better-auth 1.4.6-beta.6 → 1.4.7-beta.2

package/dist/index-CfASVIzV.d.mts

@@ -1,471 +0,0 @@
-import { Tt as User, rt as index_d_exports, wt as Session } from "./index-C6JlLkZw.mjs";
-import { t as Awaitable } from "./helper-BBvhhJRX.mjs";
-import { t as InferOptionSchema } from "./plugins-DLdyc73z.mjs";
-import * as _better_auth_core9 from "@better-auth/core";
-import { GenericEndpointContext } from "@better-auth/core";
-import * as z from "zod";
-import * as better_call197 from "better-call";
-import * as jose0 from "jose";
-import { JSONWebKeySet, JWTPayload } from "jose";
-
-//#region src/plugins/jwt/schema.d.ts
-declare const schema: {
-  jwks: {
-    fields: {
-      publicKey: {
-        type: "string";
-        required: true;
-      };
-      privateKey: {
-        type: "string";
-        required: true;
-      };
-      createdAt: {
-        type: "date";
-        required: true;
-      };
-      expiresAt: {
-        type: "date";
-        required: false;
-      };
-    };
-  };
-};
-//#endregion
-//#region src/plugins/jwt/types.d.ts
-interface JwtOptions {
-  jwks?: {
-    /**
-     * Disables the /jwks endpoint and uses this endpoint in discovery.
-     *
-     * Useful if jwks are not managed at /jwks or
-     * if your jwks are signed with a certificate and placed on your CDN.
-     */
-    remoteUrl?: string | undefined;
-    /**
-     * Key pair configuration
-     * @description A subset of the options available for the generateKeyPair function
-     *
-     * @see https://github.com/panva/jose/blob/main/src/runtime/node/generate.ts
-     *
-     * @default { alg: 'EdDSA', crv: 'Ed25519' }
-     */
-    keyPairConfig?: JWKOptions | undefined;
-    /**
-     * Disable private key encryption
-     * @description Disable the encryption of the private key in the database
-     *
-     * @default false
-     */
-    disablePrivateKeyEncryption?: boolean | undefined;
-    /**
-     * The key rotation interval in seconds.
-     *
-     * @default undefined (disabled)
-     */
-    rotationInterval?: number | undefined;
-    /**
-     * The grace period in seconds.
-     *
-     * @default 2592000 (30 days)
-     */
-    gracePeriod?: number | undefined;
-    /**
-     * The path of the endpoint exposing the JWKS.
-     * When set, this replaces the default /jwks endpoint.
-     * The old endpoint will return 404.
-     *
-     * @default /jwks
-     * @example "/.well-known/jwks.json"
-     */
-    jwksPath?: string | undefined;
-  } | undefined;
-  jwt?: {
-    /**
-     * The issuer of the JWT
-     */
-    issuer?: string | undefined;
-    /**
-     * The audience of the JWT
-     */
-    audience?: string | undefined;
-    /**
-     * Set the "exp" (Expiration Time) Claim.
-     *
-     * - If a `number` is passed as an argument it is used as the claim directly.
-     * - If a `Date` instance is passed as an argument it is converted to unix timestamp and used as the
-     *   claim.
-     * - If a `string` is passed as an argument it is resolved to a time span, and then added to the
-     *   current unix timestamp and used as the claim.
-     *
-     * Format used for time span should be a number followed by a unit, such as "5 minutes" or "1
-     * day".
-     *
-     * Valid units are: "sec", "secs", "second", "seconds", "s", "minute", "minutes", "min", "mins",
-     * "m", "hour", "hours", "hr", "hrs", "h", "day", "days", "d", "week", "weeks", "w", "year",
-     * "years", "yr", "yrs", and "y". It is not possible to specify months. 365.25 days is used as an
-     * alias for a year.
-     *
-     * If the string is suffixed with "ago", or prefixed with a "-", the resulting time span gets
-     * subtracted from the current unix timestamp. A "from now" suffix can also be used for
-     * readability when adding to the current unix timestamp.
