jazz-tools 0.19.19 → 0.19.21

package/.svelte-kit/__package__/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/better-auth/auth/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,OAAO,EACP,iBAAiB,EAEjB,eAAe,EAChB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAS9C;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB;;wBAmBC,UAAU,CAAC,OAAO,UAAU,CAAC;;;sCAIvB,eAAe,CAAC,OAAO,CAAC;4CAGlB,iBAAiB;;;;;;;;;;;CA6H1D,CAAC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/better-auth/auth/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,OAAO,EACP,iBAAiB,EAEjB,eAAe,EAChB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAS9C;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB;;wBAmBC,UAAU,CAAC,OAAO,UAAU,CAAC;;;sCAIvB,eAAe,CAAC,OAAO,CAAC;4CAGlB,iBAAiB;;;;;;;;;;;CA+H1D,CAAC"}

package/.svelte-kit/__package__/client.js

@@ -81,7 +81,9 @@ export const jazzPluginClient = () => {
                             }
                             context.headers.set("x-jazz-auth", JSON.stringify({
                                 accountID: credentials.accountID,
-                                secretSeed: credentials.secretSeed,
+                                secretSeed: credentials.secretSeed
+                                    ? Array.from(credentials.secretSeed)
+                                    : undefined,
                                 accountSecret: credentials.accountSecret,
                             }));
                         }

package/.svelte-kit/__package__/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/better-auth/auth/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,gBAAgB,EAGtB,MAAM,aAAa,CAAC;AASrB,KAAK,UAAU,GAAG,gBAAgB,GAAG;IACnC,MAAM,EAAE;QACN,IAAI,EAAE;YACJ,MAAM,EAAE;gBACN,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ,CAAC;oBACf,QAAQ,EAAE,KAAK,CAAC;oBAChB,KAAK,EAAE,KAAK,CAAC;iBACd,CAAC;gBACF,oBAAoB,EAAE;oBACpB,IAAI,EAAE,QAAQ,CAAC;oBACf,QAAQ,EAAE,KAAK,CAAC;oBAChB,KAAK,EAAE,KAAK,CAAC;oBACb,QAAQ,EAAE,KAAK,CAAC;iBACjB,CAAC;aACH,CAAC;SACH,CAAC;KACH,CAAC;CACH,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,UAAU,EAAE,MAAM,UA0Q9B,CAAC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/better-auth/auth/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,gBAAgB,EAGtB,MAAM,aAAa,CAAC;AASrB,KAAK,UAAU,GAAG,gBAAgB,GAAG;IACnC,MAAM,EAAE;QACN,IAAI,EAAE;YACJ,MAAM,EAAE;gBACN,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ,CAAC;oBACf,QAAQ,EAAE,KAAK,CAAC;oBAChB,KAAK,EAAE,KAAK,CAAC;iBACd,CAAC;gBACF,oBAAoB,EAAE;oBACpB,IAAI,EAAE,QAAQ,CAAC;oBACf,QAAQ,EAAE,KAAK,CAAC;oBAChB,KAAK,EAAE,KAAK,CAAC;oBACb,QAAQ,EAAE,KAAK,CAAC;iBACjB,CAAC;aACH,CAAC;SACH,CAAC;KACH,CAAC;CACH,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,UAAU,EAAE,MAAM,UA4Q9B,CAAC"}

package/.svelte-kit/__package__/server.js

@@ -123,8 +123,9 @@ export const jazzPlugin = () => {
                  */
                 {
                     matcher: (context) => {
-                        return (context.path.startsWith("/callback") ||
-                            context.path.startsWith("/oauth2/callback"));
+                        return (context.path?.startsWith("/callback") ||
+                            context.path?.startsWith("/oauth2/callback") ||
+                            false);
                     },
                     handler: createAuthMiddleware(async (ctx) => {
                         const state = ctx.query?.state || ctx.body?.state;
@@ -159,7 +160,7 @@ export const jazzPlugin = () => {
                  */
                 {
                     matcher: (context) => {
-                        return context.path.startsWith("/sign-in/email-otp");
+                        return context.path?.startsWith("/sign-in/email-otp") || false;
                     },
                     handler: createAuthMiddleware(async (ctx) => {
                         const email = ctx.body.email;
@@ -196,9 +197,10 @@ export const jazzPlugin = () => {
                  */
                 {
                     matcher: (context) => {
-                        return (context.path.startsWith("/sign-up") ||
-                            context.path.startsWith("/sign-in") ||
-                            context.path.startsWith("/get-session"));
+                        return (context.path?.startsWith("/sign-up") ||
+                            context.path?.startsWith("/sign-in") ||
+                            context.path?.startsWith("/get-session") ||
+                            false);
                     },
                     handler: createAuthMiddleware({}, async (ctx) => {
                         const returned = ctx.context.returned;
@@ -218,7 +220,7 @@ export const jazzPlugin = () => {
                  */
                 {
                     matcher: (context) => {
-                        return context.path.startsWith("/sign-in/social");
+                        return context.path?.startsWith("/sign-in/social") || false;
                     },
                     handler: createAuthMiddleware(async (ctx) => {
                         if (!contextContainsJazzAuth(ctx)) {

package/.svelte-kit/__package__/tests/client.test.js

@@ -103,6 +103,54 @@ describe("Better-Auth client plugin", () => {
             provider: "better-auth",
         });
     });
+    it("should preserve secretSeed over signup", async () => {
+        const secretSeed = new Uint8Array([1, 2, 3]);
+        await authSecretStorage.set({
+            accountID: account.$jazz.id,
+            secretSeed: secretSeed,
+            accountSecret: account.$jazz.localNode.getCurrentAgent().agentSecret,
+            provider: "test",
+        });
+        const credentials = await authSecretStorage.get();
+        assert(credentials, "Jazz credentials are not available");
+        expect(credentials.secretSeed).toBeInstanceOf(Uint8Array);
+        customFetchImpl.mockResolvedValue(new Response(JSON.stringify({
+            token: "6diDScDDcLJLl3sxAEestZz63mrw9Azy",
+            user: {
+                id: "S6SDKApdnh746gUnP3zujzsEY53tjuTm",
+                email: "test@jazz.dev",
+                name: "Matteo",
+                image: null,
+                emailVerified: false,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+            },
+            jazzAuth: {
+                accountID: credentials.accountID,
+                secretSeed: credentials.secretSeed,
+                accountSecret: credentials.accountSecret,
+            },
+        })));
+        // Sign up
+        await authClient.signUp.email({
+            email: "test@jazz.dev",
+            password: "12345678",
+            name: "Matteo",
+        });
+        expect(customFetchImpl).toHaveBeenCalledTimes(1);
+        expect(customFetchImpl.mock.calls[0][0].toString()).toBe("http://localhost:3000/api/auth/sign-up/email");
+        // Verify the credentials have been injected in the request body
+        expect(customFetchImpl.mock.calls[0][1].headers.get("x-jazz-auth")).toEqual(JSON.stringify({
+            accountID: credentials.accountID,
+            secretSeed: Array.from(credentials.secretSeed),
+            accountSecret: credentials.accountSecret,
+        }));
+        expect(authSecretStorage.isAuthenticated).toBe(true);
+        // Verify the profile name has been updated
+        const context = jazzContextManager.getCurrentValue();
+        assert(context && "me" in context);
+        expect(context.me.$jazz.id).toBe(credentials.accountID);
+    });
     it("should logout from Jazz after BetterAuth sign-out", async () => {
         const credentials = await authSecretStorage.get();
         expect(authSecretStorage.isAuthenticated).toBe(false);

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> jazz-tools@0.19.19 build /home/runner/_work/jazz/jazz/packages/jazz-tools
+> jazz-tools@0.19.21 build /home/runner/_work/jazz/jazz/packages/jazz-tools
 > tsup && pnpm types && pnpm build:svelte && pnpm build:better-auth-svelte
 
