better-auth 1.7.1 → 1.7.3

package/dist/api/index.d.mts

@@ -93,7 +93,7 @@ declare function getEndpoints<Option extends BetterAuthOptions>(ctx: Awaitable<A
         callbackURL: _$zod.ZodOptional<_$zod.ZodString>;
         newUserCallbackURL: _$zod.ZodOptional<_$zod.ZodString>;
         errorCallbackURL: _$zod.ZodOptional<_$zod.ZodString>;
-        provider: _$zod.ZodType<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown, _$zod_v4_core0.$ZodTypeInternals<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown>>;
+        provider: _$zod.ZodType<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cloudflare" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown, _$zod_v4_core0.$ZodTypeInternals<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cloudflare" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown>>;
         disableRedirect: _$zod.ZodOptional<_$zod.ZodBoolean>;
         idToken: _$zod.ZodOptional<_$zod.ZodObject<{
           token: _$zod.ZodString;
@@ -121,7 +121,7 @@ declare function getEndpoints<Option extends BetterAuthOptions>(ctx: Awaitable<A
             callbackURL: _$zod.ZodOptional<_$zod.ZodString>;
             newUserCallbackURL: _$zod.ZodOptional<_$zod.ZodString>;
             errorCallbackURL: _$zod.ZodOptional<_$zod.ZodString>;
-            provider: _$zod.ZodType<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown, _$zod_v4_core0.$ZodTypeInternals<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown>>;
+            provider: _$zod.ZodType<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cloudflare" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown, _$zod_v4_core0.$ZodTypeInternals<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cloudflare" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown>>;
             disableRedirect: _$zod.ZodOptional<_$zod.ZodBoolean>;
             idToken: _$zod.ZodOptional<_$zod.ZodObject<{
               token: _$zod.ZodString;
@@ -1592,7 +1592,7 @@ declare function getEndpoints<Option extends BetterAuthOptions>(ctx: Awaitable<A
       requireHeaders: true;
       body: _$zod.ZodObject<{
         callbackURL: _$zod.ZodOptional<_$zod.ZodString>;
-        provider: _$zod.ZodType<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown, _$zod_v4_core0.$ZodTypeInternals<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown>>;
+        provider: _$zod.ZodType<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cloudflare" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown, _$zod_v4_core0.$ZodTypeInternals<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cloudflare" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown>>;
         idToken: _$zod.ZodOptional<_$zod.ZodObject<{
           token: _$zod.ZodString;
           nonce: _$zod.ZodOptional<_$zod.ZodString>;
@@ -1719,9 +1719,6 @@ declare function getEndpoints<Option extends BetterAuthOptions>(ctx: Awaitable<A
                           type: string;
                           format: string;
                         };
-                        issuer: {
-                          type: string;
-                        };
                         accountId: {
                           type: string;
                         };
@@ -1751,7 +1748,6 @@ declare function getEndpoints<Option extends BetterAuthOptions>(ctx: Awaitable<A
       updatedAt: Date;
       userId: string;
       providerId: string;
-      issuer: string;
       accountId: string;
     }[]>;
     readonly deleteUserCallback: _$better_call0.StrictEndpoint<"/delete-user/callback", {
@@ -1999,9 +1995,6 @@ declare function getEndpoints<Option extends BetterAuthOptions>(ctx: Awaitable<A
                           providerId: {
                             type: string;
                           };
-                          issuer: {
-                            type: string;
-                          };
                           accountId: {
                             type: string;
                           };
@@ -2035,7 +2028,6 @@ declare function getEndpoints<Option extends BetterAuthOptions>(ctx: Awaitable<A
       account: {
         id: string;
         providerId: string;
-        issuer: string;
         accountId: string;
       };
       user: _$_better_auth_core_oauth20.OAuth2UserInfo;
