better-auth 1.4.0-beta.1 → 1.4.0-beta.2

package/dist/plugins/passkey/index.d.mts

@@ -2,7 +2,7 @@ import * as _simplewebauthn_server from '@simplewebauthn/server';
 import { CredentialDeviceType, PublicKeyCredentialCreationOptionsJSON, AuthenticationResponseJSON } from '@simplewebauthn/server';
 import * as better_call from 'better-call';
 import * as z from 'zod';
-import { I as InferOptionSchema } from '../../shared/better-auth.B3bZoclS.mjs';
+import { I as InferOptionSchema } from '../../shared/better-auth.B_xbPKKL.mjs';
 import 'kysely';
 import '../../shared/better-auth.BHPr8J54.mjs';
 import '../../shared/better-auth.DTtXpZYr.mjs';
@@ -33,7 +33,7 @@ interface PasskeyOptions {
      * if this isn't provided. The client itself will
      * pass this value.
      */
-    origin?: string | null;
+    origin?: string | string[] | null;
     /**
      * Allow customization of the authenticatorSelection options
      * during passkey registration.
@@ -250,9 +250,7 @@ declare const passkey: (options?: PasskeyOptions) => {
         };
         generatePasskeyAuthenticationOptions: {
             <AsResponse extends boolean = false, ReturnHeaders extends boolean = false>(inputCtx_0?: ({
-                body?: {
-                    email?: string | undefined;
-                } | undefined;
+                body?: undefined;
             } & {
                 method?: "POST" | undefined;
             } & {
@@ -277,9 +275,6 @@ declare const passkey: (options?: PasskeyOptions) => {
             } : _simplewebauthn_server.PublicKeyCredentialRequestOptionsJSON>;
             options: {
                 method: "POST";
-                body: z.ZodOptional<z.ZodObject<{
-                    email: z.ZodOptional<z.ZodString>;
-                }, z.core.$strip>>;
                 metadata: {
                     openapi: {
                         description: string;

package/dist/plugins/passkey/index.d.ts

@@ -2,7 +2,7 @@ import * as _simplewebauthn_server from '@simplewebauthn/server';
 import { CredentialDeviceType, PublicKeyCredentialCreationOptionsJSON, AuthenticationResponseJSON } from '@simplewebauthn/server';
 import * as better_call from 'better-call';
 import * as z from 'zod';
-import { I as InferOptionSchema } from '../../shared/better-auth.BpnW3Y7U.js';
+import { I as InferOptionSchema } from '../../shared/better-auth.BQv0wGSb.js';
 import 'kysely';
 import '../../shared/better-auth.C6qXK08w.js';
 import '../../shared/better-auth.DTtXpZYr.js';
@@ -33,7 +33,7 @@ interface PasskeyOptions {
      * if this isn't provided. The client itself will
      * pass this value.
      */
-    origin?: string | null;
+    origin?: string | string[] | null;
     /**
      * Allow customization of the authenticatorSelection options
      * during passkey registration.
@@ -250,9 +250,7 @@ declare const passkey: (options?: PasskeyOptions) => {
         };
         generatePasskeyAuthenticationOptions: {
             <AsResponse extends boolean = false, ReturnHeaders extends boolean = false>(inputCtx_0?: ({
-                body?: {
-                    email?: string | undefined;
-                } | undefined;
+                body?: undefined;
             } & {
                 method?: "POST" | undefined;
             } & {
@@ -277,9 +275,6 @@ declare const passkey: (options?: PasskeyOptions) => {
             } : _simplewebauthn_server.PublicKeyCredentialRequestOptionsJSON>;
             options: {
                 method: "POST";
-                body: z.ZodOptional<z.ZodObject<{
-                    email: z.ZodOptional<z.ZodString>;
-                }, z.core.$strip>>;
                 metadata: {
                     openapi: {
                         description: string;

