better-auth 1.7.0-rc.2 → 1.7.0-rc.4

package/dist/api/index.d.mts

@@ -290,6 +290,11 @@ declare function getEndpoints<Option extends BetterAuthOptions>(ctx: Awaitable<A
     } | null>;
     readonly signOut: import("better-call").StrictEndpoint<"/sign-out", {
       method: "POST";
+      body: import("zod").ZodOptional<import("zod").ZodObject<{
+        callbackURL: import("zod").ZodOptional<import("zod").ZodString>;
+        disableRedirect: import("zod").ZodOptional<import("zod").ZodBoolean>;
+        state: import("zod").ZodOptional<import("zod").ZodString>;
+      }, import("zod/v4/core").$strip>>;
       operationId: string;
       requireHeaders: true;
       metadata: {
@@ -307,6 +312,14 @@ declare function getEndpoints<Option extends BetterAuthOptions>(ctx: Awaitable<A
                       success: {
                         type: string;
                       };
+                      url: {
+                        type: string;
+                        description: string;
+                      };
+                      redirect: {
+                        type: string;
+                        description: string;
+                      };
                     };
                   };
                 };
@@ -317,6 +330,8 @@ declare function getEndpoints<Option extends BetterAuthOptions>(ctx: Awaitable<A
       };
     }, {
       success: boolean;
+      url: string | undefined;
+      redirect: boolean | undefined;
     }>;
     readonly signUpEmail: import("better-call").StrictEndpoint<"/sign-up/email", {
       method: "POST";
@@ -1704,7 +1719,7 @@ declare function getEndpoints<Option extends BetterAuthOptions>(ctx: Awaitable<A
                         issuer: {
                           type: string;
                         };
-                        providerAccountId: {
+                        accountId: {
                           type: string;
                         };
                         userId: {
@@ -1734,7 +1749,7 @@ declare function getEndpoints<Option extends BetterAuthOptions>(ctx: Awaitable<A
       userId: string;
       providerId: string;
       issuer: string;
-      providerAccountId: string;
+      accountId: string;
     }[]>;
     readonly deleteUserCallback: import("better-call").StrictEndpoint<"/delete-user/callback", {
       method: "GET";
@@ -1984,7 +1999,7 @@ declare function getEndpoints<Option extends BetterAuthOptions>(ctx: Awaitable<A
                           issuer: {
                             type: string;
                           };
-                          providerAccountId: {
+                          accountId: {
                             type: string;
                           };
                         };
@@ -2018,7 +2033,7 @@ declare function getEndpoints<Option extends BetterAuthOptions>(ctx: Awaitable<A
         id: string;
         providerId: string;
         issuer: string;
-        providerAccountId: string;
+        accountId: string;
       };
       user: import("@better-auth/core/oauth2").OAuth2UserInfo;
       data: object;
@@ -2297,6 +2312,11 @@ declare const router: <Option extends BetterAuthOptions>(ctx: AuthContext, optio
     } | null>;
     readonly signOut: import("better-call").StrictEndpoint<"/sign-out", {
       method: "POST";
+      body: import("zod").ZodOptional<import("zod").ZodObject<{
+        callbackURL: import("zod").ZodOptional<import("zod").ZodString>;
+        disableRedirect: import("zod").ZodOptional<import("zod").ZodBoolean>;
+        state: import("zod").ZodOptional<import("zod").ZodString>;
+      }, import("zod/v4/core").$strip>>;
       operationId: string;
       requireHeaders: true;
       metadata: {
@@ -2314,6 +2334,14 @@ declare const router: <Option extends BetterAuthOptions>(ctx: AuthContext, optio
                       success: {
                         type: string;
                       };
+                      url: {
+                        type: string;
+                        description: string;
+                      };
+                      redirect: {
+                        type: string;
+                        description: string;
+                      };
                     };
                   };
                 };
@@ -2324,6 +2352,8 @@ declare const router: <Option extends BetterAuthOptions>(ctx: AuthContext, optio
       };
     }, {
       success: boolean;
+      url: string | undefined;
+      redirect: boolean | undefined;
     }>;
     readonly signUpEmail: import("better-call").StrictEndpoint<"/sign-up/email", {
       method: "POST";
@@ -3711,7 +3741,7 @@ declare const router: <Option extends BetterAuthOptions>(ctx: AuthContext, optio
                         issuer: {
                           type: string;
                         };
-                        providerAccountId: {
+                        accountId: {
                           type: string;
                         };
                         userId: {
@@ -3741,7 +3771,7 @@ declare const router: <Option extends BetterAuthOptions>(ctx: AuthContext, optio
       userId: string;
       providerId: string;
       issuer: string;
-      providerAccountId: string;
+      accountId: string;
     }[]>;
     readonly deleteUserCallback: import("better-call").StrictEndpoint<"/delete-user/callback", {
       method: "GET";
@@ -3991,7 +4021,7 @@ declare const router: <Option extends BetterAuthOptions>(ctx: AuthContext, optio
                           issuer: {
                             type: string;
                           };
-                          providerAccountId: {
+                          accountId: {
                             type: string;
                           };
                         };
@@ -4025,7 +4055,7 @@ declare const router: <Option extends BetterAuthOptions>(ctx: AuthContext, optio
         id: string;
         providerId: string;
         issuer: string;
-        providerAccountId: string;
+        accountId: string;
       };
       user: import("@better-auth/core/oauth2").OAuth2UserInfo;
       data: object;

