better-auth 1.7.12 → 1.7.13

package/dist/api/index.mjs

@@ -110,41 +110,42 @@ function getEndpoints(ctx, options) {
 			middleware
 		};
 	})).filter((plugin) => plugin !== void 0).flat() || [];
+	const endpoints = {
+		signInSocial: signInSocial(),
+		callbackOAuth,
+		getSession: getSession(),
+		signOut,
+		signUpEmail: signUpEmail(),
+		signInEmail: signInEmail(),
+		resetPassword,
+		verifyPassword,
+		verifyEmail,
+		sendVerificationEmail,
+		changeEmail,
+		changePassword,
+		setPassword,
+		updateSession: updateSession(),
+		updateUser: updateUser(),
+		deleteUser,
+		requestPasswordReset,
+		requestPasswordResetCallback,
+		listSessions: listSessions(),
+		revokeSession,
+		revokeSessions,
+		revokeOtherSessions,
+		linkSocialAccount,
+		listUserAccounts,
+		deleteUserCallback,
+		unlinkAccount,
+		refreshToken,
+		getAccessToken,
+		accountInfo,
+		...pluginEndpoints,
+		ok,
+		error
+	};
 	return {
-		api: toAuthEndpoints({
-			signInSocial: signInSocial(),
-			callbackOAuth,
-			getSession: getSession(),
-			signOut,
-			signUpEmail: signUpEmail(),
-			signInEmail: signInEmail(),
-			resetPassword,
-			verifyPassword,
-			verifyEmail,
-			sendVerificationEmail,
-			changeEmail,
-			changePassword,
-			setPassword,
-			updateSession: updateSession(),
-			updateUser: updateUser(),
-			deleteUser,
-			requestPasswordReset,
-			requestPasswordResetCallback,
-			listSessions: listSessions(),
-			revokeSession,
-			revokeSessions,
-			revokeOtherSessions,
-			linkSocialAccount,
-			listUserAccounts,
-			deleteUserCallback,
-			unlinkAccount,
-			refreshToken,
-			getAccessToken,
-			accountInfo,
-			...pluginEndpoints,
-			ok,
-			error
-		}, ctx),
+		api: toAuthEndpoints(endpoints, ctx),
 		middlewares
 	};
 }

package/dist/api/middlewares/authorization.d.mts

@@ -1,5 +1,3 @@
-import * as _$better_call0 from "better-call";
-
 //#region src/api/middlewares/authorization.d.ts
 /**
  * Middleware that verifies the authenticated user owns a resource.
@@ -13,10 +11,14 @@ import * as _$better_call0 from "better-call";
  * The fetched resource is returned on `ctx.context.verifiedResource`
  * so the handler can use it without a redundant DB query.
  */
-declare function requireResourceOwnership(config: {
-  /** Database model name (e.g., "passkey", "apiKey") */model: string; /** Request parameter name containing the resource ID */
-  idParam: string; /** Where to find the ID: "body" or "query" */
-  idSource: "body" | "query"; /** Field on the resource that holds the owner's user ID. Default: "userId" */
+export declare function requireResourceOwnership(config: {
+  /** Database model name (e.g., "passkey", "apiKey") */
+  model: string;
+  /** Request parameter name containing the resource ID */
+  idParam: string;
+  /** Where to find the ID: "body" or "query" */
+  idSource: "body" | "query";
+  /** Field on the resource that holds the owner's user ID. Default: "userId" */
   ownerField?: string;
   /**
    * Custom error to throw when the resource is not found.
@@ -41,7 +43,7 @@ declare function requireResourceOwnership(config: {
    * @default "FORBIDDEN" (403)
    */
   forbiddenStatus?: "FORBIDDEN" | "UNAUTHORIZED";
-}): _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
+}): import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
   verifiedResource: {};
 }>>;
 /**
@@ -54,16 +56,17 @@ declare function requireResourceOwnership(config: {
  *
  * The verified member is returned on `ctx.context.verifiedMember`.
  */
-declare function requireOrgRole(config: {
-  /** Request parameter name containing the organization ID */orgIdParam: string; /** Where to find the org ID: "body" or "query" */
+export declare function requireOrgRole(config: {
+  /** Request parameter name containing the organization ID */
+  orgIdParam: string;
+  /** Where to find the org ID: "body" or "query" */
   orgIdSource: "body" | "query";
   /**
    * Roles that are authorized to proceed. If omitted or empty,
    * any org membership is sufficient.
    */
   allowedRoles?: string[];
-}): _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
+}): import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
   verifiedMember: {};
 }>>;
-//#endregion
-export { requireOrgRole, requireResourceOwnership };
+//#endregion