 CLI Building entry: {"index":"src/index.ts","testing":"src/testing.ts","tools/ssr":"src/tools/ssr/index.ts"}
@@ -107,120 +107,124 @@
 ESM Build start
 CLI Cleaning output folder
 ESM Build start
-ESM dist/tiptap/index.js     564.00 B
-ESM dist/tiptap/index.js.map 1.21 KB
-ESM ⚡️ Build success in 43ms
-ESM dist/worker/edge-wasm.js       215.00 B
 ESM dist/worker/index.js           3.19 KB
+ESM dist/worker/edge-wasm.js       215.00 B
 ESM dist/worker/napi-crypto.js     110.00 B
-ESM dist/worker/edge-wasm.js.map   434.00 B
 ESM dist/worker/index.js.map       6.26 KB
+ESM dist/worker/edge-wasm.js.map   434.00 B
 ESM dist/worker/napi-crypto.js.map 162.00 B
-ESM ⚡️ Build success in 42ms
-ESM dist/better-auth/auth/client.js     4.50 KB
-ESM dist/better-auth/auth/server.js     8.36 KB
+ESM ⚡️ Build success in 40ms
+ESM dist/better-auth/auth/client.js     4.54 KB
+ESM dist/better-auth/auth/server.js     8.40 KB
 ESM dist/better-auth/auth/react.js      799.00 B
-ESM dist/better-auth/auth/client.js.map 8.32 KB
+ESM dist/better-auth/auth/client.js.map 8.44 KB
+ESM dist/better-auth/auth/server.js.map 15.40 KB
 ESM dist/better-auth/auth/react.js.map  2.04 KB
-ESM dist/better-auth/auth/server.js.map 15.31 KB
-ESM ⚡️ Build success in 31ms
+ESM ⚡️ Build success in 32ms
+ESM dist/tiptap/index.js     564.00 B
+ESM dist/tiptap/index.js.map 1.21 KB
+ESM ⚡️ Build success in 43ms
 ESM dist/media/index.js              236.00 B
-ESM dist/media/index.server.js       2.95 KB
-ESM dist/media/index.native.js       4.01 KB
 ESM dist/media/index.browser.js      2.79 KB
+ESM dist/media/index.native.js       4.01 KB
+ESM dist/media/index.server.js       2.95 KB
 ESM dist/media/chunk-3LKBM3G3.js     6.69 KB
 ESM dist/media/index.js.map          71.00 B
+ESM dist/media/index.browser.js.map  6.15 KB
 ESM dist/media/index.server.js.map   6.37 KB
 ESM dist/media/index.native.js.map   8.10 KB
-ESM dist/media/index.browser.js.map  6.15 KB
 ESM dist/media/chunk-3LKBM3G3.js.map 16.99 KB
-ESM ⚡️ Build success in 41ms
-ESM dist/react-core/chunk-7DYMJ74I.js     279.00 B
-ESM dist/react-core/index.js              17.05 KB
-ESM dist/react-core/testing.js            1.22 KB
-ESM dist/react-core/chunk-7DYMJ74I.js.map 533.00 B
-ESM dist/react-core/testing.js.map        1.86 KB
-ESM dist/react-core/index.js.map          49.77 KB
-ESM ⚡️ Build success in 54ms
-ESM dist/expo/testing.js       112.00 B
+ESM ⚡️ Build success in 39ms
 ESM dist/expo/index.js         4.68 KB
+ESM dist/expo/testing.js       112.00 B
 ESM dist/expo/crypto.js        153.00 B
 ESM dist/expo/polyfills.js     858.00 B
-ESM dist/expo/testing.js.map   168.00 B
 ESM dist/expo/index.js.map     10.23 KB
-ESM dist/expo/polyfills.js.map 1.61 KB
+ESM dist/expo/testing.js.map   168.00 B
 ESM dist/expo/crypto.js.map    189.00 B
-ESM ⚡️ Build success in 48ms
-ESM dist/better-auth/database-adapter/index.js     26.65 KB
-ESM dist/better-auth/database-adapter/index.js.map 58.26 KB
-ESM ⚡️ Build success in 50ms
+ESM dist/expo/polyfills.js.map 1.61 KB
+ESM ⚡️ Build success in 36ms
+ESM dist/react-core/index.js              17.37 KB
+ESM dist/react-core/testing.js            1.22 KB
+ESM dist/react-core/chunk-7DYMJ74I.js     279.00 B
+ESM dist/react-core/testing.js.map        1.86 KB
+ESM dist/react-core/index.js.map          57.58 KB
+ESM dist/react-core/chunk-7DYMJ74I.js.map 533.00 B
+ESM ⚡️ Build success in 55ms
+ESM dist/prosemirror/index.js     77.76 KB
+ESM dist/prosemirror/index.js.map 307.20 KB
+ESM ⚡️ Build success in 57ms
 ESM dist/browser/index.js     16.26 KB
 ESM dist/browser/index.js.map 34.88 KB
-ESM ⚡️ Build success in 84ms
-ESM dist/react/index.js       25.96 KB
-ESM dist/react/ssr.js         697.00 B
+ESM ⚡️ Build success in 61ms
+ESM dist/react/index.js       26.00 KB
 ESM dist/react/testing.js     122.00 B
-ESM dist/react/index.js.map   55.44 KB
-ESM dist/react/ssr.js.map     1.11 KB
+ESM dist/react/ssr.js         697.00 B
 ESM dist/react/testing.js.map 165.00 B
-ESM ⚡️ Build success in 68ms
-ESM dist/prosemirror/index.js     77.76 KB
-ESM dist/prosemirror/index.js.map 307.20 KB
-ESM ⚡️ Build success in 82ms
-ESM dist/react-native-core/index.js               20.75 KB
+ESM dist/react/ssr.js.map     1.11 KB
+ESM dist/react/index.js.map   55.46 KB
+ESM ⚡️ Build success in 54ms
+ESM dist/better-auth/database-adapter/index.js     26.65 KB
+ESM dist/better-auth/database-adapter/index.js.map 58.27 KB
+ESM ⚡️ Build success in 58ms
+ESM dist/react-native-core/index.js               34.14 KB
+ESM dist/react-native-core/crypto.js              2.61 KB
 ESM dist/react-native-core/testing.js             119.00 B
+ESM dist/react-native-core/chunk-DGUM43GV.js      432.00 B
 ESM dist/react-native-core/crypto/RNCrypto.js     120.00 B
-ESM dist/react-native-core/crypto.js              2.58 KB
-ESM dist/react-native-core/crypto/RNCrypto.js.map 178.00 B
-ESM dist/react-native-core/index.js.map           41.79 KB
-ESM dist/react-native-core/crypto.js.map          5.25 KB
+ESM dist/react-native-core/index.js.map           69.24 KB
+ESM dist/react-native-core/crypto.js.map          5.26 KB
 ESM dist/react-native-core/testing.js.map         175.00 B
-ESM ⚡️ Build success in 78ms
-ESM dist/react-native/index.js         23.29 KB
-ESM dist/react-native/testing.js       120.00 B
-ESM dist/react-native/crypto.js        161.00 B
-ESM dist/react-native/polyfills.js     858.00 B
-ESM dist/react-native/testing.js.map   176.00 B
-ESM dist/react-native/crypto.js.map    197.00 B
-ESM dist/react-native/polyfills.js.map 1.61 KB
-ESM dist/react-native/index.js.map     47.34 KB
-ESM ⚡️ Build success in 83ms
+ESM dist/react-native-core/chunk-DGUM43GV.js.map  71.00 B
+ESM dist/react-native-core/crypto/RNCrypto.js.map 178.00 B
+ESM ⚡️ Build success in 71ms
+ESM dist/react-native/index.js              36.68 KB
+ESM dist/react-native/testing.js            120.00 B
+ESM dist/react-native/chunk-DGUM43GV.js     432.00 B
+ESM dist/react-native/crypto.js             192.00 B
+ESM dist/react-native/polyfills.js          858.00 B
+ESM dist/react-native/index.js.map          74.79 KB
+ESM dist/react-native/testing.js.map        176.00 B
+ESM dist/react-native/chunk-DGUM43GV.js.map 71.00 B
+ESM dist/react-native/crypto.js.map         199.00 B
+ESM dist/react-native/polyfills.js.map      1.61 KB
+ESM ⚡️ Build success in 77ms
 ESM dist/inspector/index.js              6.29 KB
 ESM dist/inspector/standalone.js         12.61 KB
 ESM dist/inspector/chunk-YQNK5Y7B.js     127.21 KB
 ESM dist/inspector/index.js.map          9.65 KB
 ESM dist/inspector/standalone.js.map     20.11 KB
 ESM dist/inspector/chunk-YQNK5Y7B.js.map 221.30 KB
-ESM ⚡️ Build success in 93ms
+ESM ⚡️ Build success in 97ms
 ESM dist/index.js              30.81 KB
 ESM dist/testing.js            8.56 KB
+ESM dist/chunk-QCTQH5RS.js     228.88 KB
+ESM dist/tools/ssr.js          156.00 B
 ESM dist/chunk-M2HGBOXS.js     694.00 B
 ESM dist/chunk-PZ5AY32C.js     233.00 B
-ESM dist/tools/ssr.js          156.00 B
-ESM dist/chunk-PEHQ7TN2.js     227.64 KB
-ESM dist/chunk-M2HGBOXS.js.map 1.10 KB
+ESM dist/index.js.map          62.38 KB
 ESM dist/testing.js.map        16.21 KB
-ESM dist/chunk-PZ5AY32C.js.map 71.00 B
 ESM dist/tools/ssr.js.map      71.00 B
-ESM dist/index.js.map          62.37 KB
-ESM dist/chunk-PEHQ7TN2.js.map 534.93 KB
-ESM ⚡️ Build success in 117ms
+ESM dist/chunk-M2HGBOXS.js.map 1.10 KB
+ESM dist/chunk-PZ5AY32C.js.map 71.00 B
+ESM dist/chunk-QCTQH5RS.js.map 536.59 KB
+ESM ⚡️ Build success in 108ms
 ESM dist/inspector/register-custom-element.js     218.00 B
 ESM dist/inspector/register-custom-element.js.map 314.00 B
 ESM dist/inspector/custom-element-KYV64IOC.js     1.60 MB
 ESM dist/inspector/custom-element-KYV64IOC.js.map 2.47 MB
-ESM ⚡️ Build success in 154ms
+ESM ⚡️ Build success in 141ms
 
-> jazz-tools@0.19.19 types /home/runner/_work/jazz/jazz/packages/jazz-tools
+> jazz-tools@0.19.21 types /home/runner/_work/jazz/jazz/packages/jazz-tools
 > tsc --outDir dist
 
 
-> jazz-tools@0.19.19 build:svelte /home/runner/_work/jazz/jazz/packages/jazz-tools
+> jazz-tools@0.19.21 build:svelte /home/runner/_work/jazz/jazz/packages/jazz-tools
 > rm -rf dist/svelte && svelte-package -i src/svelte -o dist/svelte --tsconfig tsconfig.svelte.json
 
 src/svelte -> dist/svelte
 
-> jazz-tools@0.19.19 build:better-auth-svelte /home/runner/_work/jazz/jazz/packages/jazz-tools
+> jazz-tools@0.19.21 build:better-auth-svelte /home/runner/_work/jazz/jazz/packages/jazz-tools
 > mkdir -p dist/better-auth/auth && svelte-package -i src/better-auth/auth -o dist/better-auth/auth-temp --tsconfig tsconfig.svelte.json && cp dist/better-auth/auth-temp/svelte.svelte dist/better-auth/auth/svelte.svelte && cp dist/better-auth/auth-temp/svelte.svelte.d.ts dist/better-auth/auth/svelte.d.ts && rm -rf dist/better-auth/auth-temp
 
 src/better-auth/auth -> dist/better-auth/auth-temp

package/dist/better-auth/auth/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/better-auth/auth/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,OAAO,EACP,iBAAiB,EAEjB,eAAe,EAChB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAS9C;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB;;wBAmBC,UAAU,CAAC,OAAO,UAAU,CAAC;;;sCAIvB,eAAe,CAAC,OAAO,CAAC;4CAGlB,iBAAiB;;;;;;;;;;;CA6H1D,CAAC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/better-auth/auth/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,OAAO,EACP,iBAAiB,EAEjB,eAAe,EAChB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAS9C;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB;;wBAmBC,UAAU,CAAC,OAAO,UAAU,CAAC;;;sCAIvB,eAAe,CAAC,OAAO,CAAC;4CAGlB,iBAAiB;;;;;;;;;;;CA+H1D,CAAC"}