package/dist/api/rate-limiter/index.mjs

@@ -127,7 +127,7 @@ function createDatabaseStorageWrapper(ctx) {
 					lastRequest: now
 				}
 			})) {
-				deleteExpiredRows(now);
+				await deleteExpiredRows(now);
 				return {
 					allowed: true,
 					retryAfter: null
@@ -168,9 +168,9 @@ function createDatabaseStorageWrapper(ctx) {
 			retryAfter: getRetryAfter(fresh.lastRequest, rule.window)
 		};
 	};
-	const deleteExpiredRows = (now) => {
+	const deleteExpiredRows = async (now) => {
 		const cutoff = now - longestObservedWindow * 1e3;
-		ctx.runInBackground(db.deleteMany({
+		await ctx.runInBackgroundOrAwait(db.deleteMany({
 			model,
 			where: [{
 				field: "lastRequest",

package/dist/api/routes/account.d.mts

@@ -56,7 +56,7 @@ declare const listUserAccounts: import("better-call").StrictEndpoint<"/list-acco
                     issuer: {
                       type: string;
                     };
-                    providerAccountId: {
+                    accountId: {
                       type: string;
                     };
                     userId: {
@@ -86,7 +86,7 @@ declare const listUserAccounts: import("better-call").StrictEndpoint<"/list-acco
   userId: string;
   providerId: string;
   issuer: string;
-  providerAccountId: string;
+  accountId: string;
 }[]>;
 declare const linkSocialAccount: import("better-call").StrictEndpoint<"/link-social", {
   method: "POST";
@@ -375,7 +375,7 @@ declare const accountInfo: import("better-call").StrictEndpoint<"/account-info",
                       issuer: {
                         type: string;
                       };
-                      providerAccountId: {
+                      accountId: {
                         type: string;
                       };
                     };
@@ -409,7 +409,7 @@ declare const accountInfo: import("better-call").StrictEndpoint<"/account-info",
     id: string;
     providerId: string;
     issuer: string;
-    providerAccountId: string;
+    accountId: string;
   };
   user: import("@better-auth/core/oauth2").OAuth2UserInfo;
   data: object;

package/dist/api/routes/account.mjs

@@ -42,7 +42,7 @@ const listUserAccounts = createAuthEndpoint("/list-accounts", {
 							format: "date-time"
 						},
 						issuer: { type: "string" },
-						providerAccountId: { type: "string" },
+						accountId: { type: "string" },
 						userId: { type: "string" },
 						scopes: {
 							type: "array",
@@ -55,7 +55,7 @@ const listUserAccounts = createAuthEndpoint("/list-accounts", {
 						"createdAt",
 						"updatedAt",
 						"issuer",
-						"providerAccountId",
+						"accountId",
 						"userId",
 						"scopes"
 					]
@@ -559,13 +559,13 @@ const accountInfo = createAuthEndpoint("/account-info", {
 							id: { type: "string" },
 							providerId: { type: "string" },
 							issuer: { type: "string" },
-							providerAccountId: { type: "string" }
+							accountId: { type: "string" }
 						},
 						required: [
 							"id",
 							"providerId",
 							"issuer",
-							"providerAccountId"
+							"accountId"
 						],
 						additionalProperties: false
 					},
@@ -617,7 +617,7 @@ const accountInfo = createAuthEndpoint("/account-info", {
 			id: account.id,
 			providerId: account.providerId,
 			issuer: account.issuer,
-			providerAccountId: account.providerAccountId
+			accountId: account.accountId
 		}
 	});
 });

