faire-auth 1.0.3 → 1.1.0

package/dist/{api-B4RDwBty.mjs → api-0f-F-Fi2.mjs}

@@ -1,17 +1,17 @@
-import { t as contextStorage } from "./hono-CoKYWnXA.mjs";
-import { r as runWithTransaction, t as getIp } from "./ip-BjNYspCH.mjs";
-import { n as crypto_exports } from "./crypto-DH2Aa7jN.mjs";
-import { t as safeJSONParse } from "./json-B1v2qRTQ.mjs";
-import { n as cookies_exports, o as deleteSessionCookie, y as setSessionCookie } from "./cookies-BTs1o992.mjs";
-import { r as createMiddleware } from "./middleware-CE6OhDkq.mjs";
-import { _ as initContextMiddleware, a as requestOnlySessionMiddleware, c as revokeSessions, d as createAPI, f as createEndpoint, g as initHooksMiddleware, h as initErrorHandler, i as listSessions, l as sensitiveSessionMiddleware, m as setDefaultExecutionCtx, n as getSession, o as revokeOtherSessions, p as setRenderer, s as revokeSession, t as freshSessionMiddleware, u as sessionMiddleware } from "./session-CM3rmOYF.mjs";
-import { n as originCheck, r as wildcardMatch, t as initOriginCheckMiddleware } from "./origin-check-8Gajklvh.mjs";
-import { n as sendVerificationEmail, r as verifyEmail, t as createEmailVerificationToken } from "./email-verification-C_lBu_JY.mjs";
-import { n as decryptOAuthToken, r as setTokenUtil, t as handleOAuthUserInfo } from "./oauth2-C56wz-n9.mjs";
-import { n as parseState, t as generateState } from "./state-CQghgH9I.mjs";
-import { t as social_providers_exports } from "./social-providers-B8RK5yqI.mjs";
-import { r as generateId } from "./utils-D4vZd1-9.mjs";
-import { c as parseUserInput } from "./schema-DTIwLLmf.mjs";
+import { t as contextStorage } from "./hono-SVQuc5Ru.mjs";
+import { decryptOAuthToken, handleOAuthUserInfo, setTokenUtil } from "./oauth2/index.mjs";
+import { n as parseState, t as generateState } from "./state-Dooeisfq.mjs";
+import { n as cookies_exports, o as deleteSessionCookie, y as setSessionCookie } from "./cookies-D9aY_gJh.mjs";
+import { _ as initContextMiddleware, a as requestOnlySessionMiddleware, c as revokeSessions, d as createAPI, f as createEndpoint, g as initHooksMiddleware, h as initErrorHandler, i as listSessions, l as sensitiveSessionMiddleware, m as setDefaultExecutionCtx, n as getSession, o as revokeOtherSessions, p as setRenderer, s as revokeSession, t as freshSessionMiddleware, u as sessionMiddleware } from "./session-BGjJgihS.mjs";
+import { t as social_providers_exports } from "./social-providers-CjPww-qf.mjs";
+import { n as sendVerificationEmail, r as verifyEmail, t as createEmailVerificationToken } from "./email-verification-YSR5n5lb.mjs";
+import { t as safeJSONParse } from "./json-DooGMtnJ.mjs";
+import { r as generateId } from "./utils-C7OHyfHa.mjs";
+import { n as originCheck, r as wildcardMatch, t as initOriginCheckMiddleware } from "./origin-check-CRgs1M7k.mjs";
+import { n as crypto_exports } from "./crypto-BH-hD0lJ.mjs";
+import { c as parseUserInput } from "./schema-CFCpv0tK.mjs";
+import { r as runWithTransaction, t as getIp } from "./ip-6Lv2o42m.mjs";
+import { r as createMiddleware } from "./middleware-Cakg4e1D.mjs";
 import { isDevelopment } from "@faire-auth/core/env";
 import { BASE_ERROR_CODES } from "@faire-auth/core/error";
 import { OpenAPIHono, callbackURLSchema, createRoute, emailSchema, nameSchema, passwordSchema, req, res } from "@faire-auth/core/factory";
@@ -19,68 +19,154 @@ import { Definitions, False, Routes, SCHEMAS, True, isPromise } from "@faire-aut
 import { buildSchemas, getDate } from "@faire-auth/core/utils";
 import { Hono } from "hono";
 import { RegExpRouter } from "hono/router/reg-exp-router";
-import * as z$1 from "zod";
+import * as z from "zod";
 import { looseUserSchema } from "@faire-auth/core/db";
-
-//#region src/api/schema/account.ts
-const socialProviderListEnum = z$1.enum(social_providers_exports.socialProviderList).or(z$1.string());
-const linkAccountSchema = z$1.object({
+// src/api/schema/account.ts
+const socialProviderListEnum = z.enum(social_providers_exports.socialProviderList).or(z.string());
+const linkAccountSchema = z.object({
+	/**
+	* Callback URL to redirect to after the user has signed in.