package/dist/api/middlewares/authorization.mjs

@@ -69,7 +69,8 @@ function requireOrgRole(config) {
 		});
 		if (!member) throw new APIError("FORBIDDEN", { message: "Not a member of this organization" });
 		if (config.allowedRoles?.length) {
-			if (!parseMemberRoles(member.role ?? "").some((role) => config.allowedRoles.includes(role))) throw new APIError("FORBIDDEN", { message: "Insufficient role for this operation" });
+			const rawRole = member.role ?? "";
+			if (!parseMemberRoles(rawRole).some((role) => config.allowedRoles.includes(role))) throw new APIError("FORBIDDEN", { message: "Insufficient role for this operation" });
 		}
 		return { verifiedMember: member };
 	});

package/dist/api/middlewares/index.d.mts

@@ -1,2 +1,3 @@
 import { requireOrgRole, requireResourceOwnership } from "./authorization.mjs";
-import { formCsrfMiddleware, originCheck, originCheckMiddleware } from "./origin-check.mjs";
+import { formCsrfMiddleware, originCheck, originCheckMiddleware } from "./origin-check.mjs";
+export { formCsrfMiddleware, originCheck, originCheckMiddleware, requireOrgRole, requireResourceOwnership };

package/dist/api/middlewares/origin-check.d.mts

@@ -1,17 +1,14 @@
 import { GenericEndpointContext } from "@better-auth/core";
-import * as _$better_call0 from "better-call";
-
 //#region src/api/middlewares/origin-check.d.ts
 /**
  * A middleware to validate callbackURL and origin against trustedOrigins.
  * Also handles CSRF protection using Fetch Metadata for first-login scenarios.
  */
-declare const originCheckMiddleware: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>;
-declare const originCheck: (getValue: (ctx: GenericEndpointContext) => string | string[]) => _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>;
+export declare const originCheckMiddleware: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
+export declare const originCheck: (getValue: (ctx: GenericEndpointContext) => string | string[]) => import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
 /**
  * Middleware for CSRF protection using Fetch Metadata headers.
  * This prevents cross-site navigation login attacks while supporting progressive enhancement.
  */
-declare const formCsrfMiddleware: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>;
-//#endregion
-export { formCsrfMiddleware, originCheck, originCheckMiddleware };
+export declare const formCsrfMiddleware: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
+//#endregion

package/dist/api/routes/account.d.mts

@@ -1,11 +1,8 @@
-import * as _$_better_auth_core_oauth20 from "@better-auth/core/oauth2";
-import * as _$better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/api/routes/account.d.ts
-declare const listUserAccounts: _$better_call0.StrictEndpoint<"/list-accounts", {
+export declare const listUserAccounts: import("better-call").StrictEndpoint<"/list-accounts", {
   method: "GET";
-  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
+  use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -87,7 +84,7 @@ declare const listUserAccounts: _$better_call0.StrictEndpoint<"/list-accounts",
   providerId: string;
   accountId: string;
 }[]>;
-declare const linkSocialAccount: _$better_call0.StrictEndpoint<"/link-social", {
+export declare const linkSocialAccount: import("better-call").StrictEndpoint<"/link-social", {
   method: "POST";
   requireHeaders: true;
   body: z.ZodObject<{
@@ -107,7 +104,7 @@ declare const linkSocialAccount: _$better_call0.StrictEndpoint<"/link-social", {
     additionalParams: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     additionalData: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
   }, z.core.$strip>;
-  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
+  use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -166,12 +163,12 @@ declare const linkSocialAccount: _$better_call0.StrictEndpoint<"/link-social", {
   url: string;
   redirect: boolean;
 }>;
-declare const unlinkAccount: _$better_call0.StrictEndpoint<"/unlink-account", {
+export declare const unlinkAccount: import("better-call").StrictEndpoint<"/unlink-account", {
   method: "POST";
   body: z.ZodObject<{
     accountId: z.ZodString;
   }, z.core.$strip>;
-  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
+  use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -219,7 +216,7 @@ declare const unlinkAccount: _$better_call0.StrictEndpoint<"/unlink-account", {
 }, {
   status: boolean;
 }>;
-declare const getAccessToken: _$better_call0.StrictEndpoint<"/get-access-token", {
+export declare const getAccessToken: import("better-call").StrictEndpoint<"/get-access-token", {
   method: "POST";
   body: z.ZodUnion<readonly [z.ZodObject<{
     accountId: z.ZodString;
@@ -269,7 +266,7 @@ declare const getAccessToken: _$better_call0.StrictEndpoint<"/get-access-token",
   scopes: string[];
   idToken: string | undefined;
 }>;
-declare const refreshToken: _$better_call0.StrictEndpoint<"/refresh-token", {
+export declare const refreshToken: import("better-call").StrictEndpoint<"/refresh-token", {
   method: "POST";
   body: z.ZodUnion<readonly [z.ZodObject<{
     accountId: z.ZodString;
@@ -330,7 +327,7 @@ declare const refreshToken: _$better_call0.StrictEndpoint<"/refresh-token", {
   providerId: string;
   accountId: string;
 }>;
-declare const accountInfo: _$better_call0.StrictEndpoint<"/account-info", {
+export declare const accountInfo: import("better-call").StrictEndpoint<"/account-info", {
   method: "GET";
   metadata: {
     openapi: {
@@ -406,8 +403,7 @@ declare const accountInfo: _$better_call0.StrictEndpoint<"/account-info", {
     providerId: string;
     accountId: string;
   };
-  user: _$_better_auth_core_oauth20.OAuth2UserInfo;
+  user: import("@better-auth/core/oauth2").OAuth2UserInfo;
   data: object;
 }>;
-//#endregion
-export { accountInfo, getAccessToken, linkSocialAccount, listUserAccounts, refreshToken, unlinkAccount };
+//#endregion