package/dist/api/routes/callback.mjs

@@ -142,7 +142,7 @@ const callbackOAuth = createAuthEndpoint("/callback/:id", {
 		});
 		return redirectOnError(OAUTH_CALLBACK_ERROR_CODES.UNABLE_TO_GET_USER_INFO);
 	}
-	const { providerAccountId } = accountKey;
+	const { accountId } = accountKey;
 	if (!callbackURL) {
 		c.context.logger.error("No callback URL found");
 		throw redirectOnError(OAUTH_CALLBACK_ERROR_CODES.NO_CALLBACK_URL);
@@ -220,7 +220,7 @@ const callbackOAuth = createAuthEndpoint("/callback/:id", {
 		result = await handleOAuthUserInfo(c, {
 			userInfo: {
 				...userInfo,
-				id: providerAccountId,
+				id: accountId,
 				email: userInfo.email,
 				name: userInfo.name || ""
 			},

package/dist/api/routes/password.mjs

@@ -165,7 +165,7 @@ const resetPassword = createAuthEndpoint("/reset-password", {
 		userId,
 		providerId: "credential",
 		issuer: createLocalAccountIssuer("credential"),
-		providerAccountId: user.id,
+		accountId: user.id,
 		password: hashedPassword
 	});
 	else await ctx.context.internalAdapter.updatePassword(userId, hashedPassword);

package/dist/api/routes/session.mjs

@@ -1,19 +1,13 @@
 import { isAPIError } from "../../utils/is-api-error.mjs";
 import { hasServerSessionStore } from "../../context/store-capabilities.mjs";
-import { symmetricDecodeJWT, verifyJWT } from "../../crypto/jwt.mjs";
 import { parseSessionOutput, parseUserOutput } from "../../db/schema.mjs";
-import { getCookieCacheJwtSigningKey, verifyCookieCacheJWT } from "../../plugins/jwt/cookie-cache.mjs";
 import { getDate } from "../../utils/date.mjs";
 import { getChunkedCookie, getSessionQuerySchema } from "../../cookies/session-store.mjs";
-import { deleteSessionCookie, expireCookie, setCookieCache, setSessionCookie } from "../../cookies/index.mjs";
+import { decodeCookieCache, deleteSessionCookie, expireCookie, setCookieCache, setSessionCookie } from "../../cookies/index.mjs";
 import { getShouldSkipSessionRefresh } from "../state/should-session-refresh.mjs";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
-import { safeJSONParse } from "@better-auth/core/utils/json";
 import { createAuthEndpoint, createAuthMiddleware } from "@better-auth/core/api";
 import * as z from "zod";
-import { base64Url } from "@better-auth/utils/base64";
-import { binary } from "@better-auth/utils/binary";
-import { createHMAC } from "@better-auth/utils/hmac";
 //#region src/api/routes/session.ts
 const getSession = () => createAuthEndpoint("/get-session", {
 	method: ["GET", "POST"],
@@ -45,44 +39,8 @@ const getSession = () => createAuthEndpoint("/get-session", {
 		const sessionCookieToken = await ctx.getSignedCookie(ctx.context.authCookies.sessionToken.name, ctx.context.secret);
 		if (!sessionCookieToken) return null;
 		const sessionDataCookie = getChunkedCookie(ctx, ctx.context.authCookies.sessionData.name);
-		let sessionDataPayload = null;
-		if (sessionDataCookie) {
-			const strategy = ctx.context.options.session?.cookieCache?.strategy || "compact";
-			const jwtSigningKey = getCookieCacheJwtSigningKey(ctx.context.options);
-			if (strategy === "jwe") {
-				const payload = await symmetricDecodeJWT(sessionDataCookie, ctx.context.secretConfig, "better-auth-session");
-				if (payload && payload.session && payload.user) sessionDataPayload = {
-					session: {
-						session: payload.session,
-						user: payload.user,
-						updatedAt: payload.updatedAt,
-						version: payload.version
-					},
-					expiresAt: payload.exp ? payload.exp * 1e3 : Date.now()
-				};
-				else expireCookie(ctx, ctx.context.authCookies.sessionData);
-			} else if (strategy === "jwt") {
-				const payload = jwtSigningKey === "jwt-plugin" ? await verifyCookieCacheJWT(ctx, sessionDataCookie) : await verifyJWT(sessionDataCookie, ctx.context.secret);
-				if (payload && payload.session && payload.user) sessionDataPayload = {
-					session: {
-						session: payload.session,
-						user: payload.user,
-						updatedAt: payload.updatedAt,
-						version: payload.version
-					},
-					expiresAt: payload.exp ? payload.exp * 1e3 : Date.now()
-				};
-				else expireCookie(ctx, ctx.context.authCookies.sessionData);
-			} else {
-				const parsed = safeJSONParse(binary.decode(base64Url.decode(sessionDataCookie)));
-				if (parsed) if (await createHMAC("SHA-256", "base64urlnopad").verify(ctx.context.secret, JSON.stringify({
-					...parsed.session,
-					expiresAt: parsed.expiresAt
-				}), parsed.signature)) sessionDataPayload = parsed;
-				else expireCookie(ctx, ctx.context.authCookies.sessionData);
-				else expireCookie(ctx, ctx.context.authCookies.sessionData);
-			}
-		}
+		const sessionDataPayload = sessionDataCookie ? await decodeCookieCache(ctx, sessionDataCookie) : null;
+		if (sessionDataCookie && !sessionDataPayload) expireCookie(ctx, ctx.context.authCookies.sessionData);
 		const dontRememberMe = await ctx.getSignedCookie(ctx.context.authCookies.dontRememberToken.name, ctx.context.secret);
 		/**
 		* If session data is present in the cookie, check if it should be used or refreshed