+	*/
 	callbackURL: callbackURLSchema(true).openapi({ description: "The URL to redirect to after the user has signed in" }),
+	/**
+	* OAuth2 provider to use
+	*/
 	provider: socialProviderListEnum,
-	idToken: z$1.object({
-		token: z$1.string(),
-		nonce: z$1.string().optional(),
-		accessToken: z$1.string().optional(),
-		refreshToken: z$1.string().optional(),
-		scopes: z$1.array(z$1.string().min(1)).optional()
+	/**
+	* ID Token for direct authentication without redirect
+	*/
+	idToken: z.object({
+		token: z.string(),
+		nonce: z.string().optional(),
+		accessToken: z.string().optional(),
+		refreshToken: z.string().optional(),
+		scopes: z.array(z.string().min(1)).optional()
 	}).optional(),
-	scopes: z$1.array(z$1.string().min(1)).optional().openapi({ description: "Additional scopes to request when linking the account" }),
+	/**
+	* Additional scopes to request when linking the account.
+	* This is useful for requesting additional permissions when
+	* linking a social account compared to the initial authentication.
+	*/
+	scopes: z.array(z.string().min(1)).optional().openapi({ description: "Additional scopes to request when linking the account" }),
+	/**
+	* The URL to redirect to if there is an error during the link process.
+	*/
 	errorCallbackURL: callbackURLSchema(true).openapi({ description: "The URL to redirect to if there is an error during the link process" })
 });
-const unlinkAccountSchema = z$1.object({
-	providerId: z$1.string(),
-	accountId: z$1.string().optional()
+const unlinkAccountSchema = z.object({
+	providerId: z.string(),
+	accountId: z.string().optional()
 });
-const getAccessTokenSchema = z$1.object({
-	providerId: z$1.string().openapi({ description: "The provider ID for the OAuth provider" }),
-	accountId: z$1.string().optional().openapi({ description: "The account ID associated with the refresh token" }),
-	userId: z$1.string().optional().openapi({ description: "The user ID associated with the account" })
+const getAccessTokenSchema = z.object({
+	providerId: z.string().openapi({ description: "The provider ID for the OAuth provider" }),
+	accountId: z.string().optional().openapi({ description: "The account ID associated with the refresh token" }),
+	userId: z.string().optional().openapi({ description: "The user ID associated with the account" })
 });
-const refreshAccessTokenSchema = z$1.object({
-	providerId: z$1.string().openapi({ description: "The provider ID for the OAuth provider" }),
-	accountId: z$1.string().optional().openapi({ description: "The account ID associated with the refresh token" }),
-	userId: z$1.string().optional().openapi({ description: "The user ID associated with the account" })
+const refreshAccessTokenSchema = z.object({
+	providerId: z.string().openapi({ description: "The provider ID for the OAuth provider" }),
+	accountId: z.string().optional().openapi({ description: "The account ID associated with the refresh token" }),
+	userId: z.string().optional().openapi({ description: "The user ID associated with the account" })
 });
-const getAccountInfoSchema = z$1.object({ accountId: z$1.string().openapi({ description: "The provider given account id for which to get the account info" }) });
-
-//#endregion
-//#region src/api/schema/sign-in.ts
-const signInSocialSchema = z$1.object({
+const getAccountInfoSchema = z.object({ accountId: z.string().openapi({ description: "The provider given account id for which to get the account info" }) });
+// src/api/schema/sign-in.ts
+const signInSocialSchema = z.object({
+	/**
+	* Callback URL to redirect to after the user
+	* has signed in.
+	*/
 	callbackURL: callbackURLSchema(true).openapi({ description: "Callback URL to redirect to after the user has signed in" }),
+	/**
+	* callback url to redirect if the user is newly registered.
+	*
+	* useful if you have different routes for existing users and new users
+	*/
 	newUserCallbackURL: callbackURLSchema(true),
+	/**
+	* Callback url to redirect to if an error happens
+	*
+	* If it's initiated from the client sdk this defaults to
+	* the current url.
+	*/
 	errorCallbackURL: callbackURLSchema(true).openapi({ description: "Callback URL to redirect to if an error happens" }),
+	/**
+	* OAuth2 provider to use
+	*/
 	provider: socialProviderListEnum,
-	disableRedirect: z$1.boolean().optional().openapi({ description: "Disable automatic redirection to the provider. Useful for handling the redirection yourself" }),
-	idToken: z$1.optional(z$1.object({
-		token: z$1.string().openapi({ description: "ID token from the provider" }),
-		nonce: z$1.string().optional().openapi({ description: "Nonce used to generate the token" }),
-		accessToken: z$1.string().optional().openapi({ description: "Access token from the provider" }),
-		refreshToken: z$1.string().optional().openapi({ description: "Refresh token from the provider" }),
-		expiresAt: z$1.number().optional().openapi({ description: "Expiry date of the token" })
+	/**
+	* Disable automatic redirection to the provider
+	*
+	* This is useful if you want to handle the redirection
+	* yourself like in a popup or a different tab.
+	*/
+	disableRedirect: z.boolean().optional().openapi({ description: "Disable automatic redirection to the provider. Useful for handling the redirection yourself" }),
+	/**
+	* ID token from the provider
+	*
+	* This is used to sign in the user
+	* if the user is already signed in with the
+	* provider in the frontend.
+	*
+	* Only applicable if the provider supports
+	* it. Currently only `apple` and `google` is
+	* supported out of the box.
