payload-auth 1.0.0

package/dist/better-auth/plugin/lib/payload-access.js

@@ -0,0 +1,64 @@
+export const isAdminWithRoles = (config = {})=>({ req })=>{
+        const { adminRoles = [
+            'admin'
+        ] } = config;
+        if (!req?.user || !req.user.role || !adminRoles.includes(req.user.role)) return false;
+        return true;
+    };
+export const isAdminOrCurrentUserWithRoles = (config = {})=>({ req })=>{
+        const { adminRoles = [
+            'admin'
+        ], idField = 'id' } = config;
+        if (isAdminWithRoles({
+            adminRoles
+        })({
+            req
+        })) return true;
+        if (!req?.user) return false;
+        return {
+            [idField]: {
+                equals: req?.user?.id
+            }
+        };
+    };
+export const isAdminOrCurrentUserUpdateWithAllowedFields = (config)=>{
+    return async ({ req, id, data })=>{
+        const { adminRoles = [
+            'admin'
+        ], allowedFields = [], userSlug, idField = 'id' } = config;
+        const user = req.user;
+        if (isAdminWithRoles({
+            adminRoles
+        })({
+            req
+        })) return true;
+        if (!user) return false;
+        if (user[idField] === id && data) {
+            const dataKeys = Object.keys(data);
+            const hasCurrentPassword = dataKeys.includes('currentPassword');
+            const hasPassword = dataKeys.includes('password');
+            if (hasPassword || hasCurrentPassword) {
+                if (!(hasCurrentPassword && hasPassword)) return false;
+                try {
+                    if (!user.email) return false;
+                    const result = await req.payload.login({
+                        collection: userSlug,
+                        data: {
+                            email: user.email,
+                            password: data.currentPassword
+                        }
+                    });
+                    if (!result) return false;
+                    allowedFields.push('password', 'currentPassword');
+                } catch (error) {
+                    return false;
+                }
+            }
+            const hasDisallowedField = dataKeys.some((key)=>!allowedFields.includes(key));
+            return !hasDisallowedField;
+        }
+        return false;
+    };
+};
+
+//# sourceMappingURL=payload-access.js.map

package/dist/better-auth/plugin/lib/payload-access.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/plugin/lib/payload-access.ts"],"sourcesContent":["import type { Access, FieldAccess } from 'payload'\n\nexport type AdminRolesConfig = {\n  adminRoles?: string[]\n}\n\nexport type AdminOrCurrentUserConfig = AdminRolesConfig & {\n  idField?: string\n}\n\nexport type AdminOrCurrentUserUpdateConfig = AdminOrCurrentUserConfig & {\n  allowedFields?: string[]\n  userSlug: string\n}\n\nexport const isAdminWithRoles =\n  (config: AdminRolesConfig = {}): FieldAccess =>\n  ({ req }) => {\n    const { adminRoles = ['admin'] } = config\n    if (!req?.user || !req.user.role || !adminRoles.includes(req.user.role)) return false\n    return true\n  }\n\nexport const isAdminOrCurrentUserWithRoles =\n  (config: AdminOrCurrentUserConfig = {}): Access =>\n  ({ req }) => {\n    const { adminRoles = ['admin'], idField = 'id' } = config\n    if (isAdminWithRoles({ adminRoles })({ req })) return true\n    if (!req?.user) return false\n    return {\n      [idField]: {\n        equals: req?.user?.id,\n      },\n    }\n  }\n\nexport const isAdminOrCurrentUserUpdateWithAllowedFields = (\n  config: AdminOrCurrentUserUpdateConfig,\n): Access => {\n  return async ({ req, id, data }) => {\n    const { adminRoles = ['admin'], allowedFields = [], userSlug, idField = 'id' } = config\n    const user = req.user\n\n    if (isAdminWithRoles({ adminRoles })({ req })) return true\n\n    if (!user) return false\n\n    if (user[idField] === id && data) {\n      const dataKeys = Object.keys(data)\n\n      const hasCurrentPassword = dataKeys.includes('currentPassword')\n      const hasPassword = dataKeys.includes('password')\n\n      if (hasPassword || hasCurrentPassword) {\n        if (!(hasCurrentPassword && hasPassword)) return false\n        try {\n          if (!user.email) return false\n\n          const result = await req.payload.login({\n            collection: userSlug,\n            data: {\n              email: user.email,\n              password: data.currentPassword,\n            },\n          })\n\n          if (!result) return false\n\n          allowedFields.push('password', 'currentPassword')\n        } catch (error) {\n          return false\n        }\n      }\n\n      const hasDisallowedField = dataKeys.some((key) => !allowedFields.includes(key))\n\n      return !hasDisallowedField\n    }\n\n    return false\n  }\n}\n"],"names":["isAdminWithRoles","config","req","adminRoles","user","role","includes","isAdminOrCurrentUserWithRoles","idField","equals","id","isAdminOrCurrentUserUpdateWithAllowedFields","data","allowedFields","userSlug","dataKeys","Object","keys","hasCurrentPassword","hasPassword","email","result","payload","login","collection","password","currentPassword","push","error","hasDisallowedField","some","key"],"mappings":"AAeA,OAAO,MAAMA,mBACX,CAACC,SAA2B,CAAC,CAAC,GAC9B,CAAC,EAAEC,GAAG,EAAE;QACN,MAAM,EAAEC,aAAa;YAAC;SAAQ,EAAE,GAAGF;QACnC,IAAI,CAACC,KAAKE,QAAQ,CAACF,IAAIE,IAAI,CAACC,IAAI,IAAI,CAACF,WAAWG,QAAQ,CAACJ,IAAIE,IAAI,CAACC,IAAI,GAAG,OAAO;QAChF,OAAO;IACT,EAAC;AAEH,OAAO,MAAME,gCACX,CAACN,SAAmC,CAAC,CAAC,GACtC,CAAC,EAAEC,GAAG,EAAE;QACN,MAAM,EAAEC,aAAa;YAAC;SAAQ,EAAEK,UAAU,IAAI,EAAE,GAAGP;QACnD,IAAID,iBAAiB;YAAEG;QAAW,GAAG;YAAED;QAAI,IAAI,OAAO;QACtD,IAAI,CAACA,KAAKE,MAAM,OAAO;QACvB,OAAO;YACL,CAACI,QAAQ,EAAE;gBACTC,QAAQP,KAAKE,MAAMM;YACrB;QACF;IACF,EAAC;AAEH,OAAO,MAAMC,8CAA8C,CACzDV;IAEA,OAAO,OAAO,EAAEC,GAAG,EAAEQ,EAAE,EAAEE,IAAI,EAAE;QAC7B,MAAM,EAAET,aAAa;YAAC;SAAQ,EAAEU,gBAAgB,EAAE,EAAEC,QAAQ,EAAEN,UAAU,IAAI,EAAE,GAAGP;QACjF,MAAMG,OAAOF,IAAIE,IAAI;QAErB,IAAIJ,iBAAiB;YAAEG;QAAW,GAAG;YAAED;QAAI,IAAI,OAAO;QAEtD,IAAI,CAACE,MAAM,OAAO;QAElB,IAAIA,IAAI,CAACI,QAAQ,KAAKE,MAAME,MAAM;YAChC,MAAMG,WAAWC,OAAOC,IAAI,CAACL;YAE7B,MAAMM,qBAAqBH,SAAST,QAAQ,CAAC;YAC7C,MAAMa,cAAcJ,SAAST,QAAQ,CAAC;YAEtC,IAAIa,eAAeD,oBAAoB;gBACrC,IAAI,CAAEA,CAAAA,sBAAsBC,WAAU,GAAI,OAAO;gBACjD,IAAI;oBACF,IAAI,CAACf,KAAKgB,KAAK,EAAE,OAAO;oBAExB,MAAMC,SAAS,MAAMnB,IAAIoB,OAAO,CAACC,KAAK,CAAC;wBACrCC,YAAYV;wBACZF,MAAM;4BACJQ,OAAOhB,KAAKgB,KAAK;4BACjBK,UAAUb,KAAKc,eAAe;wBAChC;oBACF;oBAEA,IAAI,CAACL,QAAQ,OAAO;oBAEpBR,cAAcc,IAAI,CAAC,YAAY;gBACjC,EAAE,OAAOC,OAAO;oBACd,OAAO;gBACT;YACF;YAEA,MAAMC,qBAAqBd,SAASe,IAAI,CAAC,CAACC,MAAQ,CAAClB,cAAcP,QAAQ,CAACyB;YAE1E,OAAO,CAACF;QACV;QAEA,OAAO;IACT;AACF,EAAC"}

