better-auth 1.6.23 → 1.6.25

package/dist/plugins/username/schema.d.mts

@@ -1,5 +1,3 @@
-import * as _better_auth_core_db0 from "@better-auth/core/db";
-
 //#region src/plugins/username/schema.d.ts
 declare const getSchema: (normalizer: {
   username: (username: string) => string;
@@ -14,14 +12,14 @@ declare const getSchema: (normalizer: {
         unique: true;
         returned: true;
         transform: {
-          input(value: _better_auth_core_db0.DBPrimitive): string | number | boolean | Date | Record<string, unknown> | unknown[] | null | undefined;
+          input(value: import("@better-auth/core/db").DBPrimitive): string | number | boolean | Date | Record<string, unknown> | unknown[] | null | undefined;
         };
       };
       displayUsername: {
         type: "string";
         required: false;
         transform: {
-          input(value: _better_auth_core_db0.DBPrimitive): string | number | boolean | Date | Record<string, unknown> | unknown[] | null | undefined;
+          input(value: import("@better-auth/core/db").DBPrimitive): string | number | boolean | Date | Record<string, unknown> | unknown[] | null | undefined;
         };
       };
     };
@@ -29,4 +27,4 @@ declare const getSchema: (normalizer: {
 };
 type UsernameSchema = ReturnType<typeof getSchema>;
 //#endregion
-export { UsernameSchema };
+export { UsernameSchema, getSchema };

package/dist/state.d.mts

@@ -1,7 +1,6 @@
 import { GenericEndpointContext } from "@better-auth/core";
 import { BetterAuthError } from "@better-auth/core/error";
 import * as z from "zod";
-
 //#region src/state.d.ts
 declare const stateDataSchema: z.ZodObject<{
   callbackURL: z.ZodString;

package/dist/state.mjs

@@ -10,6 +10,10 @@ const stateDataSchema = z.looseObject({
 	errorURL: z.string().optional(),
 	newUserURL: z.string().optional(),
 	expiresAt: z.number(),
+	/**
+	* CSRF nonce returned to the OAuth provider. When using cookie state storage,
+	* this must match the callback `state` query parameter.
+	*/
 	oauthState: z.string().optional(),
 	link: z.object({
 		email: z.string(),

package/dist/test-utils/test-instance.d.mts

@@ -1,11 +1,13 @@
 import { Session, User } from "../types/models.mjs";
 import { Auth } from "../types/auth.mjs";
+import "../types/index.mjs";
+import "../index.mjs";
 import { AuthClient } from "../client/vanilla.mjs";
+import "../client/index.mjs";
 import { setCookieToHeader } from "../cookies/cookie-utils.mjs";
+import "../cookies/index.mjs";
 import { Awaitable, BetterAuthClientOptions, BetterAuthOptions } from "@better-auth/core";
-import * as _better_auth_core_db_adapter0 from "@better-auth/core/db/adapter";
 import { SuccessContext } from "@better-fetch/fetch";
-
 //#region src/test-utils/test-instance.d.ts
 declare function getTestInstance<O extends Partial<BetterAuthOptions>, C extends BetterAuthClientOptions>(options?: O | undefined, config?: {
   clientOptions?: C;
@@ -48,7 +50,7 @@ declare function getTestInstance<O extends Partial<BetterAuthOptions>, C extends
   cookieSetter: typeof setCookieToHeader;
   customFetchImpl: (url: string | URL | Request, init?: RequestInit | undefined) => Promise<Response>;
   sessionSetter: (headers: Headers) => (context: SuccessContext) => void;
-  db: _better_auth_core_db_adapter0.DBAdapter<BetterAuthOptions>;
+  db: import("@better-auth/core/db/adapter").DBAdapter<BetterAuthOptions>;
   runWithUser: (email: string, password: string, fn: (headers: Headers) => Awaitable<void>) => Promise<void>;
 }>;
 //#endregion

package/dist/test-utils/test-instance.mjs

@@ -44,7 +44,10 @@ async function getTestInstance(options, config) {
 	async function mongodbClient() {
 		const { MongoClient } = await import("mongodb");
 		const dbClient = async (connectionString, dbName) => {
-			const client = new MongoClient(connectionString);
+			const client = new MongoClient(connectionString, {
+				serverSelectionTimeoutMS: 2e3,
+				connectTimeoutMS: 2e3
+			});
 			await client.connect();
 			return client.db(dbName);
 		};

package/dist/types/adapter.d.mts

@@ -1,2 +1,2 @@
 import { DBAdapter as DBAdapter$1, DBAdapterInstance, DBAdapterSchemaCreation, DBTransactionAdapter, JoinConfig, JoinOption, Where as Where$1 } from "@better-auth/core/db/adapter";
-export { type DBAdapter$1 as DBAdapter, type DBAdapterInstance, type DBAdapterSchemaCreation, type DBTransactionAdapter, type JoinConfig, type JoinOption, type Where$1 as Where };
+export type { DBAdapter$1 as DBAdapter, DBAdapterInstance, DBAdapterSchemaCreation, DBTransactionAdapter, JoinConfig, JoinOption, Where$1 as Where };