+	*/
+	idToken: z.optional(z.object({
+		/**
+		* ID token from the provider
+		*/
+		token: z.string().openapi({ description: "ID token from the provider" }),
+		/**
+		* The nonce used to generate the token
+		*/
+		nonce: z.string().optional().openapi({ description: "Nonce used to generate the token" }),
+		/**
+		* Access token from the provider
+		*/
+		accessToken: z.string().optional().openapi({ description: "Access token from the provider" }),
+		/**
+		* Refresh token from the provider
+		*/
+		refreshToken: z.string().optional().openapi({ description: "Refresh token from the provider" }),
+		/**
+		* Expiry date of the token
+		*/
+		expiresAt: z.number().optional().openapi({ description: "Expiry date of the token" })
 	})).openapi({ description: "ID token from the provider to sign in the user with id token" }),
-	scopes: z$1.array(z$1.string().min(1)).optional().openapi({ description: "Array of scopes to request from the provider. This will override the default scopes passed." }),
-	requestSignUp: z$1.boolean().optional().openapi({ description: "Explicitly request sign-up. Useful when disableImplicitSignUp is true for this provider" }),
-	loginHint: z$1.string().optional().openapi({ description: "The login hint to use for the authorization code request" })
+	scopes: z.array(z.string().min(1)).optional().openapi({ description: "Array of scopes to request from the provider. This will override the default scopes passed." }),
+	/**
+	* Explicitly request sign-up
+	*
+	* Should be used to allow sign up when
+	* disableImplicitSignUp for this provider is
+	* true
+	*/
+	requestSignUp: z.boolean().optional().openapi({ description: "Explicitly request sign-up. Useful when disableImplicitSignUp is true for this provider" }),
+	/**
+	* The login hint to use for the authorization code request
+	*/
+	loginHint: z.string().optional().openapi({ description: "The login hint to use for the authorization code request" })
 });
-const signInEmailSchema = z$1.object({
+const signInEmailSchema = z.object({
+	/**
+	* Email of the user
+	*/
 	email: emailSchema.openapi({ description: "Email of the user" }),
+	/**
+	* Password of the user
+	*/
 	password: passwordSchema.openapi({ description: "Password of the user" }),
+	/**
+	* Callback URL to use as a redirect for email
+	* verification and for possible redirects
+	*/
 	callbackURL: callbackURLSchema(true).openapi({ description: "Callback URL to use as a redirect for email verification" }),
-	rememberMe: z$1.boolean().default(true).openapi({ description: "If this is false, the session will not be remembered. Default is `true`." })
+	/**
+	* If this is false, the session will not be remembered
+	* @default true
+	*/
+	rememberMe: z.boolean().default(true).openapi({ description: "If this is false, the session will not be remembered. Default is `true`." })
 });
-
-//#endregion
-//#region src/api/routes/sign-in.ts
+// src/api/routes/sign-in.ts
 const signInSocialRoute = createRoute({
 	operationId: Routes.SIGN_IN_SOCIAL,
 	method: "post",
@@ -279,18 +365,16 @@ const signInEmail = createEndpoint(signInEmailRoute, (options) => async (ctx) =>
 		user: user.user
 	}, 200);
 });
-
-//#endregion
-//#region src/api/schema/callback.ts
-const callbackSchema = z$1.object({
-	code: z$1.string(),
-	error: z$1.string(),
-	device_id: z$1.string(),
-	error_description: z$1.string(),
-	state: z$1.string(),
-	user: z$1.string()
+// src/api/schema/callback.ts
+const callbackSchema = z.object({
+	code: z.string(),
+	error: z.string(),
+	device_id: z.string(),
+	error_description: z.string(),
+	state: z.string(),
+	user: z.string()
 }).partial();
-const oauthCallbackParamsSchema = z$1.object({ id: z$1.string().openapi({
+const oauthCallbackParamsSchema = z.object({ id: z.string().openapi({
 	param: {
 		name: "id",
 		in: "path"
@@ -298,24 +382,22 @@ const oauthCallbackParamsSchema = z$1.object({ id: z$1.string().openapi({
 	description: "OAuth provider ID"
 }) });
 const oauthCallbackQuerySchema = callbackSchema;
-
-//#endregion
-//#region src/api/routes/callback.ts
-const handleCallbackOAuth = async (ctx, paramsId, { code, error: error$1, device_id, error_description, state, user } = {}, options) => {
+// src/api/routes/callback.ts
+const handleCallbackOAuth = async (ctx, paramsId, { code, error, device_id, error_description, state, user } = {}, options) => {
 	const context = ctx.get("context");
 	const defaultErrorURL = options.onAPIError?.errorURL ?? `${context.baseURL}/error`;
-	if (error$1 != null) return ctx.redirect(`${defaultErrorURL}?error=${error$1}&error_description=${error_description}`, 302);
+	if (error != null) return ctx.redirect(`${defaultErrorURL}?error=${error}&error_description=${error_description}`, 302);
 	if (state == null) {
-		context.logger.error("State not found", error$1);
+		context.logger.error("State not found", error);
 		return ctx.redirect(`${defaultErrorURL}?error=state_not_found`, 302);
 	}
-	const res$1 = await parseState(ctx, options);
-	if (res$1.type === "redirect") return res$1.response;
