better-auth 1.8.0-beta.5 → 1.8.0-beta.7

package/dist/auth/trusted-origins.mjs

@@ -1,11 +1,12 @@
 import { wildcardMatch } from "../utils/wildcard.mjs";
 import { getHost, getOrigin, getProtocol } from "../utils/url.mjs";
+import * as z from "zod";
 //#region src/auth/trusted-origins.ts
 const CONTROL_CHARACTER_PATTERN = /[\u0000-\u001f\u007f-\u009f]/;
 const RELATIVE_URL_PARSER_ORIGIN = "https://better-auth.invalid";
 const ENCODED_PATH_SEPARATOR_PATTERN = /%2[fF]|%5[cC]/;
 const IP_WILDCARD_HOST_PATTERN = /^(?=.*\d)[\d*?.]+$/;
-const IPV4_HOST_PATTERN = /^\d{1,3}(?:\.\d{1,3}){3}$/;
+const ipv4Schema = z.ipv4();
 /**
 * A wildcard host made only of digits, dots and wildcards (`192.168.*.*`,
 * `10.*`) names an address range, so it admits only an IPv4 address. A plain
@@ -13,9 +14,10 @@ const IPV4_HOST_PATTERN = /^\d{1,3}(?:\.\d{1,3}){3}$/;
 * hosts keep the documented subdomain matching.
 */
 const isAllowedIPv4Host = (patternAuthority, authority) => {
-	const patternHost = patternAuthority.split(":")[0];
+	const [patternHost = ""] = patternAuthority.split(":");
 	if (!IP_WILDCARD_HOST_PATTERN.test(patternHost)) return true;
-	return IPV4_HOST_PATTERN.test(authority.split(":")[0]);
+	const [host = ""] = authority.split(":");
+	return z.validate(ipv4Schema, host);
 };
 /**
 * Resolves `.` and `..` segments in a path after percent-decoding so a

package/dist/client/proxy.mjs

@@ -1,14 +1,7 @@
 import { isAtom } from "../utils/is-atom.mjs";
 import { toKebabCase } from "@better-auth/core/utils/string";
+import { isPayloadMethod } from "@better-fetch/fetch";
 //#region src/client/proxy.ts
-function getMethod(path, knownPathMethods, args) {
-	const method = knownPathMethods[path];
-	const { fetchOptions, query: _query, ...body } = args || {};
-	if (method) return method;
-	if (fetchOptions?.method) return fetchOptions.method;
-	if (body && Object.keys(body).length > 0) return "POST";
-	return "GET";
-}
 function createDynamicPathProxy(routes, client, knownPathMethods, atoms, atomListeners) {
 	function createProxy(path = []) {
 		return new Proxy(function() {}, {
@@ -35,13 +28,13 @@ function createDynamicPathProxy(routes, client, knownPathMethods, atoms, atomLis
 					...fetchOptions,
 					...argFetchOptions
 				};
-				const method = getMethod(routePath, knownPathMethods, arg);
+				const method = knownPathMethods[routePath] || options.method || (Object.keys(body).length > 0 ? "POST" : "GET");
 				return await client(routePath, {
 					...options,
-					body: method === "GET" ? void 0 : {
+					body: isPayloadMethod(method) ? {
 						...body,
 						...options?.body || {}
-					},
+					} : void 0,
 					query: query || options?.query,
 					method,
 					async onSuccess(context) {

package/dist/cookies/index.mjs

@@ -177,6 +177,7 @@ async function setSessionCookie(ctx, session, dontRememberMe, overrides) {
 		...overrides
 	});
 	if (dontRememberMe) await ctx.setSignedCookie(ctx.context.authCookies.dontRememberToken.name, "true", ctx.context.secret, ctx.context.authCookies.dontRememberToken.attributes);
+	else if (dontRememberMeCookie) expireCookie(ctx, ctx.context.authCookies.dontRememberToken);
 	await setCookieCache(ctx, session, dontRememberMe);
 	ctx.context.setNewSession(session);
 }

