better-auth 1.7.21 → 1.7.22

package/dist/db/internal-adapter.mjs

@@ -1,16 +1,17 @@
-import { getSessionDefaultFields, parseSessionOutput, parseUserOutput } from "./schema.mjs";
 import { getDate } from "../utils/date.mjs";
 import { assertValidUserInfo, assertValidUserInfoSource } from "../utils/validate-user-info.mjs";
+import { getSessionDefaultFields, parseSessionOutput, parseUserOutput } from "./schema.mjs";
 import { getStorageOption, processIdentifier } from "./verification-token-storage.mjs";
 import { getWithHooks } from "./with-hooks.mjs";
 import { getCurrentAdapter, getCurrentAuthEndpointContext, queueAfterTransactionHook, runWithTransaction, tryGetCurrentAuthEndpointContext } from "@better-auth/core/context";
+import { isWorkerd } from "@better-auth/core/env";
 import { APIError, BetterAuthError } from "@better-auth/core/error";
 import { generateId } from "@better-auth/core/utils/id";
 import { safeJSONParse } from "@better-auth/core/utils/json";
 import { encodeDeterministicId } from "@better-auth/core/db/internal";
 import { getIP } from "@better-auth/core/utils/ip";
 import { createHash } from "@better-auth/utils/hash";
-//#region src/db/internal-adapter.ts
+// src/db/internal-adapter.ts
 function getTTLSeconds(expiresAt, now = Date.now()) {
 	const expiresMs = typeof expiresAt === "number" ? expiresAt : expiresAt.getTime();
 	return Math.max(Math.floor((expiresMs - now) / 1e3), 0);
@@ -116,6 +117,7 @@ const createInternalAdapter = (adapter, ctx) => {
 		} });
 	}
 	async function withVerificationConsumeLock(key, fn) {
+		if (isWorkerd()) return fn();
 		const previous = verificationConsumeLocks.get(key) ?? Promise.resolve();
 		let release;
 		const current = new Promise((resolve) => {
@@ -878,19 +880,29 @@ const createInternalAdapter = (adapter, ctx) => {
 						field: "id",
 						value: latest.id
 					}], async () => {
-						const row = await txAdapter.consumeOne({
+						await txAdapter.deleteMany({
+							model: "verification",
+							where: [
+								...where,
+								{
+									field: "id",
+									operator: "ne",
+									value: latest.id
+								},
+								{
+									field: "createdAt",
+									operator: "lte",
+									value: latest.createdAt
+								}
+							]
+						});
+						return txAdapter.consumeOne({
 							model: "verification",
 							where: [{
 								field: "id",
 								value: latest.id
 							}]
 						});
-						if (!row) return null;
-						await txAdapter.deleteMany({
-							model: "verification",
-							where
-						});
-						return row;
 					}, latest);
 				}));
 				for (const stored of identifiersToTry) {
@@ -999,5 +1011,4 @@ const createInternalAdapter = (adapter, ctx) => {
 		refreshUserSessions
 	};
 };
-//#endregion
 export { createInternalAdapter };

package/dist/db/revoke-unproven-account-access.d.mts

@@ -1,7 +1,6 @@
 import { User } from "../types/models.mjs";
 import "../types/index.mjs";
 import { GenericEndpointContext } from "@better-auth/core";
-//#region src/db/revoke-unproven-account-access.d.ts
 /**
  * Strip every account link and session a pre-existing account accrued before
  * control of its email was proven.
@@ -16,5 +15,4 @@ import { GenericEndpointContext } from "@better-auth/core";
  *
  * @param userId - The pre-existing, not-yet-verified user being promoted.
  */
-export declare function revokeUnprovenAccountAccess(ctx: GenericEndpointContext, userId: string): Promise<User | null>;
-//#endregion
+export declare function revokeUnprovenAccountAccess(ctx: GenericEndpointContext, userId: string): Promise<User | null>;

