better-auth 1.6.22 → 1.6.24

package/dist/api/middlewares/authorization.d.mts

@@ -1,5 +1,3 @@
-import * as better_call0 from "better-call";
-
 //#region src/api/middlewares/authorization.d.ts
 /**
  * Middleware that verifies the authenticated user owns a resource.
@@ -14,9 +12,13 @@ import * as better_call0 from "better-call";
  * so the handler can use it without a redundant DB query.
  */
 declare function requireResourceOwnership(config: {
-  /** Database model name (e.g., "passkey", "apiKey") */model: string; /** Request parameter name containing the resource ID */
-  idParam: string; /** Where to find the ID: "body" or "query" */
-  idSource: "body" | "query"; /** Field on the resource that holds the owner's user ID. Default: "userId" */
+  /** Database model name (e.g., "passkey", "apiKey") */
+  model: string;
+  /** Request parameter name containing the resource ID */
+  idParam: string;
+  /** Where to find the ID: "body" or "query" */
+  idSource: "body" | "query";
+  /** Field on the resource that holds the owner's user ID. Default: "userId" */
   ownerField?: string;
   /**
    * Custom error to throw when the resource is not found.
@@ -41,7 +43,7 @@ declare function requireResourceOwnership(config: {
    * @default "FORBIDDEN" (403)
    */
   forbiddenStatus?: "FORBIDDEN" | "UNAUTHORIZED";
-}): (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+}): (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
   verifiedResource: {};
 }>;
 /**
@@ -55,14 +57,16 @@ declare function requireResourceOwnership(config: {
  * The verified member is returned on `ctx.context.verifiedMember`.
  */
 declare function requireOrgRole(config: {
-  /** Request parameter name containing the organization ID */orgIdParam: string; /** Where to find the org ID: "body" or "query" */
+  /** Request parameter name containing the organization ID */
+  orgIdParam: string;
+  /** Where to find the org ID: "body" or "query" */
   orgIdSource: "body" | "query";
   /**
    * Roles that are authorized to proceed. If omitted or empty,
    * any org membership is sufficient.
    */
   allowedRoles?: string[];
-}): (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+}): (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
   verifiedMember: {};
 }>;
 //#endregion

package/dist/api/middlewares/authorization.mjs

@@ -69,7 +69,8 @@ function requireOrgRole(config) {
 		});
 		if (!member) throw new APIError("FORBIDDEN", { message: "Not a member of this organization" });
 		if (config.allowedRoles?.length) {
-			if (!parseMemberRoles(member.role ?? "").some((role) => config.allowedRoles.includes(role))) throw new APIError("FORBIDDEN", { message: "Insufficient role for this operation" });
+			const rawRole = member.role ?? "";
+			if (!parseMemberRoles(rawRole).some((role) => config.allowedRoles.includes(role))) throw new APIError("FORBIDDEN", { message: "Insufficient role for this operation" });
 		}
 		return { verifiedMember: member };
 	});

package/dist/api/middlewares/index.d.mts

@@ -1,2 +1,3 @@
 import { requireOrgRole, requireResourceOwnership } from "./authorization.mjs";
-import { formCsrfMiddleware, originCheck, originCheckMiddleware } from "./origin-check.mjs";
+import { formCsrfMiddleware, originCheck, originCheckMiddleware } from "./origin-check.mjs";
+export { formCsrfMiddleware, originCheck, originCheckMiddleware, requireOrgRole, requireResourceOwnership };

package/dist/api/middlewares/origin-check.d.mts

@@ -1,17 +1,15 @@
 import { GenericEndpointContext } from "@better-auth/core";
-import * as better_call0 from "better-call";
-
 //#region src/api/middlewares/origin-check.d.ts
 /**
  * A middleware to validate callbackURL and origin against trustedOrigins.
  * Also handles CSRF protection using Fetch Metadata for first-login scenarios.
  */
-declare const originCheckMiddleware: (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>;
-declare const originCheck: (getValue: (ctx: GenericEndpointContext) => string | string[]) => (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>;
+declare const originCheckMiddleware: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>;
+declare const originCheck: (getValue: (ctx: GenericEndpointContext) => string | string[]) => (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>;
 /**
  * Middleware for CSRF protection using Fetch Metadata headers.
  * This prevents cross-site navigation login attacks while supporting progressive enhancement.
  */
-declare const formCsrfMiddleware: (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>;
+declare const formCsrfMiddleware: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>;
 //#endregion
 export { formCsrfMiddleware, originCheck, originCheckMiddleware };