package/dist/db/internal-adapter.mjs

@@ -38,7 +38,7 @@ const createInternalAdapter = (adapter, ctx) => {
 	* or `deleteUserSessions` sweeping a user's accumulated preserved rows) would
 	* re-match it and re-fire the hooks, re-dispatching back-channel logout.
 	*/
-	const endPreservedSessions = (where) => {
+	const endPreservedSessions = (where, afterEnd) => {
 		const liveSessions = [...where, {
 			field: "expiresAt",
 			value: /* @__PURE__ */ new Date(),
@@ -51,6 +51,7 @@ const createInternalAdapter = (adapter, ctx) => {
 					where: liveSessions,
 					update: { expiresAt: /* @__PURE__ */ new Date() }
 				});
+				await afterEnd?.();
 			},
 			executeMainFn: false
 		});
@@ -78,6 +79,16 @@ const createInternalAdapter = (adapter, ctx) => {
 		const activeSessions = await secondaryStorage.get(`active-sessions-${userId}`);
 		return activeSessions ? safeJSONParse(activeSessions) || [] : [];
 	}
+	async function setActiveSessionReferences(userId, sessionReferences, now) {
+		if (!secondaryStorage) return;
+		const sorted = [...sessionReferences].sort((a, b) => a.expiresAt - b.expiresAt);
+		const ttl = getTTLSeconds(sorted.at(-1)?.expiresAt ?? 0, now);
+		if (ttl > 0) {
+			await secondaryStorage.set(`active-sessions-${userId}`, JSON.stringify(sorted), ttl);
+			return;
+		}
+		await secondaryStorage.delete(`active-sessions-${userId}`);
+	}
 	const revokedBeforeKey = (userId) => `revoked-sessions-before-${userId}`;
 	const revokedBeforeTTL = Math.max(sessionExpiration, 86400, Number(options.plugins?.find((plugin) => plugin.id === "admin")?.options?.impersonationSessionDuration) || 0);
 	async function isRevokedSession(session, revokedBeforeByUser) {
@@ -91,18 +102,10 @@ const createInternalAdapter = (adapter, ctx) => {
 		const previousRevokedBefore = Number(await secondaryStorage.get(revokedBeforeKey(userId)));
 		await secondaryStorage.set(revokedBeforeKey(userId), String(Math.max(revokedAt, previousRevokedBefore || 0)), revokedBeforeTTL);
 		const deletedTokens = new Set(sessionReferences.map((session) => session.token));
-		for (const { token } of sessionReferences) await secondaryStorage.delete(token);
-		const activeSessionsKey = `active-sessions-${userId}`;
+		for (const token of deletedTokens) await secondaryStorage.delete(token);
 		const currentSessionReferences = await getActiveSessionReferences(userId);
 		const now = Date.now();
-		const remainingSessionReferences = currentSessionReferences.filter((session) => session.expiresAt > now && !deletedTokens.has(session.token));
-		remainingSessionReferences.sort((a, b) => a.expiresAt - b.expiresAt);
-		const furthestExpiration = remainingSessionReferences.at(-1)?.expiresAt;
-		if (furthestExpiration) {
-			await secondaryStorage.set(activeSessionsKey, JSON.stringify(remainingSessionReferences), getTTLSeconds(furthestExpiration, now));
-			return;
-		}
-		await secondaryStorage.delete(activeSessionsKey);
+		await setActiveSessionReferences(userId, currentSessionReferences.filter((session) => session.expiresAt > now && !deletedTokens.has(session.token)), now);
 	}
 	async function queueCachedUserSessionDeletion(userId, sessionReferences) {
 		if (!secondaryStorage) return;
@@ -309,12 +312,10 @@ const createInternalAdapter = (adapter, ctx) => {
 					list = safeJSONParse(currentList) || [];
 					list = list.filter((session) => session.expiresAt > now && session.token !== data.token);
 				}
-				const sorted = [...list, {
+				await setActiveSessionReferences(userId, [...list, {
 					token: data.token,
 					expiresAt: data.expiresAt.getTime()
-				}].sort((a, b) => a.expiresAt - b.expiresAt);
-				const furthestSessionTTL = getTTLSeconds(sorted.at(-1)?.expiresAt ?? data.expiresAt.getTime(), now);
-				if (furthestSessionTTL > 0) await secondaryStorage.set(`active-sessions-${userId}`, JSON.stringify(sorted), furthestSessionTTL);
+				}], now);