package/dist/better-auth/plugin/lib/prepare-session-data.d.ts

@@ -0,0 +1,21 @@
+import type { Config, Payload } from 'payload';
+type CollectionSlugs = {
+    userCollectionSlug: string;
+    sessionCollectionSlug: string;
+};
+/**
+ * Prepares session data for cookie cache by filtering user and session objects
+ * based on the payload configuration's 'saveToJwt' property
+ */
+export declare function prepareSessionData({ newSession, payloadConfig, collectionSlugs, }: {
+    newSession: {
+        user: any;
+        session: any;
+    };
+    payloadConfig: Payload['config'] | Config;
+    collectionSlugs: CollectionSlugs;
+}): Promise<{
+    user: Record<string, unknown>;
+    session: any;
+} | null>;
+export {};

package/dist/better-auth/plugin/lib/prepare-session-data.js

@@ -0,0 +1,42 @@
+import { getFieldsToSign } from 'payload';
+/**
+ * Prepares session data for cookie cache by filtering user and session objects
+ * based on the payload configuration's 'saveToJwt' property
+ */ export async function prepareSessionData({ newSession, payloadConfig, collectionSlugs }) {
+    if (!newSession || !newSession.user) {
+        return null;
+    }
+    const { userCollectionSlug, sessionCollectionSlug } = collectionSlugs;
+    const userCollection = payloadConfig?.collections?.find((c)=>c.slug === userCollectionSlug);
+    const sessionCollection = payloadConfig?.collections?.find((c)=>c.slug === sessionCollectionSlug);
+    if (!userCollection) {
+        throw new Error(`User collection with slug '${userCollectionSlug}' not found`);
+    }
+    const filteredUser = getFieldsToSign({
+        collectionConfig: userCollection,
+        email: newSession.user.email,
+        user: newSession.user
+    });
+    let filteredSession = newSession.session;
+    const isImpersonated = newSession.session.impersonatedBy;
+    if (sessionCollection && newSession.session) {
+        filteredSession = getFieldsToSign({
+            collectionConfig: sessionCollection,
+            email: newSession.user.email,
+            user: newSession.session
+        });
+        // getFieldsToSign is meant for auth collections so we remove the email and collection fields
+        delete filteredSession.email;
+        delete filteredSession.collection;
+    }
+    if (isImpersonated) {
+        filteredSession.impersonatedBy = newSession.session.impersonatedBy;
+    }
+    return {
+        ...newSession,
+        user: filteredUser,
+        session: filteredSession
+    };
+}
+
+//# sourceMappingURL=prepare-session-data.js.map

package/dist/better-auth/plugin/lib/prepare-session-data.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/plugin/lib/prepare-session-data.ts"],"sourcesContent":["import { getFieldsToSign } from 'payload'\nimport type { Config, Payload } from 'payload'\n\ntype CollectionSlugs = {\n  userCollectionSlug: string\n  sessionCollectionSlug: string\n}\n\n/**\n * Prepares session data for cookie cache by filtering user and session objects\n * based on the payload configuration's 'saveToJwt' property\n */\nexport async function prepareSessionData({\n  newSession,\n  payloadConfig,\n  collectionSlugs,\n}: {\n  newSession: {\n    user: any\n    session: any\n  }\n  payloadConfig: Payload['config'] | Config\n  collectionSlugs: CollectionSlugs\n}) {\n  if (!newSession || !newSession.user) {\n    return null\n  }\n\n  const { userCollectionSlug, sessionCollectionSlug } = collectionSlugs\n\n  const userCollection = payloadConfig?.collections?.find((c) => c.slug === userCollectionSlug)\n  const sessionCollection = payloadConfig?.collections?.find(\n    (c) => c.slug === sessionCollectionSlug,\n  )\n\n  if (!userCollection) {\n    throw new Error(`User collection with slug '${userCollectionSlug}' not found`)\n  }\n\n  const filteredUser = getFieldsToSign({\n    collectionConfig: userCollection,\n    email: newSession.user.email,\n    user: newSession.user,\n  })\n\n  let filteredSession = newSession.session\n  const isImpersonated = newSession.session.impersonatedBy\n  if (sessionCollection && newSession.session) {\n    filteredSession = getFieldsToSign({\n      collectionConfig: sessionCollection,\n      email: newSession.user.email,\n      user: newSession.session,\n    }) as typeof newSession.session\n\n    // getFieldsToSign is meant for auth collections so we remove the email and collection fields\n    delete filteredSession.email\n    delete filteredSession.collection\n  }\n\n  if (isImpersonated) {\n    filteredSession.impersonatedBy = newSession.session.impersonatedBy\n  }\n\n  return {\n    ...newSession,\n    user: filteredUser,\n    session: filteredSession,\n  }\n}\n"],"names":["getFieldsToSign","prepareSessionData","newSession","payloadConfig","collectionSlugs","user","userCollectionSlug","sessionCollectionSlug","userCollection","collections","find","c","slug","sessionCollection","Error","filteredUser","collectionConfig","email","filteredSession","session","isImpersonated","impersonatedBy","collection"],"mappings":"AAAA,SAASA,eAAe,QAAQ,UAAS;AAQzC;;;CAGC,GACD,OAAO,eAAeC,mBAAmB,EACvCC,UAAU,EACVC,aAAa,EACbC,eAAe,EAQhB;IACC,IAAI,CAACF,cAAc,CAACA,WAAWG,IAAI,EAAE;QACnC,OAAO;IACT;IAEA,MAAM,EAAEC,kBAAkB,EAAEC,qBAAqB,EAAE,GAAGH;IAEtD,MAAMI,iBAAiBL,eAAeM,aAAaC,KAAK,CAACC,IAAMA,EAAEC,IAAI,KAAKN;IAC1E,MAAMO,oBAAoBV,eAAeM,aAAaC,KACpD,CAACC,IAAMA,EAAEC,IAAI,KAAKL;IAGpB,IAAI,CAACC,gBAAgB;QACnB,MAAM,IAAIM,MAAM,CAAC,2BAA2B,EAAER,mBAAmB,WAAW,CAAC;IAC/E;IAEA,MAAMS,eAAef,gBAAgB;QACnCgB,kBAAkBR;QAClBS,OAAOf,WAAWG,IAAI,CAACY,KAAK;QAC5BZ,MAAMH,WAAWG,IAAI;IACvB;IAEA,IAAIa,kBAAkBhB,WAAWiB,OAAO;IACxC,MAAMC,iBAAiBlB,WAAWiB,OAAO,CAACE,cAAc;IACxD,IAAIR,qBAAqBX,WAAWiB,OAAO,EAAE;QAC3CD,kBAAkBlB,gBAAgB;YAChCgB,kBAAkBH;YAClBI,OAAOf,WAAWG,IAAI,CAACY,KAAK;YAC5BZ,MAAMH,WAAWiB,OAAO;QAC1B;QAEA,6FAA6F;QAC7F,OAAOD,gBAAgBD,KAAK;QAC5B,OAAOC,gBAAgBI,UAAU;IACnC;IAEA,IAAIF,gBAAgB;QAClBF,gBAAgBG,cAAc,GAAGnB,WAAWiB,OAAO,CAACE,cAAc;IACpE;IAEA,OAAO;QACL,GAAGnB,UAAU;QACbG,MAAMU;QACNI,SAASD;IACX;AACF"}

package/dist/better-auth/plugin/lib/respect-save-to-jwt-fields-middleware.d.ts

@@ -0,0 +1,15 @@
+import type { SanitizedBetterAuthOptions, PayloadBetterAuthPluginOptions } from '..';
+import type { Config, Payload } from 'payload';
+/**
+ * Sets up a middleware that enforces the saveToJwt configuration when setting session data.
+ * This ensures that only fields specified in saveToJwt are included in the cookie cache
+ * for both user and session objects.
+ *
+ * The middleware runs after authentication and filters the session data based on
+ * the collection configurations before storing it in the cookie cache.
+ */
+export declare function respectSaveToJwtFieldsMiddleware({ sanitizedOptions, payloadConfig, pluginOptions, }: {
+    sanitizedOptions: SanitizedBetterAuthOptions;
+    payloadConfig: Payload['config'] | Config;
+    pluginOptions: PayloadBetterAuthPluginOptions;
+}): void;