-	const { codeVerifier, callbackURL, link, errorURL, newUserURL, requestSignUp } = res$1.data;
-	const redirectOnError = (error$2) => {
+	const res = await parseState(ctx, options);
+	if (res.type === "redirect") return res.response;
+	const { codeVerifier, callbackURL, link, errorURL, newUserURL, requestSignUp } = res.data;
+	const redirectOnError = (error) => {
 		let url = errorURL ?? defaultErrorURL;
-		if (url.includes("?")) url = `${url}&error=${error$2}`;
-		else url = `${url}?error=${error$2}`;
+		if (url.includes("?")) url = `${url}&error=${error}`;
+		else url = `${url}?error=${error}`;
 		return ctx.redirect(url, 302);
 	};
 	if (code == null) {
@@ -342,7 +424,7 @@ const handleCallbackOAuth = async (ctx, paramsId, { code, error: error$1, device
 	const userInfo = await provider.getUserInfo({
 		...tokens,
 		...user && { user: safeJSONParse(user) }
-	}).then((res$2) => res$2?.user);
+	}).then((res) => res?.user);
 	if (!userInfo) {
 		context.logger.error("Unable to get user info");
 		return redirectOnError("unable_to_get_user_info");
@@ -377,13 +459,13 @@ const handleCallbackOAuth = async (ctx, paramsId, { code, error: error$1, device
 			refreshToken: await setTokenUtil(tokens.refreshToken, ctx, options),
 			...tokens.scopes && tokens.scopes.length > 0 && { scope: tokens.scopes.join(",") }
 		}) == null) return redirectOnError("unable_to_link_account");
-		let toRedirectTo$1;
+		let toRedirectTo;
 		try {
-			toRedirectTo$1 = callbackURL.toString();
+			toRedirectTo = callbackURL.toString();
 		} catch {
-			toRedirectTo$1 = callbackURL;
+			toRedirectTo = callbackURL;
 		}
-		return ctx.redirect(toRedirectTo$1, 302);
+		return ctx.redirect(toRedirectTo, 302);
 	}
 	if (userInfo.email == null) {
 		context.logger.error("Provider did not return email. This could be due to misconfiguration in the provider settings.");
@@ -452,9 +534,7 @@ const postOAuthCallback = createEndpoint(postOAuthCallbackRoute, (options) => as
 	const { id: paramsId } = ctx.req.valid("param");
 	return handleCallbackOAuth(ctx, paramsId, body, options);
 });
-
-//#endregion
-//#region src/api/routes/sign-out.ts
+// src/api/routes/sign-out.ts
 const signOutRoute = createRoute({
 	operationId: Routes.SIGN_OUT,
 	method: "post",
@@ -476,35 +556,40 @@ const signOut = createEndpoint(signOutRoute, (_options) => async (ctx) => {
 	deleteSessionCookie(ctx);
 	return ctx.render({ success: True }, 200);
 });
-
-//#endregion
-//#region src/api/schema/reset-password.ts
-const requestPasswordResetSchema = z$1.object({
+// src/api/schema/reset-password.ts
+const requestPasswordResetSchema = z.object({
+	/**
+	* The email address of the user to send the password reset email to.
+	*/
 	email: emailSchema.openapi({ description: "The email address of the user to send the password reset email to" }),
+	/**
+	* The URL to redirect the user to reset their password.
+	* If the token isn't valid or expired, it'll be redirected with a query parameter `?
+	* error=INVALID_TOKEN`. If the token is valid, it'll be redirected with a query parameter `?
+	* token=VALID_TOKEN
+	*/
 	redirectTo: callbackURLSchema(true).openapi({ description: "The URL to redirect the user to reset their password. If the token isn't valid or expired, it'll be redirected with a query parameter `?error=INVALID_TOKEN`. If the token is valid, it'll be redirected with a query parameter `?token=VALID_TOKEN`" })
 });
-const requestPasswordResetCallbackParamsSchema = z$1.object({ token: z$1.string().openapi({ param: {
+const requestPasswordResetCallbackParamsSchema = z.object({ token: z.string().openapi({ param: {
 	in: "path",
 	name: "token"
 } }) });
-const requestPasswordResetCallbackQuerySchema = z$1.object({ callbackURL: callbackURLSchema().openapi({
+const requestPasswordResetCallbackQuerySchema = z.object({ callbackURL: callbackURLSchema().openapi({
 	param: {
 		in: "query",
 		name: "callbackURL"
 	},
 	description: "The URL to redirect the user to reset their password"
 }) });
-const resetPasswordSchema = z$1.object({
+const resetPasswordSchema = z.object({
 	newPassword: passwordSchema.openapi({ description: "The new password to set" }),
-	token: z$1.string().optional().openapi({ description: "The token to reset the password" })
+	token: z.string().optional().openapi({ description: "The token to reset the password" })
 });
-const resetPasswordQuerySchema = z$1.object({ token: z$1.string().optional().openapi({ param: {
+const resetPasswordQuerySchema = z.object({ token: z.string().optional().openapi({ param: {
 	in: "query",
 	name: "token"
 } }) });
-
-//#endregion
-//#region src/api/routes/reset-password.ts
+// src/api/routes/reset-password.ts
 const redirectError = (ctx, callbackURL, query) => {
 	const url = callbackURL != null ? new URL(callbackURL, ctx.get("context").baseURL) : new URL(`${ctx.get("context").baseURL}/error`);
 	if (query) Object.entries(query).forEach(([k, v]) => url.searchParams.set(k, v));
@@ -541,7 +626,7 @@ const requestPasswordReset = createEndpoint(requestPasswordResetRoute, (options)