 				const user = await (await getCurrentAdapter(adapter)).findOne({
 					model: "user",
 					where: [{
@@ -466,13 +467,11 @@ const createInternalAdapter = (adapter, ctx) => {
 						}), sessionTTL);
 						const listKey = `active-sessions-${updatedSession.userId}`;
 						const listRaw = await secondaryStorage.get(listKey);
-						const sorted = (listRaw ? safeJSONParse(listRaw) || [] : []).filter((s) => s.token !== sessionToken && s.expiresAt > now).concat([{
+						const filtered = (listRaw ? safeJSONParse(listRaw) || [] : []).filter((s) => s.token !== sessionToken && s.expiresAt > now).concat([{
 							token: sessionToken,
 							expiresAt: expiresMs
-						}]).sort((a, b) => a.expiresAt - b.expiresAt);
-						const furthestSessionExp = sorted.at(-1)?.expiresAt;
-						if (furthestSessionExp && furthestSessionExp > now) await secondaryStorage.set(listKey, JSON.stringify(sorted), getTTLSeconds(furthestSessionExp, now));
-						else await secondaryStorage.delete(listKey);
+						}]);
+						await setActiveSessionReferences(updatedSession.userId, filtered, now);
 					}
 					return updatedSession;
 				},
@@ -493,10 +492,7 @@ const createInternalAdapter = (adapter, ctx) => {
 					if (currentList) {
 						const list = safeJSONParse(currentList) || [];
 						const now = Date.now();
-						const filtered = list.filter((session) => session.expiresAt > now && session.token !== token);
-						const furthestSessionExp = filtered.sort((a, b) => a.expiresAt - b.expiresAt).at(-1)?.expiresAt;
-						if (filtered.length > 0 && furthestSessionExp && furthestSessionExp > Date.now()) await secondaryStorage.set(`active-sessions-${userId}`, JSON.stringify(filtered), getTTLSeconds(furthestSessionExp, now));
-						else await secondaryStorage.delete(`active-sessions-${userId}`);
+						await setActiveSessionReferences(userId, list.filter((session) => session.expiresAt > now && session.token !== token), now);
 					} else logger.error("Active sessions list not found in secondary storage");
 				}
 				await secondaryStorage.delete(token);
@@ -533,23 +529,39 @@ const createInternalAdapter = (adapter, ctx) => {
 		},
 		deleteUserSessions: async (userId) => {
 			const sessionReferences = await getActiveSessionReferences(userId);
-			if (secondaryStorage) {
-				if (!options.session?.storeSessionInDatabase) {
-					await queueCachedUserSessionDeletion(userId, sessionReferences);
-					return;
-				}
-				if (ctx.options.session?.preserveSessionInDatabase) {
-					if (await endPreservedSessions([{
-						field: "userId",
-						value: userId
-					}]) !== null) await queueCachedUserSessionDeletion(userId, sessionReferences);
-					return;
-				}
+			if (!secondaryStorage) {
+				await deleteManyWithHooks([{
+					field: "userId",
+					value: userId
+				}], "session", void 0);
+				return;
+			}
+			if (!options.session?.storeSessionInDatabase) {
+				await queueCachedUserSessionDeletion(userId, sessionReferences);
+				return;
+			}
+			const revokeCachedSessions = async () => queueCachedUserSessionDeletion(userId, [...sessionReferences, ...await getActiveSessionReferences(userId)]);
+			if (ctx.options.session?.preserveSessionInDatabase) {
+				await endPreservedSessions([{
+					field: "userId",
+					value: userId
+				}], revokeCachedSessions);
+				return;
 			}
-			if (await deleteManyWithHooks([{
+			await deleteManyWithHooks([{
 				field: "userId",
 				value: userId
-			}], "session", void 0) !== null) await queueCachedUserSessionDeletion(userId, sessionReferences);
+			}], "session", {
+				fn: async (where) => {
+					const deleted = await (await getCurrentAdapter(adapter)).deleteMany({
+						model: "session",
+						where
+					});
+					await revokeCachedSessions();
+					return deleted;
+				},
+				executeMainFn: false
+			});
 		},
 		deleteSessions: async (sessionTokens) => {
 			if (secondaryStorage) {