package/dist/db/revoke-unproven-account-access.mjs

@@ -1,5 +1,5 @@
 import { BetterAuthError } from "@better-auth/core/error";
-//#region src/db/revoke-unproven-account-access.ts
+// src/db/revoke-unproven-account-access.ts
 const cleanupLockExpiresInMs = 5e3;
 const cleanupLockWaitMs = 2e3;
 const cleanupLockPollMs = 250;
@@ -54,5 +54,4 @@ async function revokeUnprovenAccountAccess(ctx, userId) {
 		await ctx.context.internalAdapter.deleteVerificationByIdentifier(lockIdentifier).catch(() => {});
 	}
 }
-//#endregion
 export { revokeUnprovenAccountAccess };

package/dist/db/schema.d.mts

@@ -2,7 +2,6 @@ import { Account, Session as Session$1, User as User$1 } from "../types/models.m
 import "../types/index.mjs";
 import { BetterAuthOptions } from "@better-auth/core";
 import { BetterAuthPluginDBSchema, DBFieldAttribute } from "@better-auth/core/db";
-//#region src/db/schema.d.ts
 export declare function parseUserOutput<T extends User$1>(options: BetterAuthOptions, user: T): T;
 /**
  * Builds a synthetic user object that matches the shape of a real user
@@ -57,5 +56,4 @@ export declare function mergeSchema<S extends BetterAuthPluginDBSchema>(schema:
   fields?: {
     [P: string]: string;
   } | undefined;
-} | undefined; } | undefined): S;
-//#endregion
+} | undefined; } | undefined): S;

package/dist/db/schema.mjs

@@ -1,7 +1,7 @@
 import { getAuthTables } from "@better-auth/core/db";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
 import { filterOutputFields } from "@better-auth/core/utils/db";
-//#region src/db/schema.ts
+// src/db/schema.ts
 const cache = /* @__PURE__ */ new WeakMap();
 function getFields(options, modelName, mode) {
 	const cacheKey = `${modelName}:${mode}`;
@@ -169,5 +169,4 @@ function mergeSchema(schema, newSchema) {
 	}
 	return merged;
 }
-//#endregion
 export { buildSyntheticUserOutput, getSessionDefaultFields, mergeSchema, parseAccountInput, parseAccountOutput, parseAdditionalUserInput, parseAdditionalUserInputFromProviderProfile, parseInputData, parseSessionInput, parseSessionOutput, parseUserInput, parseUserOutput };

package/dist/db/to-zod.d.mts

@@ -1,6 +1,5 @@
 import { DBFieldAttribute } from "@better-auth/core/db";
 import * as z from "zod";
-//#region src/db/to-zod.d.ts
 export declare function toZodSchema<Fields extends Record<string, DBFieldAttribute | never>, IsClientSide extends boolean>({ fields, isClientSide }: {
   fields: Fields;
   /**
@@ -29,5 +28,4 @@ type GetSchemaForSide<isClientSide extends boolean, Field extends DBFieldAttribu
   returned: false;
 } ? never : Schema;
 type RemoveNeverProps<T> = { [K in keyof T as [T[K]] extends [never] ? never : K]: T[K]; };
-//#endregion
 export {};

package/dist/db/to-zod.mjs

@@ -1,5 +1,5 @@
 import * as z from "zod";
-//#region src/db/to-zod.ts
+// src/db/to-zod.ts
 /**
 * Static lookup keeps `zod` tree-shakeable. `z[field.type]()` forces bundlers
 * to retain every `zod` export, including all locales.
@@ -29,5 +29,4 @@ function toZodSchema({ fields, isClientSide }) {
 	}, {});
 	return z.object(zodFields);
 }
-//#endregion
 export { toZodSchema };

package/dist/db/verification-token-storage.mjs

@@ -1,6 +1,6 @@
 import { base64Url } from "@better-auth/utils/base64";
 import { createHash } from "@better-auth/utils/hash";
-//#region src/db/verification-token-storage.ts
+// src/db/verification-token-storage.ts
 const defaultKeyHasher = async (identifier) => {
 	const hash = await createHash("SHA-256").digest(new TextEncoder().encode(identifier));
 	return base64Url.encode(new Uint8Array(hash), { padding: false });
@@ -21,5 +21,4 @@ function getStorageOption(identifier, config) {
 	}
 	return config;
 }
-//#endregion
 export { getStorageOption, processIdentifier };