package/dist/api/routes/account.mjs

@@ -506,10 +506,13 @@ const refreshToken = createAuthEndpoint("/refresh-token", {
 		* @see {@link Account.scope}
 		*/
 		updatedAccount = await ctx.context.internalAdapter.updateAccount(account.id, updatedTokenData);
-		if (accountCookie?.id === account.id && ctx.context.options.account?.storeAccountCookie) await setAccountCookie(ctx, {
-			...accountCookie,
-			...updatedAccount ?? updatedTokenData
-		});
+		if (accountCookie?.id === account.id && ctx.context.options.account?.storeAccountCookie) {
+			const updateData = {
+				...accountCookie,
+				...updatedAccount ?? updatedTokenData
+			};
+			await setAccountCookie(ctx, updateData);
+		}
 		const responseScope = updatedAccount?.scope ?? account.scope;
 		return ctx.json({
 			accessToken: tokens.accessToken,

package/dist/api/routes/callback.d.mts

@@ -1,8 +1,6 @@
-import * as _$better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/api/routes/callback.d.ts
-declare const callbackOAuth: _$better_call0.StrictEndpoint<"/callback/:id", {
+export declare const callbackOAuth: import("better-call").StrictEndpoint<"/callback/:id", {
   method: ("GET" | "POST")[];
   operationId: string;
   body: z.ZodOptional<z.ZodObject<{
@@ -28,5 +26,4 @@ declare const callbackOAuth: _$better_call0.StrictEndpoint<"/callback/:id", {
     scope: "server";
   };
 }, void>;
-//#endregion
-export { callbackOAuth };
+//#endregion

package/dist/api/routes/callback.mjs

@@ -50,7 +50,8 @@ const callbackOAuth = createAuthEndpoint("/callback/:id", {
 		else throw new Error("Unsupported method");
 	} catch (e) {
 		c.context.logger.error("INVALID_CALLBACK_REQUEST", e);
-		const redirectURL = appendQueryParams(defaultErrorURL, new URLSearchParams({ error: "invalid_callback_request" }));
+		const params = new URLSearchParams({ error: "invalid_callback_request" });
+		const redirectURL = appendQueryParams(defaultErrorURL, params);
 		throw c.redirect(redirectURL);
 	}
 	const { code, error, state, error_description, device_id, user: userData, iss } = queryOrBody;
@@ -70,7 +71,8 @@ const callbackOAuth = createAuthEndpoint("/callback/:id", {
 	}
 	if (!state) {
 		c.context.logger.error("State not found", error);
-		const redirectURL = appendQueryParams(defaultErrorURL, new URLSearchParams({ error: "state_not_found" }));
+		const params = new URLSearchParams({ error: "state_not_found" });
+		const redirectURL = appendQueryParams(defaultErrorURL, params);
 		throw c.redirect(redirectURL);
 	}
 	const { codeVerifier, callbackURL, link, errorURL, newUserURL, requestSignUp, idTokenNonce } = await parseState(c);