package/dist/better-auth/plugin/lib/respect-save-to-jwt-fields-middleware.js

@@ -0,0 +1,30 @@
+import { setCookieCache } from 'better-auth/cookies';
+import { createAuthMiddleware } from 'better-auth/api';
+import { prepareSessionData } from './prepare-session-data';
+/**
+ * Sets up a middleware that enforces the saveToJwt configuration when setting session data.
+ * This ensures that only fields specified in saveToJwt are included in the cookie cache
+ * for both user and session objects.
+ *
+ * The middleware runs after authentication and filters the session data based on
+ * the collection configurations before storing it in the cookie cache.
+ */ export function respectSaveToJwtFieldsMiddleware({ sanitizedOptions, payloadConfig, pluginOptions }) {
+    if (typeof sanitizedOptions.hooks !== 'object') sanitizedOptions.hooks = {};
+    sanitizedOptions.hooks.after = createAuthMiddleware(async (ctx)=>{
+        const newSession = ctx.context?.newSession;
+        if (!newSession) return;
+        const filteredSessionData = await prepareSessionData({
+            newSession,
+            payloadConfig,
+            collectionSlugs: {
+                userCollectionSlug: pluginOptions.users?.slug ?? 'users',
+                sessionCollectionSlug: pluginOptions.sessions?.slug ?? 'sessions'
+            }
+        });
+        if (filteredSessionData) {
+            await setCookieCache(ctx, filteredSessionData);
+        }
+    });
+}
+
+//# sourceMappingURL=respect-save-to-jwt-fields-middleware.js.map

package/dist/better-auth/plugin/lib/respect-save-to-jwt-fields-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/plugin/lib/respect-save-to-jwt-fields-middleware.ts"],"sourcesContent":["import { setCookieCache } from 'better-auth/cookies'\nimport { createAuthMiddleware } from 'better-auth/api'\nimport type { SanitizedBetterAuthOptions, PayloadBetterAuthPluginOptions } from '..'\nimport type { Config, Payload } from 'payload'\nimport { prepareSessionData } from './prepare-session-data'\n\n/**\n * Sets up a middleware that enforces the saveToJwt configuration when setting session data.\n * This ensures that only fields specified in saveToJwt are included in the cookie cache\n * for both user and session objects.\n *\n * The middleware runs after authentication and filters the session data based on\n * the collection configurations before storing it in the cookie cache.\n */\nexport function respectSaveToJwtFieldsMiddleware({\n  sanitizedOptions,\n  payloadConfig,\n  pluginOptions,\n}: {\n  sanitizedOptions: SanitizedBetterAuthOptions\n  payloadConfig: Payload['config'] | Config\n  pluginOptions: PayloadBetterAuthPluginOptions\n}) {\n  if (typeof sanitizedOptions.hooks !== 'object') sanitizedOptions.hooks = {}\n\n  sanitizedOptions.hooks.after = createAuthMiddleware(async (ctx) => {\n    const newSession = ctx.context?.newSession\n    if (!newSession) return\n\n    const filteredSessionData = await prepareSessionData({\n      newSession,\n      payloadConfig,\n      collectionSlugs: {\n        userCollectionSlug: pluginOptions.users?.slug ?? 'users',\n        sessionCollectionSlug: pluginOptions.sessions?.slug ?? 'sessions',\n      },\n    })\n\n    if (filteredSessionData) {\n      await setCookieCache(ctx, filteredSessionData as any)\n    }\n  })\n}\n"],"names":["setCookieCache","createAuthMiddleware","prepareSessionData","respectSaveToJwtFieldsMiddleware","sanitizedOptions","payloadConfig","pluginOptions","hooks","after","ctx","newSession","context","filteredSessionData","collectionSlugs","userCollectionSlug","users","slug","sessionCollectionSlug","sessions"],"mappings":"AAAA,SAASA,cAAc,QAAQ,sBAAqB;AACpD,SAASC,oBAAoB,QAAQ,kBAAiB;AAGtD,SAASC,kBAAkB,QAAQ,yBAAwB;AAE3D;;;;;;;CAOC,GACD,OAAO,SAASC,iCAAiC,EAC/CC,gBAAgB,EAChBC,aAAa,EACbC,aAAa,EAKd;IACC,IAAI,OAAOF,iBAAiBG,KAAK,KAAK,UAAUH,iBAAiBG,KAAK,GAAG,CAAC;IAE1EH,iBAAiBG,KAAK,CAACC,KAAK,GAAGP,qBAAqB,OAAOQ;QACzD,MAAMC,aAAaD,IAAIE,OAAO,EAAED;QAChC,IAAI,CAACA,YAAY;QAEjB,MAAME,sBAAsB,MAAMV,mBAAmB;YACnDQ;YACAL;YACAQ,iBAAiB;gBACfC,oBAAoBR,cAAcS,KAAK,EAAEC,QAAQ;gBACjDC,uBAAuBX,cAAcY,QAAQ,EAAEF,QAAQ;YACzD;QACF;QAEA,IAAIJ,qBAAqB;YACvB,MAAMZ,eAAeS,KAAKG;QAC5B;IACF;AACF"}

package/dist/better-auth/plugin/lib/sanitize-auth-options.d.ts

@@ -0,0 +1,5 @@
+import type { PayloadBetterAuthPluginOptions, SanitizedBetterAuthOptions } from '..';
+/**
+ * Sanitizes the BetterAuth options
+ */
+export declare function sanitizeBetterAuthOptions(options: PayloadBetterAuthPluginOptions): SanitizedBetterAuthOptions;

