better-auth 1.7.11 → 1.7.13

package/dist/plugins/magic-link/client.d.mts

@@ -1,10 +1,8 @@
 import { magicLink } from "./index.mjs";
-
 //#region src/plugins/magic-link/client.d.ts
-declare const magicLinkClient: () => {
+export declare const magicLinkClient: () => {
   id: "magic-link";
   version: string;
   $InferServerPlugin: ReturnType<typeof magicLink>;
 };
-//#endregion
-export { magicLinkClient };
+//#endregion

package/dist/plugins/magic-link/index.d.mts

@@ -1,7 +1,5 @@
 import { Awaitable, GenericEndpointContext } from "@better-auth/core";
-import * as _$better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/plugins/magic-link/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -10,7 +8,7 @@ declare module "@better-auth/core" {
     };
   }
 }
-interface MagicLinkOptions {
+export interface MagicLinkOptions {
   /**
    * Time in seconds until the magic link expires.
    * @default (60 * 5) // 5 minutes
@@ -71,7 +69,7 @@ interface MagicLinkOptions {
     hash: (token: string) => Promise<string>;
   }) | undefined;
 }
-declare const magicLink: (options: MagicLinkOptions) => {
+export declare const magicLink: (options: MagicLinkOptions) => {
   id: "magic-link";
   version: string;
   endpoints: {
@@ -90,10 +88,10 @@ declare const magicLink: (options: MagicLinkOptions) => {
      *
      * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/sign-in#api-method-sign-in-magic-link)
      */
-    signInMagicLink: _$better_call0.StrictEndpoint<"/sign-in/magic-link", {
+    signInMagicLink: import("better-call").StrictEndpoint<"/sign-in/magic-link", {
       method: "POST";
       requireHeaders: true;
-      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>[];
+      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>[];
       body: z.ZodObject<{
         email: z.ZodEmail;
         name: z.ZodOptional<z.ZodString>;
@@ -143,7 +141,7 @@ declare const magicLink: (options: MagicLinkOptions) => {
      *
      * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/magic-link#api-method-magic-link-verify)
      */
-    magicLinkVerify: _$better_call0.StrictEndpoint<"/magic-link/verify", {
+    magicLinkVerify: import("better-call").StrictEndpoint<"/magic-link/verify", {
       method: "GET";
       query: z.ZodObject<{
         token: z.ZodString;
@@ -151,7 +149,7 @@ declare const magicLink: (options: MagicLinkOptions) => {
         errorCallbackURL: z.ZodOptional<z.ZodString>;
         newUserCallbackURL: z.ZodOptional<z.ZodString>;
       }, z.core.$strip>;
-      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>[];
+      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>[];
       requireHeaders: true;
       metadata: {
         openapi: {
@@ -209,5 +207,4 @@ declare const magicLink: (options: MagicLinkOptions) => {
   }[];
   options: MagicLinkOptions;
 };
-//#endregion
-export { MagicLinkOptions, magicLink };
+//#endregion

package/dist/plugins/magic-link/index.mjs

@@ -161,7 +161,8 @@ const magicLink = (options) => {
 					throw ctx.redirect(errorCallbackURL.toString());
 				}
 				const newUserCallbackURL = new URL(ctx.query.newUserCallbackURL || callbackURL, ctx.context.baseURL).toString();
-				const identifier = magicLinkIdentifier(await storeToken(ctx, token));
+				const storedToken = await storeToken(ctx, token);
+				const identifier = magicLinkIdentifier(storedToken);
 				const pendingValue = await ctx.context.internalAdapter.findVerificationValue(identifier);
 				if (!pendingValue || !parseMagicLinkRecord(pendingValue.value)?.success) redirectWithError("INVALID_TOKEN");
 				const tokenValue = await ctx.context.internalAdapter.consumeVerificationValue(identifier);
@@ -171,22 +172,24 @@ const magicLink = (options) => {
 				const { email, name } = record.data;
 				let isNewUser = false;
 				let user = await ctx.context.internalAdapter.findUserByEmail(email).then((res) => res?.user);
-				if (!user) if (!opts.disableSignUp) {
-					let newUser;
-					try {
-						newUser = await ctx.context.internalAdapter.createUser({
-							email,
-							emailVerified: true,
-							name: name || ""
-						}, { method: "magic-link" });
-					} catch (e) {
-						if (isAPIError(e) && e.body?.code) redirectWithError(e.body.code, e.body.message);
-						throw e;
-					}
-					isNewUser = true;
-					user = newUser;
-					if (!user) redirectWithError("failed_to_create_user");
-				} else redirectWithError("new_user_signup_disabled");
+				if (!user) {
+					if (!opts.disableSignUp) {
+						let newUser;
+						try {
+							newUser = await ctx.context.internalAdapter.createUser({
+								email,
+								emailVerified: true,
+								name: name || ""
+							}, { method: "magic-link" });
+						} catch (e) {
+							if (isAPIError(e) && e.body?.code) redirectWithError(e.body.code, e.body.message);
+							throw e;
+						}
+						isNewUser = true;
+						user = newUser;
+						if (!user) redirectWithError("failed_to_create_user");
+					} else redirectWithError("new_user_signup_disabled");
+				}
 				if (!user.emailVerified) {
 					const promotedUser = await revokeUnprovenAccountAccess(ctx, user.id);
 					if (!promotedUser) redirectWithError("user_not_found");