package/dist/plugins/passkey/index.mjs

@@ -3,7 +3,7 @@ import { APIError } from 'better-call';
 import { g as generateRandomString } from '../../shared/better-auth.B4Qoxdgc.mjs';
 import * as z from 'zod';
 import { a as createAuthEndpoint, s as sessionMiddleware, f as freshSessionMiddleware, g as getSessionFromCtx } from '../../shared/better-auth.CBY7cUGy.mjs';
-import '../../shared/better-auth.C4cxDzG3.mjs';
+import '../../shared/better-auth.DsRTWTq9.mjs';
 import { s as setSessionCookie } from '../../shared/better-auth.fV_ra52g.mjs';
 import { m as mergeSchema } from '../../shared/better-auth.Dlh8OCID.mjs';
 import '../../shared/better-auth.CiuwFiHM.mjs';
@@ -77,13 +77,13 @@ const passkey = (options) => {
                   parameters: {
                     query: {
                       authenticatorAttachment: {
-                        description: `Type of authenticator to use for registration. 
-                          "platform" for device-specific authenticators, 
+                        description: `Type of authenticator to use for registration.
+                          "platform" for device-specific authenticators,
                           "cross-platform" for authenticators that can be used across devices.`,
                         required: false
                       },
                       name: {
-                        description: `Optional custom name for the passkey. 
+                        description: `Optional custom name for the passkey.
                           This can help identify the passkey when managing multiple credentials.`,
                         required: false
                       }
@@ -260,11 +260,6 @@ const passkey = (options) => {
         "/passkey/generate-authenticate-options",
         {
           method: "POST",
-          body: z.object({
-            email: z.string().meta({
-              description: "The email address of the user"
-            }).optional()
-          }).optional(),
           metadata: {
             openapi: {
               description: "Generate authentication options for a passkey",

package/dist/plugins/phone-number/index.cjs

@@ -5,7 +5,7 @@ const session = require('../../shared/better-auth.CAcHGnwq.cjs');
 const betterCall = require('better-call');
 const schema$1 = require('../../shared/better-auth.CX8orviF.cjs');
 const random = require('../../shared/better-auth.CYeOI8C-.cjs');
-require('../../shared/better-auth.C0eUWmDH.cjs');
+require('../../shared/better-auth.BDdoXh_7.cjs');
 const cookies_index = require('../../shared/better-auth.CXM9s0dx.cjs');
 require('../../shared/better-auth.B6fIklBU.cjs');
 require('../../shared/better-auth.DTvRBuq4.cjs');

package/dist/plugins/phone-number/index.d.cts

@@ -1,6 +1,6 @@
 import * as better_call from 'better-call';
 import * as z from 'zod';
-import { U as User, I as InferOptionSchema } from '../../shared/better-auth.BIcpessK.cjs';
+import { U as User, I as InferOptionSchema } from '../../shared/better-auth.CLmuULOM.cjs';
 import 'kysely';
 import '../../shared/better-auth.7zTmTxT4.cjs';
 import '../../shared/better-auth.DTtXpZYr.cjs';

package/dist/plugins/phone-number/index.d.mts

@@ -1,6 +1,6 @@
 import * as better_call from 'better-call';
 import * as z from 'zod';
-import { U as User, I as InferOptionSchema } from '../../shared/better-auth.B3bZoclS.mjs';
+import { U as User, I as InferOptionSchema } from '../../shared/better-auth.B_xbPKKL.mjs';
 import 'kysely';
 import '../../shared/better-auth.BHPr8J54.mjs';
 import '../../shared/better-auth.DTtXpZYr.mjs';

package/dist/plugins/phone-number/index.d.ts

@@ -1,6 +1,6 @@
 import * as better_call from 'better-call';
 import * as z from 'zod';
-import { U as User, I as InferOptionSchema } from '../../shared/better-auth.BpnW3Y7U.js';
+import { U as User, I as InferOptionSchema } from '../../shared/better-auth.BQv0wGSb.js';
 import 'kysely';
 import '../../shared/better-auth.C6qXK08w.js';
 import '../../shared/better-auth.DTtXpZYr.js';