package/dist/api/routes/email-verification.d.mts

@@ -1,30 +1,26 @@
 import { User } from "../../types/models.mjs";
+import "../../types/index.mjs";
 import { GenericEndpointContext } from "@better-auth/core";
-import * as _$better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/api/routes/email-verification.d.ts
-declare function createEmailVerificationToken(secret: string, email: string,
+export declare function createEmailVerificationToken(secret: string, email: string,
 /**
  * The email to update from
  */
-
 updateTo?: string | undefined,
 /**
  * The time in seconds for the token to expire
  */
-
 expiresIn?: number,
 /**
  * Extra payload to include in the token
  */
-
 extraPayload?: Record<string, any>): Promise<string>;
 /**
  * A function to send a verification email to the user
  */
-declare function sendVerificationEmailFn(ctx: GenericEndpointContext, user: User): Promise<void>;
-declare const sendVerificationEmail: _$better_call0.StrictEndpoint<"/send-verification-email", {
+export declare function sendVerificationEmailFn(ctx: GenericEndpointContext, user: User): Promise<void>;
+export declare const sendVerificationEmail: import("better-call").StrictEndpoint<"/send-verification-email", {
   method: "POST";
   operationId: string;
   cloneRequest: true;
@@ -100,14 +96,14 @@ declare const sendVerificationEmail: _$better_call0.StrictEndpoint<"/send-verifi
 }, {
   status: boolean;
 }>;
-declare const verifyEmail: _$better_call0.StrictEndpoint<"/verify-email", {
+export declare const verifyEmail: import("better-call").StrictEndpoint<"/verify-email", {
   method: "GET";
   operationId: string;
   query: z.ZodObject<{
     token: z.ZodString;
     callbackURL: z.ZodOptional<z.ZodString>;
   }, z.core.$strip>;
-  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>[];
+  use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>[];
   metadata: {
     openapi: {
       description: string;
@@ -156,5 +152,4 @@ declare const verifyEmail: _$better_call0.StrictEndpoint<"/verify-email", {
 }, void | {
   status: boolean;
 }>;
-//#endregion
-export { createEmailVerificationToken, sendVerificationEmail, sendVerificationEmailFn, verifyEmail };
+//#endregion

package/dist/api/routes/error.d.mts

@@ -1,7 +1,5 @@
-import * as _$better_call0 from "better-call";
-
 //#region src/api/routes/error.d.ts
-declare const error: _$better_call0.StrictEndpoint<"/error", {
+export declare const error: import("better-call").StrictEndpoint<"/error", {
   method: "GET";
   metadata: {
     openapi: {
@@ -23,5 +21,4 @@ declare const error: _$better_call0.StrictEndpoint<"/error", {
     scope: "server";
   };
 }, Response>;
-//#endregion
-export { error };
+//#endregion

package/dist/api/routes/index.d.mts

@@ -9,4 +9,5 @@ import { signInEmail, signInSocial } from "./sign-in.mjs";
 import { signOut } from "./sign-out.mjs";
 import { signUpEmail } from "./sign-up.mjs";
 import { updateSession } from "./update-session.mjs";
-import { changeEmail, changePassword, deleteUser, deleteUserCallback, setPassword, updateUser } from "./update-user.mjs";
+import { changeEmail, changePassword, deleteUser, deleteUserCallback, setPassword, updateUser } from "./update-user.mjs";
+export { accountInfo, callbackOAuth, changeEmail, changePassword, createEmailVerificationToken, deleteUser, deleteUserCallback, error, freshSessionMiddleware, getAccessToken, getAuthoritativeSessionFromCtx, getSession, getSessionFromCtx, isStateful, linkSocialAccount, listSessions, listUserAccounts, ok, refreshToken, requestOnlySessionMiddleware, requestPasswordReset, requestPasswordResetCallback, resetPassword, revokeOtherSessions, revokeSession, revokeSessions, sendVerificationEmail, sendVerificationEmailFn, sensitiveSessionMiddleware, sessionMiddleware, setPassword, signInEmail, signInSocial, signOut, signUpEmail, unlinkAccount, updateSession, updateUser, verifyEmail, verifyPassword };