package/dist/plugins/multi-session/client.d.mts

@@ -1,9 +1,7 @@
 import { MULTI_SESSION_ERROR_CODES } from "./error-codes.mjs";
 import { MultiSessionConfig, multiSession } from "./index.mjs";
-import * as _$_better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
-
 //#region src/plugins/multi-session/client.d.ts
-declare const multiSessionClient: () => {
+export declare const multiSessionClient: () => {
   id: "multi-session";
   version: string;
   $InferServerPlugin: ReturnType<typeof multiSession>;
@@ -12,8 +10,8 @@ declare const multiSessionClient: () => {
     signal: "$sessionSignal";
   }[];
   $ERROR_CODES: {
-    INVALID_SESSION_TOKEN: _$_better_auth_core_utils_error_codes0.RawError<"INVALID_SESSION_TOKEN">;
+    INVALID_SESSION_TOKEN: import("@better-auth/core/utils/error-codes").RawError<"INVALID_SESSION_TOKEN">;
   };
 };
 //#endregion
-export { multiSessionClient };
+export { MULTI_SESSION_ERROR_CODES, type MultiSessionConfig };

package/dist/plugins/multi-session/client.mjs

@@ -16,4 +16,4 @@ const multiSessionClient = () => {
 	};
 };
 //#endregion
-export { multiSessionClient };
+export { MULTI_SESSION_ERROR_CODES, multiSessionClient };

package/dist/plugins/multi-session/error-codes.d.mts

@@ -1,8 +1,5 @@
-import * as _$_better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
-
 //#region src/plugins/multi-session/error-codes.d.ts
-declare const MULTI_SESSION_ERROR_CODES: {
-  INVALID_SESSION_TOKEN: _$_better_auth_core_utils_error_codes0.RawError<"INVALID_SESSION_TOKEN">;
+export declare const MULTI_SESSION_ERROR_CODES: {
+  INVALID_SESSION_TOKEN: import("@better-auth/core/utils/error-codes").RawError<"INVALID_SESSION_TOKEN">;
 };
-//#endregion
-export { MULTI_SESSION_ERROR_CODES };
+//#endregion