package/dist/db/with-hooks.d.mts

@@ -1,7 +1,6 @@
 import { BetterAuthOptions } from "@better-auth/core";
 import { BaseModelNames } from "@better-auth/core/db";
 import { DBAdapter, Where } from "@better-auth/core/db/adapter";
-//#region src/db/with-hooks.d.ts
 export type DatabaseHooksEntry = {
   source: string;
   hooks: Exclude<BetterAuthOptions["databaseHooks"], undefined>;
@@ -31,5 +30,4 @@ export declare function getWithHooks(adapter: DBAdapter<BetterAuthOptions>, ctx:
     executeMainFn?: boolean;
   } | undefined) => Promise<any>;
   consumeOneWithHooks: <T extends Record<string, any>>(model: BaseModelNames, hookWhere: Where[], consumeFn: () => Promise<T | null>, preSnapshot?: T | null) => Promise<T | null>;
-};
-//#endregion
+};

package/dist/db/with-hooks.mjs

@@ -1,6 +1,6 @@
 import { getCurrentAdapter, queueAfterTransactionHook, tryGetCurrentAuthEndpointContext } from "@better-auth/core/context";
 import { ATTR_CONTEXT, ATTR_DB_COLLECTION_NAME, ATTR_HOOK_TYPE, createWithSpan } from "@better-auth/core/instrumentation";
-//#region src/db/with-hooks.ts
+// src/db/with-hooks.ts
 function getWithHooks(adapter, ctx) {
 	const withSpan = createWithSpan(ctx.options);
 	const hooksEntries = ctx.hooks;
@@ -251,5 +251,4 @@ function getWithHooks(adapter, ctx) {
 		consumeOneWithHooks
 	};
 }
-//#endregion
 export { getWithHooks };

package/dist/index.d.mts

@@ -5,8 +5,8 @@ import { FilteredAPI, InferAPI, InferSessionAPI } from "./types/api.mjs";
 import { Account, AdditionalSessionFieldsInput, AdditionalUserFieldsInput, InferPluginTypes, RateLimit, Session, User, Verification } from "./types/models.mjs";
 import { InferOptionSchema, InferPluginContext, InferPluginErrorCodes, InferPluginIDs } from "./types/plugins.mjs";
 import { Auth } from "./types/auth.mjs";
-import { BetterAuthAdvancedOptions, BetterAuthCookies, BetterAuthOptions, BetterAuthPlugin, BetterAuthRateLimitOptions, StoreIdentifierOption, UserProvisioningSource, ValidateUserInfoAction, ValidateUserInfoMethod, ValidateUserInfoOAuthInfo, ValidateUserInfoResult, ValidateUserInfoSSOInfo, ValidateUserInfoSource } from "./types/index.mjs";
 import { betterAuth } from "./auth/full.mjs";
+import { BetterAuthAdvancedOptions, BetterAuthCookies, BetterAuthOptions, BetterAuthPlugin, BetterAuthRateLimitOptions, StoreIdentifierOption, UserProvisioningSource, ValidateUserInfoAction, ValidateUserInfoMethod, ValidateUserInfoOAuthInfo, ValidateUserInfoResult, ValidateUserInfoSSOInfo, ValidateUserInfoSource } from "./types/index.mjs";
 import { StateData, generateGenericState, getAuthStateVerificationIdentifier, parseGenericState } from "./state.mjs";
 import { GenerateStateOptions, generateIdTokenNonce, generateState, parseState } from "./oauth2/state.mjs";
 import { HIDE_METADATA } from "./utils/hide-metadata.mjs";

package/dist/index.mjs

@@ -2,8 +2,8 @@ import { getBaseURL, getHost, getHostFromSource, getOrigin, getProtocol, getProt
 import { generateGenericState, getAuthStateVerificationIdentifier, parseGenericState } from "./state.mjs";
 import { generateIdTokenNonce, generateState, parseState } from "./oauth2/state.mjs";
 import { HIDE_METADATA } from "./utils/hide-metadata.mjs";
-import { APIError } from "./api/index.mjs";
 import { betterAuth } from "./auth/full.mjs";
+import { APIError } from "./api/index.mjs";
 import { getCurrentAdapter } from "@better-auth/core/context";
 import { createTelemetry, getTelemetryAuthConfig } from "@better-auth/telemetry";
 export * from "@better-auth/core";