package/dist/api/routes/account.d.mts

@@ -1,11 +1,8 @@
-import * as _better_auth_core_oauth20 from "@better-auth/core/oauth2";
-import * as better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/api/routes/account.d.ts
-declare const listUserAccounts: better_call0.StrictEndpoint<"/list-accounts", {
+declare const listUserAccounts: import("better-call").StrictEndpoint<"/list-accounts", {
   method: "GET";
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -87,7 +84,7 @@ declare const listUserAccounts: better_call0.StrictEndpoint<"/list-accounts", {
   providerId: string;
   accountId: string;
 }[]>;
-declare const linkSocialAccount: better_call0.StrictEndpoint<"/link-social", {
+declare const linkSocialAccount: import("better-call").StrictEndpoint<"/link-social", {
   method: "POST";
   requireHeaders: true;
   body: z.ZodObject<{
@@ -106,7 +103,7 @@ declare const linkSocialAccount: better_call0.StrictEndpoint<"/link-social", {
     disableRedirect: z.ZodOptional<z.ZodBoolean>;
     additionalData: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
   }, z.core.$strip>;
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -165,13 +162,13 @@ declare const linkSocialAccount: better_call0.StrictEndpoint<"/link-social", {
   url: string;
   redirect: boolean;
 }>;
-declare const unlinkAccount: better_call0.StrictEndpoint<"/unlink-account", {
+declare const unlinkAccount: import("better-call").StrictEndpoint<"/unlink-account", {
   method: "POST";
   body: z.ZodObject<{
     providerId: z.ZodString;
     accountId: z.ZodOptional<z.ZodString>;
   }, z.core.$strip>;
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -219,7 +216,7 @@ declare const unlinkAccount: better_call0.StrictEndpoint<"/unlink-account", {
 }, {
   status: boolean;
 }>;
-declare const getAccessToken: better_call0.StrictEndpoint<"/get-access-token", {
+declare const getAccessToken: import("better-call").StrictEndpoint<"/get-access-token", {
   method: "POST";
   body: z.ZodObject<{
     providerId: z.ZodString;
@@ -267,7 +264,7 @@ declare const getAccessToken: better_call0.StrictEndpoint<"/get-access-token", {
   scopes: string[];
   idToken: string | undefined;
 }>;
-declare const refreshToken: better_call0.StrictEndpoint<"/refresh-token", {
+declare const refreshToken: import("better-call").StrictEndpoint<"/refresh-token", {
   method: "POST";
   body: z.ZodObject<{
     providerId: z.ZodString;
@@ -326,7 +323,7 @@ declare const refreshToken: better_call0.StrictEndpoint<"/refresh-token", {
   providerId: string;
   accountId: string;
 }>;
-declare const accountInfo: better_call0.StrictEndpoint<"/account-info", {
+declare const accountInfo: import("better-call").StrictEndpoint<"/account-info", {
   method: "GET";
   metadata: {
     openapi: {
@@ -381,7 +378,7 @@ declare const accountInfo: better_call0.StrictEndpoint<"/account-info", {
     userId: z.ZodOptional<z.ZodString>;
   }, z.core.$strip>>;
 }, {
-  user: _better_auth_core_oauth20.OAuth2UserInfo;
+  user: import("@better-auth/core/oauth2").OAuth2UserInfo;
   data: Record<string, any>;
 } | null>;
 //#endregion