-     *
-     * @default 15m
-     */
-    expirationTime?: number | string | Date | undefined;
-    /**
-     * A function that is called to define the payload of the JWT
-     */
-    definePayload?: (session: {
-      user: User & Record<string, any>;
-      session: Session & Record<string, any>;
-    }) => Promise<Record<string, any>> | Record<string, any> | undefined;
-    /**
-     * A function that is called to get the subject of the JWT
-     *
-     * @default session.user.id
-     */
-    getSubject?: (session: {
-      user: User & Record<string, any>;
-      session: Session & Record<string, any>;
-    }) => Promise<string> | string | undefined;
-    /**
-     * A custom function to remote sign the jwt payload.
-     *
-     * All headers, such as `alg` and `kid`,
-     * MUST be defined within this function.
-     * You can safely define the header `typ: 'JWT'`.
-     *
-     * @requires jwks.remoteUrl
-     * @invalidates other jwt.* options
-     */
-    sign?: ((payload: JWTPayload) => Awaitable<string>) | undefined;
-  } | undefined;
-  /**
-   * Disables setting JWTs through middleware.
-   *
-   * Recommended to set `true` when using an oAuth provider plugin
-   * like OIDC or MCP where session payloads should not be signed.
-   *
-   * @default false
-   */
-  disableSettingJwtHeader?: boolean | undefined;
-  /**
-   * Custom schema for the admin plugin
-   */
-  schema?: InferOptionSchema<typeof schema> | undefined;
-  /**
-   * Custom adapter for the jwt plugin
-   *
-   * This will override the default adapter
-   *
-   * @default adapter from the database
-   */
-  adapter?: {
-    /**
-     * A custom function to get the JWKS from the database or
-     * other source
-     *
-     * This will override the default getJwks from the database
-     *
-     * @param ctx - The context of the request
-     * @returns The JWKS
-     */
-    getJwks?: (ctx: index_d_exports.GenericEndpointContext) => Promise<Jwk[] | null | undefined>;
-    /**
-     * A custom function to create a new key in the database or
-     * other source
-     *
-     * This will override the default createJwk from the database
-     *
-     * @param data - The key to create
-     * @returns The created key
-     */
-    createJwk?: (data: Omit<Jwk, "id">, ctx: index_d_exports.GenericEndpointContext) => Promise<Jwk>;
-  };
-}
-/**
- * Asymmetric (JWS) Supported.
- *
- * @see https://github.com/panva/jose/issues/210
- */
-type JWKOptions = {
-  alg: "EdDSA";
-  crv?: "Ed25519" | undefined;
-} | {
-  alg: "ES256";
-  crv?: never | undefined;
-} | {
-  alg: "ES512";
-  crv?: never | undefined;
-} | {
-  alg: "PS256";
-  modulusLength?: number | undefined;
-} | {
-  alg: "RS256";
-  modulusLength?: number | undefined;
-};
-type JWSAlgorithms = JWKOptions["alg"];
-interface Jwk {
-  id: string;
-  publicKey: string;
-  privateKey: string;
-  createdAt: Date;
-  expiresAt?: Date;
-  alg?: JWSAlgorithms | undefined;
-  crv?: ("Ed25519" | "P-256" | "P-521") | undefined;
-}
-//#endregion
-//#region src/plugins/jwt/sign.d.ts
-declare function getJwtToken(ctx: GenericEndpointContext, options?: JwtOptions | undefined): Promise<string>;
-//#endregion
-//#region src/plugins/jwt/utils.d.ts
-declare function generateExportedKeyPair(options?: JwtOptions | undefined): Promise<{
-  publicWebKey: jose0.JWK;
-  privateWebKey: jose0.JWK;
-  alg: "EdDSA" | "ES256" | "ES512" | "PS256" | "RS256";
-  cfg: {
-    crv?: "Ed25519" | undefined;
-  } | {
-    crv?: never | undefined;
-  } | {
-    crv?: never | undefined;
-  } | {
-    modulusLength?: number | undefined;
-  } | {
-    modulusLength?: number | undefined;
-  };
-}>;
-/**
- * Creates a Jwk on the database
- *
- * @param ctx
- * @param options
- * @returns
- */
-declare function createJwk(ctx: GenericEndpointContext, options?: JwtOptions | undefined): Promise<Jwk>;
-//#endregion
-//#region src/plugins/jwt/verify.d.ts
-/**
- * Verify a JWT token using the JWKS public keys
- * Returns the payload if valid, null otherwise
- */
-declare function verifyJWT<T extends JWTPayload = JWTPayload>(token: string, options?: JwtOptions): Promise<(T & Required<Pick<JWTPayload, "sub" | "aud">>) | null>;
-//#endregion
-//#region src/plugins/jwt/index.d.ts