package/dist/api/routes/sign-in.mjs

@@ -182,7 +182,7 @@ const signInSocial = () => createAuthEndpoint("/sign-in/social", {
 			userInfo: {
 				...userInfo.user,
 				email: userInfo.user.email,
-				id: accountKey.providerAccountId,
+				id: accountKey.accountId,
 				name: userInfo.user.name || "",
 				image: userInfo.user.image,
 				emailVerified: userInfo.user.emailVerified || false
@@ -316,7 +316,7 @@ const signInEmail = () => createAuthEndpoint("/sign-in/email", {
 	if (!z.email().safeParse(email).success) throw APIError.from("BAD_REQUEST", BASE_ERROR_CODES.INVALID_EMAIL);
 	const userRecord = await ctx.context.internalAdapter.findUserByEmail(email.toLowerCase(), { includeAccounts: true });
 	const credentialIssuer = createLocalAccountIssuer("credential");
-	const credentialAccount = userRecord?.accounts.find((account) => account.providerId === "credential" && account.issuer === credentialIssuer && account.providerAccountId === userRecord.user.id);
+	const credentialAccount = userRecord?.accounts.find((account) => account.providerId === "credential" && account.issuer === credentialIssuer && account.accountId === userRecord.user.id);
 	if (!userRecord || !credentialAccount) {
 		await ctx.context.password.hash(password);
 		ctx.context.logger.warn("User not found");

package/dist/api/routes/sign-out.d.mts

@@ -1,6 +1,12 @@
+import * as z from "zod";
 //#region src/api/routes/sign-out.d.ts
 declare const signOut: import("better-call").StrictEndpoint<"/sign-out", {
   method: "POST";
+  body: z.ZodOptional<z.ZodObject<{
+    callbackURL: z.ZodOptional<z.ZodString>;
+    disableRedirect: z.ZodOptional<z.ZodBoolean>;
+    state: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>>;
   operationId: string;
   requireHeaders: true;
   metadata: {
@@ -18,6 +24,14 @@ declare const signOut: import("better-call").StrictEndpoint<"/sign-out", {
                   success: {
                     type: string;
                   };
+                  url: {
+                    type: string;
+                    description: string;
+                  };
+                  redirect: {
+                    type: string;
+                    description: string;
+                  };
                 };
               };
             };
@@ -28,6 +42,8 @@ declare const signOut: import("better-call").StrictEndpoint<"/sign-out", {
   };
 }, {
   success: boolean;
+  url: string | undefined;
+  redirect: boolean | undefined;
 }>;
 //#endregion
 export { signOut };