package/dist/api/routes/account.mjs

@@ -70,8 +70,17 @@ const linkSocialAccount = createAuthEndpoint("/link-social", {
 	method: "POST",
 	requireHeaders: true,
 	body: z.object({
+		/**
+		* Callback URL to redirect to after the user has signed in.
+		*/
 		callbackURL: z.string().meta({ description: "The URL to redirect to after the user has signed in" }).optional(),
+		/**
+		* OAuth2 provider to use
+		*/
 		provider: SocialProviderListEnum,
+		/**
+		* ID Token for direct authentication without redirect
+		*/
 		idToken: z.object({
 			token: z.string(),
 			nonce: z.string().optional(),
@@ -79,10 +88,30 @@ const linkSocialAccount = createAuthEndpoint("/link-social", {
 			refreshToken: z.string().optional(),
 			scopes: z.array(z.string()).optional()
 		}).optional(),
+		/**
+		* Whether to allow sign up for new users
+		*/
 		requestSignUp: z.boolean().optional(),
+		/**
+		* Additional scopes to request when linking the account.
+		* This is useful for requesting additional permissions when
+		* linking a social account compared to the initial authentication.
+		*/
 		scopes: z.array(z.string()).meta({ description: "Additional scopes to request from the provider" }).optional(),
+		/**
+		* The URL to redirect to if there is an error during the link process.
+		*/
 		errorCallbackURL: z.string().meta({ description: "The URL to redirect to if there is an error during the link process" }).optional(),
+		/**
+		* Disable automatic redirection to the provider
+		*
+		* This is useful if you want to handle the redirection
+		* yourself like in a popup or a different tab.
+		*/
 		disableRedirect: z.boolean().meta({ description: "Disable automatic redirection to the provider. Useful for handling the redirection yourself" }).optional(),
+		/**
+		* Any additional data to pass through the oauth flow.
+		*/
 		additionalData: z.record(z.string(), z.any()).optional()
 	}),
 	use: [sessionMiddleware],
@@ -121,7 +150,7 @@ const linkSocialAccount = createAuthEndpoint("/link-social", {
 			throw APIError.from("NOT_FOUND", BASE_ERROR_CODES.ID_TOKEN_NOT_SUPPORTED);
 		}
 		const { token, nonce } = c.body.idToken;
-		if (!await provider.verifyIdToken(token, nonce)) {
+		if (!await provider.verifyIdToken(token, nonce, c)) {
 			c.context.logger.warn("Invalid id token", { provider: c.body.provider });
 			throw APIError.from("UNAUTHORIZED", BASE_ERROR_CODES.INVALID_TOKEN);
 		}
@@ -452,11 +481,6 @@ const refreshToken = createAuthEndpoint("/refresh-token", {
 		});
 	}
 });
-const accountInfoQuerySchema = z.optional(z.object({
-	accountId: z.string().meta({ description: "The provider given account id for which to get the account info" }).optional(),
-	providerId: z.string().meta({ description: "The provider ID to disambiguate provider-issued account IDs" }).optional(),
-	userId: z.string().meta({ description: "The user ID associated with the account" }).optional()
-}));
 const accountInfo = createAuthEndpoint("/account-info", {
 	method: "GET",
 	metadata: { openapi: {
@@ -488,7 +512,11 @@ const accountInfo = createAuthEndpoint("/account-info", {
 			} } }
 		} }
 	} },
-	query: accountInfoQuerySchema
+	query: z.optional(z.object({
+		accountId: z.string().meta({ description: "The provider given account id for which to get the account info" }).optional(),
+		providerId: z.string().meta({ description: "The provider ID to disambiguate provider-issued account IDs" }).optional(),
+		userId: z.string().meta({ description: "The user ID associated with the account" }).optional()
+	}))
 }, async (ctx) => {
 	const { accountId: providedAccountId, providerId: providedProviderId, userId } = ctx.query || {};
 	const resolvedUserId = await resolveUserId(ctx, userId);

package/dist/api/routes/callback.d.mts

@@ -1,8 +1,6 @@
-import * as better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/api/routes/callback.d.ts
-declare const callbackOAuth: better_call0.StrictEndpoint<"/callback/:id", {
+declare const callbackOAuth: import("better-call").StrictEndpoint<"/callback/:id", {
   method: ("GET" | "POST")[];
   operationId: string;
   body: z.ZodOptional<z.ZodObject<{