package/dist/plugins/phone-number/index.mjs

@@ -3,7 +3,7 @@ import { a as createAuthEndpoint, g as getSessionFromCtx, B as BASE_ERROR_CODES
 import { APIError } from 'better-call';
 import { m as mergeSchema } from '../../shared/better-auth.Dlh8OCID.mjs';
 import { g as generateRandomString } from '../../shared/better-auth.B4Qoxdgc.mjs';
-import '../../shared/better-auth.C4cxDzG3.mjs';
+import '../../shared/better-auth.DsRTWTq9.mjs';
 import { s as setSessionCookie } from '../../shared/better-auth.fV_ra52g.mjs';
 import '../../shared/better-auth.CiuwFiHM.mjs';
 import '../../shared/better-auth.C4g12FAA.mjs';

package/dist/plugins/siwe/index.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
 const betterCall = require('better-call');
-require('../../shared/better-auth.C0eUWmDH.cjs');
+require('../../shared/better-auth.BDdoXh_7.cjs');
 const session = require('../../shared/better-auth.CAcHGnwq.cjs');
 const z = require('zod');
 const cookies_index = require('../../shared/better-auth.CXM9s0dx.cjs');

package/dist/plugins/siwe/index.d.cts

@@ -1,6 +1,6 @@
 import * as better_call from 'better-call';
 import * as z from 'zod';
-import { I as InferOptionSchema } from '../../shared/better-auth.BIcpessK.cjs';
+import { I as InferOptionSchema } from '../../shared/better-auth.CLmuULOM.cjs';
 import 'kysely';
 import '../../shared/better-auth.7zTmTxT4.cjs';
 import '../../shared/better-auth.DTtXpZYr.cjs';

package/dist/plugins/siwe/index.d.mts

@@ -1,6 +1,6 @@
 import * as better_call from 'better-call';
 import * as z from 'zod';
-import { I as InferOptionSchema } from '../../shared/better-auth.B3bZoclS.mjs';
+import { I as InferOptionSchema } from '../../shared/better-auth.B_xbPKKL.mjs';
 import 'kysely';
 import '../../shared/better-auth.BHPr8J54.mjs';
 import '../../shared/better-auth.DTtXpZYr.mjs';

package/dist/plugins/siwe/index.d.ts

@@ -1,6 +1,6 @@
 import * as better_call from 'better-call';
 import * as z from 'zod';
-import { I as InferOptionSchema } from '../../shared/better-auth.BpnW3Y7U.js';
+import { I as InferOptionSchema } from '../../shared/better-auth.BQv0wGSb.js';
 import 'kysely';
 import '../../shared/better-auth.C6qXK08w.js';
 import '../../shared/better-auth.DTtXpZYr.js';

package/dist/plugins/siwe/index.mjs

@@ -1,5 +1,5 @@
 import { APIError } from 'better-call';
-import '../../shared/better-auth.C4cxDzG3.mjs';
+import '../../shared/better-auth.DsRTWTq9.mjs';
 import { a as createAuthEndpoint } from '../../shared/better-auth.CBY7cUGy.mjs';
 import * as z from 'zod';
 import { s as setSessionCookie } from '../../shared/better-auth.fV_ra52g.mjs';

package/dist/plugins/sso/index.cjs

@@ -2,7 +2,7 @@
 
 const z = require('zod');
 const betterCall = require('better-call');
-const socialProviders_index = require('../../shared/better-auth.C0eUWmDH.cjs');
+const socialProviders_index = require('../../shared/better-auth.BDdoXh_7.cjs');
 const session = require('../../shared/better-auth.CAcHGnwq.cjs');
 const cookies_index = require('../../shared/better-auth.CXM9s0dx.cjs');
 require('../../shared/better-auth.CX8orviF.cjs');

package/dist/plugins/sso/index.d.cts

@@ -1,7 +1,7 @@
 import * as better_call from 'better-call';
 import * as z from 'zod';
 import { O as OAuth2Tokens } from '../../shared/better-auth.7zTmTxT4.cjs';
-import { U as User } from '../../shared/better-auth.BIcpessK.cjs';
+import { U as User } from '../../shared/better-auth.CLmuULOM.cjs';
 import '../../shared/better-auth.DTtXpZYr.cjs';
 import 'kysely';
 import 'zod/v4/core';