@@ -2115,7 +2107,7 @@ declare const router: <Option extends BetterAuthOptions>(ctx: AuthContext, optio
         callbackURL: _$zod.ZodOptional<_$zod.ZodString>;
         newUserCallbackURL: _$zod.ZodOptional<_$zod.ZodString>;
         errorCallbackURL: _$zod.ZodOptional<_$zod.ZodString>;
-        provider: _$zod.ZodType<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown, _$zod_v4_core0.$ZodTypeInternals<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown>>;
+        provider: _$zod.ZodType<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cloudflare" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown, _$zod_v4_core0.$ZodTypeInternals<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cloudflare" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown>>;
         disableRedirect: _$zod.ZodOptional<_$zod.ZodBoolean>;
         idToken: _$zod.ZodOptional<_$zod.ZodObject<{
           token: _$zod.ZodString;
@@ -2143,7 +2135,7 @@ declare const router: <Option extends BetterAuthOptions>(ctx: AuthContext, optio
             callbackURL: _$zod.ZodOptional<_$zod.ZodString>;
             newUserCallbackURL: _$zod.ZodOptional<_$zod.ZodString>;
             errorCallbackURL: _$zod.ZodOptional<_$zod.ZodString>;
-            provider: _$zod.ZodType<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown, _$zod_v4_core0.$ZodTypeInternals<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown>>;
+            provider: _$zod.ZodType<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cloudflare" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown, _$zod_v4_core0.$ZodTypeInternals<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cloudflare" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown>>;
             disableRedirect: _$zod.ZodOptional<_$zod.ZodBoolean>;
             idToken: _$zod.ZodOptional<_$zod.ZodObject<{
               token: _$zod.ZodString;
@@ -3614,7 +3606,7 @@ declare const router: <Option extends BetterAuthOptions>(ctx: AuthContext, optio
       requireHeaders: true;
       body: _$zod.ZodObject<{
         callbackURL: _$zod.ZodOptional<_$zod.ZodString>;
-        provider: _$zod.ZodType<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown, _$zod_v4_core0.$ZodTypeInternals<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown>>;
+        provider: _$zod.ZodType<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cloudflare" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown, _$zod_v4_core0.$ZodTypeInternals<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cloudflare" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown>>;
         idToken: _$zod.ZodOptional<_$zod.ZodObject<{
           token: _$zod.ZodString;
           nonce: _$zod.ZodOptional<_$zod.ZodString>;
@@ -3741,9 +3733,6 @@ declare const router: <Option extends BetterAuthOptions>(ctx: AuthContext, optio
                           type: string;
                           format: string;
                         };
-                        issuer: {
-                          type: string;
-                        };
                         accountId: {
                           type: string;
                         };
@@ -3773,7 +3762,6 @@ declare const router: <Option extends BetterAuthOptions>(ctx: AuthContext, optio
       updatedAt: Date;
       userId: string;
       providerId: string;
-      issuer: string;
       accountId: string;
     }[]>;
     readonly deleteUserCallback: _$better_call0.StrictEndpoint<"/delete-user/callback", {
@@ -4021,9 +4009,6 @@ declare const router: <Option extends BetterAuthOptions>(ctx: AuthContext, optio
                           providerId: {
                             type: string;
                           };
-                          issuer: {
-                            type: string;
-                          };
                           accountId: {
                             type: string;
                           };
@@ -4057,7 +4042,6 @@ declare const router: <Option extends BetterAuthOptions>(ctx: AuthContext, optio
       account: {
         id: string;
         providerId: string;
-        issuer: string;
         accountId: string;
       };
       user: _$_better_auth_core_oauth20.OAuth2UserInfo;