package/dist/better-auth/auth/client.js

@@ -66,7 +66,7 @@ var jazzPluginClient = () => {
                 "x-jazz-auth",
                 JSON.stringify({
                   accountID: credentials.accountID,
-                  secretSeed: credentials.secretSeed,
+                  secretSeed: credentials.secretSeed ? Array.from(credentials.secretSeed) : void 0,
                   accountSecret: credentials.accountSecret
                 })
               );

package/dist/better-auth/auth/client.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/better-auth/auth/client.ts"],"sourcesContent":["import type { BetterAuthClientPlugin } from \"better-auth\";\nimport type {\n  Account,\n  AuthSecretStorage,\n  AuthSetPayload,\n  JazzContextType,\n} from \"jazz-tools\";\nimport type { jazzPlugin } from \"./server.js\";\n\nconst SIGNUP_URLS = [\n  \"/sign-up\",\n  \"/sign-in/social\",\n  \"/sign-in/oauth2\",\n  \"/email-otp/send-verification-otp\",\n];\n\n/**\n * @example\n * ```ts\n * const auth = betterAuth({\n *   plugins: [jazzPluginClient()],\n * });\n * ```\n */\nexport const jazzPluginClient = () => {\n  let jazzContext: JazzContextType<Account>;\n  let authSecretStorage: AuthSecretStorage;\n  let signOutUnsubscription: () => void;\n\n  const authenticateOnJazz = async (jazzAuth: AuthSetPayload) => {\n    const parsedJazzAuth = {\n      ...jazzAuth,\n      secretSeed: jazzAuth.secretSeed\n        ? Uint8Array.from(jazzAuth.secretSeed)\n        : undefined,\n    };\n\n    await jazzContext.authenticate(parsedJazzAuth);\n    await authSecretStorage.set(parsedJazzAuth);\n  };\n\n  return {\n    id: \"jazz-plugin\",\n    $InferServerPlugin: {} as ReturnType<typeof jazzPlugin>,\n    getActions: ($fetch, $store) => {\n      return {\n        jazz: {\n          setJazzContext: (context: JazzContextType<Account>) => {\n            jazzContext = context;\n          },\n          setAuthSecretStorage: (storage: AuthSecretStorage) => {\n            authSecretStorage = storage;\n            if (signOutUnsubscription) signOutUnsubscription();\n\n            // This is a workaround to logout from Better Auth when user logs out directly from Jazz\n            signOutUnsubscription = authSecretStorage.onUpdate(\n              (isAuthenticated) => {\n                if (isAuthenticated === false) {\n                  const session = $store.atoms.session?.get();\n                  if (!session) return;\n\n                  // if the user logs out from Better Auth, the get session is immediately called\n                  // so we must wait the next fetched session to understand if we need to call sign-out\n                  if (session.isPending || session.isRefetching) {\n                    // listen once for next session's data\n                    const unsub = $store.atoms.session?.listen((session) => {\n                      unsub?.();\n                      // if the session is null, user has been already logged out from Better Auth\n                      if (session.data !== null) {\n                        $fetch(\"/sign-out\", { method: \"POST\" });\n                      }\n                    });\n                  }\n                  // if the session is not pending, it means user logged out from Jazz only\n                  // so we call the sign-out api\n                  else {\n                    $fetch(\"/sign-out\", { method: \"POST\" });\n                  }\n                }\n              },\n            );\n          },\n        },\n      };\n    },\n    fetchPlugins: [\n      {\n        id: \"jazz-plugin\",\n        name: \"jazz-plugin\",\n        hooks: {\n          async onRequest(context) {\n            if (\n              SIGNUP_URLS.some((url) => context.url.toString().includes(url))\n            ) {\n              const credentials = await authSecretStorage.get();\n\n              if (!credentials) {\n                throw new Error(\"Jazz credentials not found\");\n              }\n\n              context.headers.set(\n                \"x-jazz-auth\",\n                JSON.stringify({\n                  accountID: credentials.accountID,\n                  secretSeed: credentials.secretSeed,\n                  accountSecret: credentials.accountSecret,\n                }),\n              );\n            }\n          },\n          async onSuccess(context) {\n            if (context.request.url.toString().includes(\"/sign-up\")) {\n              await authenticateOnJazz(context.data.jazzAuth);\n              return;\n            }\n\n            if (context.request.url.toString().includes(\"/sign-in/email\")) {\n              await authenticateOnJazz(context.data.jazzAuth);\n              return;\n            }\n\n            if (context.request.url.toString().includes(\"/get-session\")) {\n              if (context.data === null) {\n                if (authSecretStorage.isAuthenticated === true) {\n                  console.info(\n                    \"Jazz is authenticated, but the session is null. Logging out\",\n                  );\n                  await jazzContext.logOut();\n                }\n                return;\n              }\n\n              if (!context.data?.user) {\n                return;\n              }\n\n              if (authSecretStorage.isAuthenticated === false) {\n                console.info(\n                  \"Jazz is not authenticated, using Better Auth stored credentials\",\n                );\n                await authenticateOnJazz(context.data.jazzAuth);\n                return;\n              }\n\n              const sessionAccountID = context.data.user.accountID;\n\n              const credentials = await authSecretStorage.get();\n\n              if (!credentials) {\n                throw new Error(\"Jazz credentials not found\");\n              }\n\n              if (credentials.accountID !== sessionAccountID) {\n                console.info(\n                  \"Jazz credentials mismatch, using Better Auth stored credentials\",\n                );\n                await authenticateOnJazz(context.data.jazzAuth);\n              }\n              return;\n            }\n\n            if (context.request.url.toString().includes(\"/sign-out\")) {\n              await jazzContext.logOut();\n              return;\n            }\n\n            if (context.request.url.toString().includes(\"/delete-user\")) {\n              await jazzContext.logOut();\n              return;\n            }\n          },\n        },\n      },\n    ],\n  } satisfies BetterAuthClientPlugin;\n};\n"],"mappings":";AASA,IAAM,cAAc;AAAA,EAClB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAUO,IAAM,mBAAmB,MAAM;AACpC,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,QAAM,qBAAqB,OAAO,aAA6B;AAC7D,UAAM,iBAAiB;AAAA,MACrB,GAAG;AAAA,MACH,YAAY,SAAS,aACjB,WAAW,KAAK,SAAS,UAAU,IACnC;AAAA,IACN;AAEA,UAAM,YAAY,aAAa,cAAc;AAC7C,UAAM,kBAAkB,IAAI,cAAc;AAAA,EAC5C;AAEA,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,oBAAoB,CAAC;AAAA,IACrB,YAAY,CAAC,QAAQ,WAAW;AAC9B,aAAO;AAAA,QACL,MAAM;AAAA,UACJ,gBAAgB,CAAC,YAAsC;AACrD,0BAAc;AAAA,UAChB;AAAA,UACA,sBAAsB,CAAC,YAA+B;AACpD,gCAAoB;AACpB,gBAAI,sBAAuB,uBAAsB;AAGjD,oCAAwB,kBAAkB;AAAA,cACxC,CAAC,oBAAoB;AACnB,oBAAI,oBAAoB,OAAO;AAC7B,wBAAM,UAAU,OAAO,MAAM,SAAS,IAAI;AAC1C,sBAAI,CAAC,QAAS;AAId,sBAAI,QAAQ,aAAa,QAAQ,cAAc;AAE7C,0BAAM,QAAQ,OAAO,MAAM,SAAS,OAAO,CAACA,aAAY;AACtD,8BAAQ;AAER,0BAAIA,SAAQ,SAAS,MAAM;AACzB,+BAAO,aAAa,EAAE,QAAQ,OAAO,CAAC;AAAA,sBACxC;AAAA,oBACF,CAAC;AAAA,kBACH,OAGK;AACH,2BAAO,aAAa,EAAE,QAAQ,OAAO,CAAC;AAAA,kBACxC;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,OAAO;AAAA,UACL,MAAM,UAAU,SAAS;AACvB,gBACE,YAAY,KAAK,CAAC,QAAQ,QAAQ,IAAI,SAAS,EAAE,SAAS,GAAG,CAAC,GAC9D;AACA,oBAAM,cAAc,MAAM,kBAAkB,IAAI;AAEhD,kBAAI,CAAC,aAAa;AAChB,sBAAM,IAAI,MAAM,4BAA4B;AAAA,cAC9C;AAEA,sBAAQ,QAAQ;AAAA,gBACd;AAAA,gBACA,KAAK,UAAU;AAAA,kBACb,WAAW,YAAY;AAAA,kBACvB,YAAY,YAAY;AAAA,kBACxB,eAAe,YAAY;AAAA,gBAC7B,CAAC;AAAA,cACH;AAAA,YACF;AAAA,UACF;AAAA,UACA,MAAM,UAAU,SAAS;AACvB,gBAAI,QAAQ,QAAQ,IAAI,SAAS,EAAE,SAAS,UAAU,GAAG;AACvD,oBAAM,mBAAmB,QAAQ,KAAK,QAAQ;AAC9C;AAAA,YACF;AAEA,gBAAI,QAAQ,QAAQ,IAAI,SAAS,EAAE,SAAS,gBAAgB,GAAG;AAC7D,oBAAM,mBAAmB,QAAQ,KAAK,QAAQ;AAC9C;AAAA,YACF;AAEA,gBAAI,QAAQ,QAAQ,IAAI,SAAS,EAAE,SAAS,cAAc,GAAG;AAC3D,kBAAI,QAAQ,SAAS,MAAM;AACzB,oBAAI,kBAAkB,oBAAoB,MAAM;AAC9C,0BAAQ;AAAA,oBACN;AAAA,kBACF;AACA,wBAAM,YAAY,OAAO;AAAA,gBAC3B;AACA;AAAA,cACF;AAEA,kBAAI,CAAC,QAAQ,MAAM,MAAM;AACvB;AAAA,cACF;AAEA,kBAAI,kBAAkB,oBAAoB,OAAO;AAC/C,wBAAQ;AAAA,kBACN;AAAA,gBACF;AACA,sBAAM,mBAAmB,QAAQ,KAAK,QAAQ;AAC9C;AAAA,cACF;AAEA,oBAAM,mBAAmB,QAAQ,KAAK,KAAK;AAE3C,oBAAM,cAAc,MAAM,kBAAkB,IAAI;AAEhD,kBAAI,CAAC,aAAa;AAChB,sBAAM,IAAI,MAAM,4BAA4B;AAAA,cAC9C;AAEA,kBAAI,YAAY,cAAc,kBAAkB;AAC9C,wBAAQ;AAAA,kBACN;AAAA,gBACF;AACA,sBAAM,mBAAmB,QAAQ,KAAK,QAAQ;AAAA,cAChD;AACA;AAAA,YACF;AAEA,gBAAI,QAAQ,QAAQ,IAAI,SAAS,EAAE,SAAS,WAAW,GAAG;AACxD,oBAAM,YAAY,OAAO;AACzB;AAAA,YACF;AAEA,gBAAI,QAAQ,QAAQ,IAAI,SAAS,EAAE,SAAS,cAAc,GAAG;AAC3D,oBAAM,YAAY,OAAO;AACzB;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":["session"]}