package/dist/plugins/sso/index.d.mts

@@ -1,7 +1,7 @@
 import * as better_call from 'better-call';
 import * as z from 'zod';
 import { O as OAuth2Tokens } from '../../shared/better-auth.BHPr8J54.mjs';
-import { U as User } from '../../shared/better-auth.B3bZoclS.mjs';
+import { U as User } from '../../shared/better-auth.B_xbPKKL.mjs';
 import '../../shared/better-auth.DTtXpZYr.mjs';
 import 'kysely';
 import 'zod/v4/core';

package/dist/plugins/sso/index.d.ts

@@ -1,7 +1,7 @@
 import * as better_call from 'better-call';
 import * as z from 'zod';
 import { O as OAuth2Tokens } from '../../shared/better-auth.C6qXK08w.js';
-import { U as User } from '../../shared/better-auth.BpnW3Y7U.js';
+import { U as User } from '../../shared/better-auth.BQv0wGSb.js';
 import '../../shared/better-auth.DTtXpZYr.js';
 import 'kysely';
 import 'zod/v4/core';

package/dist/plugins/sso/index.mjs

@@ -1,6 +1,6 @@
 import * as z from 'zod';
 import { APIError } from 'better-call';
-import { p as parseState, v as validateAuthorizationCode, b as validateToken, j as handleOAuthUserInfo, s as setTokenUtil, g as generateState, c as createAuthorizationURL } from '../../shared/better-auth.C4cxDzG3.mjs';
+import { p as parseState, v as validateAuthorizationCode, b as validateToken, j as handleOAuthUserInfo, s as setTokenUtil, g as generateState, c as createAuthorizationURL } from '../../shared/better-auth.DsRTWTq9.mjs';
 import { a as createAuthEndpoint, s as sessionMiddleware } from '../../shared/better-auth.CBY7cUGy.mjs';
 import { s as setSessionCookie } from '../../shared/better-auth.fV_ra52g.mjs';
 import '../../shared/better-auth.Dlh8OCID.mjs';

package/dist/plugins/two-factor/index.cjs

@@ -4,7 +4,7 @@ const random = require('../../shared/better-auth.CYeOI8C-.cjs');
 const z = require('zod');
 const session = require('../../shared/better-auth.CAcHGnwq.cjs');
 const betterCall = require('better-call');
-require('../../shared/better-auth.C0eUWmDH.cjs');
+require('../../shared/better-auth.BDdoXh_7.cjs');
 const cookies_index = require('../../shared/better-auth.CXM9s0dx.cjs');
 const schema$1 = require('../../shared/better-auth.CX8orviF.cjs');
 require('../../shared/better-auth.B6fIklBU.cjs');

package/dist/plugins/two-factor/index.d.cts

@@ -1,6 +1,6 @@
 import * as better_call from 'better-call';
 import * as z from 'zod';
-import { U as User, I as InferOptionSchema, z as AuthEndpoint, H as HookEndpointContext } from '../../shared/better-auth.BIcpessK.cjs';
+import { U as User, I as InferOptionSchema, z as AuthEndpoint, H as HookEndpointContext } from '../../shared/better-auth.CLmuULOM.cjs';
 import { L as LiteralString } from '../../shared/better-auth.DTtXpZYr.cjs';
 import * as _better_fetch_fetch from '@better-fetch/fetch';
 import 'kysely';

package/dist/plugins/two-factor/index.d.mts

@@ -1,6 +1,6 @@
 import * as better_call from 'better-call';
 import * as z from 'zod';
-import { U as User, I as InferOptionSchema, z as AuthEndpoint, H as HookEndpointContext } from '../../shared/better-auth.B3bZoclS.mjs';
+import { U as User, I as InferOptionSchema, z as AuthEndpoint, H as HookEndpointContext } from '../../shared/better-auth.B_xbPKKL.mjs';
 import { L as LiteralString } from '../../shared/better-auth.DTtXpZYr.mjs';
 import * as _better_fetch_fetch from '@better-fetch/fetch';
 import 'kysely';

