActions, i as InferAdditionalFromClient, a as InferClientAPI, c as InferErrorCodes, f as InferPluginsFromClient, g as InferSessionFromClient, h as InferUserFromClient, I as IsSignal, S as SessionQueryParams, e as Store } from '../shared/better-auth.CYEJMfBK.js';
 import 'zod';
 import 'kysely';
 import 'better-call';
 import '../shared/better-auth.DTtXpZYr.js';
-import '../shared/better-auth.C6qXK08w.js';
+import '../shared/better-auth.4SXCyo06.js';
 import 'zod/v4/core';
 import 'better-sqlite3';
 import 'bun:sqlite';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "better-auth",
-  "version": "1.3.21",
+  "version": "1.3.23",
   "description": "The most comprehensive authentication library for TypeScript.",
   "type": "module",
   "license": "MIT",
@@ -697,9 +697,9 @@
     "kysely": "^0.28.5",
     "nanostores": "^1.0.1",
     "zod": "^4.1.5",
-    "@better-auth/core": "1.3.18"
+    "@better-auth/core": "1.3.23"
   },
-  "peerDependencies": {
+  "peerDependenciesOptional": {
     "@lynx-js/react": "*",
     "@sveltejs/kit": "^2.0.0",
     "next": "^14.0.0 || ^15.0.0",