package/dist/plugins/multi-session/index.d.mts

@@ -1,9 +1,5 @@
 import { MULTI_SESSION_ERROR_CODES } from "./error-codes.mjs";
-import * as _$_better_auth_core0 from "@better-auth/core";
-import * as _$_better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
-import * as _$better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/plugins/multi-session/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -12,7 +8,7 @@ declare module "@better-auth/core" {
     };
   }
 }
-interface MultiSessionConfig {
+export interface MultiSessionConfig {
   /**
    * The maximum number of sessions a user can have
    * at a time
@@ -20,7 +16,7 @@ interface MultiSessionConfig {
    */
   maximumSessions?: number | undefined;
 }
-declare const multiSession: (options?: MultiSessionConfig | undefined) => {
+export declare const multiSession: (options?: MultiSessionConfig | undefined) => {
   id: "multi-session";
   version: string;
   endpoints: {
@@ -39,7 +35,7 @@ declare const multiSession: (options?: MultiSessionConfig | undefined) => {
      *
      * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/multi-session#api-method-multi-session-list-device-sessions)
      */
-    listDeviceSessions: _$better_call0.StrictEndpoint<"/multi-session/list-device-sessions", {
+    listDeviceSessions: import("better-call").StrictEndpoint<"/multi-session/list-device-sessions", {
       method: "GET";
       requireHeaders: true;
     }, {
@@ -78,7 +74,7 @@ declare const multiSession: (options?: MultiSessionConfig | undefined) => {
      *
      * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/multi-session#api-method-multi-session-set-active)
      */
-    setActiveSession: _$better_call0.StrictEndpoint<"/multi-session/set-active", {
+    setActiveSession: import("better-call").StrictEndpoint<"/multi-session/set-active", {
       method: "POST";
       body: z.ZodObject<{
         sessionToken: z.ZodString;
@@ -142,13 +138,13 @@ declare const multiSession: (options?: MultiSessionConfig | undefined) => {
      *
      * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/multi-session#api-method-multi-session-revoke)
      */
-    revokeDeviceSession: _$better_call0.StrictEndpoint<"/multi-session/revoke", {
+    revokeDeviceSession: import("better-call").StrictEndpoint<"/multi-session/revoke", {
       method: "POST";
       body: z.ZodObject<{
         sessionToken: z.ZodString;
       }, z.core.$strip>;
       requireHeaders: true;
-      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
+      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -199,14 +195,14 @@ declare const multiSession: (options?: MultiSessionConfig | undefined) => {
   };
   hooks: {
     after: {
-      matcher: (context: _$_better_auth_core0.HookEndpointContext) => boolean;
-      handler: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>;
+      matcher: (context: import("@better-auth/core").HookEndpointContext) => boolean;
+      handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
     }[];
   };
   options: MultiSessionConfig | undefined;
   $ERROR_CODES: {
-    INVALID_SESSION_TOKEN: _$_better_auth_core_utils_error_codes0.RawError<"INVALID_SESSION_TOKEN">;
+    INVALID_SESSION_TOKEN: import("@better-auth/core/utils/error-codes").RawError<"INVALID_SESSION_TOKEN">;
   };
 };
 //#endregion
-export { MULTI_SESSION_ERROR_CODES as ERROR_CODES, MultiSessionConfig, multiSession };
+export { MULTI_SESSION_ERROR_CODES as ERROR_CODES };