package/dist/api/index.mjs

@@ -164,6 +164,8 @@ const router = (ctx, options) => {
 			const disabledPaths = ctx.options.disabledPaths || [];
 			const normalizedPath = normalizePathname(req.url, basePath);
 			if (disabledPaths.includes(normalizedPath)) return new Response("Not Found", { status: 404 });
+			const pendingSchemaCheck = ctx.checkSchema?.();
+			if (pendingSchemaCheck) await pendingSchemaCheck;
 			let currentRequest = req;
 			const rateLimitResponse = await onRequestRateLimit(currentRequest, ctx);
 			if (rateLimitResponse) return rateLimitResponse;

package/dist/api/middlewares/origin-check.mjs

@@ -1,3 +1,4 @@
+import { getBaseURL, getOrigin } from "../../utils/url.mjs";
 import { matchesOriginPattern } from "../../auth/trusted-origins.mjs";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
 import { normalizePathname } from "@better-auth/core/utils/url";
@@ -95,7 +96,8 @@ const originCheck = (getValue) => createAuthMiddleware(async (ctx) => {
 async function validateOrigin(ctx, forceValidate = false) {
 	const headers = ctx.request?.headers;
 	if (!headers || !ctx.request) return;
-	const originHeader = headers.get("origin") || headers.get("referer") || "";
+	const origin = headers.get("origin");
+	const originHeader = origin || headers.get("referer") || "";
 	const useCookies = headers.has("cookie");
 	if (ctx.context.skipCSRFCheck) return;
 	if (shouldSkipCSRFForBackwardCompat(ctx)) {
@@ -104,11 +106,13 @@ async function validateOrigin(ctx, forceValidate = false) {
 	}
 	if (shouldSkipOriginCheck(ctx)) return;
 	if (!(forceValidate || useCookies)) return;
-	if (!originHeader || originHeader === "null") throw APIError.from("FORBIDDEN", BASE_ERROR_CODES.MISSING_OR_NULL_ORIGIN);
+	const inferredBaseURL = origin === "null" && headers.get("sec-fetch-site") === "same-origin" ? getBaseURL(void 0, ctx.context.options.basePath, ctx.request, false, ctx.context.options.advanced?.trustedProxyHeaders) : void 0;
+	const originToValidate = (inferredBaseURL ? getOrigin(inferredBaseURL) : void 0) ?? originHeader;
+	if (!originToValidate || originToValidate === "null") throw APIError.from("FORBIDDEN", BASE_ERROR_CODES.MISSING_OR_NULL_ORIGIN);
 	const trustedOrigins = Array.isArray(ctx.context.options.trustedOrigins) ? ctx.context.trustedOrigins : [...ctx.context.trustedOrigins, ...(await ctx.context.options.trustedOrigins?.(ctx.request))?.filter((v) => Boolean(v)) || []];
-	if (!trustedOrigins.some((origin) => matchesOriginPattern(originHeader, origin))) {
-		ctx.context.logger.error(`Invalid origin: ${originHeader}`);
-		ctx.context.logger.info(`If it's a valid URL, please add ${originHeader} to trustedOrigins in your auth config\n`, `Current list of trustedOrigins: ${trustedOrigins}`);
+	if (!trustedOrigins.some((origin) => matchesOriginPattern(originToValidate, origin))) {
+		ctx.context.logger.error(`Invalid origin: ${originToValidate}`);
+		ctx.context.logger.info(`If it's a valid URL, please add ${originToValidate} to trustedOrigins in your auth config\n`, `Current list of trustedOrigins: ${trustedOrigins}`);
 		throw APIError.from("FORBIDDEN", BASE_ERROR_CODES.INVALID_ORIGIN);
 	}
 }

package/dist/api/routes/account.d.mts

@@ -56,9 +56,6 @@ declare const listUserAccounts: _$better_call0.StrictEndpoint<"/list-accounts",
                       type: string;
                       format: string;
                     };
-                    issuer: {
-                      type: string;
-                    };
                     accountId: {
                       type: string;
                     };
@@ -88,7 +85,6 @@ declare const listUserAccounts: _$better_call0.StrictEndpoint<"/list-accounts",
   updatedAt: Date;
   userId: string;
   providerId: string;
-  issuer: string;
   accountId: string;
 }[]>;
 declare const linkSocialAccount: _$better_call0.StrictEndpoint<"/link-social", {
@@ -96,7 +92,7 @@ declare const linkSocialAccount: _$better_call0.StrictEndpoint<"/link-social", {
   requireHeaders: true;
   body: z.ZodObject<{
     callbackURL: z.ZodOptional<z.ZodString>;
-    provider: z.ZodType<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown, z.core.$ZodTypeInternals<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown>>;
+    provider: z.ZodType<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cloudflare" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown, z.core.$ZodTypeInternals<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cloudflare" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown>>;
     idToken: z.ZodOptional<z.ZodObject<{
       token: z.ZodString;
       nonce: z.ZodOptional<z.ZodString>;
@@ -375,9 +371,6 @@ declare const accountInfo: _$better_call0.StrictEndpoint<"/account-info", {
                       providerId: {
                         type: string;
                       };
-                      issuer: {
-                        type: string;
-                      };
                       accountId: {
                         type: string;
                       };
@@ -411,7 +404,6 @@ declare const accountInfo: _$better_call0.StrictEndpoint<"/account-info", {
   account: {
     id: string;
     providerId: string;
-    issuer: string;
     accountId: string;
   };
   user: _$_better_auth_core_oauth20.OAuth2UserInfo;