package/dist/api/routes/callback.mjs

@@ -79,6 +79,10 @@ const callbackOAuth = createAuthEndpoint("/callback/:id", {
 	const parsedUserData = userData ? safeJSONParse(userData) : null;
 	const userInfo = await provider.getUserInfo({
 		...tokens,
+		/**
+		* The user object from the provider
+		* This is only available for some providers like Apple
+		*/
 		user: parsedUserData ?? void 0
 	}).then((res) => res?.user);
 	if (!userInfo || userInfo.id === void 0 || userInfo.id === null || userInfo.id === "") {

package/dist/api/routes/email-verification.d.mts

@@ -1,30 +1,26 @@
 import { User } from "../../types/models.mjs";
+import "../../types/index.mjs";
 import { GenericEndpointContext } from "@better-auth/core";
-import * as better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/api/routes/email-verification.d.ts
 declare function createEmailVerificationToken(secret: string, email: string,
 /**
  * The email to update from
  */
-
 updateTo?: string | undefined,
 /**
  * The time in seconds for the token to expire
  */
-
 expiresIn?: number,
 /**
  * Extra payload to include in the token
  */
-
 extraPayload?: Record<string, any>): Promise<string>;
 /**
  * A function to send a verification email to the user
  */
 declare function sendVerificationEmailFn(ctx: GenericEndpointContext, user: User): Promise<void>;
-declare const sendVerificationEmail: better_call0.StrictEndpoint<"/send-verification-email", {
+declare const sendVerificationEmail: import("better-call").StrictEndpoint<"/send-verification-email", {
   method: "POST";
   operationId: string;
   cloneRequest: true;
@@ -100,14 +96,14 @@ declare const sendVerificationEmail: better_call0.StrictEndpoint<"/send-verifica
 }, {
   status: boolean;
 }>;
-declare const verifyEmail: better_call0.StrictEndpoint<"/verify-email", {
+declare const verifyEmail: import("better-call").StrictEndpoint<"/verify-email", {
   method: "GET";
   operationId: string;
   query: z.ZodObject<{
     token: z.ZodString;
     callbackURL: z.ZodOptional<z.ZodString>;
   }, z.core.$strip>;
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>)[];
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>)[];
   metadata: {
     openapi: {
       description: string;

package/dist/api/routes/email-verification.mjs

@@ -3,6 +3,7 @@ import { signJWT } from "../../crypto/jwt.mjs";
 import { parseUserOutput } from "../../db/schema.mjs";
 import { setSessionCookie } from "../../cookies/index.mjs";
 import { getSessionFromCtx } from "./session.mjs";
+import { safeCloneRequest } from "../../utils/request.mjs";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
 import { createAuthEndpoint } from "@better-auth/core/api";
 import * as z from "zod";
@@ -188,6 +189,9 @@ const verifyEmail = createAuthEndpoint("/verify-email", {
 		const session = await getSessionFromCtx(ctx);
 		if (session && session.user.email !== parsed.email) return redirectOnError(BASE_ERROR_CODES.INVALID_USER);
 		switch (parsed.requestType) {
+			/**
+			* User clicks confirmation -> sends verification to new email
+			*/
 			case "change-email-confirmation": {
 				const newToken = await createEmailVerificationToken(ctx.context.secret, parsed.email, parsed.updateTo, ctx.context.options.emailVerification?.expiresIn, { requestType: "change-email-verification" });
 				const updateCallbackURL = ctx.query.callbackURL ? encodeURIComponent(ctx.query.callbackURL) : encodeURIComponent("/");
@@ -199,10 +203,13 @@ const verifyEmail = createAuthEndpoint("/verify-email", {
 					},
 					url,
 					token: newToken
-				}, ctx.request?.clone()));
+				}, safeCloneRequest(ctx.request)));
 				if (ctx.query.callbackURL) throw ctx.redirect(ctx.query.callbackURL);
 				return ctx.json({ status: true });
 			}
+			/**
+			* User clicks verification -> updates email
+			*/
 			case "change-email-verification": {
 				let activeSession = session;
 				if (!activeSession) {
@@ -232,6 +239,12 @@ const verifyEmail = createAuthEndpoint("/verify-email", {
 					user: parseUserOutput(ctx.context.options, updatedUser)
 				});
 			}
+			/**
+			* Legacy flow
+			*
+			* - skips two-step verification
+			* - updates email immediately
+			*/
 			default: {
 				let activeSession = session;
 				if (!activeSession) {
@@ -252,7 +265,7 @@ const verifyEmail = createAuthEndpoint("/verify-email", {
 					user: updatedUser,
 					url: `${ctx.context.baseURL}/verify-email?token=${newToken}&callbackURL=${updateCallbackURL}`,
 					token: newToken
-				}, ctx.request?.clone()));
+				}, safeCloneRequest(ctx.request)));
 				await setSessionCookie(ctx, {
 					session: activeSession.session,
 					user: {