package/dist/integrations/cookie-plugin-guard.mjs

@@ -1,4 +1,4 @@
-//#region src/integrations/cookie-plugin-guard.ts
+// src/integrations/cookie-plugin-guard.ts
 /**
 * Warns when a cookie integration plugin is not effectively last.
 *
@@ -14,5 +14,4 @@ function warnIfCookiePluginNotLast(ctx, pluginId) {
 	if (!plugins.slice(index + 1).some((p) => p.hooks && Array.isArray(p.hooks.after) && p.hooks.after.length > 0)) return;
 	ctx.logger.warn(`[better-auth] Cookie integration plugin "${pluginId}" should be placed last in the plugins array. Plugins with \`hooks.after\` running after it may set cookies that are not forwarded to the framework cookie store. Move your cookie integration plugin to the end of the \`plugins\` array to avoid missing \`Set-Cookie\` headers.`);
 }
-//#endregion
 export { warnIfCookiePluginNotLast };

package/dist/integrations/next-js.d.mts

@@ -1,4 +1,3 @@
-//#region src/integrations/next-js.d.ts
 export declare function toNextJsHandler(auth: {
   handler: (request: Request) => Promise<Response>;
 } | ((request: Request) => Promise<Response>)): {
@@ -21,5 +20,4 @@ export declare const nextCookies: () => {
       handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
     }[];
   };
-};
-//#endregion
+};

package/dist/integrations/next-js.mjs

@@ -1,9 +1,9 @@
-import { parseSetCookieHeader, toCookieOptions } from "../cookies/cookie-utils.mjs";
 import { setShouldSkipSessionRefresh } from "../api/state/should-session-refresh.mjs";
+import { parseSetCookieHeader, toCookieOptions } from "../cookies/cookie-utils.mjs";
 import { PACKAGE_VERSION } from "../version.mjs";
 import { warnIfCookiePluginNotLast } from "./cookie-plugin-guard.mjs";
 import { createAuthMiddleware } from "@better-auth/core/api";
-//#region src/integrations/next-js.ts
+// src/integrations/next-js.ts
 function toNextJsHandler(auth) {
 	const handler = async (request) => {
 		return "handler" in auth ? auth.handler(request) : auth(request);
@@ -101,5 +101,4 @@ const nextCookies = () => {
 		}
 	};
 };
-//#endregion
 export { nextCookies, toNextJsHandler };

package/dist/integrations/node.d.mts

@@ -1,9 +1,7 @@
 import { Auth } from "../types/auth.mjs";
 import "../types/index.mjs";
 import { IncomingHttpHeaders } from "node:http";
-//#region src/integrations/node.d.ts
 export declare const toNodeHandler: (auth: {
   handler: Auth["handler"];
 } | Auth["handler"]) => (req: import("node:http").IncomingMessage, res: import("node:http").ServerResponse) => Promise<void>;
-export declare function fromNodeHeaders(nodeHeaders: IncomingHttpHeaders): Headers;
-//#endregion
+export declare function fromNodeHeaders(nodeHeaders: IncomingHttpHeaders): Headers;

package/dist/integrations/node.mjs

@@ -1,5 +1,5 @@
 import { toNodeHandler as toNodeHandler$1 } from "better-call/node";
-//#region src/integrations/node.ts
+// src/integrations/node.ts
 const toNodeHandler = (auth) => {
 	return "handler" in auth ? toNodeHandler$1(auth.handler) : toNodeHandler$1(auth);
 };
@@ -11,5 +11,4 @@ function fromNodeHeaders(nodeHeaders) {
 	}
 	return webHeaders;
 }
-//#endregion
 export { fromNodeHeaders, toNodeHandler };

package/dist/integrations/solid-start.d.mts

@@ -1,4 +1,3 @@
-//#region src/integrations/solid-start.d.ts
 export declare function toSolidStartHandler(auth: {
   handler: (request: Request) => Promise<Response>;
 } | ((request: Request) => Promise<Response>)): {
@@ -17,5 +16,4 @@ export declare function toSolidStartHandler(auth: {
   DELETE: (event: {
     request: Request;
   }) => Promise<Response>;
-};
-//#endregion
+};