+{"version":3,"sources":["../../../src/better-auth/auth/client.ts"],"sourcesContent":["import type { BetterAuthClientPlugin } from \"better-auth\";\nimport type {\n  Account,\n  AuthSecretStorage,\n  AuthSetPayload,\n  JazzContextType,\n} from \"jazz-tools\";\nimport type { jazzPlugin } from \"./server.js\";\n\nconst SIGNUP_URLS = [\n  \"/sign-up\",\n  \"/sign-in/social\",\n  \"/sign-in/oauth2\",\n  \"/email-otp/send-verification-otp\",\n];\n\n/**\n * @example\n * ```ts\n * const auth = betterAuth({\n *   plugins: [jazzPluginClient()],\n * });\n * ```\n */\nexport const jazzPluginClient = () => {\n  let jazzContext: JazzContextType<Account>;\n  let authSecretStorage: AuthSecretStorage;\n  let signOutUnsubscription: () => void;\n\n  const authenticateOnJazz = async (jazzAuth: AuthSetPayload) => {\n    const parsedJazzAuth = {\n      ...jazzAuth,\n      secretSeed: jazzAuth.secretSeed\n        ? Uint8Array.from(jazzAuth.secretSeed)\n        : undefined,\n    };\n\n    await jazzContext.authenticate(parsedJazzAuth);\n    await authSecretStorage.set(parsedJazzAuth);\n  };\n\n  return {\n    id: \"jazz-plugin\",\n    $InferServerPlugin: {} as ReturnType<typeof jazzPlugin>,\n    getActions: ($fetch, $store) => {\n      return {\n        jazz: {\n          setJazzContext: (context: JazzContextType<Account>) => {\n            jazzContext = context;\n          },\n          setAuthSecretStorage: (storage: AuthSecretStorage) => {\n            authSecretStorage = storage;\n            if (signOutUnsubscription) signOutUnsubscription();\n\n            // This is a workaround to logout from Better Auth when user logs out directly from Jazz\n            signOutUnsubscription = authSecretStorage.onUpdate(\n              (isAuthenticated) => {\n                if (isAuthenticated === false) {\n                  const session = $store.atoms.session?.get();\n                  if (!session) return;\n\n                  // if the user logs out from Better Auth, the get session is immediately called\n                  // so we must wait the next fetched session to understand if we need to call sign-out\n                  if (session.isPending || session.isRefetching) {\n                    // listen once for next session's data\n                    const unsub = $store.atoms.session?.listen((session) => {\n                      unsub?.();\n                      // if the session is null, user has been already logged out from Better Auth\n                      if (session.data !== null) {\n                        $fetch(\"/sign-out\", { method: \"POST\" });\n                      }\n                    });\n                  }\n                  // if the session is not pending, it means user logged out from Jazz only\n                  // so we call the sign-out api\n                  else {\n                    $fetch(\"/sign-out\", { method: \"POST\" });\n                  }\n                }\n              },\n            );\n          },\n        },\n      };\n    },\n    fetchPlugins: [\n      {\n        id: \"jazz-plugin\",\n        name: \"jazz-plugin\",\n        hooks: {\n          async onRequest(context) {\n            if (\n              SIGNUP_URLS.some((url) => context.url.toString().includes(url))\n            ) {\n              const credentials = await authSecretStorage.get();\n\n              if (!credentials) {\n                throw new Error(\"Jazz credentials not found\");\n              }\n\n              context.headers.set(\n                \"x-jazz-auth\",\n                JSON.stringify({\n                  accountID: credentials.accountID,\n                  secretSeed: credentials.secretSeed\n                    ? Array.from(credentials.secretSeed)\n                    : undefined,\n                  accountSecret: credentials.accountSecret,\n                }),\n              );\n            }\n          },\n          async onSuccess(context) {\n            if (context.request.url.toString().includes(\"/sign-up\")) {\n              await authenticateOnJazz(context.data.jazzAuth);\n              return;\n            }\n\n            if (context.request.url.toString().includes(\"/sign-in/email\")) {\n              await authenticateOnJazz(context.data.jazzAuth);\n              return;\n            }\n\n            if (context.request.url.toString().includes(\"/get-session\")) {\n              if (context.data === null) {\n                if (authSecretStorage.isAuthenticated === true) {\n                  console.info(\n                    \"Jazz is authenticated, but the session is null. Logging out\",\n                  );\n                  await jazzContext.logOut();\n                }\n                return;\n              }\n\n              if (!context.data?.user) {\n                return;\n              }\n\n              if (authSecretStorage.isAuthenticated === false) {\n                console.info(\n                  \"Jazz is not authenticated, using Better Auth stored credentials\",\n                );\n                await authenticateOnJazz(context.data.jazzAuth);\n                return;\n              }\n\n              const sessionAccountID = context.data.user.accountID;\n\n              const credentials = await authSecretStorage.get();\n\n              if (!credentials) {\n                throw new Error(\"Jazz credentials not found\");\n              }\n\n              if (credentials.accountID !== sessionAccountID) {\n                console.info(\n                  \"Jazz credentials mismatch, using Better Auth stored credentials\",\n                );\n                await authenticateOnJazz(context.data.jazzAuth);\n              }\n              return;\n            }\n\n            if (context.request.url.toString().includes(\"/sign-out\")) {\n              await jazzContext.logOut();\n              return;\n            }\n\n            if (context.request.url.toString().includes(\"/delete-user\")) {\n              await jazzContext.logOut();\n              return;\n            }\n          },\n        },\n      },\n    ],\n  } satisfies BetterAuthClientPlugin;\n};\n"],"mappings":";AASA,IAAM,cAAc;AAAA,EAClB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAUO,IAAM,mBAAmB,MAAM;AACpC,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,QAAM,qBAAqB,OAAO,aAA6B;AAC7D,UAAM,iBAAiB;AAAA,MACrB,GAAG;AAAA,MACH,YAAY,SAAS,aACjB,WAAW,KAAK,SAAS,UAAU,IACnC;AAAA,IACN;AAEA,UAAM,YAAY,aAAa,cAAc;AAC7C,UAAM,kBAAkB,IAAI,cAAc;AAAA,EAC5C;AAEA,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,oBAAoB,CAAC;AAAA,IACrB,YAAY,CAAC,QAAQ,WAAW;AAC9B,aAAO;AAAA,QACL,MAAM;AAAA,UACJ,gBAAgB,CAAC,YAAsC;AACrD,0BAAc;AAAA,UAChB;AAAA,UACA,sBAAsB,CAAC,YAA+B;AACpD,gCAAoB;AACpB,gBAAI,sBAAuB,uBAAsB;AAGjD,oCAAwB,kBAAkB;AAAA,cACxC,CAAC,oBAAoB;AACnB,oBAAI,oBAAoB,OAAO;AAC7B,wBAAM,UAAU,OAAO,MAAM,SAAS,IAAI;AAC1C,sBAAI,CAAC,QAAS;AAId,sBAAI,QAAQ,aAAa,QAAQ,cAAc;AAE7C,0BAAM,QAAQ,OAAO,MAAM,SAAS,OAAO,CAACA,aAAY;AACtD,8BAAQ;AAER,0BAAIA,SAAQ,SAAS,MAAM;AACzB,+BAAO,aAAa,EAAE,QAAQ,OAAO,CAAC;AAAA,sBACxC;AAAA,oBACF,CAAC;AAAA,kBACH,OAGK;AACH,2BAAO,aAAa,EAAE,QAAQ,OAAO,CAAC;AAAA,kBACxC;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,OAAO;AAAA,UACL,MAAM,UAAU,SAAS;AACvB,gBACE,YAAY,KAAK,CAAC,QAAQ,QAAQ,IAAI,SAAS,EAAE,SAAS,GAAG,CAAC,GAC9D;AACA,oBAAM,cAAc,MAAM,kBAAkB,IAAI;AAEhD,kBAAI,CAAC,aAAa;AAChB,sBAAM,IAAI,MAAM,4BAA4B;AAAA,cAC9C;AAEA,sBAAQ,QAAQ;AAAA,gBACd;AAAA,gBACA,KAAK,UAAU;AAAA,kBACb,WAAW,YAAY;AAAA,kBACvB,YAAY,YAAY,aACpB,MAAM,KAAK,YAAY,UAAU,IACjC;AAAA,kBACJ,eAAe,YAAY;AAAA,gBAC7B,CAAC;AAAA,cACH;AAAA,YACF;AAAA,UACF;AAAA,UACA,MAAM,UAAU,SAAS;AACvB,gBAAI,QAAQ,QAAQ,IAAI,SAAS,EAAE,SAAS,UAAU,GAAG;AACvD,oBAAM,mBAAmB,QAAQ,KAAK,QAAQ;AAC9C;AAAA,YACF;AAEA,gBAAI,QAAQ,QAAQ,IAAI,SAAS,EAAE,SAAS,gBAAgB,GAAG;AAC7D,oBAAM,mBAAmB,QAAQ,KAAK,QAAQ;AAC9C;AAAA,YACF;AAEA,gBAAI,QAAQ,QAAQ,IAAI,SAAS,EAAE,SAAS,cAAc,GAAG;AAC3D,kBAAI,QAAQ,SAAS,MAAM;AACzB,oBAAI,kBAAkB,oBAAoB,MAAM;AAC9C,0BAAQ;AAAA,oBACN;AAAA,kBACF;AACA,wBAAM,YAAY,OAAO;AAAA,gBAC3B;AACA;AAAA,cACF;AAEA,kBAAI,CAAC,QAAQ,MAAM,MAAM;AACvB;AAAA,cACF;AAEA,kBAAI,kBAAkB,oBAAoB,OAAO;AAC/C,wBAAQ;AAAA,kBACN;AAAA,gBACF;AACA,sBAAM,mBAAmB,QAAQ,KAAK,QAAQ;AAC9C;AAAA,cACF;AAEA,oBAAM,mBAAmB,QAAQ,KAAK,KAAK;AAE3C,oBAAM,cAAc,MAAM,kBAAkB,IAAI;AAEhD,kBAAI,CAAC,aAAa;AAChB,sBAAM,IAAI,MAAM,4BAA4B;AAAA,cAC9C;AAEA,kBAAI,YAAY,cAAc,kBAAkB;AAC9C,wBAAQ;AAAA,kBACN;AAAA,gBACF;AACA,sBAAM,mBAAmB,QAAQ,KAAK,QAAQ;AAAA,cAChD;AACA;AAAA,YACF;AAEA,gBAAI,QAAQ,QAAQ,IAAI,SAAS,EAAE,SAAS,WAAW,GAAG;AACxD,oBAAM,YAAY,OAAO;AACzB;AAAA,YACF;AAEA,gBAAI,QAAQ,QAAQ,IAAI,SAAS,EAAE,SAAS,cAAc,GAAG;AAC3D,oBAAM,YAAY,OAAO;AACzB;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":["session"]}