package/dist/better-auth/plugin/lib/sanitize-auth-options.js

@@ -0,0 +1,298 @@
+import { supportedBetterAuthPluginIds, betterAuthPluginSlugs, baseCollectionSlugs } from './config';
+import { ensurePasswordSetBeforeUserCreate } from './ensure-password-set-before-create';
+import { verifyPassword, hashPassword } from './password';
+/**
+ * Sanitizes the BetterAuth options
+ */ export function sanitizeBetterAuthOptions(options) {
+    const baOptions = options.betterAuthOptions;
+    const userCollectionSlug = options.users?.slug ?? 'users';
+    const accountCollectionSlug = options.accounts?.slug ?? 'accounts';
+    const sessionCollectionSlug = options.sessions?.slug ?? 'sessions';
+    const verificationCollectionSlug = options.verifications?.slug ?? 'verifications';
+    const res = {
+        ...baOptions
+    };
+    res.user = {
+        ...baOptions?.user ?? {},
+        modelName: userCollectionSlug
+    };
+    res.account = {
+        ...baOptions?.account ?? {},
+        modelName: accountCollectionSlug,
+        fields: {
+            userId: 'user'
+        }
+    };
+    res.session = {
+        ...baOptions?.session ?? {},
+        modelName: sessionCollectionSlug,
+        fields: {
+            userId: 'user'
+        }
+    };
+    res.verification = {
+        ...baOptions?.verification ?? {},
+        modelName: verificationCollectionSlug
+    };
+    res.emailAndPassword = {
+        ...baOptions?.emailAndPassword ?? {},
+        enabled: baOptions?.emailAndPassword?.enabled ?? true
+    };
+    if (res.emailAndPassword.enabled) {
+        res.emailAndPassword.password = {
+            ...res.emailAndPassword.password ?? {},
+            verify: async ({ hash, password })=>{
+                return await verifyPassword({
+                    hash,
+                    password
+                });
+            },
+            hash: async (password)=>{
+                return await hashPassword(password);
+            }
+        };
+    }
+    if (Boolean(options.users?.blockFirstBetterAuthVerificationEmail)) {
+        const originalSendVerificationEmail = baOptions?.emailVerification?.sendVerificationEmail;
+        // Only override sendVerificationEmail if the developer provided their own implementation
+        if (typeof originalSendVerificationEmail === 'function') {
+            res.emailVerification = res?.emailVerification || {};
+            res.emailVerification.sendVerificationEmail = async (data, request)=>{
+                try {
+                    const user = data.user;
+                    const createdAt = new Date(user.createdAt);
+                    const now = new Date();
+                    // If the user was created less than one minute ago, don't send the verification email
+                    // as we rely on payload to send the initial email
+                    if (now.getTime() - createdAt.getTime() < 60000) {
+                        return;
+                    }
+                    await originalSendVerificationEmail(data, request);
+                } catch (error) {
+                    console.error('Error sending verification email:', error);
+                }
+            };
+        }
+    }
+    ensurePasswordSetBeforeUserCreate(res);
+    if (res.plugins) {
+        try {
+            const supportedPlugins = res.plugins.filter((plugin)=>{
+                return Object.values(supportedBetterAuthPluginIds).includes(plugin.id);
+            });
+            if (supportedPlugins.length !== res.plugins.length) {
+                console.warn(`Unsupported BetterAuth plugins detected: ${res.plugins.filter((p)=>!Object.values(supportedBetterAuthPluginIds).includes(p.id)).map((p)=>p.id).join(', ')}. Supported plugins are: ${Object.values(supportedBetterAuthPluginIds).join(', ')}. 
+            These plugins will be ignored.`);
+            }
+            // Add the schema to the supported plugins
+            if (supportedPlugins.length > 0) {
+                supportedPlugins.forEach((plugin)=>{
+                    const pluginId = plugin.id;
+                    switch(pluginId){
+                        case supportedBetterAuthPluginIds.admin:
+                            const adminPlugin = plugin;
+                            if (!adminPlugin.adminRoles) adminPlugin.adminRoles = options.users?.adminRoles ?? [
+                                'admin'
+                            ];
+                            adminPlugin.adminRoles = options.users?.adminRoles ?? [
+                                'admin'
+                            ];
+                            Object.assign(plugin, adminPlugin);
+                            break;
+                        case supportedBetterAuthPluginIds.apiKey:
+                            const apiKeyPlugin = plugin;
+                            if (!apiKeyPlugin.schema) apiKeyPlugin.schema = {};
+                            if (!apiKeyPlugin.schema.apikey) apiKeyPlugin.schema.apikey = {};
+                            apiKeyPlugin.schema.apikey = {
+                                ...apiKeyPlugin.schema.apikey,
+                                modelName: betterAuthPluginSlugs.apiKeys,
+                                fields: {
+                                    ...plugin.schema?.apikey?.fields ?? {},
+                                    userId: {
+                                        ...plugin.schema?.apikey?.fields?.userId ?? {},
+                                        fieldName: 'user'
+                                    }
+                                }
+                            };
+                            Object.assign(plugin, apiKeyPlugin);
+                            break;
+                        case supportedBetterAuthPluginIds.passkey:
+                            const passkeyPlugin = plugin;
+                            if (!passkeyPlugin.schema) passkeyPlugin.schema = {};
+                            if (!passkeyPlugin.schema.passkey) passkeyPlugin.schema.passkey = {};
+                            passkeyPlugin.schema.passkey = {
+                                ...passkeyPlugin.schema.passkey,
+                                modelName: betterAuthPluginSlugs.passkeys,
+                                fields: {
+                                    ...passkeyPlugin.schema.passkey.fields || {},
+                                    userId: {
+                                        ...passkeyPlugin.schema.passkey.fields.userId,
+                                        fieldName: 'user'
+                                    }
+                                }
+                            };
+                            Object.assign(plugin, passkeyPlugin);
+                            break;
+                        case supportedBetterAuthPluginIds.organization:
+                            const organizationPlugin = plugin;
+                            if (!organizationPlugin.schema) organizationPlugin.schema = {};
+                            if (!organizationPlugin.schema.organization) organizationPlugin.schema.member = {};
+                            if (!organizationPlugin.schema.invitation) organizationPlugin.schema.invitation = {};
+                            if (!organizationPlugin.schema.team) organizationPlugin.schema.team = {};
+                            if (!organizationPlugin.schema.session) organizationPlugin.schema.session = {};
+                            organizationPlugin.schema = {
+                                ...organizationPlugin.schema,
+                                organization: {
+                                    ...organizationPlugin.schema.organization,
+                                    modelName: betterAuthPluginSlugs.organizations,
+                                    fields: {
+                                        ...organizationPlugin.schema.organization.fields ?? {}
+                                    }
+                                },
+                                member: {
+                                    ...organizationPlugin.schema.member,
+                                    modelName: betterAuthPluginSlugs.members,
+                                    fields: {
+                                        ...organizationPlugin.schema.member.fields ?? {},
+                                        organizationId: {
+                                            ...organizationPlugin.schema.member.fields?.organizationId ?? {},
+                                            fieldName: 'organization'
+                                        },
+                                        userId: {
+                                            ...organizationPlugin.schema.member.fields?.userId ?? {},
+                                            fieldName: 'user'
+                                        },
+                                        teamId: {
+                                            ...organizationPlugin.schema.member.fields?.teamId ?? {},
+                                            fieldName: 'team'
+                                        }
+                                    }
+                                },
+                                invitation: {
+                                    ...organizationPlugin.schema.invitation,
+                                    modelName: betterAuthPluginSlugs.invitations,
+                                    fields: {
+                                        ...organizationPlugin.schema.invitation.fields ?? {},
+                                        organizationId: {
+                                            ...organizationPlugin.schema.invitation.fields?.organizationId ?? {},
+                                            fieldName: 'organization'
+                                        },
+                                        inviterId: {
+                                            ...organizationPlugin.schema.invitation.fields?.inviterId ?? {},
+                                            fieldName: 'inviter'
+                                        },
+                                        teamId: {
+                                            ...organizationPlugin.schema.invitation.fields?.teamId ?? {},
+                                            fieldName: 'team'
+                                        }
+                                    }
+                                },
+                                team: {
+                                    ...organizationPlugin.schema.team,
+                                    modelName: betterAuthPluginSlugs.teams,
+                                    fields: {
+                                        ...organizationPlugin.schema.team.fields ?? {},
+                                        organizationId: {
+                                            ...organizationPlugin.schema.team.fields?.organizationId ?? {},
+                                            fieldName: 'organization'
+                                        }
+                                    }
+                                },
+                                session: {
+                                    ...organizationPlugin.schema.session,
+                                    modelName: baseCollectionSlugs.sessions,
+                                    fields: {
+                                        ...organizationPlugin.schema.session.fields ?? {},
+                                        activeOrganizationId: {
+                                            ...organizationPlugin.schema.session.fields?.activeOrganizationId ?? {},
+                                            fieldName: 'activeOrganization'
+                                        }
+                                    }
+                                }
+                            };
+                            Object.assign(plugin, organizationPlugin);
+                            break;
+                        case supportedBetterAuthPluginIds.sso:
+                            const ssoPlugin = plugin;
+                            if (!ssoPlugin.schema) ssoPlugin.schema = {};
+                            if (!ssoPlugin.schema.sso) ssoPlugin.schema.sso = {};
+                            ssoPlugin.schema.sso = {
+                                ...ssoPlugin.schema.sso,
+                                modelName: betterAuthPluginSlugs.ssoProviders,
+                                fields: {
+                                    ...ssoPlugin.schema.sso.fields ?? {},
+                                    userId: {
+                                        ...ssoPlugin.schema.sso.fields?.userId ?? {},
+                                        fieldName: 'user'
+                                    }
+                                }
+                            };
+                            Object.assign(plugin, ssoPlugin);
+                            break;
+                        case supportedBetterAuthPluginIds.oidc:
+                            const oidcPlugin = plugin;
+                            if (!oidcPlugin.schema) oidcPlugin.schema = {};
+                            if (!oidcPlugin.schema.oauthApplication) oidcPlugin.schema.oauthApplication = {};
+                            if (!oidcPlugin.schema.oauthAccessToken) oidcPlugin.schema.oauthAccessToken = {};
+                            if (!oidcPlugin.schema.oauthConsent) oidcPlugin.schema.oauthConsent = {};
+                            oidcPlugin.schema = {
+                                ...oidcPlugin.schema,
+                                oauthApplication: {
+                                    ...oidcPlugin.schema.oauthApplication,
+                                    modelName: betterAuthPluginSlugs.oauthApplications,
+                                    fields: {
+                                        ...oidcPlugin.schema.oauthApplication.fields ?? {},
+                                        userId: {
+                                            ...oidcPlugin.schema.oauthApplication.fields?.userId ?? {},
+                                            fieldName: 'user'
+                                        }
+                                    }
+                                },
+                                oauthAccessToken: {
+                                    ...oidcPlugin.schema.oauthAccessToken,
+                                    modelName: betterAuthPluginSlugs.oauthAccessTokens,
+                                    fields: {
+                                        ...oidcPlugin.schema.oauthAccessToken.fields ?? {},
+                                        userId: {
+                                            ...oidcPlugin.schema.oauthAccessToken.fields?.userId ?? {},
+                                            fieldName: 'user'
+                                        },
+                                        clientId: {
+                                            ...oidcPlugin.schema.oauthAccessToken.fields?.clientId ?? {},
+                                            fieldName: 'client'
+                                        }
+                                    }
+                                },
+                                oauthConsent: {
+                                    ...oidcPlugin.schema.oauthConsent,
+                                    modelName: betterAuthPluginSlugs.oauthConsents,
+                                    fields: {
+                                        ...oidcPlugin.schema.oauthConsent.fields ?? {},
+                                        userId: {
+                                            ...oidcPlugin.schema.oauthConsent.fields?.userId ?? {},
+                                            fieldName: 'user'
+                                        },
+                                        clientId: {
+                                            ...oidcPlugin.schema.oauthConsent.fields?.clientId ?? {},
+                                            fieldName: 'client'
+                                        }
+                                    }
+                                }
+                            };
+                            Object.assign(plugin, oidcPlugin);
+                            break;
+                        default:
+                            break;
+                    }
+                });
+            }
+            // Make sure only the supported plugins are used
+            Object.assign(res.plugins, supportedPlugins);
+        } catch (error) {
+            throw new Error(`Error sanitizing BetterAuth plugins: ${error}`);
+        }
+    }
+    return res;
+}
+
+//# sourceMappingURL=sanitize-auth-options.js.map