package/dist/api/routes/account.mjs

@@ -41,7 +41,6 @@ const listUserAccounts = createAuthEndpoint("/list-accounts", {
 							type: "string",
 							format: "date-time"
 						},
-						issuer: { type: "string" },
 						accountId: { type: "string" },
 						userId: { type: "string" },
 						scopes: {
@@ -54,7 +53,6 @@ const listUserAccounts = createAuthEndpoint("/list-accounts", {
 						"providerId",
 						"createdAt",
 						"updatedAt",
-						"issuer",
 						"accountId",
 						"userId",
 						"scopes"
@@ -217,7 +215,6 @@ const linkSocialAccount = createAuthEndpoint("/link-social", {
 		try {
 			await c.context.internalAdapter.createAccount({
 				userId: session.user.id,
-				providerId: provider.id,
 				...accountKey,
 				accessToken: await setTokenUtil(c.body.idToken.accessToken, c.context),
 				idToken: token,
@@ -558,13 +555,11 @@ const accountInfo = createAuthEndpoint("/account-info", {
 						properties: {
 							id: { type: "string" },
 							providerId: { type: "string" },
-							issuer: { type: "string" },
 							accountId: { type: "string" }
 						},
 						required: [
 							"id",
 							"providerId",
-							"issuer",
 							"accountId"
 						],
 						additionalProperties: false
@@ -616,7 +611,6 @@ const accountInfo = createAuthEndpoint("/account-info", {
 		account: {
 			id: account.id,
 			providerId: account.providerId,
-			issuer: account.issuer,
 			accountId: account.accountId
 		}
 	});

package/dist/api/routes/callback.mjs

@@ -10,6 +10,7 @@ import { generateIdTokenNonce, generateState, parseState } from "../../oauth2/st
 import { HIDE_METADATA } from "../../utils/hide-metadata.mjs";
 import { mergeScopes } from "@better-auth/core/oauth2";
 import { safeJSONParse } from "@better-auth/core/utils/json";
+import { appendQueryParams } from "@better-auth/core/utils/url";
 import { createAuthEndpoint } from "@better-auth/core/api";
 import * as z from "zod";
 //#region src/api/routes/callback.ts
@@ -52,7 +53,8 @@ const callbackOAuth = createAuthEndpoint("/callback/:id", {
 		else throw new Error("Unsupported method");
 	} catch (e) {
 		c.context.logger.error("INVALID_CALLBACK_REQUEST", e);
-		throw c.redirect(`${defaultErrorURL}?error=invalid_callback_request`);
+		const redirectURL = appendQueryParams(defaultErrorURL, new URLSearchParams({ error: "invalid_callback_request" }));
+		throw c.redirect(redirectURL);
 	}
 	const { code, error, state, error_description, device_id, user: userData, iss } = queryOrBody;
 	if (state === void 0 && code) {
@@ -71,16 +73,16 @@ const callbackOAuth = createAuthEndpoint("/callback/:id", {
 	}
 	if (!state) {
 		c.context.logger.error("State not found", error);
-		const url = `${defaultErrorURL}${defaultErrorURL.includes("?") ? "&" : "?"}error=state_not_found`;
-		throw c.redirect(url);
+		const redirectURL = appendQueryParams(defaultErrorURL, new URLSearchParams({ error: "state_not_found" }));
+		throw c.redirect(redirectURL);
 	}
 	const { codeVerifier, callbackURL, link, errorURL, newUserURL, requestSignUp, idTokenNonce } = await parseState(c);
 	function redirectOnError(error, description) {
 		const baseURL = errorURL ?? defaultErrorURL;
 		const params = new URLSearchParams({ error });
 		if (description) params.set("error_description", description);
-		const url = `${baseURL}${baseURL.includes("?") ? "&" : "?"}${params.toString()}`;
-		throw c.redirect(url);
+		const redirectURL = appendQueryParams(baseURL, params);
+		throw c.redirect(redirectURL);
 	}
 	if (error) redirectOnError(error, error_description);
 	if (!code) {
@@ -189,7 +191,6 @@ const callbackOAuth = createAuthEndpoint("/callback/:id", {
 			await c.context.internalAdapter.updateAccount(existingAccount.id, updateData);
 		} else if (!await c.context.internalAdapter.createAccount({
 			userId: link.userId,
-			providerId: provider.id,
 			...accountKey,
 			...tokens,
 			accessToken: await setTokenUtil(tokens.accessToken, c.context),
@@ -210,7 +211,6 @@ const callbackOAuth = createAuthEndpoint("/callback/:id", {
 		return redirectOnError(OAUTH_CALLBACK_ERROR_CODES.EMAIL_NOT_FOUND);
 	}
 	const accountData = {
-		providerId: provider.id,
 		...accountKey,
 		...tokens,
 		scope: tokens.scopes?.join(",")