-declare const jwt: (options?: JwtOptions | undefined) => {
-  id: "jwt";
-  options: JwtOptions | undefined;
-  endpoints: {
-    getJwks: better_call197.StrictEndpoint<string, {
-      method: "GET";
-      metadata: {
-        openapi: {
-          operationId: string;
-          description: string;
-          responses: {
-            "200": {
-              description: string;
-              content: {
-                "application/json": {
-                  schema: {
-                    type: "object";
-                    properties: {
-                      keys: {
-                        type: string;
-                        description: string;
-                        items: {
-                          type: string;
-                          properties: {
-                            kid: {
-                              type: string;
-                              description: string;
-                            };
-                            kty: {
-                              type: string;
-                              description: string;
-                            };
-                            alg: {
-                              type: string;
-                              description: string;
-                            };
-                            use: {
-                              type: string;
-                              description: string;
-                              enum: string[];
-                              nullable: boolean;
-                            };
-                            n: {
-                              type: string;
-                              description: string;
-                              nullable: boolean;
-                            };
-                            e: {
-                              type: string;
-                              description: string;
-                              nullable: boolean;
-                            };
-                            crv: {
-                              type: string;
-                              description: string;
-                              nullable: boolean;
-                            };
-                            x: {
-                              type: string;
-                              description: string;
-                              nullable: boolean;
-                            };
-                            y: {
-                              type: string;
-                              description: string;
-                              nullable: boolean;
-                            };
-                          };
-                          required: string[];
-                        };
-                      };
-                    };
-                    required: string[];
-                  };
-                };
-              };
-            };
-          };
-        };
-      };
-    } & {
-      use: any[];
-    }, JSONWebKeySet>;
-    getToken: better_call197.StrictEndpoint<"/token", {
-      method: "GET";
-      requireHeaders: true;
-      use: ((inputContext: better_call197.MiddlewareInputContext<better_call197.MiddlewareOptions>) => Promise<{
-        session: {
-          session: Record<string, any> & {
-            id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            userId: string;
-            expiresAt: Date;
-            token: string;
-            ipAddress?: string | null | undefined;
-            userAgent?: string | null | undefined;
-          };
-          user: Record<string, any> & {
-            id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            email: string;
-            emailVerified: boolean;
-            name: string;
-            image?: string | null | undefined;
-          };
-        };
-      }>)[];
-      metadata: {
-        openapi: {
-          operationId: string;
-          description: string;
-          responses: {
-            200: {
-              description: string;
-              content: {
-                "application/json": {
-                  schema: {
-                    type: "object";
-                    properties: {
-                      token: {
-                        type: string;