package/dist/plugins/oauth-popup/client.d.mts

@@ -2,12 +2,10 @@ import { POPUP_TOKEN_STORAGE_KEY } from "./constants.mjs";
 import { OAUTH_POPUP_ERROR_CODES } from "./error-codes.mjs";
 import { oauthPopup } from "./index.mjs";
 import { BetterAuthClientOptions, ClientStore } from "@better-auth/core";
-import * as _$_better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
 import { BetterFetch, BetterFetchPlugin } from "@better-fetch/fetch";
-
 //#region src/plugins/oauth-popup/client.d.ts
 /** Inputs for `authClient.signIn.popup`; mirror the redirect sign-in. */
-interface SignInPopupOptions {
+export interface SignInPopupOptions {
   /** Built-in social provider id (e.g. `"google"`). */
   provider?: string;
   /** Generic OAuth provider id (registered via `genericOAuth`). */
@@ -23,7 +21,7 @@ interface SignInPopupOptions {
   /** How long (ms) to wait for the popup to complete. Default 5 minutes. */
   timeoutMs?: number;
 }
-interface SignInPopupResult {
+export interface SignInPopupResult {
   data: {
     success: boolean;
   } | null;
@@ -34,12 +32,12 @@ interface SignInPopupResult {
   } | null;
 }
 /** Reads the stored popup token (browser-only; null otherwise). */
-declare function getStoredPopupToken(): string | null;
+export declare function getStoredPopupToken(): string | null;
 /**
  * Attaches the popup token as a bearer header when embedded (where the cookie is
  * partitioned), and clears it once the session ends so it can't be reused.
  */
-declare const popupBearerFetchPlugin: BetterFetchPlugin;
+export declare const popupBearerFetchPlugin: BetterFetchPlugin;
 interface SignInPopupDeps {
   $fetch: BetterFetch;
   options?: BetterAuthClientOptions | undefined;
@@ -52,24 +50,20 @@ interface SignInPopupDeps {
  * page to post the session token back, stores it for the bearer fetch plugin,
  * and refreshes the reactive session.
  */
-declare function createSignInPopup({
-  $fetch,
-  options,
-  notifySessionSignal
-}: SignInPopupDeps): (opts: SignInPopupOptions) => Promise<SignInPopupResult>;
+export declare function createSignInPopup({ $fetch, options, notifySessionSignal }: SignInPopupDeps): (opts: SignInPopupOptions) => Promise<SignInPopupResult>;
 /**
  * Client plugin for popup OAuth sign-in. Adds `authClient.signIn.popup`. Pair
  * with the server `oauthPopup` and `bearer` plugins.
  */
-declare const oauthPopupClient: () => {
+export declare const oauthPopupClient: () => {
   id: "oauth-popup";
   version: string;
   $InferServerPlugin: ReturnType<typeof oauthPopup>;
   $ERROR_CODES: {
-    POPUP_SIGN_IN_FAILED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_SIGN_IN_FAILED">;
-    POPUP_BLOCKED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_BLOCKED">;
-    POPUP_CLOSED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_CLOSED">;
-    POPUP_TIMEOUT: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_TIMEOUT">;
+    POPUP_SIGN_IN_FAILED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_SIGN_IN_FAILED">;
+    POPUP_BLOCKED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_BLOCKED">;
+    POPUP_CLOSED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_CLOSED">;
+    POPUP_TIMEOUT: import("@better-auth/core/utils/error-codes").RawError<"POPUP_TIMEOUT">;
   };
   fetchPlugins: BetterFetchPlugin[];
   getActions: ($fetch: BetterFetch, $store: ClientStore, options: BetterAuthClientOptions | undefined) => {
@@ -79,4 +73,4 @@ declare const oauthPopupClient: () => {
   };
 };
 //#endregion
-export { SignInPopupOptions, SignInPopupResult, createSignInPopup, getStoredPopupToken, oauthPopupClient, popupBearerFetchPlugin };
+export { OAUTH_POPUP_ERROR_CODES, POPUP_TOKEN_STORAGE_KEY };

package/dist/plugins/oauth-popup/client.mjs

@@ -7,7 +7,7 @@ const POPUP_NAME = "better-auth-oauth";
 const POPUP_WIDTH = 500;
 const POPUP_HEIGHT = 600;
 const CLOSED_POLL_MS = 500;
-const DEFAULT_TIMEOUT_MS = 300 * 1e3;
+const DEFAULT_TIMEOUT_MS = 3e5;
 /** True when embedded cross-origin, where the cookie may be partitioned. */
 function isEmbedded() {
 	if (typeof window === "undefined" || window.self === window.top) return false;
@@ -74,10 +74,12 @@ function popupError(code, status) {
 	};
 }
 function centeredFeatures() {
-	return `width=${POPUP_WIDTH},height=${POPUP_HEIGHT},left=${window.screenX + (window.outerWidth - POPUP_WIDTH) / 2},top=${window.screenY + (window.outerHeight - POPUP_HEIGHT) / 2},menubar=no,toolbar=no`;
+	const left = window.screenX + (window.outerWidth - POPUP_WIDTH) / 2;
+	const top = window.screenY + (window.outerHeight - POPUP_HEIGHT) / 2;
+	return `width=${POPUP_WIDTH},height=${POPUP_HEIGHT},left=${left},top=${top},menubar=no,toolbar=no`;
 }
 function randomNonce() {
-	const bytes = new Uint8Array(16);
+	const bytes = /* @__PURE__ */ new Uint8Array(16);
 	crypto.getRandomValues(bytes);
 	return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 }
@@ -200,4 +202,4 @@ const oauthPopupClient = () => {
 	};
 };
 //#endregion
-export { createSignInPopup, getStoredPopupToken, oauthPopupClient, popupBearerFetchPlugin };
+export { OAUTH_POPUP_ERROR_CODES, POPUP_TOKEN_STORAGE_KEY, createSignInPopup, getStoredPopupToken, oauthPopupClient, popupBearerFetchPlugin };