package/dist/api/routes/email-verification.mjs

@@ -5,6 +5,7 @@ import { setSessionCookie } from "../../cookies/index.mjs";
 import { getSessionFromCtx } from "./session.mjs";
 import { safeCloneRequest } from "../../utils/request.mjs";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
+import { appendQueryParams } from "@better-auth/core/utils/url";
 import { createAuthEndpoint } from "@better-auth/core/api";
 import * as z from "zod";
 import { jwtVerify } from "jose";
@@ -165,8 +166,9 @@ const verifyEmail = createAuthEndpoint("/verify-email", {
 }, async (ctx) => {
 	function redirectOnError(error) {
 		if (ctx.query.callbackURL) {
-			if (ctx.query.callbackURL.includes("?")) throw ctx.redirect(`${ctx.query.callbackURL}&error=${error.code}`);
-			throw ctx.redirect(`${ctx.query.callbackURL}?error=${error.code}`);
+			const params = new URLSearchParams({ error: error.code });
+			const redirectURL = appendQueryParams(ctx.query.callbackURL, params);
+			throw ctx.redirect(redirectURL);
 		}
 		throw APIError.from("UNAUTHORIZED", error);
 	}

package/dist/api/routes/error.mjs

@@ -1,5 +1,6 @@
 import { HIDE_METADATA } from "../../utils/hide-metadata.mjs";
 import { isProduction } from "@better-auth/core/env";
+import { appendQueryParams } from "@better-auth/core/utils/url";
 import { createAuthEndpoint } from "@better-auth/core/api";
 //#region src/api/routes/error.ts
 function sanitize(input) {
@@ -364,18 +365,21 @@ const error = createAuthEndpoint("/error", {
 	const unsanitizedDescription = url.searchParams.get("error_description") || null;
 	const safeCode = /^[\'A-Za-z0-9_-]+$/.test(unsanitizedCode || "") ? unsanitizedCode : "UNKNOWN";
 	const safeDescription = unsanitizedDescription ? sanitize(unsanitizedDescription) : null;
-	const queryParams = new URLSearchParams();
-	queryParams.set("error", safeCode);
-	if (unsanitizedDescription) queryParams.set("error_description", unsanitizedDescription);
+	const params = new URLSearchParams();
+	params.set("error", safeCode);
+	if (unsanitizedDescription) params.set("error_description", unsanitizedDescription);
 	const options = c.context.options;
 	const errorURL = options.onAPIError?.errorURL;
-	if (errorURL) return new Response(null, {
-		status: 302,
-		headers: { Location: `${errorURL}${errorURL.includes("?") ? "&" : "?"}${queryParams.toString()}` }
-	});
+	if (errorURL) {
+		const redirectURL = appendQueryParams(errorURL, params);
+		return new Response(null, {
+			status: 302,
+			headers: { Location: redirectURL }
+		});
+	}
 	if (isProduction && !options.onAPIError?.customizeDefaultErrorPage) return new Response(null, {
 		status: 302,
-		headers: { Location: `/?${queryParams.toString()}` }
+		headers: { Location: `/?${params.toString()}` }
 	});
 	return new Response(html(c.context.options, safeCode, safeDescription), { headers: { "Content-Type": "text/html" } });
 });