package/dist/better-auth/auth/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/better-auth/auth/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,gBAAgB,EAGtB,MAAM,aAAa,CAAC;AASrB,KAAK,UAAU,GAAG,gBAAgB,GAAG;IACnC,MAAM,EAAE;QACN,IAAI,EAAE;YACJ,MAAM,EAAE;gBACN,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ,CAAC;oBACf,QAAQ,EAAE,KAAK,CAAC;oBAChB,KAAK,EAAE,KAAK,CAAC;iBACd,CAAC;gBACF,oBAAoB,EAAE;oBACpB,IAAI,EAAE,QAAQ,CAAC;oBACf,QAAQ,EAAE,KAAK,CAAC;oBAChB,KAAK,EAAE,KAAK,CAAC;oBACb,QAAQ,EAAE,KAAK,CAAC;iBACjB,CAAC;aACH,CAAC;SACH,CAAC;KACH,CAAC;CACH,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,UAAU,EAAE,MAAM,UA0Q9B,CAAC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/better-auth/auth/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,gBAAgB,EAGtB,MAAM,aAAa,CAAC;AASrB,KAAK,UAAU,GAAG,gBAAgB,GAAG;IACnC,MAAM,EAAE;QACN,IAAI,EAAE;YACJ,MAAM,EAAE;gBACN,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ,CAAC;oBACf,QAAQ,EAAE,KAAK,CAAC;oBAChB,KAAK,EAAE,KAAK,CAAC;iBACd,CAAC;gBACF,oBAAoB,EAAE;oBACpB,IAAI,EAAE,QAAQ,CAAC;oBACf,QAAQ,EAAE,KAAK,CAAC;oBAChB,KAAK,EAAE,KAAK,CAAC;oBACb,QAAQ,EAAE,KAAK,CAAC;iBACjB,CAAC;aACH,CAAC;SACH,CAAC;KACH,CAAC;CACH,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,UAAU,EAAE,MAAM,UA4Q9B,CAAC"}

package/dist/better-auth/auth/server.js

@@ -109,7 +109,7 @@ var jazzPlugin = () => {
          */
         {
           matcher: (context) => {
-            return context.path.startsWith("/callback") || context.path.startsWith("/oauth2/callback");
+            return context.path?.startsWith("/callback") || context.path?.startsWith("/oauth2/callback") || false;
           },
           handler: createAuthMiddleware(async (ctx) => {
             const state = ctx.query?.state || ctx.body?.state;
@@ -144,7 +144,7 @@ var jazzPlugin = () => {
          */
         {
           matcher: (context) => {
-            return context.path.startsWith("/sign-in/email-otp");
+            return context.path?.startsWith("/sign-in/email-otp") || false;
           },
           handler: createAuthMiddleware(async (ctx) => {
             const email = ctx.body.email;
@@ -181,7 +181,7 @@ var jazzPlugin = () => {
          */
         {
           matcher: (context) => {
-            return context.path.startsWith("/sign-up") || context.path.startsWith("/sign-in") || context.path.startsWith("/get-session");
+            return context.path?.startsWith("/sign-up") || context.path?.startsWith("/sign-in") || context.path?.startsWith("/get-session") || false;
           },
           handler: createAuthMiddleware({}, async (ctx) => {
             const returned = ctx.context.returned;
@@ -201,7 +201,7 @@ var jazzPlugin = () => {
          */
         {
           matcher: (context) => {
-            return context.path.startsWith("/sign-in/social");
+            return context.path?.startsWith("/sign-in/social") || false;
           },
           handler: createAuthMiddleware(async (ctx) => {
             if (!contextContainsJazzAuth(ctx)) {