package/dist/plugins/oauth-popup/constants.d.mts

@@ -1,11 +1,10 @@
 //#region src/plugins/oauth-popup/constants.d.ts
 /** postMessage `type` the completion page posts to its opener. */
-declare const OAUTH_POPUP_MESSAGE_TYPE = "better-auth:oauth-popup";
+export declare const OAUTH_POPUP_MESSAGE_TYPE = "better-auth:oauth-popup";
 /** DOM id of the inert JSON data block the completion page reads. */
-declare const OAUTH_POPUP_DATA_ELEMENT_ID = "better-auth-oauth-popup";
+export declare const OAUTH_POPUP_DATA_ELEMENT_ID = "better-auth-oauth-popup";
 /** Signed cookie carrying the opener origin/nonce from sign-in to callback. */
-declare const POPUP_MARKER_COOKIE = "oauth_popup";
+export declare const POPUP_MARKER_COOKIE = "oauth_popup";
 /** localStorage key the popup session token is persisted under. */
-declare const POPUP_TOKEN_STORAGE_KEY = "better-auth.popup_token";
-//#endregion
-export { OAUTH_POPUP_DATA_ELEMENT_ID, OAUTH_POPUP_MESSAGE_TYPE, POPUP_MARKER_COOKIE, POPUP_TOKEN_STORAGE_KEY };
+export declare const POPUP_TOKEN_STORAGE_KEY = "better-auth.popup_token";
+//#endregion

package/dist/plugins/oauth-popup/error-codes.d.mts

@@ -1,11 +1,8 @@
-import * as _$_better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
-
 //#region src/plugins/oauth-popup/error-codes.d.ts
-declare const OAUTH_POPUP_ERROR_CODES: {
-  POPUP_SIGN_IN_FAILED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_SIGN_IN_FAILED">;
-  POPUP_BLOCKED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_BLOCKED">;
-  POPUP_CLOSED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_CLOSED">;
-  POPUP_TIMEOUT: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_TIMEOUT">;
+export declare const OAUTH_POPUP_ERROR_CODES: {
+  POPUP_SIGN_IN_FAILED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_SIGN_IN_FAILED">;
+  POPUP_BLOCKED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_BLOCKED">;
+  POPUP_CLOSED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_CLOSED">;
+  POPUP_TIMEOUT: import("@better-auth/core/utils/error-codes").RawError<"POPUP_TIMEOUT">;
 };
-//#endregion
-export { OAUTH_POPUP_ERROR_CODES };
+//#endregion

package/dist/plugins/oauth-popup/index.d.mts

@@ -1,11 +1,7 @@
 import { OAUTH_POPUP_DATA_ELEMENT_ID, OAUTH_POPUP_MESSAGE_TYPE, POPUP_MARKER_COOKIE } from "./constants.mjs";
 import { OAUTH_POPUP_ERROR_CODES } from "./error-codes.mjs";
 import { OAuthPopupData, OAuthPopupMessage } from "./types.mjs";
-import * as _$_better_auth_core0 from "@better-auth/core";
-import * as _$_better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
-import * as _$better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/plugins/oauth-popup/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -17,28 +13,28 @@ declare module "@better-auth/core" {
 /**
  * The completion-page script.
  */
-declare const OAUTH_POPUP_COMPLETE_SCRIPT: string;
+export declare const OAUTH_POPUP_COMPLETE_SCRIPT: string;
 /**
  * sha256 of `OAUTH_POPUP_COMPLETE_SCRIPT`, pinned in the completion CSP.
  */
-declare const OAUTH_POPUP_SCRIPT_CSP_HASH = "sha256-tIo2K8VBC9SnhvdZ+9GsGkQoZm+jm/JcxL+d+i8b8KQ=";
+export declare const OAUTH_POPUP_SCRIPT_CSP_HASH = "sha256-tIo2K8VBC9SnhvdZ+9GsGkQoZm+jm/JcxL+d+i8b8KQ=";
 /**
  * Server plugin for popup-based OAuth. `signIn.popup` navigates the popup to
  * `/oauth-popup/start`; on the OAuth callback this plugin swaps the redirect for
  * a page that posts the session token (or error) back to the opener. Pair with
  * the `bearer` plugin and `oauthPopupClient`.
  */
-declare const oauthPopup: () => {
+export declare const oauthPopup: () => {
   id: "oauth-popup";
   version: string;
   $ERROR_CODES: {
-    POPUP_SIGN_IN_FAILED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_SIGN_IN_FAILED">;
-    POPUP_BLOCKED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_BLOCKED">;
-    POPUP_CLOSED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_CLOSED">;
-    POPUP_TIMEOUT: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_TIMEOUT">;
+    POPUP_SIGN_IN_FAILED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_SIGN_IN_FAILED">;
+    POPUP_BLOCKED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_BLOCKED">;
+    POPUP_CLOSED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_CLOSED">;
+    POPUP_TIMEOUT: import("@better-auth/core/utils/error-codes").RawError<"POPUP_TIMEOUT">;
   };
   endpoints: {
-    oauthPopupStart: _$better_call0.StrictEndpoint<"/oauth-popup/start", {
+    oauthPopupStart: import("better-call").StrictEndpoint<"/oauth-popup/start", {
       method: "GET";
       query: z.ZodObject<{
         provider: z.ZodString;
@@ -58,10 +54,10 @@ declare const oauthPopup: () => {
   };
   hooks: {
     after: {
-      matcher(context: _$_better_auth_core0.HookEndpointContext): boolean;
-      handler: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>;
+      matcher(context: import("@better-auth/core").HookEndpointContext): boolean;
+      handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
     }[];
   };
 };
 //#endregion
-export { OAUTH_POPUP_COMPLETE_SCRIPT, OAUTH_POPUP_SCRIPT_CSP_HASH, oauthPopup };
+export { OAUTH_POPUP_DATA_ELEMENT_ID, OAUTH_POPUP_ERROR_CODES, OAUTH_POPUP_MESSAGE_TYPE, type OAuthPopupData, type OAuthPopupMessage, POPUP_MARKER_COOKIE };