package/dist/types/api.d.mts

@@ -1,8 +1,7 @@
 import { PrettifyDeep, UnionToIntersection } from "./helper.mjs";
 import { Endpoint } from "better-call";
-
 //#region src/types/api.d.ts
-type FilteredAPI<API> = Omit<API, API extends { [key in infer K]: Endpoint } ? K extends string ? K extends "getSession" ? never : API[K]["options"]["metadata"] extends {
+type FilteredAPI<API> = Omit<API, API extends { [key in infer K]: Endpoint; } ? K extends string ? K extends "getSession" ? never : API[K]["options"]["metadata"] extends {
   isAction: false;
 } | {
   scope: "http";

package/dist/types/auth.d.mts

@@ -4,7 +4,6 @@ import { InferPluginContext, InferPluginErrorCodes } from "./plugins.mjs";
 import { router } from "../api/index.mjs";
 import { AuthContext, BetterAuthOptions } from "@better-auth/core";
 import { BASE_ERROR_CODES } from "@better-auth/core/error";
-
 //#region src/types/auth.d.ts
 type Auth<Options extends BetterAuthOptions = BetterAuthOptions> = {
   handler: (request: Request) => Promise<Response>;

package/dist/types/helper.d.mts

@@ -1,22 +1,22 @@
 //#region src/types/helper.d.ts
 type IsAny<T> = 0 extends 1 & T ? true : false;
 type Prettify<T> = Omit<T, never>;
-type PrettifyDeep<T> = { [K in keyof T]: T[K] extends ((...args: any[]) => any) ? T[K] : T[K] extends object ? T[K] extends Array<any> ? T[K] : T[K] extends Date ? T[K] : PrettifyDeep<T[K]> : T[K] } & {};
+type PrettifyDeep<T> = { [K in keyof T]: T[K] extends ((...args: any[]) => any) ? T[K] : T[K] extends object ? T[K] extends Array<any> ? T[K] : T[K] extends Date ? T[K] : PrettifyDeep<T[K]> : T[K]; } & {};
 type UnionToIntersection<U> = (U extends any ? (k: U) => void : never) extends ((k: infer I) => void) ? I : never;
-type RequiredKeysOf<BaseType extends object> = Exclude<{ [Key in keyof BaseType]: BaseType extends Record<Key, BaseType[Key]> ? Key : never }[keyof BaseType], undefined>;
+type RequiredKeysOf<BaseType extends object> = Exclude<{ [Key in keyof BaseType]: BaseType extends Record<Key, BaseType[Key]> ? Key : never; }[keyof BaseType], undefined>;
 type HasRequiredKeys<BaseType> = IsAny<BaseType> extends true ? false : [BaseType] extends [object] ? RequiredKeysOf<BaseType & object> extends never ? false : true : false;
-type StripEmptyObjects<T extends object> = { [K in keyof T]: T[K] };
+type StripEmptyObjects<T extends object> = { [K in keyof T]: T[K]; };
 /**
  * Object merge replacing `Base`'s keys with `Override`'s.
  * The naive `Omit<Base, keyof Override> & Override` form breaks under generics.
  *
  * @see https://github.com/microsoft/TypeScript/issues/57466#issuecomment-1957988380
  */
-type OverrideMerge<Base, Override> = Base extends unknown ? Override extends unknown ? Prettify<{ [K in keyof Base as K extends keyof Override ? never : K]: Base[K] } & Override> : never : never;
+type OverrideMerge<Base, Override> = Base extends unknown ? Override extends unknown ? Prettify<{ [K in keyof Base as K extends keyof Override ? never : K]: Base[K]; } & Override> : never : never;
 /**
  * Extracts a Record-typed field from a plugin, guarding against `any`.
  */
-type ExtractPluginField<T, Field extends string> = IsAny<T> extends true ? {} : T extends { [K in Field]?: Record<string, any> } ? T[Field] extends Record<string, any> ? T[Field] : {} : {};
+type ExtractPluginField<T, Field extends string> = IsAny<T> extends true ? {} : T extends { [K in Field]?: Record<string, any>; } ? T[Field] extends Record<string, any> ? T[Field] : {} : {};
 /**
  * Walks a plugin tuple with tail-recursive accumulator (TS 4.5+),
  * extracting and intersecting the given field from each element.