package/dist/db/schema.mjs

@@ -149,16 +149,25 @@ function getSessionDefaultFields(options) {
 }
 function mergeSchema(schema, newSchema) {
 	if (!newSchema) return schema;
+	const merged = { ...schema };
 	for (const table in newSchema) {
-		const newModelName = newSchema[table]?.modelName;
-		if (newModelName) schema[table].modelName = newModelName;
-		for (const field in schema[table].fields) {
-			const newField = newSchema[table]?.fields?.[field];
-			if (!newField) continue;
-			schema[table].fields[field].fieldName = newField;
-		}
+		const base = schema[table];
+		const override = newSchema[table];
+		if (!base || !override) continue;
+		const fields = Object.fromEntries(Object.entries(base.fields).map(([key, field]) => {
+			const fieldName = override.fields?.[key];
+			return [key, fieldName ? {
+				...field,
+				fieldName
+			} : field];
+		}));
+		merged[table] = {
+			...base,
+			...override.modelName ? { modelName: override.modelName } : {},
+			fields
+		};
 	}
-	return schema;
+	return merged;
 }
 //#endregion
 export { buildSyntheticUserOutput, getSessionDefaultFields, mergeSchema, parseAccountInput, parseAccountOutput, parseAdditionalUserInput, parseAdditionalUserInputFromProviderProfile, parseInputData, parseSessionInput, parseSessionOutput, parseUserInput, parseUserOutput };