package/dist/api/routes/error.d.mts

@@ -1,7 +1,5 @@
-import * as better_call0 from "better-call";
-
 //#region src/api/routes/error.d.ts
-declare const error: better_call0.StrictEndpoint<"/error", {
+declare const error: import("better-call").StrictEndpoint<"/error", {
   method: "GET";
   metadata: {
     openapi: {

package/dist/api/routes/index.d.mts

@@ -9,4 +9,5 @@ import { signInEmail, signInSocial } from "./sign-in.mjs";
 import { signOut } from "./sign-out.mjs";
 import { signUpEmail } from "./sign-up.mjs";
 import { updateSession } from "./update-session.mjs";
-import { changeEmail, changePassword, deleteUser, deleteUserCallback, setPassword, updateUser } from "./update-user.mjs";
+import { changeEmail, changePassword, deleteUser, deleteUserCallback, setPassword, updateUser } from "./update-user.mjs";
+export { accountInfo, callbackOAuth, changeEmail, changePassword, createEmailVerificationToken, deleteUser, deleteUserCallback, error, freshSessionMiddleware, getAccessToken, getAuthoritativeSessionFromCtx, getSession, getSessionFromCtx, isStateful, linkSocialAccount, listSessions, listUserAccounts, ok, refreshToken, requestOnlySessionMiddleware, requestPasswordReset, requestPasswordResetCallback, resetPassword, revokeOtherSessions, revokeSession, revokeSessions, sendVerificationEmail, sendVerificationEmailFn, sensitiveSessionMiddleware, sessionMiddleware, setPassword, signInEmail, signInSocial, signOut, signUpEmail, unlinkAccount, updateSession, updateUser, verifyEmail, verifyPassword };

package/dist/api/routes/ok.d.mts

@@ -1,7 +1,5 @@
-import * as better_call0 from "better-call";
-
 //#region src/api/routes/ok.d.ts
-declare const ok: better_call0.StrictEndpoint<"/ok", {
+declare const ok: import("better-call").StrictEndpoint<"/ok", {
   method: "GET";
   metadata: {
     openapi: {

package/dist/api/routes/password.d.mts

@@ -1,8 +1,6 @@
-import * as better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/api/routes/password.d.ts
-declare const requestPasswordReset: better_call0.StrictEndpoint<"/request-password-reset", {
+declare const requestPasswordReset: import("better-call").StrictEndpoint<"/request-password-reset", {
   method: "POST";
   body: z.ZodObject<{
     email: z.ZodEmail;
@@ -34,18 +32,18 @@ declare const requestPasswordReset: better_call0.StrictEndpoint<"/request-passwo
       };
     };
   };
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>)[];
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>)[];
 }, {
   status: boolean;
   message: string;
 }>;
-declare const requestPasswordResetCallback: better_call0.StrictEndpoint<"/reset-password/:token", {
+declare const requestPasswordResetCallback: import("better-call").StrictEndpoint<"/reset-password/:token", {
   method: "GET";
   operationId: string;
   query: z.ZodObject<{
     callbackURL: z.ZodString;
   }, z.core.$strip>;
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>)[];
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>)[];
   metadata: {
     openapi: {
       operationId: string;
@@ -87,7 +85,7 @@ declare const requestPasswordResetCallback: better_call0.StrictEndpoint<"/reset-
     };
   };
 }, never>;
-declare const resetPassword: better_call0.StrictEndpoint<"/reset-password", {
+declare const resetPassword: import("better-call").StrictEndpoint<"/reset-password", {
   method: "POST";
   operationId: string;
   query: z.ZodOptional<z.ZodObject<{
@@ -123,7 +121,7 @@ declare const resetPassword: better_call0.StrictEndpoint<"/reset-password", {
 }, {
   status: boolean;
 }>;
-declare const verifyPassword: better_call0.StrictEndpoint<"/verify-password", {
+declare const verifyPassword: import("better-call").StrictEndpoint<"/verify-password", {
   method: "POST";
   body: z.ZodObject<{
     password: z.ZodString;
@@ -152,7 +150,7 @@ declare const verifyPassword: better_call0.StrictEndpoint<"/verify-password", {
       };
     };
   };
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;