package/dist/integrations/solid-start.mjs

@@ -1,4 +1,4 @@
-//#region src/integrations/solid-start.ts
+// src/integrations/solid-start.ts
 function toSolidStartHandler(auth) {
 	const handler = async (event) => {
 		return "handler" in auth ? auth.handler(event.request) : auth(event.request);
@@ -11,5 +11,4 @@ function toSolidStartHandler(auth) {
 		DELETE: handler
 	};
 }
-//#endregion
 export { toSolidStartHandler };

package/dist/integrations/svelte-kit.d.mts

@@ -1,6 +1,5 @@
 import { BetterAuthOptions } from "../types/index.mjs";
 import { RequestEvent } from "@sveltejs/kit";
-//#region src/integrations/svelte-kit.d.ts
 export declare const toSvelteKitHandler: (auth: {
   handler: (request: Request) => Response | Promise<Response>;
   options: BetterAuthOptions;
@@ -26,5 +25,4 @@ export declare const sveltekitCookies: (getRequestEvent: () => RequestEvent<any,
       handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
     }[];
   };
-};
-//#endregion
+};

package/dist/integrations/svelte-kit.mjs

@@ -2,7 +2,7 @@ import { parseSetCookieHeader, toCookieOptions } from "../cookies/cookie-utils.m
 import { PACKAGE_VERSION } from "../version.mjs";
 import { warnIfCookiePluginNotLast } from "./cookie-plugin-guard.mjs";
 import { createAuthMiddleware } from "@better-auth/core/api";
-//#region src/integrations/svelte-kit.ts
+// src/integrations/svelte-kit.ts
 const toSvelteKitHandler = (auth) => {
 	return (event) => auth.handler(event.request);
 };
@@ -53,5 +53,4 @@ const sveltekitCookies = (getRequestEvent) => {
 		}] }
 	};
 };
-//#endregion
 export { isAuthPath, svelteKitHandler, sveltekitCookies, toSvelteKitHandler };

package/dist/integrations/tanstack-start-solid.d.mts

@@ -1,4 +1,3 @@
-//#region src/integrations/tanstack-start-solid.d.ts
 /**
  * TanStack Start cookie plugin for Solid.js.
  *
@@ -25,5 +24,4 @@ export declare const tanstackStartCookies: () => {
       handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
     }[];
   };
-};
-//#endregion
+};

package/dist/integrations/tanstack-start-solid.mjs

@@ -2,7 +2,7 @@ import { parseSetCookieHeader, toCookieOptions } from "../cookies/cookie-utils.m
 import { PACKAGE_VERSION } from "../version.mjs";
 import { warnIfCookiePluginNotLast } from "./cookie-plugin-guard.mjs";
 import { createAuthMiddleware } from "@better-auth/core/api";
-//#region src/integrations/tanstack-start-solid.ts
+// src/integrations/tanstack-start-solid.ts
 /**
 * TanStack Start cookie plugin for Solid.js.
 *
@@ -53,5 +53,4 @@ const tanstackStartCookies = () => {
 		}] }
 	};
 };
-//#endregion
 export { tanstackStartCookies };

package/dist/integrations/tanstack-start.d.mts

@@ -1,4 +1,3 @@
-//#region src/integrations/tanstack-start.d.ts
 /**
  * TanStack Start cookie plugin for React.
  *
@@ -25,5 +24,4 @@ export declare const tanstackStartCookies: () => {
       handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
     }[];
   };
-};
-//#endregion
+};

package/dist/integrations/tanstack-start.mjs

@@ -2,7 +2,7 @@ import { parseSetCookieHeader, toCookieOptions } from "../cookies/cookie-utils.m
 import { PACKAGE_VERSION } from "../version.mjs";
 import { warnIfCookiePluginNotLast } from "./cookie-plugin-guard.mjs";
 import { createAuthMiddleware } from "@better-auth/core/api";
-//#region src/integrations/tanstack-start.ts
+// src/integrations/tanstack-start.ts
 /**
 * TanStack Start cookie plugin for React.
 *
@@ -53,5 +53,4 @@ const tanstackStartCookies = () => {
 		}] }
 	};
 };
-//#endregion
 export { tanstackStartCookies };