package/dist/plugins/two-factor/index.d.ts

@@ -1,6 +1,6 @@
 import * as better_call from 'better-call';
 import * as z from 'zod';
-import { U as User, I as InferOptionSchema, z as AuthEndpoint, H as HookEndpointContext } from '../../shared/better-auth.BpnW3Y7U.js';
+import { U as User, I as InferOptionSchema, z as AuthEndpoint, H as HookEndpointContext } from '../../shared/better-auth.BQv0wGSb.js';
 import { L as LiteralString } from '../../shared/better-auth.DTtXpZYr.js';
 import * as _better_fetch_fetch from '@better-fetch/fetch';
 import 'kysely';

package/dist/plugins/two-factor/index.mjs

@@ -2,7 +2,7 @@ import { g as generateRandomString } from '../../shared/better-auth.B4Qoxdgc.mjs
 import * as z from 'zod';
 import { g as getSessionFromCtx, a as createAuthEndpoint, s as sessionMiddleware, B as BASE_ERROR_CODES, c as createAuthMiddleware } from '../../shared/better-auth.CBY7cUGy.mjs';
 import { APIError } from 'better-call';
-import '../../shared/better-auth.C4cxDzG3.mjs';
+import '../../shared/better-auth.DsRTWTq9.mjs';
 import { s as setSessionCookie, d as deleteSessionCookie } from '../../shared/better-auth.fV_ra52g.mjs';
 import { m as mergeSchema } from '../../shared/better-auth.Dlh8OCID.mjs';
 import '../../shared/better-auth.CiuwFiHM.mjs';

package/dist/plugins/username/index.cjs

@@ -4,8 +4,8 @@ const z = require('zod');
 const session = require('../../shared/better-auth.CAcHGnwq.cjs');
 const betterCall = require('better-call');
 const cookies_index = require('../../shared/better-auth.CXM9s0dx.cjs');
-const socialProviders_index = require('../../shared/better-auth.C0eUWmDH.cjs');
 const schema = require('../../shared/better-auth.CX8orviF.cjs');
+const socialProviders_index = require('../../shared/better-auth.BDdoXh_7.cjs');
 require('../../shared/better-auth.B6fIklBU.cjs');
 require('../../shared/better-auth.DTvRBuq4.cjs');
 require('../../shared/better-auth.C1hdVENX.cjs');
@@ -252,8 +252,29 @@ const username = (options) => {
               message: USERNAME_ERROR_CODES.INVALID_USERNAME_OR_PASSWORD
             });
           }
-          if (!user.emailVerified && ctx.context.options.emailAndPassword?.requireEmailVerification) {
-            await socialProviders_index.sendVerificationEmailFn(ctx, user);
+          if (ctx.context.options?.emailAndPassword?.requireEmailVerification && !user.emailVerified) {
+            if (!ctx.context.options?.emailVerification?.sendVerificationEmail) {
+              throw new betterCall.APIError("FORBIDDEN", {
+                message: USERNAME_ERROR_CODES.EMAIL_NOT_VERIFIED
+              });
+            }
+            if (ctx.context.options?.emailVerification?.sendOnSignIn) {
+              const token = await socialProviders_index.createEmailVerificationToken(
+                ctx.context.secret,
+                user.email,
+                void 0,
+                ctx.context.options.emailVerification?.expiresIn
+              );
+              const url = `${ctx.context.baseURL}/verify-email?token=${token}&callbackURL=${ctx.body.callbackURL || "/"}`;
+              await ctx.context.options.emailVerification.sendVerificationEmail(
+                {
+                  user,
+                  url,
+                  token
+                },
+                ctx.request
+              );
+            }
             throw new betterCall.APIError("FORBIDDEN", {
               message: USERNAME_ERROR_CODES.EMAIL_NOT_VERIFIED
             });

package/dist/plugins/username/index.d.cts

@@ -1,5 +1,5 @@
 import * as better_call from 'better-call';
-import { I as InferOptionSchema, d as AuthContext, G as GenericEndpointContext, H as HookEndpointContext } from '../../shared/better-auth.BIcpessK.cjs';
+import { I as InferOptionSchema, d as AuthContext, G as GenericEndpointContext, H as HookEndpointContext } from '../../shared/better-auth.CLmuULOM.cjs';
 import * as z from 'zod';
 import 'kysely';
 import '../../shared/better-auth.7zTmTxT4.cjs';