package/dist/api/routes/password.mjs

@@ -20,7 +20,16 @@ function redirectCallback(ctx, callbackURL, query) {
 const requestPasswordReset = createAuthEndpoint("/request-password-reset", {
 	method: "POST",
 	body: z.object({
+		/**
+		* The email address of the user to send a password reset email to.
+		*/
 		email: z.email().meta({ description: "The email address of the user to send a password reset email to" }),
+		/**
+		* The URL to redirect the user to reset their password.
+		* If the token isn't valid or expired, it'll be redirected with a query parameter `?
+		* error=INVALID_TOKEN`. If the token is valid, it'll be redirected with a query parameter `?
+		* token=VALID_TOKEN
+		*/
 		redirectTo: z.string().meta({ description: "The URL to redirect the user to reset their password. If the token isn't valid or expired, it'll be redirected with a query parameter `?error=INVALID_TOKEN`. If the token is valid, it'll be redirected with a query parameter `?token=VALID_TOKEN" }).optional()
 	}),
 	metadata: { openapi: {
@@ -165,7 +174,11 @@ const resetPassword = createAuthEndpoint("/reset-password", {
 });
 const verifyPassword = createAuthEndpoint("/verify-password", {
 	method: "POST",
-	body: z.object({ password: z.string().meta({ description: "The password to verify" }) }),
+	body: z.object({ 
+	/**
+	* The password to verify
+	*/
+password: z.string().meta({ description: "The password to verify" }) }),
 	metadata: {
 		scope: "server",
 		openapi: {