package/dist/api/routes/password.mjs

@@ -2,7 +2,6 @@ import { originCheck } from "../middlewares/origin-check.mjs";
 import { getDate } from "../../utils/date.mjs";
 import { sensitiveSessionMiddleware } from "./session.mjs";
 import { validatePassword } from "../../utils/password.mjs";
-import { createLocalAccountIssuer } from "@better-auth/core/db";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
 import { generateId } from "@better-auth/core/utils/id";
 import { createAuthEndpoint } from "@better-auth/core/api";
@@ -164,7 +163,6 @@ const resetPassword = createAuthEndpoint("/reset-password", {
 	if (!await ctx.context.internalAdapter.findCredentialAccount(userId)) await ctx.context.internalAdapter.createAccount({
 		userId,
 		providerId: "credential",
-		issuer: createLocalAccountIssuer("credential"),
 		accountId: user.id,
 		password: hashedPassword
 	});

package/dist/api/routes/session.mjs

@@ -2,7 +2,7 @@ import { isAPIError } from "../../utils/is-api-error.mjs";
 import { hasServerSessionStore } from "../../context/store-capabilities.mjs";
 import { parseSessionOutput, parseUserOutput } from "../../db/schema.mjs";
 import { getDate } from "../../utils/date.mjs";
-import { getChunkedCookie, getSessionQuerySchema } from "../../cookies/session-store.mjs";
+import { createSessionStore, getChunkedCookie, getSessionQuerySchema } from "../../cookies/session-store.mjs";
 import { decodeCookieCache, deleteSessionCookie, expireCookie, setCookieCache, setSessionCookie } from "../../cookies/index.mjs";
 import { getShouldSkipSessionRefresh } from "../state/should-session-refresh.mjs";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
@@ -36,16 +36,23 @@ const getSession = () => createAuthEndpoint("/get-session", {
 	const isPostRequest = ctx.method === "POST";
 	if (isPostRequest && !deferSessionRefresh) throw APIError.from("METHOD_NOT_ALLOWED", BASE_ERROR_CODES.METHOD_NOT_ALLOWED_DEFER_SESSION_REQUIRED);
 	try {
+		const cookieCacheEnabled = ctx.context.options.session?.cookieCache?.enabled === true;
 		const sessionCookieToken = await ctx.getSignedCookie(ctx.context.authCookies.sessionToken.name, ctx.context.secret);
-		if (!sessionCookieToken) return null;
+		if (!sessionCookieToken && cookieCacheEnabled) return null;
 		const sessionDataCookie = getChunkedCookie(ctx, ctx.context.authCookies.sessionData.name);
-		const sessionDataPayload = sessionDataCookie ? await decodeCookieCache(ctx, sessionDataCookie) : null;
-		if (sessionDataCookie && !sessionDataPayload) expireCookie(ctx, ctx.context.authCookies.sessionData);
+		if (sessionDataCookie && !cookieCacheEnabled) {
+			const sessionStore = createSessionStore(ctx.context.authCookies.sessionData.name, ctx.context.authCookies.sessionData.attributes, ctx);
+			sessionStore.setCookies(sessionStore.clean());
+		}
+		if (!sessionCookieToken) return null;
+		const shouldUseCookieCache = cookieCacheEnabled && !ctx.query?.disableCookieCache;
+		const sessionDataPayload = shouldUseCookieCache && sessionDataCookie ? await decodeCookieCache(ctx, sessionDataCookie) : null;
+		if (shouldUseCookieCache && sessionDataCookie && !sessionDataPayload) expireCookie(ctx, ctx.context.authCookies.sessionData);
 		const dontRememberMe = await ctx.getSignedCookie(ctx.context.authCookies.dontRememberToken.name, ctx.context.secret);
 		/**
 		* If session data is present in the cookie, check if it should be used or refreshed
 		*/
-		if (sessionDataPayload?.session && ctx.context.options.session?.cookieCache?.enabled && !ctx.query?.disableCookieCache) {
+		if (sessionDataPayload?.session) {
 			const session = sessionDataPayload.session;
 			let shouldExpireCookieCache = session.session.token !== sessionCookieToken;
 			if (!shouldExpireCookieCache) {