 			message: "If this email exists in our system, check your email for the reset link"
 		}, 200);
 	}
-	const expiresAt = getDate(options.emailAndPassword.resetPasswordTokenExpiresIn ?? 3600 * 1, "sec");
+	const expiresAt = getDate(options.emailAndPassword.resetPasswordTokenExpiresIn ?? 3600, "sec");
 	const verificationToken = generateId(24);
 	await context.internalAdapter.createVerificationValue({
 		value: user.user.id,
@@ -623,9 +708,7 @@ const resetPassword = createEndpoint(resetPasswordRoute, (options) => async (ctx
 	if (options.emailAndPassword?.revokeSessionsOnPasswordReset) await context.internalAdapter.deleteSessions(userId);
 	return ctx.render({ success: True }, 200);
 });
-
-//#endregion
-//#region src/api/schema/update-user.ts
+// src/api/schema/update-user.ts
 const updateUserSchema = looseUserSchema.omit({
 	id: true,
 	createdAt: true,
@@ -633,19 +716,40 @@ const updateUserSchema = looseUserSchema.omit({
 	emailVerified: true,
 	email: true
 });
-const changePasswordSchema = z$1.object({
+const changePasswordSchema = z.object({
+	/**
+	* The new password to set
+	*/
 	newPassword: passwordSchema.openapi({ description: "The new password to set" }),
+	/**
+	* The current password of the user
+	*/
 	currentPassword: passwordSchema.openapi({ description: "The current password" }),
-	revokeOtherSessions: z$1.boolean().optional().openapi({ description: "Revoke all other sessions" })
+	/**
+	* revoke all sessions that are not the
+	* current one logged in by the user
+	*/
+	revokeOtherSessions: z.boolean().optional().openapi({ description: "Revoke all other sessions" })
 });
-const setPasswordSchema = z$1.object({ newPassword: passwordSchema });
-const deleteUserSchema = z$1.object({
+const setPasswordSchema = z.object({ newPassword: passwordSchema });
+const deleteUserSchema = z.object({
+	/**
+	* The callback URL to redirect to after the user is deleted
+	* this is only used on delete user callback
+	*/
 	callbackURL: callbackURLSchema(true).openapi({ description: "The callback URL to redirect to after the user is deleted" }),
+	/**
+	* The password of the user. If the password isn't provided, session freshness
+	* will be checked.
+	*/
 	password: passwordSchema.optional().openapi({ description: "The password of the user. If the password isn't provided, session freshness will be checked." }),
-	token: z$1.string().optional().openapi({ description: "The token to delete the user. If the token is provided, the user will be deleted" })
+	/**
+	* The token to delete the user. If the token is provided, the user will be deleted
+	*/
+	token: z.string().optional().openapi({ description: "The token to delete the user. If the token is provided, the user will be deleted" })
 });
-const deleteUserCallbackQuerySchema = z$1.object({
-	token: z$1.string().openapi({ param: {
+const deleteUserCallbackQuerySchema = z.object({
+	token: z.string().openapi({ param: {
 		in: "query",
 		name: "token"
 	} }),
@@ -654,13 +758,11 @@ const deleteUserCallbackQuerySchema = z$1.object({
 		name: "callbackURL"
 	} })
 });
-const changeEmailSchema = z$1.object({
+const changeEmailSchema = z.object({
 	newEmail: emailSchema.openapi({ description: "The new email to set" }),
 	callbackURL: callbackURLSchema(true).openapi({ description: "The URL to redirect to after email verification" })
 });
-
-//#endregion
-//#region src/api/routes/update-user.ts
+// src/api/routes/update-user.ts
 const updateUserRoute = createRoute({
 	operationId: Routes.UPDATE_USER,
 	method: "post",
@@ -671,7 +773,7 @@ const updateUserRoute = createRoute({
 	responses: res(SCHEMAS[Definitions.SUCCESS].default).zod().err(500, "Failed to update user").bld()
 });
 const updateUser = createEndpoint(updateUserRoute, (options) => async (ctx) => {
-	const { name, image,...rest } = ctx.req.valid("json");
+	const { name, image, ...rest } = ctx.req.valid("json");
 	if (image === void 0 && name === void 0 && Object.keys(rest).length === 0) return ctx.render({ success: True }, 200);
 	const context = ctx.get("context");
 	const session = ctx.get("session");
@@ -707,7 +809,7 @@ const changePasswordRoute = createRoute({
 const changePassword = createEndpoint(changePasswordRoute, (options) => async (ctx) => {
 	const context = ctx.get("context");
 	const session = ctx.get("session");
-	const { newPassword, currentPassword, revokeOtherSessions: revokeOtherSessions$1 } = ctx.req.valid("json");
+	const { newPassword, currentPassword, revokeOtherSessions } = ctx.req.valid("json");
 	const { minPasswordLength } = context.password.config;
 	if (newPassword.length < minPasswordLength) {
 		context.logger.error("Password is too short");
@@ -724,7 +826,7 @@ const changePassword = createEndpoint(changePasswordRoute, (options) => async (c
 			message: BASE_ERROR_CODES.PASSWORD_TOO_LONG
 		}, 400);
 	}
-	const account = (await context.internalAdapter.findAccounts(session.user.id)).find((account$1) => account$1.providerId === "credential" && account$1.password != null);
+	const account = (await context.internalAdapter.findAccounts(session.user.id)).find((account) => account.providerId === "credential" && account.password != null);