package/dist/better-auth/auth/server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/better-auth/auth/server.ts"],"sourcesContent":["import {\n  AuthContext,\n  type BetterAuthPlugin,\n  MiddlewareContext,\n  MiddlewareOptions,\n} from \"better-auth\";\nimport { APIError } from \"better-auth/api\";\nimport { symmetricDecrypt, symmetricEncrypt } from \"better-auth/crypto\";\nimport { createAuthMiddleware } from \"better-auth/plugins\";\nimport type { Account, AuthCredentials, ID } from \"jazz-tools\";\n\n// Define a type to have user fields mapped in the better-auth instance\n// It should be automatic, but it needs an hard reference to BetterAuthPlugin type\n// in order to be exported as library.\ntype JazzPlugin = BetterAuthPlugin & {\n  schema: {\n    user: {\n      fields: {\n        accountID: {\n          type: \"string\";\n          required: false;\n          input: false;\n        };\n        encryptedCredentials: {\n          type: \"string\";\n          required: false;\n          input: false;\n          returned: false;\n        };\n      };\n    };\n  };\n};\n\n/**\n * @returns The BetterAuth server plugin.\n *\n * @example\n * ```ts\n * const auth = betterAuth({\n *   plugins: [jazzPlugin()],\n *   // ... other BetterAuth options\n * });\n * ```\n */\nexport const jazzPlugin: () => JazzPlugin = () => {\n  return {\n    id: \"jazz-plugin\",\n    schema: {\n      user: {\n        fields: {\n          accountID: {\n            type: \"string\",\n            required: false,\n            input: false,\n          },\n          encryptedCredentials: {\n            type: \"string\",\n            required: false,\n            input: false,\n            returned: false,\n          },\n        },\n      },\n    },\n\n    init() {\n      return {\n        options: {\n          databaseHooks: {\n            user: {\n              create: {\n                before: async (user, context) => {\n                  // If the user is created without a jazzAuth, it will throw an error.\n                  if (!contextContainsJazzAuth(context)) {\n                    throw new APIError(422, {\n                      message: \"JazzAuth is required on user creation\",\n                    });\n                  }\n                  // Decorate the user with the jazz's credentials.\n                  return {\n                    data: {\n                      accountID: context.jazzAuth.accountID,\n                      encryptedCredentials:\n                        context.jazzAuth.encryptedCredentials,\n                    },\n                  };\n                },\n              },\n            },\n            verification: {\n              create: {\n                after: async (verification, context) => {\n                  /**\n                   * For: Email OTP plugin\n                   * After a verification is created, if it is from the EmailOTP plugin,\n                   * create a new verification value with the jazzAuth with the same expiration.\n                   */\n                  if (\n                    contextContainsJazzAuth(context) &&\n                    verification.identifier.startsWith(\"sign-in-otp-\")\n                  ) {\n                    const identifier = `jazz-auth-${verification.identifier}`;\n                    await context.context.internalAdapter.deleteVerificationByIdentifier(\n                      identifier,\n                    );\n                    await context.context.internalAdapter.createVerificationValue(\n                      {\n                        value: JSON.stringify({ jazzAuth: context.jazzAuth }),\n                        identifier: identifier,\n                        expiresAt: verification.expiresAt,\n                      },\n                    );\n                  }\n                },\n              },\n            },\n          },\n        },\n      };\n    },\n\n    hooks: {\n      before: [\n        /**\n         * If the client sends a x-jazz-auth header,\n         * we encrypt the credentials and inject them into the context.\n         */\n        {\n          matcher: (context) => {\n            return !!context.headers?.get(\"x-jazz-auth\");\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            const jazzAuth = JSON.parse(ctx.headers?.get(\"x-jazz-auth\")!);\n\n            const credentials: AuthCredentials = {\n              accountID: jazzAuth.accountID as ID<Account>,\n              secretSeed: jazzAuth.secretSeed,\n              accountSecret: jazzAuth.accountSecret as any,\n              // If the provider remains 'anonymous', Jazz will not consider us authenticated later.\n              provider: \"better-auth\",\n            };\n\n            const encryptedCredentials = await symmetricEncrypt({\n              key: ctx.context.secret,\n              data: JSON.stringify(credentials),\n            });\n\n            return {\n              context: {\n                ...ctx,\n                jazzAuth: {\n                  accountID: jazzAuth.accountID,\n                  encryptedCredentials: encryptedCredentials,\n                },\n              },\n            };\n          }),\n        },\n\n        /**\n         * For: Social / OAuth2 plugin\n         * /callback is the endpoint that BetterAuth uses to authenticate the user coming from a social provider.\n         * 1. Catch the state\n         * 2. Find the verification value\n         * 3. If the verification value contains a jazzAuth, inject into the context to have it in case of registration.\n         */\n        {\n          matcher: (context) => {\n            return (\n              context.path.startsWith(\"/callback\") ||\n              context.path.startsWith(\"/oauth2/callback\")\n            );\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            const state = ctx.query?.state || ctx.body?.state;\n\n            const identifier = `jazz-auth-${state}`;\n\n            const data =\n              await ctx.context.internalAdapter.findVerificationValue(\n                identifier,\n              );\n\n            // if not found, the social plugin will throw later anyway\n            if (!data) {\n              throw new APIError(404, {\n                message: \"Verification not found\",\n              });\n            }\n\n            const parsed = JSON.parse(data.value);\n\n            if (parsed && \"jazzAuth\" in parsed) {\n              return {\n                context: {\n                  ...ctx,\n                  jazzAuth: parsed.jazzAuth,\n                },\n              };\n            } else {\n              throw new APIError(404, {\n                message: \"JazzAuth not found in verification value\",\n              });\n            }\n          }),\n        },\n        /**\n         * For: Email OTP plugin\n         * When the user sends an OTP, we try to find the jazzAuth.\n         * If it isn't a sign-up, we expect to not find a verification value.\n         */\n        {\n          matcher: (context) => {\n            return context.path.startsWith(\"/sign-in/email-otp\");\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            const email = ctx.body.email;\n            const identifier = `jazz-auth-sign-in-otp-${email}`;\n\n            const data =\n              await ctx.context.internalAdapter.findVerificationValue(\n                identifier,\n              );\n\n            // if not found, it isn't a sign-up\n            if (!data || data.expiresAt < new Date()) {\n              return;\n            }\n\n            const parsed = JSON.parse(data.value);\n\n            if (parsed && \"jazzAuth\" in parsed) {\n              return {\n                context: {\n                  ...ctx,\n                  jazzAuth: parsed.jazzAuth,\n                },\n              };\n            } else {\n              throw new APIError(500, {\n                message: \"JazzAuth not found in verification value\",\n              });\n            }\n          }),\n        },\n      ],\n      after: [\n        /**\n         * This middleware is used to extract the jazzAuth from the user and return it in the response.\n         * It is used in the following endpoints that return the user:\n         * - /sign-up/email\n         * - /sign-in/email\n         * - /get-session\n         */\n        {\n          matcher: (context) => {\n            return (\n              context.path.startsWith(\"/sign-up\") ||\n              context.path.startsWith(\"/sign-in\") ||\n              context.path.startsWith(\"/get-session\")\n            );\n          },\n          handler: createAuthMiddleware({}, async (ctx) => {\n            const returned = ctx.context.returned as any;\n            if (!returned?.user?.id) {\n              return;\n            }\n            const jazzAuth = await extractJazzAuth(returned.user.id, ctx);\n\n            return ctx.json({\n              ...returned,\n              jazzAuth: jazzAuth,\n            });\n          }),\n        },\n\n        /**\n         * For: Social / OAuth2 plugin\n         * When the user sign-in via social, we create a verification value with the jazzAuth.