package/dist/api/routes/ok.d.mts

@@ -1,7 +1,5 @@
-import * as _$better_call0 from "better-call";
-
 //#region src/api/routes/ok.d.ts
-declare const ok: _$better_call0.StrictEndpoint<"/ok", {
+export declare const ok: import("better-call").StrictEndpoint<"/ok", {
   method: "GET";
   metadata: {
     openapi: {
@@ -31,5 +29,4 @@ declare const ok: _$better_call0.StrictEndpoint<"/ok", {
 }, {
   ok: boolean;
 }>;
-//#endregion
-export { ok };
+//#endregion

package/dist/api/routes/password.d.mts

@@ -1,8 +1,6 @@
-import * as _$better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/api/routes/password.d.ts
-declare const requestPasswordReset: _$better_call0.StrictEndpoint<"/request-password-reset", {
+export declare const requestPasswordReset: import("better-call").StrictEndpoint<"/request-password-reset", {
   method: "POST";
   body: z.ZodObject<{
     email: z.ZodEmail;
@@ -34,18 +32,18 @@ declare const requestPasswordReset: _$better_call0.StrictEndpoint<"/request-pass
       };
     };
   };
-  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>[];
+  use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>[];
 }, {
   status: boolean;
   message: string;
 }>;
-declare const requestPasswordResetCallback: _$better_call0.StrictEndpoint<"/reset-password/:token", {
+export declare const requestPasswordResetCallback: import("better-call").StrictEndpoint<"/reset-password/:token", {
   method: "GET";
   operationId: string;
   query: z.ZodObject<{
     callbackURL: z.ZodString;
   }, z.core.$strip>;
-  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>[];
+  use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>[];
   metadata: {
     openapi: {
       operationId: string;
@@ -87,7 +85,7 @@ declare const requestPasswordResetCallback: _$better_call0.StrictEndpoint<"/rese
     };
   };
 }, never>;
-declare const resetPassword: _$better_call0.StrictEndpoint<"/reset-password", {
+export declare const resetPassword: import("better-call").StrictEndpoint<"/reset-password", {
   method: "POST";
   operationId: string;
   query: z.ZodOptional<z.ZodObject<{
@@ -123,7 +121,7 @@ declare const resetPassword: _$better_call0.StrictEndpoint<"/reset-password", {
 }, {
   status: boolean;
 }>;
-declare const verifyPassword: _$better_call0.StrictEndpoint<"/verify-password", {
+export declare const verifyPassword: import("better-call").StrictEndpoint<"/verify-password", {
   method: "POST";
   body: z.ZodObject<{
     password: z.ZodString;
@@ -152,7 +150,7 @@ declare const verifyPassword: _$better_call0.StrictEndpoint<"/verify-password",
       };
     };
   };
-  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
+  use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -178,5 +176,4 @@ declare const verifyPassword: _$better_call0.StrictEndpoint<"/verify-password",
 }, {
   status: boolean;
 }>;
-//#endregion
-export { requestPasswordReset, requestPasswordResetCallback, resetPassword, verifyPassword };
+//#endregion

package/dist/api/routes/password.mjs

@@ -70,7 +70,7 @@ const requestPasswordReset = createAuthEndpoint("/request-password-reset", {
 			message: "If this email exists in our system, check your email for the reset link"
 		});
 	}
-	const expiresAt = getDate(ctx.context.options.emailAndPassword.resetPasswordTokenExpiresIn || 3600 * 1, "sec");
+	const expiresAt = getDate(ctx.context.options.emailAndPassword.resetPasswordTokenExpiresIn || 3600, "sec");
 	const verificationToken = generateId(24);
 	await ctx.context.internalAdapter.createVerificationValue({
 		value: user.user.id,
@@ -157,7 +157,8 @@ const resetPassword = createAuthEndpoint("/reset-password", {
 	const userId = verification.value;
 	const user = await ctx.context.internalAdapter.findUserById(userId);
 	if (!user) throw APIError.from("BAD_REQUEST", BASE_ERROR_CODES.USER_NOT_FOUND);
-	await resetCredentialPassword(ctx, userId, await ctx.context.password.hash(newPassword), async () => {
+	const hashedPassword = await ctx.context.password.hash(newPassword);
+	await resetCredentialPassword(ctx, userId, hashedPassword, async () => {
 		if (!await ctx.context.internalAdapter.consumeVerificationValue(id)) throw APIError.from("BAD_REQUEST", BASE_ERROR_CODES.INVALID_TOKEN);
 	});
 	if (ctx.context.options.emailAndPassword?.onPasswordReset) await ctx.context.options.emailAndPassword.onPasswordReset({ user }, ctx.request);