 	if (account?.password == null) return ctx.render({
 		success: False,
 		message: BASE_ERROR_CODES.CREDENTIAL_ACCOUNT_NOT_FOUND
@@ -739,7 +841,7 @@ const changePassword = createEndpoint(changePasswordRoute, (options) => async (c
 	}, 400);
 	await context.internalAdapter.updateAccount(account.id, { password: passwordHash });
 	let token = session.session.token;
-	if (revokeOtherSessions$1 === true) {
+	if (revokeOtherSessions === true) {
 		await context.internalAdapter.deleteSessions(session.user.id);
 		const newSession = await context.internalAdapter.createSession(session.user.id);
 		if (newSession == null) return ctx.render({
@@ -789,7 +891,7 @@ const setPassword = createEndpoint(setPasswordRoute, (_options) => async (ctx) =
 			message: BASE_ERROR_CODES.PASSWORD_TOO_LONG
 		}, 400);
 	}
-	const account = (await context.internalAdapter.findAccounts(session.user.id)).find((account$1) => account$1.providerId === "credential" && account$1.password != null);
+	const account = (await context.internalAdapter.findAccounts(session.user.id)).find((account) => account.providerId === "credential" && account.password != null);
 	const passwordHash = await context.password.hash(newPassword);
 	if (!account) {
 		await context.internalAdapter.linkAccount({
@@ -827,7 +929,7 @@ const deleteUser = createEndpoint(deleteUserRoute, (options) => async (ctx) => {
 	const api = ctx.get("api");
 	const { callbackURL, password, token } = ctx.req.valid("json");
 	let canDelete = false;
-	const account = (await context.internalAdapter.findAccounts(session.user.id)).find((account$1) => account$1.providerId === "credential" && account$1.password != null);
+	const account = (await context.internalAdapter.findAccounts(session.user.id)).find((account) => account.providerId === "credential" && account.password != null);
 	if (password != null) {
 		if (account?.password == null) return ctx.render({
 			success: False,
@@ -842,23 +944,23 @@ const deleteUser = createEndpoint(deleteUserRoute, (options) => async (ctx) => {
 		}, 400);
 		canDelete = true;
 	}
-	if (token != null) return await api.deleteUserCallback({ query: { token } }, ctx).then((res$1) => res$1 instanceof Response ? res$1 : ctx.render(res$1, res$1.success === true ? 200 : "errors" in res$1 ? 422 : 404));
+	if (token != null) return await api.deleteUserCallback({ query: { token } }, ctx).then((res) => res instanceof Response ? res : ctx.render(res, res.success === true ? 200 : "errors" in res ? 422 : 404));
 	if (options.user?.deleteUser?.sendDeleteAccountVerification != null) {
 		if (account?.password != null && !canDelete) return ctx.render({
 			success: False,
 			message: BASE_ERROR_CODES.USER_ALREADY_HAS_PASSWORD
 		}, 400);
-		const token$1 = (0, crypto_exports.generateRandomString)(32, "0-9", "a-z");
+		const token = (0, crypto_exports.generateRandomString)(32, "0-9", "a-z");
 		await context.internalAdapter.createVerificationValue({
 			value: session.user.id,
-			identifier: `delete-account-${token$1}`,
-			expiresAt: new Date(Date.now() + (options.user.deleteUser.deleteTokenExpiresIn ?? 3600 * 24) * 1e3)
+			identifier: `delete-account-${token}`,
+			expiresAt: new Date(Date.now() + (options.user.deleteUser.deleteTokenExpiresIn ?? 86400) * 1e3)
 		});
-		const url = `${context.baseURL}/delete-user/callback?token=${token$1}${callbackURL ? `&callbackURL=${callbackURL}` : ""}`;
+		const url = `${context.baseURL}/delete-user/callback?token=${token}${callbackURL ? `&callbackURL=${callbackURL}` : ""}`;
 		await options.user.deleteUser.sendDeleteAccountVerification({
 			user: session.user,
 			url,
-			token: token$1
+			token
 		}, ctx);
 		return ctx.render({
 			success: True,
@@ -990,12 +1092,12 @@ const changeEmail = createEndpoint(changeEmailRoute, (options) => async (ctx) =>
 			}
 		});
 		if (options.emailVerification?.sendVerificationEmail) {
-			const token$1 = await createEmailVerificationToken(context.secret, newEmail, void 0, options.emailVerification.expiresIn);
-			const url$1 = `${context.baseURL}/verify-email?token=${token$1}&callbackURL=${callbackURL ?? "/"}`;
+			const token = await createEmailVerificationToken(context.secret, newEmail, void 0, options.emailVerification.expiresIn);
+			const url = `${context.baseURL}/verify-email?token=${token}&callbackURL=${callbackURL ?? "/"}`;
 			await options.emailVerification.sendVerificationEmail({
 				user: session.user,
-				url: url$1,
-				token: token$1
+				url,
+				token
 			}, ctx);
 		}
 		return ctx.render({ success: True }, 200);
@@ -1020,9 +1122,7 @@ const changeEmail = createEndpoint(changeEmailRoute, (options) => async (ctx) =>
 	}, ctx);
 	return ctx.render({ success: True }, 200);
 });
-
-//#endregion
-//#region src/api/routes/error.ts
+// src/api/routes/error.ts
 const sanitize = (input) => input.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll("\"", "&quot;").replaceAll("'", "&#39;");
 const html = (errorCode = "Unknown", errorDescription) => `<!DOCTYPE html>
 <html lang="en">