\n         */\n        {\n          matcher: (context) => {\n            return context.path.startsWith(\"/sign-in/social\");\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            if (!contextContainsJazzAuth(ctx)) {\n              throw new APIError(500, {\n                message: \"JazzAuth not found in context\",\n              });\n            }\n\n            const returned = ctx.context.returned as { url: string };\n\n            const url = new URL(returned.url);\n            const state = url.searchParams.get(\"state\");\n\n            const value = JSON.stringify({ jazzAuth: ctx.jazzAuth });\n            const expiresAt = new Date();\n            expiresAt.setMinutes(expiresAt.getMinutes() + 10);\n\n            await ctx.context.internalAdapter.createVerificationValue({\n              value,\n              identifier: `jazz-auth-${state}`,\n              expiresAt,\n            });\n          }),\n        },\n      ],\n    },\n  } satisfies JazzPlugin;\n};\n\nfunction contextContainsJazzAuth(ctx: unknown): ctx is {\n  jazzAuth: {\n    accountID: string;\n    encryptedCredentials: string;\n  };\n} {\n  return !!ctx && typeof ctx === \"object\" && \"jazzAuth\" in ctx;\n}\n\nasync function extractJazzAuth(\n  userId: string,\n  ctx: MiddlewareContext<\n    MiddlewareOptions,\n    AuthContext & {\n      returned?: unknown;\n      responseHeaders?: Headers;\n    }\n  >,\n) {\n  const user = await ctx.context.adapter.findOne<{\n    accountID: string;\n    encryptedCredentials: string;\n  }>({\n    model: ctx.context.tables.user!.modelName,\n    where: [\n      {\n        field: \"id\",\n        operator: \"eq\",\n        value: userId,\n      },\n    ],\n    select: [\"accountID\", \"encryptedCredentials\"],\n  });\n\n  if (!user) {\n    return;\n  }\n\n  const jazzAuth = JSON.parse(\n    await symmetricDecrypt({\n      key: ctx.context.secret,\n      data: user.encryptedCredentials,\n    }),\n  );\n\n  return jazzAuth;\n}\n"],"mappings":";AAMA,SAAS,gBAAgB;AACzB,SAAS,kBAAkB,wBAAwB;AACnD,SAAS,4BAA4B;AAqC9B,IAAM,aAA+B,MAAM;AAChD,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,QAAQ;AAAA,MACN,MAAM;AAAA,QACJ,QAAQ;AAAA,UACN,WAAW;AAAA,YACT,MAAM;AAAA,YACN,UAAU;AAAA,YACV,OAAO;AAAA,UACT;AAAA,UACA,sBAAsB;AAAA,YACpB,MAAM;AAAA,YACN,UAAU;AAAA,YACV,OAAO;AAAA,YACP,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IAEA,OAAO;AACL,aAAO;AAAA,QACL,SAAS;AAAA,UACP,eAAe;AAAA,YACb,MAAM;AAAA,cACJ,QAAQ;AAAA,gBACN,QAAQ,OAAO,MAAM,YAAY;AAE/B,sBAAI,CAAC,wBAAwB,OAAO,GAAG;AACrC,0BAAM,IAAI,SAAS,KAAK;AAAA,sBACtB,SAAS;AAAA,oBACX,CAAC;AAAA,kBACH;AAEA,yBAAO;AAAA,oBACL,MAAM;AAAA,sBACJ,WAAW,QAAQ,SAAS;AAAA,sBAC5B,sBACE,QAAQ,SAAS;AAAA,oBACrB;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,YACA,cAAc;AAAA,cACZ,QAAQ;AAAA,gBACN,OAAO,OAAO,cAAc,YAAY;AAMtC,sBACE,wBAAwB,OAAO,KAC/B,aAAa,WAAW,WAAW,cAAc,GACjD;AACA,0BAAM,aAAa,aAAa,aAAa,UAAU;AACvD,0BAAM,QAAQ,QAAQ,gBAAgB;AAAA,sBACpC;AAAA,oBACF;AACA,0BAAM,QAAQ,QAAQ,gBAAgB;AAAA,sBACpC;AAAA,wBACE,OAAO,KAAK,UAAU,EAAE,UAAU,QAAQ,SAAS,CAAC;AAAA,wBACpD;AAAA,wBACA,WAAW,aAAa;AAAA,sBAC1B;AAAA,oBACF;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IAEA,OAAO;AAAA,MACL,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,QAKN;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBAAO,CAAC,CAAC,QAAQ,SAAS,IAAI,aAAa;AAAA,UAC7C;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,kBAAM,WAAW,KAAK,MAAM,IAAI,SAAS,IAAI,aAAa,CAAE;AAE5D,kBAAM,cAA+B;AAAA,cACnC,WAAW,SAAS;AAAA,cACpB,YAAY,SAAS;AAAA,cACrB,eAAe,SAAS;AAAA;AAAA,cAExB,UAAU;AAAA,YACZ;AAEA,kBAAM,uBAAuB,MAAM,iBAAiB;AAAA,cAClD,KAAK,IAAI,QAAQ;AAAA,cACjB,MAAM,KAAK,UAAU,WAAW;AAAA,YAClC,CAAC;AAED,mBAAO;AAAA,cACL,SAAS;AAAA,gBACP,GAAG;AAAA,gBACH,UAAU;AAAA,kBACR,WAAW,SAAS;AAAA,kBACpB;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF,CAAC;AAAA,QACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QASA;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBACE,QAAQ,KAAK,WAAW,WAAW,KACnC,QAAQ,KAAK,WAAW,kBAAkB;AAAA,UAE9C;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,kBAAM,QAAQ,IAAI,OAAO,SAAS,IAAI,MAAM;AAE5C,kBAAM,aAAa,aAAa,KAAK;AAErC,kBAAM,OACJ,MAAM,IAAI,QAAQ,gBAAgB;AAAA,cAChC;AAAA,YACF;AAGF,gBAAI,CAAC,MAAM;AACT,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAEA,kBAAM,SAAS,KAAK,MAAM,KAAK,KAAK;AAEpC,gBAAI,UAAU,cAAc,QAAQ;AAClC,qBAAO;AAAA,gBACL,SAAS;AAAA,kBACP,GAAG;AAAA,kBACH,UAAU,OAAO;AAAA,gBACnB;AAAA,cACF;AAAA,YACF,OAAO;AACL,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAAA,UACF,CAAC;AAAA,QACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAMA;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBAAO,QAAQ,KAAK,WAAW,oBAAoB;AAAA,UACrD;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,kBAAM,QAAQ,IAAI,KAAK;AACvB,kBAAM,aAAa,yBAAyB,KAAK;AAEjD,kBAAM,OACJ,MAAM,IAAI,QAAQ,gBAAgB;AAAA,cAChC;AAAA,YACF;AAGF,gBAAI,CAAC,QAAQ,KAAK,YAAY,oBAAI,KAAK,GAAG;AACxC;AAAA,YACF;AAEA,kBAAM,SAAS,KAAK,MAAM,KAAK,KAAK;AAEpC,gBAAI,UAAU,cAAc,QAAQ;AAClC,qBAAO;AAAA,gBACL,SAAS;AAAA,kBACP,GAAG;AAAA,kBACH,UAAU,OAAO;AAAA,gBACnB;AAAA,cACF;AAAA,YACF,OAAO;AACL,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,MACA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAQL;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBACE,QAAQ,KAAK,WAAW,UAAU,KAClC,QAAQ,KAAK,WAAW,UAAU,KAClC,QAAQ,KAAK,WAAW,cAAc;AAAA,UAE1C;AAAA,UACA,SAAS,qBAAqB,CAAC,GAAG,OAAO,QAAQ;AAC/C,kBAAM,WAAW,IAAI,QAAQ;AAC7B,gBAAI,CAAC,UAAU,MAAM,IAAI;AACvB;AAAA,YACF;AACA,kBAAM,WAAW,MAAM,gBAAgB,SAAS,KAAK,IAAI,GAAG;AAE5D,mBAAO,IAAI,KAAK;AAAA,cACd,GAAG;AAAA,cACH;AAAA,YACF,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA;AAAA;AAAA;AAAA;AAAA,QAMA;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBAAO,QAAQ,KAAK,WAAW,iBAAiB;AAAA,UAClD;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,gBAAI,CAAC,wBAAwB,GAAG,GAAG;AACjC,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAEA,kBAAM,WAAW,IAAI,QAAQ;AAE7B,kBAAM,MAAM,IAAI,IAAI,SAAS,GAAG;AAChC,kBAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;AAE1C,kBAAM,QAAQ,KAAK,UAAU,EAAE,UAAU,IAAI,SAAS,CAAC;AACvD,kBAAM,YAAY,oBAAI,KAAK;AAC3B,sBAAU,WAAW,UAAU,WAAW,IAAI,EAAE;AAEhD,kBAAM,IAAI,QAAQ,gBAAgB,wBAAwB;AAAA,cACxD;AAAA,cACA,YAAY,aAAa,KAAK;AAAA,cAC9B;AAAA,YACF,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,wBAAwB,KAK/B;AACA,SAAO,CAAC,CAAC,OAAO,OAAO,QAAQ,YAAY,cAAc;AAC3D;AAEA,eAAe,gBACb,QACA,KAOA;AACA,QAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAGpC;AAAA,IACD,OAAO,IAAI,QAAQ,OAAO,KAAM;AAAA,IAChC,OAAO;AAAA,MACL;AAAA,QACE,OAAO;AAAA,QACP,UAAU;AAAA,QACV,OAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,QAAQ,CAAC,aAAa,sBAAsB;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,MAAM;AACT;AAAA,EACF;AAEA,QAAM,WAAW,KAAK;AAAA,IACpB,MAAM,iBAAiB;AAAA,MACrB,KAAK,IAAI,QAAQ;AAAA,MACjB,MAAM,KAAK;AAAA,IACb,CAAC;AAAA,EACH;AAEA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../../src/better-auth/auth/server.ts"],"sourcesContent":["import {\n  AuthContext,\n  type BetterAuthPlugin,\n  MiddlewareContext,\n  MiddlewareOptions,\n} from \"better-auth\";\nimport { APIError } from \"better-auth/api\";\nimport { symmetricDecrypt, symmetricEncrypt } from \"better-auth/crypto\";\nimport { createAuthMiddleware } from \"better-auth/plugins\";\nimport type { Account, AuthCredentials, ID } from \"jazz-tools\";\n\n// Define a type to have user fields mapped in the better-auth instance\n// It should be automatic, but it needs an hard reference to BetterAuthPlugin type\n// in order to be exported as library.\ntype JazzPlugin = BetterAuthPlugin & {\n  schema: {\n    user: {\n      fields: {\n        accountID: {\n          type: \"string\";\n          required: false;\n          input: false;\n        };\n        encryptedCredentials: {\n          type: \"string\";\n          required: false;\n          input: false;\n          returned: false;\n        };\n      };\n    };\n  };\n};\n\n/**\n * @returns The BetterAuth server plugin.\n *\n * @example\n * ```ts\n * const auth = betterAuth({\n *   plugins: [jazzPlugin()],\n *   // ... other BetterAuth options\n * });\n * ```\n */\nexport const jazzPlugin: () => JazzPlugin = () => {\n  return {\n    id: \"jazz-plugin\",\n    schema: {\n      user: {\n        fields: {\n          accountID: {\n            type: \"string\",\n            required: false,\n            input: false,\n          },\n          encryptedCredentials: {\n            type: \"string\",\n            required: false,\n            input: false,\n            returned: false,\n          },\n        },\n      },\n    },\n\n    init() {\n      return {\n        options: {\n          databaseHooks: {\n            user: {\n              create: {\n                before: async (user, context) => {\n                  // If the user is created without a jazzAuth, it will throw an error.\n                  if (!contextContainsJazzAuth(context)) {\n                    throw new APIError(422, {\n                      message: \"JazzAuth is required on user creation\",\n                    });\n                  }\n                  // Decorate the user with the jazz's credentials.\n                  return {\n                    data: {\n                      accountID: context.jazzAuth.accountID,\n                      encryptedCredentials:\n                        context.jazzAuth.encryptedCredentials,\n                    },\n                  };\n                },\n              },\n            },\n            verification: {\n              create: {\n                after: async (verification, context) => {\n                  /**\n                   * For: Email OTP plugin\n                   * After a verification is created, if it is from the EmailOTP plugin,\n                   * create a new verification value with the jazzAuth with the same expiration.\n                   */\n                  if (\n                    contextContainsJazzAuth(context) &&\n                    verification.identifier.startsWith(\"sign-in-otp-\")\n                  ) {\n                    const identifier = `jazz-auth-${verification.identifier}`;\n                    await context.context.internalAdapter.deleteVerificationByIdentifier(\n                      identifier,\n                    );\n                    await context.context.internalAdapter.createVerificationValue(\n                      {\n                        value: JSON.stringify({ jazzAuth: context.jazzAuth }),\n                        identifier: identifier,\n                        expiresAt: verification.expiresAt,\n                      },\n                    );\n                  }\n                },\n              },\n            },\n          },\n        },\n      };\n    },\n\n    hooks: {\n      before: [\n        /**\n         * If the client sends a x-jazz-auth header,\n         * we encrypt the credentials and inject them into the context.\n         */\n        {\n          matcher: (context) => {\n            return !!context.headers?.get(\"x-jazz-auth\");\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            const jazzAuth = JSON.parse(ctx.headers?.get(\"x-jazz-auth\")!);\n\n            const credentials: AuthCredentials = {\n              accountID: jazzAuth.accountID as ID<Account>,\n              secretSeed: jazzAuth.secretSeed,\n              accountSecret: jazzAuth.accountSecret as any,\n              // If the provider remains 'anonymous', Jazz will not consider us authenticated later.\n              provider: \"better-auth\",\n            };\n\n            const encryptedCredentials = await symmetricEncrypt({\n              key: ctx.context.secret,\n              data: JSON.stringify(credentials),\n            });\n\n            return {\n              context: {\n                ...ctx,\n                jazzAuth: {\n                  accountID: jazzAuth.accountID,\n                  encryptedCredentials: encryptedCredentials,\n                },\n              },\n            };\n          }),\n        },\n\n        /**\n         * For: Social / OAuth2 plugin\n         * /callback is the endpoint that BetterAuth uses to authenticate the user coming from a social provider.