package/dist/plugins/username/index.d.mts

@@ -1,5 +1,5 @@
 import * as better_call from 'better-call';
-import { I as InferOptionSchema, d as AuthContext, G as GenericEndpointContext, H as HookEndpointContext } from '../../shared/better-auth.B3bZoclS.mjs';
+import { I as InferOptionSchema, d as AuthContext, G as GenericEndpointContext, H as HookEndpointContext } from '../../shared/better-auth.B_xbPKKL.mjs';
 import * as z from 'zod';
 import 'kysely';
 import '../../shared/better-auth.BHPr8J54.mjs';

package/dist/plugins/username/index.d.ts

@@ -1,5 +1,5 @@
 import * as better_call from 'better-call';
-import { I as InferOptionSchema, d as AuthContext, G as GenericEndpointContext, H as HookEndpointContext } from '../../shared/better-auth.BpnW3Y7U.js';
+import { I as InferOptionSchema, d as AuthContext, G as GenericEndpointContext, H as HookEndpointContext } from '../../shared/better-auth.BQv0wGSb.js';
 import * as z from 'zod';
 import 'kysely';
 import '../../shared/better-auth.C6qXK08w.js';

package/dist/plugins/username/index.mjs

@@ -2,8 +2,8 @@ import * as z from 'zod';
 import { c as createAuthMiddleware, a as createAuthEndpoint, B as BASE_ERROR_CODES } from '../../shared/better-auth.CBY7cUGy.mjs';
 import { APIError } from 'better-call';
 import { s as setSessionCookie } from '../../shared/better-auth.fV_ra52g.mjs';
-import { T as sendVerificationEmailFn } from '../../shared/better-auth.C4cxDzG3.mjs';
 import { m as mergeSchema } from '../../shared/better-auth.Dlh8OCID.mjs';
+import { k as createEmailVerificationToken } from '../../shared/better-auth.DsRTWTq9.mjs';
 import '../../shared/better-auth.CiuwFiHM.mjs';
 import '../../shared/better-auth.C4g12FAA.mjs';
 import '../../shared/better-auth.CW6D9eSx.mjs';
@@ -236,8 +236,29 @@ const username = (options) => {
               message: USERNAME_ERROR_CODES.INVALID_USERNAME_OR_PASSWORD
             });
           }
-          if (!user.emailVerified && ctx.context.options.emailAndPassword?.requireEmailVerification) {
-            await sendVerificationEmailFn(ctx, user);
+          if (ctx.context.options?.emailAndPassword?.requireEmailVerification && !user.emailVerified) {
+            if (!ctx.context.options?.emailVerification?.sendVerificationEmail) {
+              throw new APIError("FORBIDDEN", {
+                message: USERNAME_ERROR_CODES.EMAIL_NOT_VERIFIED
+              });
+            }
+            if (ctx.context.options?.emailVerification?.sendOnSignIn) {
+              const token = await createEmailVerificationToken(
+                ctx.context.secret,
+                user.email,
+                void 0,
+                ctx.context.options.emailVerification?.expiresIn
+              );
+              const url = `${ctx.context.baseURL}/verify-email?token=${token}&callbackURL=${ctx.body.callbackURL || "/"}`;
+              await ctx.context.options.emailVerification.sendVerificationEmail(
+                {
+                  user,
+                  url,
+                  token
+                },
+                ctx.request
+              );
+            }
             throw new APIError("FORBIDDEN", {
               message: USERNAME_ERROR_CODES.EMAIL_NOT_VERIFIED
             });

package/dist/shared/{better-auth.DU-jrbrJ.mjs → better-auth.-8Mk4DBL.mjs}

@@ -1,7 +1,7 @@
 import * as z from 'zod';
 import { SignJWT } from 'jose';
 import { APIError } from 'better-call';
-import './better-auth.C4cxDzG3.mjs';
+import './better-auth.DsRTWTq9.mjs';
 import { g as getSessionFromCtx, a as createAuthEndpoint, c as createAuthMiddleware, s as sessionMiddleware } from './better-auth.CBY7cUGy.mjs';
 import './better-auth.CiuwFiHM.mjs';
 import { base64Url, base64 } from '@better-auth/utils/base64';