package/dist/package.mjs

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "1.8.0-beta.5";
+var version = "1.8.0-beta.7";
 //#endregion
 export { version };

package/dist/plugins/admin/routes.mjs

@@ -5,6 +5,7 @@ import { getAuthoritativeSessionFromCtx, getSessionFromCtx } from "../../api/rou
 import { assertPasswordNotTooLong, assertPasswordNotTooShort } from "../../utils/password.mjs";
 import { ADMIN_ERROR_CODES } from "./error-codes.mjs";
 import { hasPermission } from "./has-permission.mjs";
+import { runWithTransaction } from "@better-auth/core/context";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
 import { whereOperators } from "@better-auth/core/db/adapter";
 import { createAuthEndpoint, createAuthMiddleware } from "@better-auth/core/api";
@@ -193,22 +194,23 @@ const createUser = (opts) => createAuthEndpoint("/admin/create-user", {
 	if (!z.email().safeParse(email).success) throw APIError.from("BAD_REQUEST", BASE_ERROR_CODES.INVALID_EMAIL);
 	if (ctx.body.password) assertPasswordNotTooLong(ctx, ctx.body.password);
 	if (await ctx.context.internalAdapter.findUserByEmail(email)) throw APIError.from("BAD_REQUEST", ADMIN_ERROR_CODES.USER_ALREADY_EXISTS_USE_ANOTHER_EMAIL);
-	const user = await ctx.context.internalAdapter.createUser({
-		...userData,
-		email,
-		name: ctx.body.name,
-		role: requestedRole !== void 0 ? parseRoles(requestedRole) : opts?.defaultRole ?? "user"
-	}, { method: "admin" });
-	if (!user) throw APIError.from("INTERNAL_SERVER_ERROR", ADMIN_ERROR_CODES.FAILED_TO_CREATE_USER);
-	if (ctx.body.password) {
-		const hashedPassword = await ctx.context.password.hash(ctx.body.password);
-		await ctx.context.internalAdapter.linkAccount({
+	const hashedPassword = ctx.body.password ? await ctx.context.password.hash(ctx.body.password) : void 0;
+	const user = await runWithTransaction(ctx.context.adapter, async () => {
+		const user = await ctx.context.internalAdapter.createUser({
+			...userData,
+			email,
+			name: ctx.body.name,
+			role: requestedRole !== void 0 ? parseRoles(requestedRole) : opts?.defaultRole ?? "user"
+		}, { method: "admin" });
+		if (!user) throw APIError.from("INTERNAL_SERVER_ERROR", ADMIN_ERROR_CODES.FAILED_TO_CREATE_USER);
+		if (hashedPassword !== void 0) await ctx.context.internalAdapter.linkAccount({
 			providerId: "credential",
 			accountId: user.id,
 			password: hashedPassword,
 			userId: user.id
 		});
-	}
+		return user;
+	});
 	return ctx.json({ user: parseUserOutput(ctx.context.options, user) });
 });
 const adminUpdateUserBodySchema = z.object({

package/dist/plugins/device-authorization/index.d.mts

@@ -305,6 +305,7 @@ export declare const deviceAuthorization: <Grant extends DeviceAuthorizationGran
           invalid_request: "invalid_request";
           expired_token: "expired_token";
           access_denied: "access_denied";
+          invalid_client: "invalid_client";
           authorization_pending: "authorization_pending";
           slow_down: "slow_down";
           invalid_grant: "invalid_grant";