package/dist/better-auth/plugin/lib/sanitize-auth-options.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/plugin/lib/sanitize-auth-options.ts"],"sourcesContent":["import type { PayloadBetterAuthPluginOptions, SanitizedBetterAuthOptions } from '..'\nimport { supportedBetterAuthPluginIds, betterAuthPluginSlugs, baseCollectionSlugs } from './config'\nimport { ensurePasswordSetBeforeUserCreate } from './ensure-password-set-before-create'\nimport { verifyPassword, hashPassword } from './password'\n\n/**\n * Sanitizes the BetterAuth options\n */\nexport function sanitizeBetterAuthOptions(\n  options: PayloadBetterAuthPluginOptions,\n): SanitizedBetterAuthOptions {\n  const baOptions = options.betterAuthOptions\n  const userCollectionSlug = options.users?.slug ?? 'users'\n  const accountCollectionSlug = options.accounts?.slug ?? 'accounts'\n  const sessionCollectionSlug = options.sessions?.slug ?? 'sessions'\n  const verificationCollectionSlug = options.verifications?.slug ?? 'verifications'\n\n  const res: SanitizedBetterAuthOptions = { ...baOptions }\n\n  res.user = {\n    ...(baOptions?.user ?? {}),\n    modelName: userCollectionSlug,\n  }\n\n  res.account = {\n    ...(baOptions?.account ?? {}),\n    modelName: accountCollectionSlug,\n    fields: {\n      userId: 'user',\n    },\n  }\n\n  res.session = {\n    ...(baOptions?.session ?? {}),\n    modelName: sessionCollectionSlug,\n    fields: {\n      userId: 'user',\n    },\n  }\n\n  res.verification = {\n    ...(baOptions?.verification ?? {}),\n    modelName: verificationCollectionSlug,\n  }\n\n  res.emailAndPassword = {\n    ...(baOptions?.emailAndPassword ?? {}),\n    enabled: baOptions?.emailAndPassword?.enabled ?? true,\n  }\n\n  if (res.emailAndPassword.enabled) {\n    res.emailAndPassword.password = {\n      ...(res.emailAndPassword.password ?? {}),\n      verify: async ({ hash, password }) => {\n        return await verifyPassword({ hash, password })\n      },\n      hash: async (password) => {\n        return await hashPassword(password)\n      },\n    }\n  }\n\n  if (Boolean(options.users?.blockFirstBetterAuthVerificationEmail)) {\n    const originalSendVerificationEmail = baOptions?.emailVerification?.sendVerificationEmail\n    // Only override sendVerificationEmail if the developer provided their own implementation\n    if (typeof originalSendVerificationEmail === 'function') {\n      res.emailVerification = res?.emailVerification || {}\n      res.emailVerification.sendVerificationEmail = async (data, request) => {\n        try {\n          const user = data.user\n          const createdAt = new Date(user.createdAt)\n          const now = new Date()\n          // If the user was created less than one minute ago, don't send the verification email\n          // as we rely on payload to send the initial email\n          if (now.getTime() - createdAt.getTime() < 60000) {\n            return\n          }\n\n          await originalSendVerificationEmail(data, request)\n        } catch (error) {\n          console.error('Error sending verification email:', error)\n        }\n      }\n    }\n  }\n\n  ensurePasswordSetBeforeUserCreate(res)\n\n  if (res.plugins) {\n    try {\n      const supportedPlugins = res.plugins.filter((plugin) => {\n        return Object.values(supportedBetterAuthPluginIds).includes(\n          plugin.id as (typeof supportedBetterAuthPluginIds)[keyof typeof supportedBetterAuthPluginIds],\n        )\n      })\n\n      if (supportedPlugins.length !== res.plugins.length) {\n        console.warn(\n          `Unsupported BetterAuth plugins detected: ${res.plugins\n            .filter(\n              (p) =>\n                !Object.values(supportedBetterAuthPluginIds).includes(\n                  p.id as (typeof supportedBetterAuthPluginIds)[keyof typeof supportedBetterAuthPluginIds],\n                ),\n            )\n            .map((p) => p.id)\n            .join(', ')}. Supported plugins are: ${Object.values(supportedBetterAuthPluginIds).join(\n            ', ',\n          )}. \n            These plugins will be ignored.`,\n        )\n      }\n\n      // Add the schema to the supported plugins\n      if (supportedPlugins.length > 0) {\n        supportedPlugins.forEach((plugin) => {\n          const pluginId =\n            plugin.id as (typeof supportedBetterAuthPluginIds)[keyof typeof supportedBetterAuthPluginIds]\n\n          switch (pluginId) {\n            case supportedBetterAuthPluginIds.admin:\n              const adminPlugin = plugin as any\n              if (!adminPlugin.adminRoles)\n                adminPlugin.adminRoles = options.users?.adminRoles ?? ['admin']\n              adminPlugin.adminRoles = options.users?.adminRoles ?? ['admin']\n              Object.assign(plugin, adminPlugin)\n              break\n            case supportedBetterAuthPluginIds.apiKey:\n              const apiKeyPlugin = plugin as any\n              if (!apiKeyPlugin.schema) apiKeyPlugin.schema = {}\n              if (!apiKeyPlugin.schema.apikey) apiKeyPlugin.schema.apikey = {}\n              apiKeyPlugin.schema.apikey = {\n                ...apiKeyPlugin.schema.apikey,\n                modelName: betterAuthPluginSlugs.apiKeys,\n                fields: {\n                  ...(plugin.schema?.apikey?.fields ?? {}),\n                  userId: {\n                    ...(plugin.schema?.apikey?.fields?.userId ?? {}),\n                    fieldName: 'user',\n                  },\n                },\n              }\n              Object.assign(plugin, apiKeyPlugin)\n              break\n            case supportedBetterAuthPluginIds.passkey:\n              const passkeyPlugin = plugin as any\n              if (!passkeyPlugin.schema) passkeyPlugin.schema = {}\n              if (!passkeyPlugin.schema.passkey) passkeyPlugin.schema.passkey = {}\n              passkeyPlugin.schema.passkey = {\n                ...passkeyPlugin.schema.passkey,\n                modelName: betterAuthPluginSlugs.passkeys,\n                fields: {\n                  ...