-                      };
-                    };
-                  };
-                };
-              };
-            };
-          };
-        };
-      };
-    } & {
-      use: any[];
-    }, {
-      token: string;
-    }>;
-    signJWT: better_call197.StrictEndpoint<"/sign-jwt", {
-      method: "POST";
-      metadata: {
-        SERVER_ONLY: true;
-        $Infer: {
-          body: {
-            payload: JWTPayload;
-            overrideOptions?: JwtOptions | undefined;
-          };
-        };
-      };
-      body: z.ZodObject<{
-        payload: z.ZodRecord<z.ZodString, z.ZodAny>;
-        overrideOptions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
-      }, z.core.$strip>;
-    } & {
-      use: any[];
-    }, {
-      token: string;
-    }>;
-    verifyJWT: better_call197.StrictEndpoint<"/verify-jwt", {
-      method: "POST";
-      metadata: {
-        SERVER_ONLY: true;
-        $Infer: {
-          body: {
-            token: string;
-            issuer?: string;
-          };
-          response: {
-            payload: {
-              sub: string;
-              aud: string;
-              [key: string]: any;
-            } | null;
-          };
-        };
-      };
-      body: z.ZodObject<{
-        token: z.ZodString;
-        issuer: z.ZodOptional<z.ZodString>;
-      }, z.core.$strip>;
-    } & {
-      use: any[];
-    }, {
-      payload: (JWTPayload & Required<Pick<JWTPayload, "sub" | "aud">>) | null;
-    }>;
-  };
-  hooks: {
-    after: {
-      matcher(context: _better_auth_core9.HookEndpointContext): boolean;
-      handler: (inputContext: better_call197.MiddlewareInputContext<better_call197.MiddlewareOptions>) => Promise<void>;
-    }[];
-  };
-  schema: {
-    jwks: {
-      fields: {
-        publicKey: {
-          type: "string";
-          required: true;
-        };
-        privateKey: {
-          type: "string";
-          required: true;
-        };
-        createdAt: {
-          type: "date";
-          required: true;
-        };
-        expiresAt: {
-          type: "date";
-          required: false;
-        };
-      };
-    };
-  };
-};
-//#endregion
-export { getJwtToken as a, Jwk as c, generateExportedKeyPair as i, JwtOptions as l, verifyJWT as n, JWKOptions as o, createJwk as r, JWSAlgorithms as s, jwt as t };

package/dist/index-Cg12btK0.d.mts

@@ -1,76 +0,0 @@
-import * as z from "zod";
-import * as better_call214 from "better-call";
-
-//#region src/plugins/one-tap/index.d.ts
-interface OneTapOptions {
-  /**
-   * Disable the signup flow
-   *
-   * @default false
-   */
-  disableSignup?: boolean | undefined;
-  /**
-   * Google Client ID
-   *
-   * If a client ID is provided in the social provider configuration,
-   * it will be used.
-   */
-  clientId?: string | undefined;
-}
-declare const oneTap: (options?: OneTapOptions | undefined) => {
-  id: "one-tap";
-  endpoints: {
-    oneTapCallback: better_call214.StrictEndpoint<"/one-tap/callback", {
-      method: "POST";
-      body: z.ZodObject<{
-        idToken: z.ZodString;
-      }, z.core.$strip>;
-      metadata: {
-        openapi: {
-          summary: string;
-          description: string;
-          responses: {
-            200: {
-              description: string;
-              content: {
-                "application/json": {
-                  schema: {
-                    type: "object";
-                    properties: {
-                      session: {
-                        $ref: string;
-                      };
-                      user: {
-                        $ref: string;
-                      };
-                    };
-                  };
-                };
-              };
-            };
-            400: {
-              description: string;
-            };
-          };
-        };
-      };
-    } & {
-      use: any[];
-    }, {
-      error: string;
-    } | {
-      token: string;
-      user: {
-        id: string;
-        email: string;
-        emailVerified: boolean;
-        name: string;
-        image: string | null | undefined;
-        createdAt: Date;
-        updatedAt: Date;
-      };
-    }>;
-  };
-};
-//#endregion
-export { oneTap as t };