package/dist/plugins/device-authorization/routes.mjs

@@ -369,6 +369,7 @@ const deviceTokenErrorSchema = z.object({
 		"expired_token",
 		"access_denied",
 		"invalid_request",
+		"invalid_client",
 		"invalid_grant"
 	]).meta({ description: "Error code" }),
 	error_description: z.string().meta({ description: "Detailed error description" })
@@ -504,6 +505,7 @@ Follow [rfc8628#section-3.4](https://datatracker.ietf.org/doc/html/rfc8628#secti
 									"expired_token",
 									"access_denied",
 									"invalid_request",
+									"invalid_client",
 									"invalid_grant"
 								]
 							},
@@ -518,7 +520,7 @@ Follow [rfc8628#section-3.4](https://datatracker.ietf.org/doc/html/rfc8628#secti
 	const { device_code, client_id } = ctx.body;
 	if (opts.validateClient) {
 		if (!await opts.validateClient(client_id)) throw new APIError("BAD_REQUEST", {
-			error: "invalid_grant",
+			error: "invalid_client",
 			error_description: "Invalid client ID"
 		});
 	}

package/dist/plugins/open-api/generator.mjs

@@ -74,7 +74,8 @@ function getZodPipeSchema(zodType) {
 function getParameters(options) {
 	const parameters = [];
 	if (options.metadata?.openapi?.parameters) parameters.push(...options.metadata.openapi.parameters);
-	if (!options.metadata?.openapi?.parameters && options.query instanceof z.ZodObject) Object.entries(options.query.shape).forEach(([key, value]) => {
+	const query = options.query instanceof z.core.$ZodOptional ? options.query._zod.def.innerType : options.query;
+	if (!options.metadata?.openapi?.parameters && query instanceof z.core.$ZodObject) Object.entries(query._zod.def.shape).forEach(([key, value]) => {
 		if (value instanceof z.ZodType) {
 			const parameterSchema = toOpenApiSchema(value);
 			parameters.push({

package/dist/plugins/organization/adapter.mjs

@@ -214,6 +214,10 @@ const getOrgAdapter = (context, options) => {
 					...data.filter.operator ? { operator: data.filter.operator } : {}
 				}] : []]
 			})]);
+			if (members[0].length === 0) return {
+				members: [],
+				total: members[1]
+			};
 			const users = await adapter.findMany({
 				model: "user",
 				where: [{

package/dist/plugins/organization/routes/crud-invites.mjs

@@ -509,7 +509,7 @@ const getInvitation = (options) => createAuthEndpoint("/organization/get-invitat
 	if (!session) throw APIError.fromStatus("UNAUTHORIZED", { message: "Not authenticated" });
 	const adapter = getOrgAdapter(ctx.context, options);
 	const invitation = await adapter.findInvitationById(ctx.query.id);
-	if (!invitation || invitation.status !== "pending" || invitation.expiresAt < /* @__PURE__ */ new Date()) throw APIError.fromStatus("BAD_REQUEST", { message: "Invitation not found!" });
+	if (!invitation || invitation.status !== "pending" || invitation.expiresAt < /* @__PURE__ */ new Date()) throw APIError.from("BAD_REQUEST", ORGANIZATION_ERROR_CODES.INVITATION_NOT_FOUND);
 	if (invitation.email.toLowerCase() !== session.user.email.toLowerCase()) throw APIError.from("FORBIDDEN", ORGANIZATION_ERROR_CODES.YOU_ARE_NOT_THE_RECIPIENT_OF_THE_INVITATION);
 	if (shouldRequireVerifiedEmailForInvitationIdAction({
 		organizationOptions: ctx.context.orgOptions,

package/dist/plugins/phone-number/index.mjs

@@ -22,7 +22,7 @@ const phoneNumber = (options) => {
 		init() {
 			return { options: { databaseHooks: { user: {
 				create: { async before(data, ctx) {
-					if (!data[opts.phoneNumber] || data[opts.phoneNumberVerified] === true) return;
+					if (data[opts.phoneNumber] == null || data[opts.phoneNumberVerified] === true) return;
 					if (ctx?.body?.[opts.phoneNumber]) throw APIError.from("BAD_REQUEST", PHONE_NUMBER_ERROR_CODES.PHONE_NUMBER_CANNOT_BE_SET);
 					return { data: {
 						...data,
@@ -35,7 +35,7 @@ const phoneNumber = (options) => {
 						...data,
 						[opts.phoneNumberVerified]: false
 					} };
-					if (!ctx || !data[opts.phoneNumber] || data[opts.phoneNumberVerified] === true || ctx.path === "/admin/update-user") return;
+					if (!ctx || data[opts.phoneNumber] == null || data[opts.phoneNumberVerified] === true || ctx.path === "/admin/update-user") return;
 					return { data: {
 						...data,
 						[opts.phoneNumber]: void 0