package/dist/oauth2/account-key.mjs

@@ -1,5 +1,5 @@
 import { APIError, BASE_ERROR_CODES, BetterAuthError } from "@better-auth/core/error";
-//#region src/oauth2/account-key.ts
+// src/oauth2/account-key.ts
 /**
 * Exposes a provider-declared profile as the raw claim record used by
 * provisioning hooks. Provider profile interfaces are object-shaped but do
@@ -39,5 +39,4 @@ async function resolveOAuthAccountKeyForAPI(provider, tokens, profile) {
 		throw APIError.from("UNAUTHORIZED", BASE_ERROR_CODES.FAILED_TO_GET_USER_INFO);
 	}
 }
-//#endregion
 export { resolveOAuthAccountKey, resolveOAuthAccountKeyForAPI, toOAuthProfileRecord };

package/dist/oauth2/callback.mjs

@@ -2,7 +2,7 @@ import { resolveOAuthAccountKey, toOAuthProfileRecord } from "./account-key.mjs"
 import { OAUTH_CALLBACK_ERROR_CODES } from "./errors.mjs";
 import { getOAuthCallbackPath } from "./utils.mjs";
 import { safeJSONParse } from "@better-auth/core/utils/json";
-//#region src/oauth2/callback.ts
+// src/oauth2/callback.ts
 /**
 * Turns a provider callback into a verified identity. It checks that the
 * callback answers this authorization request, exchanges the code, and
@@ -64,5 +64,4 @@ async function exchangeOAuthCallback(ctx, provider, callback) {
 		accountKey
 	};
 }
-//#endregion
 export { exchangeOAuthCallback };

package/dist/oauth2/errors.mjs

@@ -1,5 +1,5 @@
 import { appendQueryParams } from "@better-auth/core/utils/url";
-//#region src/oauth2/errors.ts
+// src/oauth2/errors.ts
 /**
 * Error codes used in OAuth callback redirects (`?error=<code>`). These are
 * URL-safe strings, not API error objects. Some also serve as the OAuth seam's
@@ -45,5 +45,4 @@ function redirectOnError(ctx, errorURL, error, description) {
 function missingEmailLogMessage(providerId, options) {
 	return `${options?.source === "generic" ? `Generic OAuth provider "${providerId}"` : `Provider "${providerId}"`} did not return an email${options?.source === "id_token" ? " in the id token" : ""}. Either request the provider's email scope, or create a placeholder via \`mapProfileToUser\`. See ${HANDLING_DOCS_URL}`;
 }
-//#endregion
 export { OAUTH_CALLBACK_ERROR_CODES, missingEmailLogMessage, redirectOnError };

package/dist/oauth2/index.d.mts

@@ -1,5 +1,5 @@
-import { GenerateStateOptions, generateIdTokenNonce, generateState, parseState } from "./state.mjs";
 import { applyUpdateUserInfoOnLink, handleOAuthUserInfo, linkOAuthAccount } from "./link-account.mjs";
+import { GenerateStateOptions, generateIdTokenNonce, generateState, parseState } from "./state.mjs";
 import { decryptOAuthToken, getOAuthCallbackPath, setTokenUtil } from "./utils.mjs";
 export * from "@better-auth/core/oauth2";
 export { GenerateStateOptions, applyUpdateUserInfoOnLink, decryptOAuthToken, generateIdTokenNonce, generateState, getOAuthCallbackPath, handleOAuthUserInfo, linkOAuthAccount, parseState, setTokenUtil };

package/dist/oauth2/index.mjs

@@ -1,5 +1,5 @@
-import { decryptOAuthToken, getOAuthCallbackPath, setTokenUtil } from "./utils.mjs";
 import { applyUpdateUserInfoOnLink, handleOAuthUserInfo, linkOAuthAccount } from "./link-account.mjs";
 import { generateIdTokenNonce, generateState, parseState } from "./state.mjs";
+import { decryptOAuthToken, getOAuthCallbackPath, setTokenUtil } from "./utils.mjs";
 export * from "@better-auth/core/oauth2";
 export { applyUpdateUserInfoOnLink, decryptOAuthToken, generateIdTokenNonce, generateState, getOAuthCallbackPath, handleOAuthUserInfo, linkOAuthAccount, parseState, setTokenUtil };