package/dist/types/index.d.mts

@@ -6,5 +6,5 @@ import { Account, AdditionalSessionFieldsInput, AdditionalUserFieldsInput, Infer
 import { InferOptionSchema, InferPluginContext, InferPluginErrorCodes, InferPluginIDs } from "./plugins.mjs";
 import { Auth } from "./auth.mjs";
 import { BetterAuthAdvancedOptions, BetterAuthCookies, BetterAuthOptions, BetterAuthPlugin, BetterAuthRateLimitOptions, StoreIdentifierOption } from "@better-auth/core";
-export * from "@better-auth/core/social-providers";
-export { Account, AdditionalSessionFieldsInput, AdditionalUserFieldsInput, Auth, type BetterAuthAdvancedOptions, BetterAuthClientOptions, BetterAuthClientPlugin, type BetterAuthCookies, type BetterAuthOptions, type BetterAuthPlugin, type BetterAuthRateLimitOptions, ClientAtomListener, ClientStore, DBAdapter, DBAdapterInstance, DBAdapterSchemaCreation, DBTransactionAdapter, ExtractPluginField, FilteredAPI, HasRequiredKeys, InferAPI, InferActions, InferAdditionalFromClient, InferClientAPI, InferErrorCodes, InferOptionSchema, InferPluginContext, InferPluginErrorCodes, InferPluginFieldFromTuple, InferPluginIDs, InferPluginTypes, InferSessionAPI, InferSessionFromClient, InferUserFromClient, IsAny, IsSignal, JoinConfig, JoinOption, OverrideMerge, Prettify, PrettifyDeep, RateLimit, RequiredKeysOf, Session, SessionQueryParams, type StoreIdentifierOption, StripEmptyObjects, UnionToIntersection, User, Verification, Where };
+export type * from "@better-auth/core/social-providers";
+export { type Account, type AdditionalSessionFieldsInput, type AdditionalUserFieldsInput, type Auth, type BetterAuthAdvancedOptions, type BetterAuthClientOptions, type BetterAuthClientPlugin, type BetterAuthCookies, type BetterAuthOptions, type BetterAuthPlugin, type BetterAuthRateLimitOptions, type ClientAtomListener, type ClientStore, type DBAdapter, type DBAdapterInstance, type DBAdapterSchemaCreation, type DBTransactionAdapter, type ExtractPluginField, FilteredAPI, type HasRequiredKeys, InferAPI, InferActions, InferAdditionalFromClient, InferClientAPI, InferErrorCodes, type InferOptionSchema, type InferPluginContext, type InferPluginErrorCodes, type InferPluginFieldFromTuple, type InferPluginIDs, type InferPluginTypes, InferSessionAPI, InferSessionFromClient, InferUserFromClient, type IsAny, IsSignal, type JoinConfig, type JoinOption, type OverrideMerge, type Prettify, type PrettifyDeep, type RateLimit, type RequiredKeysOf, type Session, SessionQueryParams, type StoreIdentifierOption, type StripEmptyObjects, type UnionToIntersection, type User, type Verification, type Where };

package/dist/types/models.d.mts

@@ -1,7 +1,6 @@
 import { ExtractPluginField, InferPluginFieldFromTuple, UnionToIntersection } from "./helper.mjs";
 import { BetterAuthOptions } from "@better-auth/core";
 import { Account, InferDBFieldsFromOptionsInput, InferDBFieldsFromPluginsInput, RateLimit, Session as Session$1, User as User$1, Verification } from "@better-auth/core/db";
-
 //#region src/types/models.d.ts
 type AdditionalUserFieldsInput<Options extends BetterAuthOptions> = InferDBFieldsFromPluginsInput<"user", Options["plugins"]> & InferDBFieldsFromOptionsInput<Options["user"]>;
 type AdditionalSessionFieldsInput<Options extends BetterAuthOptions> = InferDBFieldsFromPluginsInput<"session", Options["plugins"]> & InferDBFieldsFromOptionsInput<Options["session"]>;

package/dist/types/plugins.d.mts

@@ -1,14 +1,13 @@
 import { ExtractPluginField, InferPluginFieldFromTuple, UnionToIntersection } from "./helper.mjs";
 import { AuthContext, BetterAuthOptions, BetterAuthPlugin } from "@better-auth/core";
 import { BetterAuthPluginDBSchema } from "@better-auth/core/db";
-
 //#region src/types/plugins.d.ts
 type InferOptionSchema<S extends BetterAuthPluginDBSchema> = S extends Record<string, {
   fields: infer Fields;
 }> ? { [K in keyof S]?: {
   modelName?: string | undefined;
-  fields?: { [P in keyof Fields]?: string } | undefined;
-} } : never;
+  fields?: { [P in keyof Fields]?: string; } | undefined;
+}; } : never;
 type InferPluginErrorCodes<O extends BetterAuthOptions> = O["plugins"] extends readonly [unknown, ...unknown[]] ? InferPluginFieldFromTuple<O["plugins"], "$ERROR_CODES"> : O["plugins"] extends Array<infer P> ? UnionToIntersection<ExtractPluginField<P, "$ERROR_CODES">> : {};
 type InferPluginIDs<O extends BetterAuthOptions> = O["plugins"] extends Array<infer P> ? UnionToIntersection<P extends BetterAuthPlugin ? P["id"] : never> : never;
 type ExtractInitContext<P extends BetterAuthPlugin> = P["init"] extends ((...args: any[]) => infer R) ? Awaited<R> extends {