package/dist/plugins/siwe/index.mjs

@@ -6,6 +6,7 @@ import { PACKAGE_VERSION } from "../../version.mjs";
 import { toChecksumAddress } from "../../utils/hashing.mjs";
 import { normalizeSiweDomain, parseSiweMessage } from "./parse-message.mjs";
 import { schema } from "./schema.mjs";
+import { getCurrentAdapter, runWithTransaction } from "@better-auth/core/context";
 import { createAuthEndpoint } from "@better-auth/core/api";
 import * as z from "zod";
 import { createPlaceholderEmail } from "@better-auth/core/utils/email";
@@ -186,38 +187,54 @@ const siwe = (options) => {
 							}
 						}
 						const { name, avatar } = await options.ensLookup?.({ walletAddress }) ?? {};
-						const createSIWEUser = (email) => ctx.context.internalAdapter.createUser({
-							name: name ?? walletAddress,
-							email,
-							image: avatar ?? ""
-						}, { method: "siwe" });
+						const createSIWEUser = (email) => runWithTransaction(ctx.context.adapter, async () => {
+							const createdUser = await ctx.context.internalAdapter.createUser({
+								name: name ?? walletAddress,
+								email,
+								image: avatar ?? ""
+							}, { method: "siwe" });
+							await (await getCurrentAdapter(ctx.context.adapter)).create({
+								model: "walletAddress",
+								data: {
+									userId: createdUser.id,
+									address: walletAddress,
+									chainId,
+									isPrimary: true,
+									createdAt: /* @__PURE__ */ new Date()
+								}
+							});
+							await ctx.context.internalAdapter.createAccount({
+								userId: createdUser.id,
+								providerId: "siwe",
+								accountId: `${walletAddress}:${chainId}`,
+								createdAt: /* @__PURE__ */ new Date(),
+								updatedAt: /* @__PURE__ */ new Date()
+							});
+							return createdUser;
+						});
 						try {
 							user = await createSIWEUser(userEmail);
 						} catch (error) {
 							if (userEmail !== normalizedEmail || !normalizedEmail) throw error;
-							if (!await ctx.context.internalAdapter.findUserByEmail(normalizedEmail)) throw error;
+							const claimedUser = await ctx.context.internalAdapter.findUserByEmail(normalizedEmail);
+							const registeredWallet = await ctx.context.adapter.findOne({
+								model: "walletAddress",
+								where: [{
+									field: "address",
+									operator: "eq",
+									value: walletAddress
+								}, {
+									field: "chainId",
+									operator: "eq",
+									value: chainId
+								}]
+							});
+							if (!claimedUser || registeredWallet) throw error;
 							userEmail = walletEmail;
 							user = await createSIWEUser(userEmail);
 						} finally {
 							if (emailClaimIdentifier) await ctx.context.internalAdapter.consumeVerificationValue(emailClaimIdentifier).catch(() => {});
 						}
-						await ctx.context.adapter.create({
-							model: "walletAddress",
-							data: {
-								userId: user.id,
-								address: walletAddress,
-								chainId,
-								isPrimary: true,
-								createdAt: /* @__PURE__ */ new Date()
-							}
-						});
-						await ctx.context.internalAdapter.createAccount({
-							userId: user.id,
-							providerId: "siwe",
-							accountId: `${walletAddress}:${chainId}`,
-							createdAt: /* @__PURE__ */ new Date(),
-							updatedAt: /* @__PURE__ */ new Date()
-						});
 					} else if (!existingWalletAddress) {
 						await ctx.context.adapter.create({
 							model: "walletAddress",

package/dist/plugins/username/index.mjs

@@ -6,6 +6,7 @@ import { assertPasswordNotTooLong } from "../../utils/password.mjs";
 import { PACKAGE_VERSION } from "../../version.mjs";
 import { USERNAME_ERROR_CODES } from "./error-codes.mjs";
 import { getSchema } from "./schema.mjs";
+import { getCurrentAdapter } from "@better-auth/core/context";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
 import { createAuthEndpoint, createAuthMiddleware } from "@better-auth/core/api";
 import * as z from "zod";
@@ -71,7 +72,7 @@ const usernameImpl = (options, includeDisplayUsername) => {
 					const currentPath = context?.path;
 					const skipValidation = currentPath && pathsWithHttpHookValidation.includes(currentPath);
 					if (username) {
-						if (!skipValidation) await validateUsername(username, displayUsername, ctx.adapter);
+						if (!skipValidation) await validateUsername(username, displayUsername, await getCurrentAdapter(ctx.adapter));
 						return { data: {
 							...user,
 							username: normalizer(username),
@@ -91,7 +92,7 @@ const usernameImpl = (options, includeDisplayUsername) => {
 					if (username) {
 						if (!skipValidation) {
 							const currentUserId = context?.context?.session?.user?.id || ("id" in user ? user.id : null);
-							await validateUsername(username, displayUsername, ctx.adapter, currentUserId);
+							await validateUsername(username, displayUsername, await getCurrentAdapter(ctx.adapter), currentUserId);
 						}
 						return { data: {
 							...user,