package/dist/api/routes/sign-out.mjs

@@ -1,8 +1,20 @@
 import { deleteSessionCookie } from "../../cookies/index.mjs";
 import { createAuthEndpoint } from "@better-auth/core/api";
+import * as z from "zod";
 //#region src/api/routes/sign-out.ts
+const signOutBodySchema = z.object({
+	callbackURL: z.string().meta({ description: "The URL to redirect to after provider logout" }).optional(),
+	disableRedirect: z.boolean().meta({ description: "Return the provider logout URL without redirecting" }).optional(),
+	state: z.string().meta({ description: "State to pass to the provider logout endpoint" }).optional()
+}).optional();
+const signOutResponse = (providerLogout) => ({
+	success: true,
+	url: providerLogout?.url,
+	redirect: providerLogout?.redirect
+});
 const signOut = createAuthEndpoint("/sign-out", {
 	method: "POST",
+	body: signOutBodySchema,
 	operationId: "signOut",
 	requireHeaders: true,
 	metadata: { openapi: {
@@ -12,19 +24,73 @@ const signOut = createAuthEndpoint("/sign-out", {
 			description: "Success",
 			content: { "application/json": { schema: {
 				type: "object",
-				properties: { success: { type: "boolean" } }
+				properties: {
+					success: { type: "boolean" },
+					url: {
+						type: "string",
+						description: "Provider logout URL when RP-initiated logout is available"
+					},
+					redirect: {
+						type: "boolean",
+						description: "Whether the client should redirect to the provider logout URL"
+					}
+				}
 			} } }
 		} }
 	} }
 }, async (ctx) => {
 	const sessionCookieToken = await ctx.getSignedCookie(ctx.context.authCookies.sessionToken.name, ctx.context.secret);
+	let currentSession = null;
+	if (sessionCookieToken) try {
+		currentSession = await ctx.context.internalAdapter.findSession(sessionCookieToken);
+	} catch (e) {
+		ctx.context.logger.error("Failed to read session from database", e);
+	}
 	if (sessionCookieToken) try {
 		await ctx.context.internalAdapter.deleteSession(sessionCookieToken);
 	} catch (e) {
 		ctx.context.logger.error("Failed to delete session from database", e);
 	}
 	deleteSessionCookie(ctx);
-	return ctx.json({ success: true });
+	const providerLogoutResult = await (async () => {
+		try {
+			if (!currentSession) return null;
+			const accounts = await ctx.context.internalAdapter.findAccounts(currentSession.user.id);
+			const providersById = new Map(ctx.context.socialProviders.map((provider) => [provider.id, provider]));
+			const logoutAccounts = accounts.filter((account) => Boolean(providersById.get(account.providerId)?.createEndSessionURL)).sort((a, b) => b.updatedAt.getTime() - a.updatedAt.getTime());
+			if (logoutAccounts.length === 0) return null;
+			const seenProviderIds = /* @__PURE__ */ new Set();
+			const postLogoutRedirectURI = ctx.body?.callbackURL ? new URL(ctx.body.callbackURL, ctx.context.baseURL).toString() : void 0;
+			for (const account of logoutAccounts) {
+				if (seenProviderIds.has(account.providerId)) continue;
+				seenProviderIds.add(account.providerId);
+				const provider = providersById.get(account.providerId);
+				try {
+					const url = await provider?.createEndSessionURL?.({
+						idToken: account.idToken,
+						postLogoutRedirectURI,
+						state: ctx.body?.state
+					});
+					if (url) return url.toString();
+				} catch (e) {
+					ctx.context.logger.error(`Failed to create logout URL for provider "${account.providerId}"`, e);
+				}
+			}
+			return null;
+		} catch (e) {
+			ctx.context.logger.error("Failed to create provider logout URL", e);
+			return null;
+		}
+	})();
+	if (providerLogoutResult) {
+		const shouldRedirect = !ctx.body?.disableRedirect;
+		if (shouldRedirect) ctx.setHeader("Location", providerLogoutResult);
+		return ctx.json(signOutResponse({
+			url: providerLogoutResult,
+			redirect: shouldRedirect
+		}));
+	}
+	return ctx.json(signOutResponse());
 });
 //#endregion
 export { signOut };

package/dist/api/routes/sign-up.mjs

@@ -244,7 +244,7 @@ const signUpEmail = () => createAuthEndpoint("/sign-up/email", {
 			userId: createdUser.id,
 			providerId: "credential",
 			issuer: createLocalAccountIssuer("credential"),
-			providerAccountId: createdUser.id,
+			accountId: createdUser.id,
 			password: hash
 		});
 		if (ctx.context.options.emailVerification?.sendOnSignUp ?? ctx.context.options.emailAndPassword.requireEmailVerification) {