@@ -1111,9 +1211,9 @@ const html = (errorCode = "Unknown", errorDescription) => `<!DOCTYPE html>
     </div>
 </body>
 </html>`;
-const errorQuerySchema = z$1.object({
-	error: z$1.string().optional(),
-	error_description: z$1.string().optional()
+const errorQuerySchema = z.object({
+	error: z.string().optional(),
+	error_description: z.string().optional()
 });
 const errorRoute = createRoute({
 	operationId: Routes.ERROR,
@@ -1123,15 +1223,13 @@ const errorRoute = createRoute({
 	path: "/error",
 	description: "Displays an error page",
 	request: req().qry(errorQuerySchema).bld(),
-	responses: res(z$1.string().openapi({ description: "The HTML content of the error page" }), "A HTML error page", "text/html").zod().bld()
+	responses: res(z.string().openapi({ description: "The HTML content of the error page" }), "A HTML error page", "text/html").zod().bld()
 });
 const error = createEndpoint(errorRoute, (_options) => async (ctx) => {
-	const { error: error$1, error_description: _error_description } = ctx.req.valid("query");
-	return ctx.html(html(error$1), 200);
+	const { error, error_description: _error_description } = ctx.req.valid("query");
+	return ctx.html(html(error), 200);
 });
-
-//#endregion
-//#region src/api/routes/ok.ts
+// src/api/routes/ok.ts
 const okRoute = createRoute({
 	operationId: Routes.OK,
 	hide: true,
@@ -1142,20 +1240,36 @@ const okRoute = createRoute({
 	responses: res(SCHEMAS[Definitions.SUCCESS].default, "API is working").bld()
 });
 const ok = createEndpoint(okRoute, (_options) => async (ctx) => ctx.render({ success: True }, 200));
-
-//#endregion
-//#region src/api/schema/sign-up.ts
-const signUpEmailSchema = z$1.looseObject({
+// src/api/schema/sign-up.ts
+const signUpEmailSchema = z.looseObject({
+	/**
+	* Name of the user
+	*/
 	name: nameSchema,
+	/**
+	* Email of the user
+	*/
 	email: emailSchema.openapi({ description: "The email of the user" }),
+	/**
+	* Password of the user
+	*/
 	password: passwordSchema.openapi({ description: "The password of the user" }),
-	image: z$1.url().nullish().openapi({ description: "The profile image URL of the user" }),
+	/**
+	* Image url for the user
+	*/
+	image: z.url().nullish().openapi({ description: "The profile image URL of the user" }),
+	/**
+	* Callback URL to use as a redirect for email
+	* verification and for possible redirects
+	*/
 	callbackURL: callbackURLSchema(true).openapi({ description: "The URL to use for email verification callback" }),
-	rememberMe: z$1.boolean().default(true).openapi({ description: "If this is false, the session will not be remembered. Default is `true`." })
+	/**
+	* If this is false, the session will not be remembered
+	* @default true
+	*/
+	rememberMe: z.boolean().default(true).openapi({ description: "If this is false, the session will not be remembered. Default is `true`." })
 });
-
-//#endregion
-//#region src/api/routes/sign-up.ts
+// src/api/routes/sign-up.ts
 const signUpEmailRoute = createRoute({
 	operationId: Routes.SIGN_UP_EMAIL,
 	method: "post",
@@ -1169,7 +1283,7 @@ const signUpEmail = createEndpoint(signUpEmailRoute, (options) => async (ctx) =>
 		success: False,
 		message: "Email and password sign up is not enabled"
 	}, 400);
-	const { name, email, password, image, callbackURL, rememberMe,...additionalFields } = ctx.req.valid("json");
+	const { name, email, password, image, callbackURL, rememberMe, ...additionalFields } = ctx.req.valid("json");
 	const context = ctx.get("context");
 	const { minPasswordLength, maxPasswordLength } = context.password.config;
 	if (password.length < minPasswordLength) {
@@ -1262,9 +1376,7 @@ const signUpEmail = createEndpoint(signUpEmailRoute, (options) => async (ctx) =>
 		}, 200);
 	});
 });
-
-//#endregion
-//#region src/api/routes/account.ts
+// src/api/routes/account.ts
 const listAccountsRoute = createRoute({
 	operationId: Routes.LIST_ACCOUNTS,
 	method: "get",
@@ -1574,9 +1686,7 @@ const getAccountInfo = createEndpoint(getAccountInfoRoute, (_options) => async (
 	}, 500);
 	return ctx.render(info, 200);
 });
-
-//#endregion
-//#region src/api/endpoints.ts
+// src/api/endpoints.ts
 const staticRouteMap = {
 	[Routes.SET_PASSWORD]: setPassword,
 	[Routes.CHANGE_EMAIL]: changeEmail,
@@ -1642,16 +1752,14 @@ const createArgs = (endpoints, builtSchemas, context, routeHooks) => {
 	}
 	return groups;
 };
-
-//#endregion
-//#region src/api/middleware/intercept.ts
+// src/api/middleware/intercept.ts
 const runIntercept = (ctx, hooks) => {
 	let response = void 0;
 	for (const hook of hooks) try {
 		const result = hook(ctx);
 		if (result instanceof Response) response = result;
-	} catch (error$1) {
-		ctx.error = error$1;
+	} catch (error) {
+		ctx.error = error;
 	}
 	return response;
 };
@@ -1683,9 +1791,7 @@ const initInterceptMiddleware = (options) => {
 		if (after instanceof Response) ctx.res = after;
 	});
 };
-
-//#endregion
-//#region src/api/middleware/on-disabled.ts
+// src/api/middleware/on-disabled.ts
 /**
 * Initializes the middleware to handle disabled paths.
 * @param options - The FaireAuth options.