\n         * 1. Catch the state\n         * 2. Find the verification value\n         * 3. If the verification value contains a jazzAuth, inject into the context to have it in case of registration.\n         */\n        {\n          matcher: (context) => {\n            return (\n              context.path?.startsWith(\"/callback\") ||\n              context.path?.startsWith(\"/oauth2/callback\") ||\n              false\n            );\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            const state = ctx.query?.state || ctx.body?.state;\n\n            const identifier = `jazz-auth-${state}`;\n\n            const data =\n              await ctx.context.internalAdapter.findVerificationValue(\n                identifier,\n              );\n\n            // if not found, the social plugin will throw later anyway\n            if (!data) {\n              throw new APIError(404, {\n                message: \"Verification not found\",\n              });\n            }\n\n            const parsed = JSON.parse(data.value);\n\n            if (parsed && \"jazzAuth\" in parsed) {\n              return {\n                context: {\n                  ...ctx,\n                  jazzAuth: parsed.jazzAuth,\n                },\n              };\n            } else {\n              throw new APIError(404, {\n                message: \"JazzAuth not found in verification value\",\n              });\n            }\n          }),\n        },\n        /**\n         * For: Email OTP plugin\n         * When the user sends an OTP, we try to find the jazzAuth.\n         * If it isn't a sign-up, we expect to not find a verification value.\n         */\n        {\n          matcher: (context) => {\n            return context.path?.startsWith(\"/sign-in/email-otp\") || false;\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            const email = ctx.body.email;\n            const identifier = `jazz-auth-sign-in-otp-${email}`;\n\n            const data =\n              await ctx.context.internalAdapter.findVerificationValue(\n                identifier,\n              );\n\n            // if not found, it isn't a sign-up\n            if (!data || data.expiresAt < new Date()) {\n              return;\n            }\n\n            const parsed = JSON.parse(data.value);\n\n            if (parsed && \"jazzAuth\" in parsed) {\n              return {\n                context: {\n                  ...ctx,\n                  jazzAuth: parsed.jazzAuth,\n                },\n              };\n            } else {\n              throw new APIError(500, {\n                message: \"JazzAuth not found in verification value\",\n              });\n            }\n          }),\n        },\n      ],\n      after: [\n        /**\n         * This middleware is used to extract the jazzAuth from the user and return it in the response.\n         * It is used in the following endpoints that return the user:\n         * - /sign-up/email\n         * - /sign-in/email\n         * - /get-session\n         */\n        {\n          matcher: (context) => {\n            return (\n              context.path?.startsWith(\"/sign-up\") ||\n              context.path?.startsWith(\"/sign-in\") ||\n              context.path?.startsWith(\"/get-session\") ||\n              false\n            );\n          },\n          handler: createAuthMiddleware({}, async (ctx) => {\n            const returned = ctx.context.returned as any;\n            if (!returned?.user?.id) {\n              return;\n            }\n            const jazzAuth = await extractJazzAuth(returned.user.id, ctx);\n\n            return ctx.json({\n              ...returned,\n              jazzAuth: jazzAuth,\n            });\n          }),\n        },\n\n        /**\n         * For: Social / OAuth2 plugin\n         * When the user sign-in via social, we create a verification value with the jazzAuth.\n         */\n        {\n          matcher: (context) => {\n            return context.path?.startsWith(\"/sign-in/social\") || false;\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            if (!contextContainsJazzAuth(ctx)) {\n              throw new APIError(500, {\n                message: \"JazzAuth not found in context\",\n              });\n            }\n\n            const returned = ctx.context.returned as { url: string };\n\n            const url = new URL(returned.url);\n            const state = url.searchParams.get(\"state\");\n\n            const value = JSON.stringify({ jazzAuth: ctx.jazzAuth });\n            const expiresAt = new Date();\n            expiresAt.setMinutes(expiresAt.getMinutes() + 10);\n\n            await ctx.context.internalAdapter.createVerificationValue({\n              value,\n              identifier: `jazz-auth-${state}`,\n              expiresAt,\n            });\n          }),\n        },\n      ],\n    },\n  } satisfies JazzPlugin;\n};\n\nfunction contextContainsJazzAuth(ctx: unknown): ctx is {\n  jazzAuth: {\n    accountID: string;\n    encryptedCredentials: string;\n  };\n} {\n  return !!ctx && typeof ctx === \"object\" && \"jazzAuth\" in ctx;\n}\n\nasync function extractJazzAuth(\n  userId: string,\n  ctx: MiddlewareContext<\n    MiddlewareOptions,\n    AuthContext & {\n      returned?: unknown;\n      responseHeaders?: Headers;\n    }\n  >,\n) {\n  const user = await ctx.context.adapter.findOne<{\n    accountID: string;\n    encryptedCredentials: string;\n  }>({\n    model: ctx.context.tables.user!.modelName,\n    where: [\n      {\n        field: \"id\",\n        operator: \"eq\",\n        value: userId,\n      },\n    ],\n    select: [\"accountID\", \"encryptedCredentials\"],\n  });\n\n  if (!user) {\n    return;\n  }\n\n  const jazzAuth = JSON.parse(\n    await symmetricDecrypt({\n      key: ctx.context.secret,\n      data: user.encryptedCredentials,\n    }),\n  );\n\n  return jazzAuth;\n}\n"],"mappings":";AAMA,SAAS,gBAAgB;AACzB,SAAS,kBAAkB,wBAAwB;AACnD,SAAS,4BAA4B;AAqC9B,IAAM,aAA+B,MAAM;AAChD,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,QAAQ;AAAA,MACN,MAAM;AAAA,QACJ,QAAQ;AAAA,UACN,WAAW;AAAA,YACT,MAAM;AAAA,YACN,UAAU;AAAA,YACV,OAAO;AAAA,UACT;AAAA,UACA,sBAAsB;AAAA,YACpB,MAAM;AAAA,YACN,UAAU;AAAA,YACV,OAAO;AAAA,YACP,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IAEA,OAAO;AACL,aAAO;AAAA,QACL,SAAS;AAAA,UACP,eAAe;AAAA,YACb,MAAM;AAAA,cACJ,QAAQ;AAAA,gBACN,QAAQ,OAAO,MAAM,YAAY;AAE/B,sBAAI,CAAC,wBAAwB,OAAO,GAAG;AACrC,0BAAM,IAAI,SAAS,KAAK;AAAA,sBACtB,SAAS;AAAA,oBACX,CAAC;AAAA,kBACH;AAEA,yBAAO;AAAA,oBACL,MAAM;AAAA,sBACJ,WAAW,QAAQ,SAAS;AAAA,sBAC5B,sBACE,QAAQ,SAAS;AAAA,oBACrB;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,YACA,cAAc;AAAA,cACZ,QAAQ;AAAA,gBACN,OAAO,OAAO,cAAc,YAAY;AAMtC,sBACE,wBAAwB,OAAO,KAC/B,aAAa,WAAW,WAAW,cAAc,GACjD;AACA,0BAAM,aAAa,aAAa,aAAa,UAAU;AACvD,0BAAM,QAAQ,QAAQ,gBAAgB;AAAA,sBACpC;AAAA,oBACF;AACA,0BAAM,QAAQ,QAAQ,gBAAgB;AAAA,sBACpC;AAAA,wBACE,OAAO,KAAK,UAAU,EAAE,UAAU,QAAQ,SAAS,CAAC;AAAA,wBACpD;AAAA,wBACA,WAAW,aAAa;AAAA,sBAC1B;AAAA,oBACF;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IAEA,OAAO;AAAA,MACL,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,QAKN;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBAAO,CAAC,CAAC,QAAQ,SAAS,IAAI,aAAa;AAAA,UAC7C;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,kBAAM,WAAW,KAAK,MAAM,IAAI,SAAS,IAAI,aAAa,CAAE;AAE5D,kBAAM,cAA+B;AAAA,cACnC,WAAW,SAAS;AAAA,cACpB,YAAY,SAAS;AAAA,cACrB,eAAe,SAAS;AAAA;AAAA,cAExB,UAAU;AAAA,YACZ;AAEA,kBAAM,uBAAuB,MAAM,iBAAiB;AAAA,cAClD,KAAK,IAAI,QAAQ;AAAA,cACjB,MAAM,KAAK,UAAU,WAAW;AAAA,YAClC,CAAC;AAED,mBAAO;AAAA,cACL,SAAS;AAAA,gBACP,GAAG;AAAA,gBACH,UAAU;AAAA,kBACR,WAAW,SAAS;AAAA,kBACpB;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF,CAAC;AAAA,QACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QASA;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBACE,QAAQ,MAAM,WAAW,WAAW,KACpC,QAAQ,MAAM,WAAW,kBAAkB,KAC3C;AAAA,UAEJ;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,kBAAM,QAAQ,IAAI,OAAO,SAAS,IAAI,MAAM;AAE5C,kBAAM,aAAa,aAAa,KAAK;AAErC,kBAAM,OACJ,MAAM,IAAI,QAAQ,gBAAgB;AAAA,cAChC;AAAA,YACF;AAGF,gBAAI,CAAC,MAAM;AACT,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAEA,kBAAM,SAAS,KAAK,MAAM,KAAK,KAAK;AAEpC,gBAAI,UAAU,cAAc,QAAQ;AAClC,qBAAO;AAAA,gBACL,SAAS;AAAA,kBACP,GAAG;AAAA,kBACH,UAAU,OAAO;AAAA,gBACnB;AAAA,cACF;AAAA,YACF,OAAO;AACL,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAAA,UACF,CAAC;AAAA,QACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAMA;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBAAO,QAAQ,MAAM,WAAW,oBAAoB,KAAK;AAAA,UAC3D;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,kBAAM,QAAQ,IAAI,KAAK;AACvB,kBAAM,aAAa,yBAAyB,KAAK;AAEjD,kBAAM,OACJ,MAAM,IAAI,QAAQ,gBAAgB;AAAA,cAChC;AAAA,YACF;AAGF,gBAAI,CAAC,QAAQ,KAAK,YAAY,oBAAI,KAAK,GAAG;AACxC;AAAA,YACF;AAEA,kBAAM,SAAS,KAAK,MAAM,KAAK,KAAK;AAEpC,gBAAI,UAAU,cAAc,QAAQ;AAClC,qBAAO;AAAA,gBACL,SAAS;AAAA,kBACP,GAAG;AAAA,kBACH,UAAU,OAAO;AAAA,gBACnB;AAAA,cACF;AAAA,YACF,OAAO;AACL,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,MACA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAQL;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBACE,QAAQ,MAAM,WAAW,UAAU,KACnC,QAAQ,MAAM,WAAW,UAAU,KACnC,QAAQ,MAAM,WAAW,cAAc,KACvC;AAAA,UAEJ;AAAA,UACA,SAAS,qBAAqB,CAAC,GAAG,OAAO,QAAQ;AAC/C,kBAAM,WAAW,IAAI,QAAQ;AAC7B,gBAAI,CAAC,UAAU,MAAM,IAAI;AACvB;AAAA,YACF;AACA,kBAAM,WAAW,MAAM,gBAAgB,SAAS,KAAK,IAAI,GAAG;AAE5D,mBAAO,IAAI,KAAK;AAAA,cACd,GAAG;AAAA,cACH;AAAA,YACF,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA;AAAA;AAAA;AAAA;AAAA,QAMA;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBAAO,QAAQ,MAAM,WAAW,iBAAiB,KAAK;AAAA,UACxD;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,gBAAI,CAAC,wBAAwB,GAAG,GAAG;AACjC,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAEA,kBAAM,WAAW,IAAI,QAAQ;AAE7B,kBAAM,MAAM,IAAI,IAAI,SAAS,GAAG;AAChC,kBAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;AAE1C,kBAAM,QAAQ,KAAK,UAAU,EAAE,UAAU,IAAI,SAAS,CAAC;AACvD,kBAAM,YAAY,oBAAI,KAAK;AAC3B,sBAAU,WAAW,UAAU,WAAW,IAAI,EAAE;AAEhD,kBAAM,IAAI,QAAQ,gBAAgB,wBAAwB;AAAA,cACxD;AAAA,cACA,YAAY,aAAa,KAAK;AAAA,cAC9B;AAAA,YACF,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,wBAAwB,KAK/B;AACA,SAAO,CAAC,CAAC,OAAO,OAAO,QAAQ,YAAY,cAAc;AAC3D;AAEA,eAAe,gBACb,QACA,KAOA;AACA,QAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAGpC;AAAA,IACD,OAAO,IAAI,QAAQ,OAAO,KAAM;AAAA,IAChC,OAAO;AAAA,MACL;AAAA,QACE,OAAO;AAAA,QACP,UAAU;AAAA,QACV,OAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,QAAQ,CAAC,aAAa,sBAAsB;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,MAAM;AACT;AAAA,EACF;AAEA,QAAM,WAAW,KAAK;AAAA,IACpB,MAAM,iBAAiB;AAAA,MACrB,KAAK,IAAI,QAAQ;AAAA,MACjB,MAAM,KAAK;AAAA,IACb,CAAC;AAAA,EACH;AAEA,SAAO;AACT;","names":[]}