package/dist/oauth2/link-account.d.mts

@@ -1,8 +1,7 @@
 import { Account, User } from "../types/models.mjs";
-import "../types/index.mjs";
 import { StateData } from "../state.mjs";
+import "../types/index.mjs";
 import { GenericEndpointContext, UserProvisioningSource } from "@better-auth/core";
-//#region src/oauth2/link-account.d.ts
 type OAuthAccountData = Omit<Account, "id" | "userId" | "createdAt" | "updatedAt">;
 /**
  * Provider profile a freshly linked account may copy onto the local user.
@@ -112,5 +111,4 @@ export declare function handleOAuthUserInfo(c: GenericEndpointContext, opts: {
  * disabled or the update fails: a failed profile sync must not abort the link.
  */
 export declare function applyUpdateUserInfoOnLink(c: GenericEndpointContext, userId: string, userInfo: LinkedProviderProfile): Promise<User | undefined>;
-//#endregion
 export {};

package/dist/oauth2/link-account.mjs

@@ -1,19 +1,18 @@
-import { isAPIError } from "../utils/is-api-error.mjs";
-import { parseAdditionalUserInputFromProviderProfile } from "../db/schema.mjs";
-import { symmetricDecrypt } from "../crypto/index.mjs";
+import { createEmailVerificationToken } from "../api/routes/email-verification.mjs";
+import { isStateful } from "../api/routes/session.mjs";
 import { setAccountCookie } from "../cookies/session-store.mjs";
-import { assertValidUserInfo } from "../utils/validate-user-info.mjs";
+import { symmetricDecrypt } from "../crypto/index.mjs";
 import { derivePurposeKey } from "../crypto/purpose.mjs";
+import { parseAdditionalUserInputFromProviderProfile } from "../db/schema.mjs";
+import { isAPIError } from "../utils/is-api-error.mjs";
+import { assertValidUserInfo } from "../utils/validate-user-info.mjs";
 import { OAUTH_CALLBACK_ERROR_CODES, redirectOnError } from "./errors.mjs";
-import { isStateful } from "../api/routes/session.mjs";
-import { toBoolean } from "../utils/boolean.mjs";
 import { setTokenUtil } from "./utils.mjs";
-import { createEmailVerificationToken } from "../api/routes/email-verification.mjs";
 import { queueAfterTransactionHook, runWithTransaction } from "@better-auth/core/context";
 import { isDevelopment } from "@better-auth/core/env";
 import { APIError } from "@better-auth/core/error";
-import { mergeScopes } from "@better-auth/core/oauth2";
-//#region src/oauth2/link-account.ts
+import { mergeScopes, parseStringBoolean } from "@better-auth/core/oauth2";
+// src/oauth2/link-account.ts
 function linkOAuthAccountFailure(code, message) {
 	return {
 		linked: false,
@@ -43,7 +42,7 @@ async function linkOAuthAccount(c, opts) {
 	const { link, account, profile, scopes } = opts;
 	const userInfo = {
 		...opts.userInfo,
-		emailVerified: toBoolean(opts.userInfo.emailVerified)
+		emailVerified: parseStringBoolean(opts.userInfo.emailVerified) ?? false
 	};
 	if (!await isLinkSessionLive(c, link)) return linkOAuthAccountFailure(OAUTH_CALLBACK_ERROR_CODES.UNABLE_TO_LINK_ACCOUNT);
 	try {
@@ -99,7 +98,7 @@ async function handleOAuthUserInfo(c, opts) {
 	const { account, callbackURL, disableSignUp, overrideUserInfo } = opts;
 	const userInfo = {
 		...opts.userInfo,
-		emailVerified: toBoolean(opts.userInfo.emailVerified)
+		emailVerified: parseStringBoolean(opts.userInfo.emailVerified) ?? false
 	};
 	const source = opts.source ?? {
 		method: "oauth",
@@ -305,7 +304,7 @@ async function handleOAuthUserInfo(c, opts) {
 				providerId: account.providerId,
 				accountId: account.accountId
 			};
-			const { createdUser, createdAccount } = await runWithTransaction(c.context.adapter, async () => {
+			const created = await runWithTransaction(c.context.adapter, async () => {
 				const createdUser = await c.context.internalAdapter.createUser({
 					name,
 					image,
@@ -313,6 +312,7 @@ async function handleOAuthUserInfo(c, opts) {
 					email: userInfo.email.toLowerCase(),
 					emailVerified: userInfo.emailVerified
 				}, source);
+				if (!createdUser) return null;
 				return {
 					createdUser,
 					createdAccount: await c.context.internalAdapter.createAccount({
@@ -321,6 +321,12 @@ async function handleOAuthUserInfo(c, opts) {
 					})
 				};
 			});
+			if (!created) return {
+				error: "unable to create user",
+				data: null,
+				isRegister: false
+			};
+			const { createdUser, createdAccount } = created;
 			if (requireExactAccountBinding && (createdAccount.accountId !== account.accountId || createdAccount.providerId !== account.providerId || createdAccount.userId !== createdUser.id)) throw new APIError("CONFLICT", {
 				code: "account_hook_binding_conflict",
 				message: "Account hook changed the selected authentication binding"
@@ -421,5 +427,4 @@ async function applyUpdateUserInfoOnLink(c, userId, userInfo) {
 		return;
 	}
 }
-//#endregion
 export { applyUpdateUserInfoOnLink, handleOAuthUserInfo, linkOAuthAccount };