package/dist/api/routes/session.d.mts

@@ -1,12 +1,10 @@
-import { Prettify as Prettify$1 } from "../../types/helper.mjs";
-import { Session as Session$1, User as User$1 } from "../../types/models.mjs";
+import { Prettify } from "../../types/helper.mjs";
+import { Session, User } from "../../types/models.mjs";
+import "../../types/index.mjs";
 import { BetterAuthOptions, GenericEndpointContext } from "@better-auth/core";
-import * as _better_auth_core_db0 from "@better-auth/core/db";
-import * as better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/api/routes/session.d.ts
-declare const getSession: <Option extends BetterAuthOptions>() => better_call0.StrictEndpoint<"/get-session", {
+declare const getSession: <Option extends BetterAuthOptions>() => import("better-call").StrictEndpoint<"/get-session", {
   method: ("GET" | "POST")[];
   operationId: string;
   query: z.ZodOptional<z.ZodObject<{
@@ -42,8 +40,8 @@ declare const getSession: <Option extends BetterAuthOptions>() => better_call0.S
     };
   };
 }, {
-  session: Session$1<Option["session"], Option["plugins"]>;
-  user: User$1<Option["user"], Option["plugins"]>;
+  session: Session<Option["session"], Option["plugins"]>;
+  user: User<Option["user"], Option["plugins"]>;
 } | null>;
 /**
  * Whether the deployment keeps sessions in a durable server-side store
@@ -60,8 +58,8 @@ declare const getSessionFromCtx: <U extends Record<string, any> = Record<string,
   disableCookieCache?: boolean;
   disableRefresh?: boolean;
 } | undefined) => Promise<{
-  session: S & Session$1;
-  user: U & User$1;
+  session: S & Session;
+  user: U & User;
 } | null>;
 /**
  * Reads the session from the source that can authorize sensitive work.
@@ -94,7 +92,7 @@ declare const getAuthoritativeSessionFromCtx: <U extends Record<string, any> = R
 /**
  * The middleware forces the endpoint to require a valid session.
  */
-declare const sessionMiddleware: (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+declare const sessionMiddleware: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
   session: {
     session: Record<string, any> & {
       id: string;
@@ -121,7 +119,7 @@ declare const sessionMiddleware: (inputContext: better_call0.MiddlewareInputCont
  * This middleware forces the endpoint to require a valid authoritative session.
  * This should be used for sensitive operations like password changes, account deletion, etc.
  */
-declare const sensitiveSessionMiddleware: (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+declare const sensitiveSessionMiddleware: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
   session: {
     session: Record<string, any> & {
       id: string;
@@ -148,7 +146,7 @@ declare const sensitiveSessionMiddleware: (inputContext: better_call0.Middleware
  * This middleware allows you to call the endpoint on the client if session is valid.
  * However, if called on the server, no session is required.
  */
-declare const requestOnlySessionMiddleware: (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+declare const requestOnlySessionMiddleware: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
   session: {
     session: Record<string, any> & {
       id: string;
@@ -178,7 +176,7 @@ declare const requestOnlySessionMiddleware: (inputContext: better_call0.Middlewa
  * Session freshness check will be skipped if the session config's freshAge
  * is set to 0
  */
-declare const freshSessionMiddleware: (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+declare const freshSessionMiddleware: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
   session: {
     session: Record<string, any> & {
       id: string;
@@ -204,10 +202,10 @@ declare const freshSessionMiddleware: (inputContext: better_call0.MiddlewareInpu
 /**
  * user active sessions list
  */
-declare const listSessions: <Option extends BetterAuthOptions>() => better_call0.StrictEndpoint<"/list-sessions", {
+declare const listSessions: <Option extends BetterAuthOptions>() => import("better-call").StrictEndpoint<"/list-sessions", {
   method: "GET";
   operationId: string;
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -252,7 +250,7 @@ declare const listSessions: <Option extends BetterAuthOptions>() => better_call0
       };
     };
   };
-}, Prettify$1<{
+}, Prettify<{
   id: string;
   createdAt: Date;
   updatedAt: Date;
@@ -261,16 +259,16 @@ declare const listSessions: <Option extends BetterAuthOptions>() => better_call0
   token: string;
   ipAddress?: string | null | undefined;
   userAgent?: string | null | undefined;
-} & _better_auth_core_db0.InferDBFieldsFromOptions<Option["session"]> & _better_auth_core_db0.InferDBFieldsFromPlugins<"session", Option["plugins"]> extends infer T ? { [K in keyof T]: T[K] } : never>[]>;
+} & import("@better-auth/core/db").InferDBFieldsFromOptions<Option["session"]> & import("@better-auth/core/db").InferDBFieldsFromPlugins<"session", Option["plugins"]> extends (infer T) ? { [K in keyof T]: T[K]; } : never>[]>;
 /**
  * revoke a single session
  */
-declare const revokeSession: better_call0.StrictEndpoint<"/revoke-session", {
+declare const revokeSession: import("better-call").StrictEndpoint<"/revoke-session", {
   method: "POST";
   body: z.ZodObject<{
     token: z.ZodString;
   }, z.core.$strip>;
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -340,9 +338,9 @@ declare const revokeSession: better_call0.StrictEndpoint<"/revoke-session", {
 /**
  * revoke all user sessions
  */
-declare const revokeSessions: better_call0.StrictEndpoint<"/revoke-sessions", {
+declare const revokeSessions: import("better-call").StrictEndpoint<"/revoke-sessions", {
   method: "POST";
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -393,10 +391,10 @@ declare const revokeSessions: better_call0.StrictEndpoint<"/revoke-sessions", {
 }, {
   status: boolean;
 }>;
-declare const revokeOtherSessions: better_call0.StrictEndpoint<"/revoke-other-sessions", {
+declare const revokeOtherSessions: import("better-call").StrictEndpoint<"/revoke-other-sessions", {
   method: "POST";
   requireHeaders: true;
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;