package/dist/api/routes/sign-in.d.mts

@@ -8,7 +8,7 @@ declare const socialSignInBodySchema: z.ZodObject<{
   callbackURL: z.ZodOptional<z.ZodString>;
   newUserCallbackURL: z.ZodOptional<z.ZodString>;
   errorCallbackURL: z.ZodOptional<z.ZodString>;
-  provider: z.ZodType<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown, z.core.$ZodTypeInternals<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown>>;
+  provider: z.ZodType<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cloudflare" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown, z.core.$ZodTypeInternals<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cloudflare" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown>>;
   disableRedirect: z.ZodOptional<z.ZodBoolean>;
   idToken: z.ZodOptional<z.ZodObject<{
     token: z.ZodString;
@@ -37,7 +37,7 @@ declare const signInSocial: <O extends BetterAuthOptions>() => _$better_call0.St
     callbackURL: z.ZodOptional<z.ZodString>;
     newUserCallbackURL: z.ZodOptional<z.ZodString>;
     errorCallbackURL: z.ZodOptional<z.ZodString>;
-    provider: z.ZodType<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown, z.core.$ZodTypeInternals<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown>>;
+    provider: z.ZodType<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cloudflare" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown, z.core.$ZodTypeInternals<(string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cloudflare" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat", unknown>>;
     disableRedirect: z.ZodOptional<z.ZodBoolean>;
     idToken: z.ZodOptional<z.ZodObject<{
       token: z.ZodString;

package/dist/api/routes/sign-in.mjs

@@ -9,7 +9,6 @@ import { handleOAuthUserInfo } from "../../oauth2/link-account.mjs";
 import { generateIdTokenNonce, generateState } from "../../oauth2/state.mjs";
 import { safeCloneRequest } from "../../utils/request.mjs";
 import { createEmailVerificationToken } from "./email-verification.mjs";
-import { createLocalAccountIssuer } from "@better-auth/core/db";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
 import { additionalAuthorizationParamsSchema, supportsIdTokenSignIn, verifyProviderIdToken } from "@better-auth/core/oauth2";
 import { SocialProviderListEnum } from "@better-auth/core/social-providers";
@@ -188,7 +187,6 @@ const signInSocial = () => createAuthEndpoint("/sign-in/social", {
 				emailVerified: userInfo.user.emailVerified || false
 			},
 			account: {
-				providerId: provider.id,
 				...accountKey,
 				accessToken: c.body.idToken.accessToken,
 				idToken: token
@@ -315,8 +313,7 @@ const signInEmail = () => createAuthEndpoint("/sign-in/email", {
 	const { email, password } = ctx.body;
 	if (!z.email().safeParse(email).success) throw APIError.from("BAD_REQUEST", BASE_ERROR_CODES.INVALID_EMAIL);
 	const userRecord = await ctx.context.internalAdapter.findUserByEmail(email.toLowerCase(), { includeAccounts: true });
-	const credentialIssuer = createLocalAccountIssuer("credential");
-	const credentialAccount = userRecord?.accounts.find((account) => account.providerId === "credential" && account.issuer === credentialIssuer && account.accountId === userRecord.user.id);
+	const credentialAccount = userRecord?.accounts.find((account) => account.providerId === "credential" && account.accountId === userRecord.user.id);
 	if (!userRecord || !credentialAccount) {
 		await ctx.context.password.hash(password);
 		ctx.context.logger.warn("User not found");