package/dist/index-CliPP00E.d.mts

@@ -1,110 +0,0 @@
-import { Tt as User, wt as Session } from "./index-C6JlLkZw.mjs";
-import { BetterAuthCookies, BetterAuthOptions, GenericEndpointContext } from "@better-auth/core";
-import "zod";
-import { CookieOptions } from "better-call";
-
-//#region src/cookies/cookie-utils.d.ts
-interface CookieAttributes {
-  value: string;
-  "max-age"?: number | undefined;
-  expires?: Date | undefined;
-  domain?: string | undefined;
-  path?: string | undefined;
-  secure?: boolean | undefined;
-  httponly?: boolean | undefined;
-  samesite?: ("strict" | "lax" | "none") | undefined;
-  [key: string]: any;
-}
-declare function parseSetCookieHeader(setCookie: string): Map<string, CookieAttributes>;
-declare function setCookieToHeader(headers: Headers): (context: {
-  response: Response;
-}) => void;
-//#endregion
-//#region src/cookies/session-store.d.ts
-interface Cookie {
-  name: string;
-  value: string;
-  options: CookieOptions;
-}
-declare const createSessionStore: (cookieName: string, cookieOptions: CookieOptions, ctx: GenericEndpointContext) => {
-  /**
-   * Get the full session data by joining all chunks
-   */
-  getValue(): string;
-  /**
-   * Check if there are existing chunks
-   */
-  hasChunks(): boolean;
-  /**
-   * Chunk a cookie value and return all cookies to set (including cleanup cookies)
-   */
-  chunk(value: string, options?: Partial<CookieOptions>): Cookie[];
-  /**
-   * Get cookies to clean up all chunks
-   */
-  clean(): Cookie[];
-  /**
-   * Set all cookies in the context
-   */
-  setCookies(cookies: Cookie[]): void;
-};
-declare function getChunkedCookie(ctx: GenericEndpointContext, cookieName: string): string | null;
-//#endregion
-//#region src/cookies/index.d.ts
-declare function createCookieGetter(options: BetterAuthOptions): (cookieName: string, overrideAttributes?: Partial<CookieOptions>) => {
-  name: string;
-  attributes: CookieOptions;
-};
-declare function getCookies(options: BetterAuthOptions): {
-  sessionToken: {
-    name: string;
-    options: CookieOptions;
-  };
-  /**
-   * This cookie is used to store the session data in the cookie
-   * This is useful for when you want to cache the session in the cookie
-   */
-  sessionData: {
-    name: string;
-    options: CookieOptions;
-  };
-  dontRememberToken: {
-    name: string;
-    options: CookieOptions;
-  };
-  accountData: {
-    name: string;
-    options: CookieOptions;
-  };
-};
-declare function setCookieCache(ctx: GenericEndpointContext, session: {
-  session: Session & Record<string, any>;
-  user: User;
-}, dontRememberMe: boolean): Promise<void>;
-declare function setSessionCookie(ctx: GenericEndpointContext, session: {
-  session: Session & Record<string, any>;
-  user: User;
-}, dontRememberMe?: boolean | undefined, overrides?: Partial<CookieOptions> | undefined): Promise<void>;
-declare function deleteSessionCookie(ctx: GenericEndpointContext, skipDontRememberMe?: boolean | undefined): void;
-declare function parseCookies(cookieHeader: string): Map<string, string>;
-type EligibleCookies = (string & {}) | (keyof BetterAuthCookies & {});
-declare const getSessionCookie: (request: Request | Headers, config?: {
-  cookiePrefix?: string;
-  cookieName?: string;
-  path?: string;
-} | undefined) => string | null;
-declare const getCookieCache: <S extends {
-  session: Session & Record<string, any>;
-  user: User & Record<string, any>;
-  updatedAt: number;
-  version?: string;
-}>(request: Request | Headers, config?: {
-  cookiePrefix?: string;
-  cookieName?: string;
-  isSecure?: boolean;
-  secret?: string;
-  strategy?: "compact" | "jwt" | "jwe";
-  version?: string | ((session: Session & Record<string, any>, user: User & Record<string, any>) => string) | ((session: Session & Record<string, any>, user: User & Record<string, any>) => Promise<string>);
-} | undefined) => Promise<S | null>;
-//#endregion
-export { getCookies as a, setCookieCache as c, getChunkedCookie as d, parseSetCookieHeader as f, getCookieCache as i, setSessionCookie as l, createCookieGetter as n, getSessionCookie as o, setCookieToHeader as p, deleteSessionCookie as r, parseCookies as s, EligibleCookies as t, createSessionStore as u };