@@ -1699,9 +1805,7 @@ const initHandleDisabledMiddleware = (options) => {
 		return await next();
 	});
 };
-
-//#endregion
-//#region src/api/middleware/rate-limit.ts
+// src/api/middleware/rate-limit.ts
 const shouldRateLimit = (max, window, rateLimitData) => {
 	const now = Date.now();
 	const windowInMs = window * 1e3;
@@ -1724,21 +1828,21 @@ const createDBStorage = (ctx) => {
 	const db = ctx.adapter;
 	return {
 		get: async (key) => {
-			const res$1 = db.findMany({
+			const res = db.findMany({
 				model,
 				where: [{
 					field: "key",
 					value: key
 				}]
 			});
-			const data = isPromise(res$1) ? (await res$1)[0] : res$1[0];
+			const data = isPromise(res) ? (await res)[0] : res[0];
 			if (typeof data?.lastRequest === "bigint") data.lastRequest = Number(data.lastRequest);
 			return data;
 		},
 		set: async (key, value, _update) => {
 			try {
 				if (_update === true) {
-					const res$1 = db.updateMany({
+					const res = db.updateMany({
 						model: "rateLimit",
 						where: [{
 							field: "key",
@@ -1749,9 +1853,9 @@ const createDBStorage = (ctx) => {
 							lastRequest: value.lastRequest
 						}
 					});
-					if (isPromise(res$1)) await res$1;
+					if (isPromise(res)) await res;
 				} else {
-					const res$1 = await db.create({
+					const res = await db.create({
 						model: "rateLimit",
 						data: {
 							key,
@@ -1759,7 +1863,7 @@ const createDBStorage = (ctx) => {
 							lastRequest: value.lastRequest
 						}
 					});
-					if (isPromise(res$1)) await res$1;
+					if (isPromise(res)) await res;
 				}
 			} catch (e) {
 				ctx.logger.error("Error setting rate limit", e);
@@ -1778,8 +1882,8 @@ const getRateLimitStorage = (config, context, options) => {
 	if (options.rateLimit?.customStorage) return options.rateLimit.customStorage;
 	if (config.storage === "secondary-storage") return {
 		get: (key) => {
-			const res$1 = options.secondaryStorage?.get(key);
-			return isPromise(res$1) ? res$1.then((r) => r ? safeJSONParse(r) : void 0) : res$1 ? safeJSONParse(res$1) : void 0;
+			const res = options.secondaryStorage?.get(key);
+			return isPromise(res) ? res.then((r) => r ? safeJSONParse(r) : void 0) : res ? safeJSONParse(res) : void 0;
 		},
 		set: (key, value) => options.secondaryStorage?.set(key, JSON.stringify(value))
 	};
@@ -1827,8 +1931,8 @@ const initRateLimitMiddleware = (options, rateLimit) => {
 			const _path = Object.keys(rateLimit.customRules).find((p) => p.includes("*") ? wildcardMatch(p)(path) : p === path);
 			if (_path) {
 				const customRule = rateLimit.customRules[_path];
-				const res$2 = typeof customRule === "function" ? customRule(ctx.req) : customRule;
-				const resolved = isPromise(res$2) ? await res$2 : res$2;
+				const res = typeof customRule === "function" ? customRule(ctx.req) : customRule;
+				const resolved = isPromise(res) ? await res : res;
 				if (resolved) {
 					window = resolved.window;
 					max = resolved.max;
@@ -1837,9 +1941,9 @@ const initRateLimitMiddleware = (options, rateLimit) => {
 			}
 		}
 		const storage = getRateLimitStorage(rateLimit, context, options);
-		const res$1 = storage.get(key);
+		const res = storage.get(key);
 		const now = Date.now();
-		const data = isPromise(res$1) ? await res$1 : res$1;
+		const data = isPromise(res) ? await res : res;
 		if (!data) {
 			const res2 = storage.set(key, {
 				key,
@@ -1849,7 +1953,10 @@ const initRateLimitMiddleware = (options, rateLimit) => {
 			if (isPromise(res2)) await res2;
 		} else {
 			const timeSinceLastRequest = now - data.lastRequest;
-			if (shouldRateLimit(max, window, data)) return rateLimitResponse(ctx, getRetryAfter(data.lastRequest, window));
+			if (shouldRateLimit(max, window, data)) {
+				const retryAfter = getRetryAfter(data.lastRequest, window);
+				return rateLimitResponse(ctx, retryAfter);
+			}
 			if (timeSinceLastRequest > window * 1e3) {
 				const res3 = storage.set(key, {
 					...data,
@@ -1869,9 +1976,7 @@ const initRateLimitMiddleware = (options, rateLimit) => {
 		return await next();
 	});
 };
-
-//#endregion
-//#region src/api/index.ts
+// src/api/index.ts
 const router = (context, options) => {
 	const schemas = buildSchemas(SCHEMAS, options);
 	const { endpoints, hooks } = createEndpoints(options);
@@ -1887,6 +1992,4 @@ const router = (context, options) => {
 		}).basePath(options.basePath).use(setDefaultExecutionCtx, setRenderer, initContextMiddleware(options, context, endpoints), contextStorage(), initHandleDisabledMiddleware(options), initInterceptMiddleware(options), initRateLimitMiddleware(options, context.rateLimit), initOriginCheckMiddleware(options, context), initHooksMiddleware(options)).onError(initErrorHandler(options)).route("/", app)
 	};
 };
-
-//#endregion
-export { router as t };
+export { router as t };