package/dist/shared/{better-auth.CszjuPqX.cjs → better-auth.1YBeofpK.cjs}

@@ -3,14 +3,14 @@
 const z = require('zod');
 const betterCall = require('better-call');
 const session = require('./better-auth.CAcHGnwq.cjs');
-require('./better-auth.C0eUWmDH.cjs');
+require('./better-auth.BDdoXh_7.cjs');
 require('./better-auth.B6fIklBU.cjs');
 const base64 = require('@better-auth/utils/base64');
 require('@better-auth/utils/hmac');
 require('./better-auth.DTvRBuq4.cjs');
 require('@better-auth/utils/binary');
 const schema = require('./better-auth.CX8orviF.cjs');
-require('./better-auth.BgUht1zc.cjs');
+require('./better-auth.CveVqL58.cjs');
 require('../plugins/organization/access/index.cjs');
 require('@better-auth/utils/random');
 const hash = require('@better-auth/utils/hash');

package/dist/shared/{better-auth.C6XqSToF.mjs → better-auth.3naUdTMW.mjs}

@@ -36,7 +36,7 @@ function getSessionAtom($fetch) {
 
 const getClientConfig = (options) => {
   const isCredentialsSupported = "credentials" in Request.prototype;
-  const baseURL = getBaseURL(options?.baseURL, options?.basePath);
+  const baseURL = getBaseURL(options?.baseURL, options?.basePath) ?? "/api/auth";
   const pluginsFetchPlugins = options?.plugins?.flatMap((plugin) => plugin.fetchPlugins).filter((pl) => pl !== void 0) || [];
   const lifeCyclePlugin = {
     id: "lifecycle-hooks",

package/dist/shared/{better-auth.Dp3TDU01.cjs → better-auth.B7A2AeSg.cjs}

@@ -3,13 +3,13 @@
 const api_index = require('../api/index.cjs');
 const defu = require('defu');
 const crypto_index = require('../crypto/index.cjs');
-const getMigration = require('./better-auth.PwYG2bh2.cjs');
+const getMigration = require('./better-auth.DIPz2ymP.cjs');
 const getTables = require('./better-auth.DF_1VOmo.cjs');
 const schema = require('./better-auth.CX8orviF.cjs');
 require('zod');
 const cookies_index = require('./better-auth.CXM9s0dx.cjs');
 const logger = require('./better-auth.DTvRBuq4.cjs');
-const socialProviders_index = require('./better-auth.C0eUWmDH.cjs');
+const socialProviders_index = require('./better-auth.BDdoXh_7.cjs');
 const id = require('./better-auth.Bg6iw3ig.cjs');
 require('better-call');
 require('@better-auth/utils/hash');

package/dist/shared/{better-auth.C0eUWmDH.cjs → better-auth.BDdoXh_7.cjs}

@@ -6672,7 +6672,12 @@ function toAuthEndpoints(endpoints, ctx) {
         }
         internalContext = defuReplaceArrays(rest, internalContext);
       } else if (before) {
-        return before;
+        return context?.asResponse ? betterCall.toResponse(before, {
+          headers: context?.headers
+        }) : context?.returnHeaders ? {
+          headers: context?.headers,
+          response: before
+        } : before;
       }
       internalContext.asResponse = false;
       internalContext.returnHeaders = true;

package/dist/shared/{better-auth.CwXs-abq.d.ts → better-auth.BLORa3vY.d.ts}

@@ -1,4 +1,4 @@
-import { G as GenericEndpointContext, I as InferOptionSchema, H as HookEndpointContext, d as AuthContext } from './better-auth.BpnW3Y7U.js';
+import { G as GenericEndpointContext, I as InferOptionSchema, H as HookEndpointContext, d as AuthContext } from './better-auth.BQv0wGSb.js';
 import { Statements } from '../plugins/access/index.js';
 import * as zod_v4_core from 'zod/v4/core';
 import * as z from 'zod';