package/dist/api/routes/sign-up.mjs

@@ -5,7 +5,6 @@ import { setSessionCookie } from "../../cookies/index.mjs";
 import { safeCloneRequest } from "../../utils/request.mjs";
 import { createEmailVerificationToken } from "./email-verification.mjs";
 import { runWithTransaction } from "@better-auth/core/context";
-import { createLocalAccountIssuer } from "@better-auth/core/db";
 import { isDevelopment } from "@better-auth/core/env";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
 import { generateId } from "@better-auth/core/utils/id";
@@ -243,7 +242,6 @@ const signUpEmail = () => createAuthEndpoint("/sign-up/email", {
 		await ctx.context.internalAdapter.linkAccount({
 			userId: createdUser.id,
 			providerId: "credential",
-			issuer: createLocalAccountIssuer("credential"),
 			accountId: createdUser.id,
 			password: hash
 		});

package/dist/api/routes/update-user.mjs

@@ -4,7 +4,6 @@ import { generateRandomString } from "../../crypto/random.mjs";
 import { deleteSessionCookie, setSessionCookie } from "../../cookies/index.mjs";
 import { getSessionFromCtx, isStateful, sensitiveSessionMiddleware, sessionMiddleware } from "./session.mjs";
 import { createEmailVerificationToken } from "./email-verification.mjs";
-import { createLocalAccountIssuer } from "@better-auth/core/db";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
 import { createAuthEndpoint } from "@better-auth/core/api";
 import * as z from "zod";
@@ -220,7 +219,6 @@ newPassword: z.string().meta({ description: "The new password to set is required
 		await ctx.context.internalAdapter.linkAccount({
 			userId: session.user.id,
 			providerId: "credential",
-			issuer: createLocalAccountIssuer("credential"),
 			accountId: session.user.id,
 			password: passwordHash
 		});

package/dist/api/to-auth-endpoints.mjs

@@ -38,6 +38,8 @@ function toAuthEndpoints(endpoints, ctx) {
 			const operationId = getOperationId(endpoint, key);
 			const run = async () => {
 				const rawContext = await ctx;
+				const pendingSchemaCheck = rawContext.checkSchema?.();
+				if (pendingSchemaCheck) await pendingSchemaCheck;
 				const authContext = isDynamicBaseURLConfig(rawContext.options.baseURL) ? await resolveDynamicContext(rawContext, context) : rawContext;
 				return dispatchAuthEndpoint(endpoint, {
 					...context,

package/dist/auth/base.mjs

@@ -3,9 +3,21 @@ import { getTrustedOrigins, getTrustedProviders, resolveDynamicTrustedProxyHeade
 import { getEndpoints, router } from "../api/index.mjs";
 import { runWithAdapter } from "@better-auth/core/context";
 import { BASE_ERROR_CODES, BetterAuthError } from "@better-auth/core/error";
+import { SchemaMismatchError } from "@better-auth/core/db/internal";
 //#region src/auth/base.ts
 const createBetterAuth = (options, initFn) => {
-	const authContext = initFn(options);
+	const authContext = initFn(options).then((ctx) => {
+		const validateSchema = ctx.options.advanced?.database?.validateSchema;
+		if (!ctx.checkSchema && validateSchema !== false) {
+			const level = validateSchema === true ? "warn" : "debug";
+			ctx.logger[level](`Schema validation is not available for adapter "${ctx.adapter.id}". Skipping schema validation. Database operations will proceed normally.`);
+		}
+		const pendingSchemaCheck = ctx.checkSchema?.();
+		if (pendingSchemaCheck) pendingSchemaCheck.catch((error) => {
+			ctx.logger.error(error instanceof SchemaMismatchError ? error.message : "Could not validate the database schema. Check your database connection.");
+		});
+		return ctx;
+	});
 	const { api } = getEndpoints(authContext, options);
 	const errorCodes = options.plugins?.reduce((acc, plugin) => {
 		if (plugin.$ERROR_CODES) return {