package/dist/oauth2/state.d.mts

@@ -1,6 +1,5 @@
 import { StateData } from "../state.mjs";
 import { GenericEndpointContext } from "@better-auth/core";
-//#region src/oauth2/state.d.ts
 /**
  * Mint the OIDC `nonce` for the redirect flow, or `undefined` when the provider
  * does not require ID-token nonce binding. Every redirect entrypoint (social
@@ -49,5 +48,4 @@ export declare function parseState(c: GenericEndpointContext): Promise<{
   requestSignUp?: boolean | undefined;
   idTokenNonce?: string | undefined;
   serverContext?: Record<string, unknown> | undefined;
-}>;
-//#endregion
+}>;

package/dist/oauth2/state.mjs

@@ -1,9 +1,9 @@
-import { generateRandomString } from "../crypto/random.mjs";
-import { redirectOnError } from "./errors.mjs";
 import { getOAuthServerContext, setOAuthState } from "../api/state/oauth.mjs";
+import { generateRandomString } from "../crypto/random.mjs";
 import { StateError, generateGenericState, parseGenericState } from "../state.mjs";
+import { redirectOnError } from "./errors.mjs";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
-//#region src/oauth2/state.ts
+// src/oauth2/state.ts
 /**
 * Mint the OIDC `nonce` for the redirect flow, or `undefined` when the provider
 * does not require ID-token nonce binding. Every redirect entrypoint (social
@@ -63,5 +63,4 @@ async function parseState(c) {
 	if (parsedData) await setOAuthState(parsedData);
 	return parsedData;
 }
-//#endregion
 export { generateIdTokenNonce, generateState, parseState };

package/dist/oauth2/utils.d.mts

@@ -1,9 +1,7 @@
 import { AuthContext, LiteralString } from "@better-auth/core";
-//#region src/oauth2/utils.d.ts
 export declare function decryptOAuthToken(token: string, ctx: AuthContext): string | Promise<string>;
 export declare function setTokenUtil(token: string | null | undefined, ctx: AuthContext): string | Promise<string> | null | undefined;
 export declare function getOAuthCallbackPath(provider: {
   id: LiteralString;
   callbackPath?: string | undefined;
-}): string;
-//#endregion
+}): string;

package/dist/oauth2/utils.mjs

@@ -1,5 +1,5 @@
 import { symmetricDecrypt, symmetricEncrypt } from "../crypto/index.mjs";
-//#region src/oauth2/utils.ts
+// src/oauth2/utils.ts
 /**
 * Check if a string looks like encrypted data
 */
@@ -29,5 +29,4 @@ function getOAuthCallbackPath(provider) {
 	if (!provider.callbackPath) return `/callback/${provider.id}`;
 	return provider.callbackPath.startsWith("/") ? provider.callbackPath : `/${provider.callbackPath}`;
 }
-//#endregion
 export { decryptOAuthToken, getOAuthCallbackPath, setTokenUtil };

package/dist/package.mjs

@@ -1,4 +1,3 @@
-//#region package.json
-var version = "1.7.21";
-//#endregion
+// package.json
+var version = "1.7.22";
 export { version };