(passkeyPlugin.schema.passkey.fields || {}),\n                  userId: {\n                    ...passkeyPlugin.schema.passkey.fields.userId,\n                    fieldName: 'user',\n                  },\n                },\n              }\n              Object.assign(plugin, passkeyPlugin)\n              break\n            case supportedBetterAuthPluginIds.organization:\n              const organizationPlugin = plugin as any\n              if (!organizationPlugin.schema) organizationPlugin.schema = {}\n              if (!organizationPlugin.schema.organization) organizationPlugin.schema.member = {}\n              if (!organizationPlugin.schema.invitation) organizationPlugin.schema.invitation = {}\n              if (!organizationPlugin.schema.team) organizationPlugin.schema.team = {}\n              if (!organizationPlugin.schema.session) organizationPlugin.schema.session = {}\n              organizationPlugin.schema = {\n                ...organizationPlugin.schema,\n                organization: {\n                  ...organizationPlugin.schema.organization,\n                  modelName: betterAuthPluginSlugs.organizations,\n                  fields: {\n                    ...(organizationPlugin.schema.organization.fields ?? {}),\n                  },\n                },\n                member: {\n                  ...organizationPlugin.schema.member,\n                  modelName: betterAuthPluginSlugs.members,\n                  fields: {\n                    ...(organizationPlugin.schema.member.fields ?? {}),\n                    organizationId: {\n                      ...(organizationPlugin.schema.member.fields?.organizationId ?? {}),\n                      fieldName: 'organization',\n                    },\n                    userId: {\n                      ...(organizationPlugin.schema.member.fields?.userId ?? {}),\n                      fieldName: 'user',\n                    },\n                    teamId: {\n                      ...(organizationPlugin.schema.member.fields?.teamId ?? {}),\n                      fieldName: 'team',\n                    },\n                  },\n                },\n                invitation: {\n                  ...organizationPlugin.schema.invitation,\n                  modelName: betterAuthPluginSlugs.invitations,\n                  fields: {\n                    ...(organizationPlugin.schema.invitation.fields ?? {}),\n                    organizationId: {\n                      ...(organizationPlugin.schema.invitation.fields?.organizationId ?? {}),\n                      fieldName: 'organization',\n                    },\n                    inviterId: {\n                      ...(organizationPlugin.schema.invitation.fields?.inviterId ?? {}),\n                      fieldName: 'inviter',\n                    },\n                    teamId: {\n                      ...(organizationPlugin.schema.invitation.fields?.teamId ?? {}),\n                      fieldName: 'team',\n                    },\n                  },\n                },\n                team: {\n                  ...organizationPlugin.schema.team,\n                  modelName: betterAuthPluginSlugs.teams,\n                  fields: {\n                    ...(organizationPlugin.schema.team.fields ?? {}),\n                    organizationId: {\n                      ...(organizationPlugin.schema.team.fields?.organizationId ?? {}),\n                      fieldName: 'organization',\n                    },\n                  },\n                },\n                session: {\n                  ...organizationPlugin.schema.session,\n                  modelName: baseCollectionSlugs.sessions,\n                  fields: {\n                    ...(organizationPlugin.schema.session.fields ?? {}),\n                    activeOrganizationId: {\n                      ...(organizationPlugin.schema.session.fields?.activeOrganizationId ?? {}),\n                      fieldName: 'activeOrganization',\n                    },\n                  },\n                },\n              }\n              Object.assign(plugin, organizationPlugin)\n              break\n            case supportedBetterAuthPluginIds.sso:\n              const ssoPlugin = plugin as any\n              if (!ssoPlugin.schema) ssoPlugin.schema = {}\n              if (!ssoPlugin.schema.sso) ssoPlugin.schema.sso = {}\n              ssoPlugin.schema.sso = {\n                ...ssoPlugin.schema.sso,\n                modelName: betterAuthPluginSlugs.ssoProviders,\n                fields: {\n                  ...(ssoPlugin.schema.sso.fields ?? {}),\n                  userId: {\n                    ...(ssoPlugin.schema.sso.fields?.userId ?? {}),\n                    fieldName: 'user',\n                  },\n                },\n              }\n              Object.assign(plugin, ssoPlugin)\n              break\n            case supportedBetterAuthPluginIds.oidc:\n              const oidcPlugin = plugin as any\n              if (!oidcPlugin.schema) oidcPlugin.schema = {}\n              if (!oidcPlugin.schema.oauthApplication) oidcPlugin.schema.oauthApplication = {}\n              if (!oidcPlugin.schema.oauthAccessToken) oidcPlugin.schema.oauthAccessToken = {}\n              if (!oidcPlugin.schema.oauthConsent) oidcPlugin.schema.oauthConsent = {}\n              oidcPlugin.schema = {\n                ...oidcPlugin.schema,\n                oauthApplication: {\n                  ...oidcPlugin.schema.oauthApplication,\n                  modelName: betterAuthPluginSlugs.oauthApplications,\n                  fields: {\n                    ...