package/dist/plugins/oauth-popup/index.mjs

@@ -65,15 +65,16 @@ function renderCompletion(c, popupOrigin, message) {
 		warnedMissingBearer = true;
 		c.context.logger.warn("OAuth popup hands the session token back via postMessage, but the `bearer` plugin is not registered, so an embedded (cross-site iframe) app cannot authenticate with it. Add bearer() to your auth `plugins`.");
 	}
+	const data = {
+		type: OAUTH_POPUP_MESSAGE_TYPE,
+		targetOrigin: popupOrigin,
+		...message
+	};
 	const html = `<!doctype html>
 <html>
 <head><meta charset="utf-8"><title>Completing sign-in</title></head>
 <body>
-<script type="application/json" id="${OAUTH_POPUP_DATA_ELEMENT_ID}">${inlineJSON({
-		type: OAUTH_POPUP_MESSAGE_TYPE,
-		targetOrigin: popupOrigin,
-		...message
-	})}<\/script>
+<script type="application/json" id="${OAUTH_POPUP_DATA_ELEMENT_ID}">${inlineJSON(data)}<\/script>
 <script>${OAUTH_POPUP_COMPLETE_SCRIPT}<\/script>
 </body>
 </html>`;
@@ -143,7 +144,7 @@ const oauthPopupStart = createAuthEndpoint("/oauth-popup/start", {
 			errorURL: c.query.errorCallbackURL,
 			newUserURL: c.query.newUserCallbackURL,
 			requestSignUp: c.query.requestSignUp === "true" ? true : void 0,
-			expiresAt: Date.now() + 600 * 1e3
+			expiresAt: Date.now() + 6e5
 		};
 		await setOAuthState(stateData);
 		const { state } = await generateGenericState(c, stateData);
@@ -229,4 +230,4 @@ const oauthPopup = () => {
 	};
 };
 //#endregion
-export { OAUTH_POPUP_COMPLETE_SCRIPT, OAUTH_POPUP_SCRIPT_CSP_HASH, oauthPopup };
+export { OAUTH_POPUP_COMPLETE_SCRIPT, OAUTH_POPUP_DATA_ELEMENT_ID, OAUTH_POPUP_ERROR_CODES, OAUTH_POPUP_MESSAGE_TYPE, OAUTH_POPUP_SCRIPT_CSP_HASH, POPUP_MARKER_COOKIE, oauthPopup };

package/dist/plugins/oauth-popup/types.d.mts

@@ -1,8 +1,7 @@
 import { OAUTH_POPUP_MESSAGE_TYPE } from "./constants.mjs";
-
 //#region src/plugins/oauth-popup/types.d.ts
 /** OAuth error relayed to the opener when the flow fails. */
-interface OAuthPopupError {
+export interface OAuthPopupError {
   code: string;
   description?: string;
 }
@@ -10,7 +9,7 @@ interface OAuthPopupError {
  * Message the completion page posts to its opener — success carries the token,
  * failure carries the error.
  */
-interface OAuthPopupMessage {
+export interface OAuthPopupMessage {
   type: typeof OAUTH_POPUP_MESSAGE_TYPE;
   /** Echoes the request nonce so the opener can correlate the handoff. */
   nonce: string;
@@ -22,9 +21,8 @@ interface OAuthPopupMessage {
   error?: OAuthPopupError;
 }
 /** Payload embedded in the completion page's data block. */
-interface OAuthPopupData extends OAuthPopupMessage {
+export interface OAuthPopupData extends OAuthPopupMessage {
   /** Exact origin the message is posted to (the trusted popup opener). */
   targetOrigin: string;
 }
-//#endregion
-export { OAuthPopupData, OAuthPopupMessage };
+//#endregion

package/dist/plugins/oauth-proxy/index.d.mts

@@ -1,8 +1,5 @@
-import * as _$_better_auth_core0 from "@better-auth/core";
 import { SecretConfig } from "@better-auth/core";
-import * as _$better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/plugins/oauth-proxy/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -11,7 +8,7 @@ declare module "@better-auth/core" {
     };
   }
 }
-interface OAuthProxyOptions {
+export interface OAuthProxyOptions {
   /**
    * The current URL of the application.
    * The plugin will attempt to infer the current URL from your environment
@@ -52,7 +49,7 @@ interface OAuthProxyOptions {
    */
   secret?: string | SecretConfig | undefined;
 }
-declare const oAuthProxy: <O extends OAuthProxyOptions>(opts?: O) => {
+export declare const oAuthProxy: <O extends OAuthProxyOptions>(opts?: O) => {
   id: "oauth-proxy";
   version: string;
   options: NoInfer<O>;
@@ -61,14 +58,14 @@ declare const oAuthProxy: <O extends OAuthProxyOptions>(opts?: O) => {
      * @deprecated OAuth proxy callbacks now use `/callback/:id/oauth-proxy`.
      * This endpoint will be removed in the next minor release.
      */
-    oAuthProxy: _$better_call0.StrictEndpoint<"/oauth-proxy-callback", {
+    oAuthProxy: import("better-call").StrictEndpoint<"/oauth-proxy-callback", {
       method: "GET";
       operationId: string;
       query: z.ZodObject<{
         callbackURL: z.ZodString;
         profile: z.ZodOptional<z.ZodString>;
       }, z.core.$strip>;
-      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>[];
+      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>[];
       metadata: {
         openapi: {
           operationId: string;
@@ -101,14 +98,14 @@ declare const oAuthProxy: <O extends OAuthProxyOptions>(opts?: O) => {
         };
       };
     }, never>;
-    oAuthProxyCompletion: _$better_call0.StrictEndpoint<"/callback/:id/oauth-proxy", {
+    oAuthProxyCompletion: import("better-call").StrictEndpoint<"/callback/:id/oauth-proxy", {
       method: "GET";
       operationId: string;
       query: z.ZodObject<{
         callbackURL: z.ZodString;
         profile: z.ZodOptional<z.ZodString>;
       }, z.core.$strip>;
-      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>[];
+      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>[];
       metadata: {
         scope: "http";
       };
@@ -116,14 +113,13 @@ declare const oAuthProxy: <O extends OAuthProxyOptions>(opts?: O) => {
   };
   hooks: {
     before: {
-      matcher(context: _$_better_auth_core0.HookEndpointContext): boolean;
-      handler: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>;
+      matcher(context: import("@better-auth/core").HookEndpointContext): boolean;
+      handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
     }[];
     after: {
-      matcher(context: _$_better_auth_core0.HookEndpointContext): boolean;
-      handler: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>;
+      matcher(context: import("@better-auth/core").HookEndpointContext): boolean;
+      handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
     }[];
   };
 };
-//#endregion
-export { OAuthProxyOptions, oAuthProxy };
+//#endregion