package/dist/utils/index.d.mts

@@ -1,4 +1,5 @@
 import { generateState, parseState } from "../oauth2/state.mjs";
 import { StateData, generateGenericState, parseGenericState } from "../state.mjs";
 import { HIDE_METADATA } from "./hide-metadata.mjs";
-import { getBaseURL, getHost, getHostFromSource, getOrigin, getProtocol, getProtocolFromSource, isDynamicBaseURLConfig, isRequestLike, matchesHostPattern, resolveBaseURL, resolveDynamicBaseURL, trimTrailingSlashes } from "./url.mjs";
+import { getBaseURL, getHost, getHostFromSource, getOrigin, getProtocol, getProtocolFromSource, isDynamicBaseURLConfig, isRequestLike, matchesHostPattern, resolveBaseURL, resolveDynamicBaseURL, trimTrailingSlashes } from "./url.mjs";
+export { HIDE_METADATA, type StateData, generateGenericState, generateState, getBaseURL, getHost, getHostFromSource, getOrigin, getProtocol, getProtocolFromSource, isDynamicBaseURLConfig, isRequestLike, matchesHostPattern, parseGenericState, parseState, resolveBaseURL, resolveDynamicBaseURL, trimTrailingSlashes };

package/dist/utils/request.mjs

@@ -0,0 +1,23 @@
+//#region src/utils/request.ts
+function safeCloneRequest(request) {
+	if (!request) return;
+	try {
+		return request.clone();
+	} catch {
+		return new Request(request.url, {
+			cache: request.cache,
+			credentials: request.credentials,
+			headers: request.headers,
+			integrity: request.integrity,
+			keepalive: request.keepalive,
+			method: request.method,
+			mode: request.mode,
+			redirect: request.redirect,
+			referrer: request.referrer,
+			referrerPolicy: request.referrerPolicy,
+			signal: request.signal
+		});
+	}
+}
+//#endregion
+export { safeCloneRequest };

package/dist/utils/url.d.mts

@@ -1,5 +1,4 @@
 import { BaseURLConfig, DynamicBaseURLConfig } from "@better-auth/core";
-
 //#region src/utils/url.d.ts
 declare function trimTrailingSlashes(value: string): string;
 declare function getBaseURL(url?: string, path?: string, request?: Request, loadEnv?: boolean, trustedProxyHeaders?: boolean | undefined): string | undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "better-auth",
-  "version": "1.6.23",
+  "version": "1.6.25",
   "description": "The most comprehensive authentication framework for TypeScript.",
   "type": "module",
   "license": "MIT",
@@ -489,13 +489,13 @@
     "kysely": "^0.28.17 || ^0.29.0",
     "nanostores": "^1.1.1",
     "zod": "^4.3.6",
-    "@better-auth/core": "1.6.23",
-    "@better-auth/drizzle-adapter": "1.6.23",
-    "@better-auth/kysely-adapter": "1.6.23",
-    "@better-auth/memory-adapter": "1.6.23",
-    "@better-auth/mongo-adapter": "1.6.23",
-    "@better-auth/prisma-adapter": "1.6.23",
-    "@better-auth/telemetry": "1.6.23"
+    "@better-auth/core": "1.6.25",
+    "@better-auth/drizzle-adapter": "1.6.25",
+    "@better-auth/kysely-adapter": "1.6.25",
+    "@better-auth/memory-adapter": "1.6.25",
+    "@better-auth/mongo-adapter": "1.6.25",
+    "@better-auth/prisma-adapter": "1.6.25",
+    "@better-auth/telemetry": "1.6.25"
   },
   "devDependencies": {
     "@lynx-js/react": "^0.116.3",
@@ -512,14 +512,14 @@
     "happy-dom": "^20.8.9",
     "listhen": "^1.9.0",
     "msw": "^2.12.10",
-    "next": "^16.2.6",
+    "next": "^16.2.11",
     "oauth2-mock-server": "^8.2.2",
     "react": "^19.2.4",
     "react-dom": "^19.2.4",
     "solid-js": "^1.9.11",
-    "tsdown": "0.21.1",
+    "tsdown": "0.22.7",
     "type-fest": "^5.4.4",
-    "typescript": "^5.9.3",
+    "typescript": "^6.0.3",
     "vite": "^7.3.2",
     "vitest": "^4.1.5",
     "vue": "^3.5.29"