package/dist/shared/{better-auth.BpnW3Y7U.d.ts → better-auth.BQv0wGSb.d.ts}

@@ -355,8 +355,8 @@ declare const createFieldAttribute: <T extends FieldType, C extends Omit<FieldAt
     };
     returned?: boolean;
     required?: boolean;
-    unique?: boolean;
-    sortable?: boolean;
+    defaultValue?: Primitive | (() => Primitive);
+    onUpdate?: () => Primitive;
     references?: {
         /**
          * The model to reference.
@@ -372,13 +372,13 @@ declare const createFieldAttribute: <T extends FieldType, C extends Omit<FieldAt
          */
         onDelete?: "no action" | "restrict" | "cascade" | "set null" | "set default";
     };
-    defaultValue?: Primitive | (() => Primitive);
-    fieldName?: string;
-    onUpdate?: () => Primitive;
+    unique?: boolean;
     validator?: {
         input?: ZodType;
         output?: ZodType;
     };
+    fieldName?: string;
+    sortable?: boolean;
     type: T;
 };
 type InferValueType<T extends FieldType> = T extends "string" ? string : T extends "number" ? number : T extends "boolean" ? boolean : T extends "date" ? Date : T extends `${infer T}[]` ? T extends "string" ? string[] : number[] : T extends Array<any> ? T[number] : never;
@@ -5588,7 +5588,7 @@ declare function getEndpoints<Option extends BetterAuthOptions>(ctx: Promise<Aut
                     user?: string | undefined;
                 } | undefined;
             } & {
-                method: "GET" | "POST";
+                method: "POST" | "GET";
             } & {
                 query?: {
                     code?: string | undefined;
@@ -5619,7 +5619,7 @@ declare function getEndpoints<Option extends BetterAuthOptions>(ctx: Promise<Aut
                 response: void;
             } : void>;
             options: {
-                method: ("GET" | "POST")[];
+                method: ("POST" | "GET")[];
                 body: z.ZodOptional<z.ZodObject<{
                     code: z.ZodOptional<z.ZodString>;
                     error: z.ZodOptional<z.ZodString>;
@@ -9280,7 +9280,7 @@ declare const router: <Option extends BetterAuthOptions>(ctx: AuthContext, optio
                     user?: string | undefined;
                 } | undefined;
             } & {
-                method: "GET" | "POST";
+                method: "POST" | "GET";
             } & {
                 query?: {
                     code?: string | undefined;
@@ -9311,7 +9311,7 @@ declare const router: <Option extends BetterAuthOptions>(ctx: AuthContext, optio
                 response: void;
             } : void>;
             options: {
-                method: ("GET" | "POST")[];
+                method: ("POST" | "GET")[];
                 body: z.ZodOptional<z.ZodObject<{
                     code: z.ZodOptional<z.ZodString>;
                     error: z.ZodOptional<z.ZodString>;
@@ -17408,17 +17408,21 @@ type FilterActions<API> = Omit<API, API extends {
 type InferSessionAPI<API> = API extends {
     [key: string]: infer E;
 } ? UnionToIntersection<E extends Endpoint ? E["path"] extends "/get-session" ? {
-    getSession: <R extends boolean>(context: {
+    getSession: <R extends boolean, H extends boolean = false>(context: {
         headers: Headers;
         query?: {
             disableCookieCache?: boolean;
             disableRefresh?: boolean;
         };
         asResponse?: R;
-    }) => false extends R ? Promise<PrettifyDeep<Awaited<ReturnType<E>>>> & {
+        returnHeaders?: H;
+    }) => false extends R ? H extends true ? Promise<{
+        headers: Headers;
+        response: PrettifyDeep<Awaited<ReturnType<E>>>;
+    }> : Promise<PrettifyDeep<Awaited<ReturnType<E>>> & {
         options: E["options"];
         path: E["path"];
-    } : Promise<Response>;
+    }> : Promise<Response>;
 } : never : never> : never;
 type InferAPI<API> = InferSessionAPI<API> & FilteredAPI<API>;