package/dist/state.mjs

@@ -80,8 +80,7 @@ async function generateGenericState(c, stateData, settings) {
 	}
 	const stateCookie = c.context.createAuthCookie(settings?.cookieName ?? "state", { maxAge: 300 });
 	await c.setSignedCookie(stateCookie.name, state, c.context.secret, stateCookie.attributes);
-	const expiresAt = /* @__PURE__ */ new Date();
-	expiresAt.setMinutes(expiresAt.getMinutes() + 10);
+	const expiresAt = new Date(Date.now() + 6e5);
 	if (!await c.context.internalAdapter.createVerificationValue({
 		value: JSON.stringify({
 			...stateData,

package/dist/test-utils/test-instance.mjs

@@ -32,6 +32,8 @@ const testPassword = {
 async function getTestInstance(options, config) {
 	const testWith = config?.testWith || "sqlite";
 	const postgresSchema = testWith === "postgres" ? `ba_test_${randomUUID().replaceAll("-", "_")}` : void 0;
+	const mysqlServerURL = "mysql://root:root_password@127.0.0.1:3306";
+	const mysqlDatabase = testWith === "mysql" ? `ba_test_${randomUUID().replaceAll("-", "_")}` : void 0;
 	const quotePostgresIdentifier = (identifier) => `"${identifier.replaceAll("\"", "\"\"")}"`;
 	async function getPostgres() {
 		const { Kysely, PostgresDialect } = await import("kysely");
@@ -49,8 +51,14 @@ async function getTestInstance(options, config) {
 	}
 	async function getMysql() {
 		const { Kysely, MysqlDialect } = await import("kysely");
-		const { createPool } = await import("mysql2/promise");
-		return new Kysely({ dialect: new MysqlDialect({ pool: createPool("mysql://user:password@localhost:3306/better_auth") }) });
+		const { createConnection, createPool } = await import("mysql2");
+		const admin = createConnection(mysqlServerURL).promise();
+		try {
+			await admin.query(`CREATE DATABASE \`${mysqlDatabase}\``);
+		} finally {
+			await admin.end();
+		}
+		return new Kysely({ dialect: new MysqlDialect({ pool: createPool(`${mysqlServerURL}/${mysqlDatabase}`) }) });
 	}
 	async function mongodbClient() {
 		const { MongoClient } = await import("mongodb");
@@ -64,6 +72,9 @@ async function getTestInstance(options, config) {
 		};
 		return await dbClient("mongodb://127.0.0.1:27017", "better-auth");
 	}
+	const postgres = testWith === "postgres" ? await getPostgres() : void 0;
+	const mysql = testWith === "mysql" ? await getMysql() : void 0;
+	const sqlite = testWith === "sqlite" ? await getSqlite() : void 0;
 	const opts = {
 		socialProviders: {
 			github: {
@@ -76,20 +87,45 @@ async function getTestInstance(options, config) {
 			}
 		},
 		secret: "better-auth-secret-that-is-long-enough-for-validation-test",
-		database: testWith === "postgres" ? {
-			db: await getPostgres(),
+		database: postgres ? {
+			db: postgres,
 			type: "postgres",
 			transaction: config?.transaction
-		} : testWith === "mongodb" ? await Promise.all([mongodbClient(), await import("../adapters/mongodb-adapter/index.mjs")]).then(([db, { mongodbAdapter }]) => mongodbAdapter(db)) : testWith === "mysql" ? {
-			db: await getMysql(),
+		} : testWith === "mongodb" ? await Promise.all([mongodbClient(), await import("../adapters/mongodb-adapter/index.mjs")]).then(([db, { mongodbAdapter }]) => mongodbAdapter(db)) : mysql ? {
+			db: mysql,
 			type: "mysql",
 			transaction: config?.transaction
-		} : await getSqlite(),
+		} : sqlite,
 		emailAndPassword: { enabled: true },
 		rateLimit: { enabled: false },
 		advanced: { cookies: {} },
 		logger: { level: "debug" }
 	};
+	const cleanup = async () => {
+		if (testWith === "mongodb") {
+			await (await mongodbClient()).dropDatabase();
+			return;
+		}
+		if (postgres) {
+			try {
+				if (postgresSchema) await sql.raw(`DROP SCHEMA IF EXISTS ${quotePostgresIdentifier(postgresSchema)} CASCADE`).execute(postgres);
+				else await sql`DROP SCHEMA public CASCADE; CREATE SCHEMA public;`.execute(postgres);
+			} finally {
+				await postgres.destroy();
+			}
+			return;
+		}
+		if (mysql) {
+			try {
+				await sql.raw(`DROP DATABASE IF EXISTS \`${mysqlDatabase}\``).execute(mysql);
+			} finally {
+				await mysql.destroy();
+			}
+			return;
+		}
+		if (sqlite) sqlite.close();
+	};
+	cleanupSet.add(cleanup);
 	const authOptions = {
 		baseURL: "http://localhost:" + (config?.port || 3e3),
 		...opts,
@@ -126,32 +162,6 @@ async function getTestInstance(options, config) {
 		});
 	}
 	await createTestUser();
-	const cleanup = async () => {
-		if (testWith === "mongodb") {
-			await (await mongodbClient()).dropDatabase();
-			return;
-		}
-		if (testWith === "postgres") {
-			const postgres = await getPostgres();
-			if (postgresSchema) await sql.raw(`DROP SCHEMA IF EXISTS ${quotePostgresIdentifier(postgresSchema)} CASCADE`).execute(postgres);
-			else await sql`DROP SCHEMA public CASCADE; CREATE SCHEMA public;`.execute(postgres);
-			await postgres.destroy();
-			return;
-		}
-		if (testWith === "mysql") {
-			const mysql = await getMysql();
-			await sql`SET FOREIGN_KEY_CHECKS = 0;`.execute(mysql);
-			const tables = await mysql.introspection.getTables();
-			for (const table of tables) await mysql.deleteFrom(table.name).execute();
-			await sql`SET FOREIGN_KEY_CHECKS = 1;`.execute(mysql);
-			return;
-		}
-		if (testWith === "sqlite") {
-			(await getSqlite()).close();
-			return;
-		}
-	};
-	cleanupSet.add(cleanup);
 	const customFetchImpl = async (url, init) => {
 		const headers = init?.headers || {};
 		const storageHeaders = currentUserContextStorage.getStore()?.headers;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "better-auth",
-  "version": "1.8.0-beta.5",
+  "version": "1.8.0-beta.7",
   "description": "The most comprehensive authentication framework for TypeScript.",
   "type": "module",
   "license": "MIT",
@@ -503,13 +503,13 @@
     "kysely": "^0.28.17 || ^0.29.0",
     "nanostores": "^1.3.0",
     "zod": "^4.5.4",
-    "@better-auth/core": "1.8.0-beta.5",
-    "@better-auth/drizzle-adapter": "1.8.0-beta.5",
-    "@better-auth/kysely-adapter": "1.8.0-beta.5",
-    "@better-auth/memory-adapter": "1.8.0-beta.5",
-    "@better-auth/mongo-adapter": "1.8.0-beta.5",
-    "@better-auth/prisma-adapter": "1.8.0-beta.5",
-    "@better-auth/telemetry": "1.8.0-beta.5"
+    "@better-auth/core": "1.8.0-beta.7",
+    "@better-auth/drizzle-adapter": "1.8.0-beta.7",
+    "@better-auth/kysely-adapter": "1.8.0-beta.7",
+    "@better-auth/memory-adapter": "1.8.0-beta.7",
+    "@better-auth/mongo-adapter": "1.8.0-beta.7",
+    "@better-auth/prisma-adapter": "1.8.0-beta.7",
+    "@better-auth/telemetry": "1.8.0-beta.7"
   },
   "devDependencies": {
     "@lynx-js/react": "^0.121.2",
@@ -529,8 +529,8 @@
     "msw": "^2.14.6",
     "next": "^16.4.2",
     "oauth2-mock-server": "^9.0.0",
-    "react": "^19.2.7",
-    "react-dom": "^19.2.7",
+    "react": "^19.3.1",
+    "react-dom": "^19.3.1",
     "solid-js": "^1.9.11",
     "tsdown": "0.23.1",
     "type-fest": "^5.7.0",