package/dist/api/routes/update-user.mjs

@@ -221,7 +221,7 @@ newPassword: z.string().meta({ description: "The new password to set is required
 			userId: session.user.id,
 			providerId: "credential",
 			issuer: createLocalAccountIssuer("credential"),
-			providerAccountId: session.user.id,
+			accountId: session.user.id,
 			password: passwordHash
 		});
 		return ctx.json({ status: true });

package/dist/client/path-to-object.d.mts

@@ -77,7 +77,8 @@ type InferBodyCtx<Body, FetchOptions extends ClientFetchOption> = Body extends R
 } : never;
 type PrettifyUnion<T> = T extends unknown ? Prettify$1<T> : never;
 type HasRequiredKeysInUnion<T> = true extends (T extends unknown ? HasRequiredKeys<T> : never) ? true : false;
-type InferCtx<C extends InputContext<any, any>, FetchOptions extends ClientFetchOption> = IsAny<C["body"]> extends true ? InferCtxQuery<C, FetchOptions> : C["body"] extends Record<string, any> ? InferBodyCtx<C["body"], FetchOptions> : InferCtxQuery<C, FetchOptions>;
+type HasRequiredCtx<C extends InputContext<any, any>, FetchOptions extends ClientFetchOption> = IsAny<C["body"]> extends true ? HasRequiredKeysInUnion<InferCtx<C, FetchOptions>> : undefined extends C["body"] ? HasRequiredKeysInUnion<InferCtxQuery<C, FetchOptions>> : HasRequiredKeysInUnion<InferCtx<C, FetchOptions>>;
+type InferCtx<C extends InputContext<any, any>, FetchOptions extends ClientFetchOption> = IsAny<C["body"]> extends true ? InferCtxQuery<C, FetchOptions> : [NonNullable<C["body"]>] extends [never] ? InferCtxQuery<C, FetchOptions> : NonNullable<C["body"]> extends Record<string, any> ? InferBodyCtx<NonNullable<C["body"]>, FetchOptions> : InferCtxQuery<C, FetchOptions>;
 type MergeRoutes<T> = UnionToIntersection<T>;
 type InferRoute<API, COpts extends BetterAuthClientOptions> = API extends Record<string, infer T> ? T extends Endpoint ? T["options"]["metadata"] extends {
   isAction: false;
@@ -87,7 +88,7 @@ type InferRoute<API, COpts extends BetterAuthClientOptions> = API extends Record
   scope: "http";
 } | {
   scope: "server";
-} ? {} : PathToObject<T["path"], T extends ((ctx: infer C) => infer R) ? C extends InputContext<any, any> ? <FetchOptions extends ClientFetchOption<Partial<C["body"]> & Record<string, any>, Partial<C["query"]> & Record<string, any>, C["params"]>>(...data: HasRequiredKeysInUnion<InferCtx<C, FetchOptions>> extends true ? [PrettifyUnion<T["path"] extends `/sign-up/email` ? InferSignUpEmailCtx<COpts, FetchOptions> : T["path"] extends `/sign-in/social` ? Omit<InferCtx<C, FetchOptions>, "provider"> & {
+} ? {} : PathToObject<T["path"], T extends ((ctx: infer C) => infer R) ? C extends InputContext<any, any> ? <FetchOptions extends ClientFetchOption<Partial<C["body"]> & Record<string, any>, Partial<C["query"]> & Record<string, any>, C["params"]>>(...data: HasRequiredCtx<C, FetchOptions> extends true ? [PrettifyUnion<T["path"] extends `/sign-up/email` ? InferSignUpEmailCtx<COpts, FetchOptions> : T["path"] extends `/sign-in/social` ? Omit<InferCtx<C, FetchOptions>, "provider"> & {
   provider: SocialProviderList[number] | InferGenericOAuthProviderIds<COpts> | (string & {});
   fetchOptions?: FetchOptions | undefined;
 } : InferCtx<C, FetchOptions>>, FetchOptions?] : [PrettifyUnion<T["path"] extends `/update-user` ? InferUserUpdateCtx<COpts, FetchOptions> : T["path"] extends `/update-session` ? InferSessionUpdateCtx<COpts, FetchOptions> : InferCtx<C, FetchOptions>>?, FetchOptions?]) => Promise<BetterFetchResponse<T["options"]["metadata"] extends {