(oidcPlugin.schema.oauthApplication.fields ?? {}),\n                    userId: {\n                      ...(oidcPlugin.schema.oauthApplication.fields?.userId ?? {}),\n                      fieldName: 'user',\n                    },\n                  },\n                },\n                oauthAccessToken: {\n                  ...oidcPlugin.schema.oauthAccessToken,\n                  modelName: betterAuthPluginSlugs.oauthAccessTokens,\n                  fields: {\n                    ...(oidcPlugin.schema.oauthAccessToken.fields ?? {}),\n                    userId: {\n                      ...(oidcPlugin.schema.oauthAccessToken.fields?.userId ?? {}),\n                      fieldName: 'user',\n                    },\n                    clientId: {\n                      ...(oidcPlugin.schema.oauthAccessToken.fields?.clientId ?? {}),\n                      fieldName: 'client',\n                    },\n                  },\n                },\n                oauthConsent: {\n                  ...oidcPlugin.schema.oauthConsent,\n                  modelName: betterAuthPluginSlugs.oauthConsents,\n                  fields: {\n                    ...(oidcPlugin.schema.oauthConsent.fields ?? {}),\n                    userId: {\n                      ...(oidcPlugin.schema.oauthConsent.fields?.userId ?? {}),\n                      fieldName: 'user',\n                    },\n                    clientId: {\n                      ...(oidcPlugin.schema.oauthConsent.fields?.clientId ?? {}),\n                      fieldName: 'client',\n                    },\n                  },\n                },\n              }\n              Object.assign(plugin, oidcPlugin)\n              break\n            default:\n              break\n          }\n        })\n      }\n      // Make sure only the supported plugins are used\n      Object.assign(res.plugins, supportedPlugins)\n    } catch (error) {\n      throw new Error(`Error sanitizing BetterAuth plugins: ${error}`)\n    }\n  }\n\n  return res\n}\n"],"names":["supportedBetterAuthPluginIds","betterAuthPluginSlugs","baseCollectionSlugs","ensurePasswordSetBeforeUserCreate","verifyPassword","hashPassword","sanitizeBetterAuthOptions","options","baOptions","betterAuthOptions","userCollectionSlug","users","slug","accountCollectionSlug","accounts","sessionCollectionSlug","sessions","verificationCollectionSlug","verifications","res","user","modelName","account","fields","userId","session","verification","emailAndPassword","enabled","password","verify","hash","Boolean","blockFirstBetterAuthVerificationEmail","originalSendVerificationEmail","emailVerification","sendVerificationEmail","data","request","createdAt","Date","now","getTime","error","console","plugins","supportedPlugins","filter","plugin","Object","values","includes","id","length","warn","p","map","join","forEach","pluginId","admin","adminPlugin","adminRoles","assign","apiKey","apiKeyPlugin","schema","apikey","apiKeys","fieldName","passkey","passkeyPlugin","passkeys","organization","organizationPlugin","member","invitation","team","organizations","members","organizationId","teamId","invitations","inviterId","teams","activeOrganizationId","sso","ssoPlugin","ssoProviders","oidc","oidcPlugin","oauthApplication","oauthAccessToken","oauthConsent","oauthApplications","oauthAccessTokens","clientId","oauthConsents","Error"],"mappings":"AACA,SAASA,4BAA4B,EAAEC,qBAAqB,EAAEC,mBAAmB,QAAQ,WAAU;AACnG,SAASC,iCAAiC,QAAQ,sCAAqC;AACvF,SAASC,cAAc,EAAEC,YAAY,QAAQ,aAAY;AAEzD;;CAEC,GACD,OAAO,SAASC,0BACdC,OAAuC;IAEvC,MAAMC,YAAYD,QAAQE,iBAAiB;IAC3C,MAAMC,qBAAqBH,QAAQI,KAAK,EAAEC,QAAQ;IAClD,MAAMC,wBAAwBN,QAAQO,QAAQ,EAAEF,QAAQ;IACxD,MAAMG,wBAAwBR,QAAQS,QAAQ,EAAEJ,QAAQ;IACxD,MAAMK,6BAA6BV,QAAQW,aAAa,EAAEN,QAAQ;IAElE,MAAMO,MAAkC;QAAE,GAAGX,SAAS;IAAC;IAEvDW,IAAIC,IAAI,GAAG;QACT,GAAIZ,WAAWY,QAAQ,CAAC,CAAC;QACzBC,WAAWX;IACb;IAEAS,IAAIG,OAAO,GAAG;QACZ,GAAId,WAAWc,WAAW,CAAC,CAAC;QAC5BD,WAAWR;QACXU,QAAQ;YACNC,QAAQ;QACV;IACF;IAEAL,IAAIM,OAAO,GAAG;QACZ,GAAIjB,WAAWiB,WAAW,CAAC,CAAC;QAC5BJ,WAAWN;QACXQ,QAAQ;YACNC,QAAQ;QACV;IACF;IAEAL,IAAIO,YAAY,GAAG;QACjB,GAAIlB,WAAWkB,gBAAgB,CAAC,CAAC;QACjCL,WAAWJ;IACb;IAEAE,IAAIQ,gBAAgB,GAAG;QACrB,GAAInB,WAAWmB,oBAAoB,CAAC,CAAC;QACrCC,SAASpB,WAAWmB,kBAAkBC,WAAW;IACnD;IAEA,IAAIT,IAAIQ,gBAAgB,CAACC,OAAO,EAAE;QAChCT,IAAIQ,gBAAgB,CAACE,QAAQ,GAAG;YAC9B,GAAIV,IAAIQ,gBAAgB,CAACE,QAAQ,IAAI,CAAC,CAAC;YACvCC,QAAQ,OAAO,EAAEC,IAAI,EAAEF,QAAQ,EAAE;gBAC/B,OAAO,MAAMzB,eAAe;oBAAE2B;oBAAMF;gBAAS;YAC/C;YACAE,MAAM,OAAOF;gBACX,OAAO,MAAMxB,aAAawB;YAC5B;QACF;IACF;IAEA,IAAIG,QAAQzB,QAAQI,KAAK,EAAEsB,wCAAwC;QACjE,MAAMC,gCAAgC1B,WAAW2B,mBAAmBC;QACpE,yFAAyF;QACzF,IAAI,OAAOF,kCAAkC,YAAY;YACvDf,IAAIgB,iBAAiB,GAAGhB,KAAKgB,qBAAqB,CAAC;YACnDhB,IAAIgB,iBAAiB,CAACC,qBAAqB,GAAG,OAAOC,MAAMC;gBACzD,IAAI;oBACF,MAAMlB,OAAOiB,KAAKjB,IAAI;oBACtB,MAAMmB,YAAY,IAAIC,KAAKpB,KAAKmB,SAAS;oBACzC,MAAME,MAAM,IAAID;oBAChB,sFAAsF;oBACtF,kDAAkD;oBAClD,IAAIC,IAAIC,OAAO,KAAKH,UAAUG,OAAO,KAAK,OAAO;wBAC/C;oBACF;oBAEA,MAAMR,8BAA8BG,MAAMC;gBAC5C,EAAE,OAAOK,OAAO;oBACdC,QAAQD,KAAK,CAAC,qCAAqCA;gBACrD;YACF;QACF;IACF;IAEAxC,kCAAkCgB;IAElC,IAAIA,IAAI0B,OAAO,EAAE;QACf,IAAI;YACF,MAAMC,mBAAmB3B,IAAI0B,OAAO,CAACE,MAAM,CAAC,CAACC;gBAC3C,OAAOC,OAAOC,MAAM,CAAClD,8BAA8BmD,QAAQ,CACzDH,OAAOI,EAAE;YAEb;YAEA,IAAIN,iBAAiBO,MAAM,KAAKlC,IAAI0B,OAAO,CAACQ,MAAM,EAAE;gBAClDT,QAAQU,IAAI,CACV,CAAC,yCAAyC,EAAEnC,IAAI0B,OAAO,CACpDE,MAAM,CACL,CAACQ,IACC,CAACN,OAAOC,MAAM,CAAClD,8BAA8BmD,QAAQ,CACnDI,EAAEH,EAAE,GAGTI,GAAG,CAAC,CAACD,IAAMA,EAAEH,EAAE,EACfK,IAAI,CAAC,MAAM,yBAAyB,EAAER,OAAOC,MAAM,CAAClD,8BAA8ByD,IAAI,CACvF,MACA;0CAC8B,CAAC;YAErC;YAEA,0CAA0C;YAC1C,IAAIX,iBAAiBO,MAAM,GAAG,GAAG;gBAC/BP,iBAAiBY,OAAO,CAAC,CAACV;oBACxB,MAAMW,WACJX,OAAOI,EAAE;oBAEX,OAAQO;wBACN,KAAK3D,6BAA6B4D,KAAK;4BACrC,MAAMC,cAAcb;4BACpB,IAAI,CAACa,YAAYC,UAAU,EACzBD,YAAYC,UAAU,GAAGvD,QAAQI,KAAK,EAAEmD,cAAc;gCAAC;6BAAQ;4BACjED,YAAYC,UAAU,GAAGvD,QAAQI,KAAK,EAAEmD,cAAc;gCAAC;6BAAQ;4BAC/Db,OAAOc,MAAM,CAACf,QAAQa;4BACtB;wBACF,KAAK7D,6BAA6BgE,MAAM;4BACtC,MAAMC,eAAejB;4BACrB,IAAI,CAACiB,aAAaC,MAAM,EAAED,aAAaC,MAAM,GAAG,CAAC;4BACjD,IAAI,CAACD,aAAaC,MAAM,CAACC,MAAM,EAAEF,aAAaC,MAAM,CAACC,MAAM,GAAG,CAAC;4BAC/DF,aAAaC,MAAM,CAACC,MAAM,GAAG;gCAC3B,GAAGF,aAAaC,MAAM,CAACC,MAAM;gCAC7B9C,WAAWpB,sBAAsBmE,OAAO;gCACxC7C,QAAQ;oCACN,GAAIyB,OAAOkB,MAAM,EAAEC,QAAQ5C,UAAU,CAAC,CAAC;oCACvCC,QAAQ;wCACN,GAAIwB,OAAOkB,MAAM,EAAEC,QAAQ5C,QAAQC,UAAU,CAAC,CAAC;wCAC/C6C,WAAW;oCACb;gCACF;4BACF;4BACApB,OAAOc,MAAM,CAACf,QAAQiB;4BACtB;wBACF,KAAKjE,6BAA6BsE,OAAO;4BACvC,MAAMC,gBAAgBvB;4BACtB,IAAI,CAACuB,cAAcL,MAAM,EAAEK,cAAcL,MAAM,GAAG,CAAC;4BACnD,IAAI,CAACK,cAAcL,MAAM,CAACI,OAAO,EAAEC,cAAcL,MAAM,CAACI,OAAO,GAAG,CAAC;4BACnEC,cAAcL,MAAM,CAACI,OAAO,GAAG;gCAC7B,GAAGC,cAAcL,MAAM,CAACI,OAAO;gCAC/BjD,WAAWpB,sBAAsBuE,QAAQ;gCACzCjD,QAAQ;oCACN,GAAIgD,cAAcL,MAAM,CAACI,OAAO,CAAC/C,MAAM,IAAI,CAAC,CAAC;oCAC7CC,QAAQ;wCACN,GAAG+C,cAAcL,MAAM,CAACI,OAAO,CAAC/C,MAAM,CAACC,MAAM;wCAC7C6C,WAAW;oCACb;gCACF;4BACF;4BACApB,OAAOc,MAAM,CAACf,QAAQuB;4BACtB;wBACF,KAAKvE,6BAA6ByE,YAAY;4BAC5C,MAAMC,qBAAqB1B;4BAC3B,IAAI,CAAC0B,mBAAmBR,MAAM,EAAEQ,mBAAmBR,MAAM,GAAG,CAAC;4BAC7D,IAAI,CAACQ,mBAAmBR,MAAM,CAACO,YAAY,EAAEC,mBAAmBR,MAAM,CAACS,MAAM,GAAG,CAAC;4BACjF,IAAI,CAACD,mBAAmBR,MAAM,CAACU,UAAU,EAAEF,mBAAmBR,MAAM,CAACU,UAAU,GAAG,CAAC;4BACnF,IAAI,CAACF,mBAAmBR,MAAM,CAACW,IAAI,EAAEH,mBAAmBR,MAAM,CAACW,IAAI,GAAG,CAAC;4BACvE,IAAI,CAACH,mBAAmBR,MAAM,CAACzC,OAAO,EAAEiD,mBAAmBR,MAAM,CAACzC,OAAO,GAAG,CAAC;4BAC7EiD,mBAAmBR,MAAM,GAAG;gCAC1B,GAAGQ,mBAAmBR,MAAM;gCAC5BO,cAAc;oCACZ,GAAGC,mBAAmBR,MAAM,CAACO,YAAY;oCACzCpD,WAAWpB,sBAAsB6E,aAAa;oCAC9CvD,QAAQ;wCACN,GAAImD,mBAAmBR,MAAM,CAACO,YAAY,CAAClD,MAAM,IAAI,CAAC,CAAC;oCACzD;gCACF;gCACAoD,QAAQ;oCACN,GAAGD,mBAAmBR,MAAM,CAACS,MAAM;oCACnCtD,WAAWpB,sBAAsB8E,OAAO;oCACxCxD,QAAQ;wCACN,GAAImD,mBAAmBR,MAAM,CAACS,MAAM,CAACpD,MAAM,IAAI,CAAC,CAAC;wCACjDyD,gBAAgB;4CACd,GAAIN,mBAAmBR,MAAM,CAACS,MAAM,CAACpD,MAAM,EAAEyD,kBAAkB,CAAC,CAAC;4CACjEX,WAAW;wCACb;wCACA7C,QAAQ;4CACN,GAAIkD,mBAAmBR,MAAM,CAACS,MAAM,CAACpD,MAAM,EAAEC,UAAU,CAAC,CAAC;4CACzD6C,WAAW;wCACb;wCACAY,QAAQ;4CACN,GAAIP,mBAAmBR,MAAM,CAACS,MAAM,CAACpD,MAAM,EAAE0D,UAAU,CAAC,CAAC;4CACzDZ,WAAW;wCACb;oCACF;gCACF;gCACAO,YAAY;oCACV,GAAGF,mBAAmBR,MAAM,CAACU,UAAU;oCACvCvD,WAAWpB,sBAAsBiF,WAAW;oCAC5C3D,QAAQ;wCACN,GAAImD,mBAAmBR,MAAM,CAACU,UAAU,CAACrD,MAAM,IAAI,CAAC,CAAC;wCACrDyD,gBAAgB;4CACd,GAAIN,mBAAmBR,MAAM,CAACU,UAAU,CAACrD,MAAM,EAAEyD,kBAAkB,CAAC,CAAC;4CACrEX,WAAW;wCACb;wCACAc,WAAW;4CACT,GAAIT,mBAAmBR,MAAM,CAACU,UAAU,CAACrD,MAAM,EAAE4D,aAAa,CAAC,CAAC;4CAChEd,WAAW;wCACb;wCACAY,QAAQ;4CACN,GAAIP,mBAAmBR,MAAM,CAACU,UAAU,CAACrD,MAAM,EAAE0D,UAAU,CAAC,CAAC;4CAC7DZ,WAAW;wCACb;oCACF;gCACF;gCACAQ,MAAM;oCACJ,GAAGH,mBAAmBR,MAAM,CAACW,IAAI;oCACjCxD,WAAWpB,sBAAsBmF,KAAK;oCACtC7D,QAAQ;wCACN,GAAImD,mBAAmBR,MAAM,CAACW,IAAI,CAACtD,MAAM,IAAI,CAAC,CAAC;wCAC/CyD,gBAAgB;4CACd,GAAIN,mBAAmBR,MAAM,CAACW,IAAI,CAACtD,MAAM,EAAEyD,kBAAkB,CAAC,CAAC;4CAC/DX,WAAW;wCACb;oCACF;gCACF;gCACA5C,SAAS;oCACP,GAAGiD,mBAAmBR,MAAM,CAACzC,OAAO;oCACpCJ,WAAWnB,oBAAoBc,QAAQ;oCACvCO,QAAQ;wCACN,GAAImD,mBAAmBR,MAAM,CAACzC,OAAO,CAACF,MAAM,IAAI,CAAC,CAAC;wCAClD8D,sBAAsB;4CACpB,GAAIX,mBAAmBR,MAAM,CAACzC,OAAO,CAACF,MAAM,EAAE8D,wBAAwB,CAAC,CAAC;4CACxEhB,WAAW;wCACb;oCACF;gCACF;4BACF;4BACApB,OAAOc,MAAM,CAACf,QAAQ0B;4BACtB;wBACF,KAAK1E,6BAA6BsF,GAAG;4BACnC,MAAMC,YAAYvC;4BAClB,IAAI,CAACuC,UAAUrB,MAAM,EAAEqB,UAAUrB,MAAM,GAAG,CAAC;4BAC3C,IAAI,CAACqB,UAAUrB,MAAM,CAACoB,GAAG,EAAEC,UAAUrB,MAAM,CAACoB,GAAG,GAAG,CAAC;4BACnDC,UAAUrB,MAAM,CAACoB,GAAG,GAAG;gCACrB,GAAGC,UAAUrB,MAAM,CAACoB,GAAG;gCACvBjE,WAAWpB,sBAAsBuF,YAAY;gCAC7CjE,QAAQ;oCACN,GAAIgE,UAAUrB,MAAM,CAACoB,GAAG,CAAC/D,MAAM,IAAI,CAAC,CAAC;oCACrCC,QAAQ;wCACN,GAAI+D,UAAUrB,MAAM,CAACoB,GAAG,CAAC/D,MAAM,EAAEC,UAAU,CAAC,CAAC;wCAC7C6C,WAAW;oCACb;gCACF;4BACF;4BACApB,OAAOc,MAAM,CAACf,QAAQuC;4BACtB;wBACF,KAAKvF,6BAA6ByF,IAAI;4BACpC,MAAMC,aAAa1C;4BACnB,IAAI,CAAC0C,WAAWxB,MAAM,EAAEwB,WAAWxB,MAAM,GAAG,CAAC;4BAC7C,IAAI,CAACwB,WAAWxB,MAAM,CAACyB,gBAAgB,EAAED,WAAWxB,MAAM,CAACyB,gBAAgB,GAAG,CAAC;4BAC/E,IAAI,CAACD,WAAWxB,MAAM,CAAC0B,gBAAgB,EAAEF,WAAWxB,MAAM,CAAC0B,gBAAgB,GAAG,CAAC;4BAC/E,IAAI,CAACF,WAAWxB,MAAM,CAAC2B,YAAY,EAAEH,WAAWxB,MAAM,CAAC2B,YAAY,GAAG,CAAC;4BACvEH,WAAWxB,MAAM,GAAG;gCAClB,GAAGwB,WAAWxB,MAAM;gCACpByB,kBAAkB;oCAChB,GAAGD,WAAWxB,MAAM,CAACyB,gBAAgB;oCACrCtE,WAAWpB,sBAAsB6F,iBAAiB;oCAClDvE,QAAQ;wCACN,GAAImE,WAAWxB,MAAM,CAACyB,gBAAgB,CAACpE,MAAM,IAAI,CAAC,CAAC;wCACnDC,QAAQ;4CACN,GAAIkE,WAAWxB,MAAM,CAACyB,gBAAgB,CAACpE,MAAM,EAAEC,UAAU,CAAC,CAAC;4CAC3D6C,WAAW;wCACb;oCACF;gCACF;gCACAuB,kBAAkB;oCAChB,GAAGF,WAAWxB,MAAM,CAAC0B,gBAAgB;oCACrCvE,WAAWpB,sBAAsB8F,iBAAiB;oCAClDxE,QAAQ;wCACN,GAAImE,WAAWxB,MAAM,CAAC0B,gBAAgB,CAACrE,MAAM,IAAI,CAAC,CAAC;wCACnDC,QAAQ;4CACN,GAAIkE,WAAWxB,MAAM,CAAC0B,gBAAgB,CAACrE,MAAM,EAAEC,UAAU,CAAC,CAAC;4CAC3D6C,WAAW;wCACb;wCACA2B,UAAU;4CACR,GAAIN,WAAWxB,MAAM,CAAC0B,gBAAgB,CAACrE,MAAM,EAAEyE,YAAY,CAAC,CAAC;4CAC7D3B,WAAW;wCACb;oCACF;gCACF;gCACAwB,cAAc;oCACZ,GAAGH,WAAWxB,MAAM,CAAC2B,YAAY;oCACjCxE,WAAWpB,sBAAsBgG,aAAa;oCAC9C1E,QAAQ;wCACN,GAAImE,WAAWxB,MAAM,CAAC2B,YAAY,CAACtE,MAAM,IAAI,CAAC,CAAC;wCAC/CC,QAAQ;4CACN,GAAIkE,WAAWxB,MAAM,CAAC2B,YAAY,CAACtE,MAAM,EAAEC,UAAU,CAAC,CAAC;4CACvD6C,WAAW;wCACb;wCACA2B,UAAU;4CACR,GAAIN,WAAWxB,MAAM,CAAC2B,YAAY,CAACtE,MAAM,EAAEyE,YAAY,CAAC,CAAC;4CACzD3B,WAAW;wCACb;oCACF;gCACF;4BACF;4BACApB,OAAOc,MAAM,CAACf,QAAQ0C;4BACtB;wBACF;4BACE;oBACJ;gBACF;YACF;YACA,gDAAgD;YAChDzC,OAAOc,MAAM,CAAC5C,IAAI0B,OAAO,EAAEC;QAC7B,EAAE,OAAOH,OAAO;YACd,MAAM,IAAIuD,MAAM,CAAC,qCAAqC,EAAEvD,OAAO;QACjE;IACF;IAEA,OAAOxB;AACT"}

package/dist/better-auth/plugin/payload/components/admin-buttons.d.ts

@@ -0,0 +1,5 @@
+import './styles.css';
+import '@payloadcms/ui/styles.css';
+export default function AdminButtons({ userSlug }: {
+    userSlug: string;
+}): import("react/jsx-runtime").JSX.Element;