ras-stack 0.44.0 → 0.45.0

package/dist/auth/index.d.ts

@@ -1,9 +1,9 @@
 export { acceptedOrigins, forwardedOrigin, parseOrigin, requireSameOrigin, trustedOrigins, validSameOriginRequest } from './origins.js';
 export type { OriginOptions } from './origins.js';
 export { configuredProviderOptions, configuredProviders, providerCredentials } from './providers.js';
-export type { ProviderCredentials } from './providers.js';
+export type { ProviderCredentials, ProviderEnvironmentOptions } from './providers.js';
 export { randomId, randomToken } from './random.js';
 export { persistedSecret } from './secret.js';
 export type { PersistedSecretOptions } from './secret.js';
-export { standardRateLimitOptions, standardSessionOptions } from './settings.js';
-export type { RateLimitRule } from './settings.js';
+export { standardAccountOptions, standardRateLimitOptions, standardSessionOptions } from './settings.js';
+export type { RateLimitRule, SessionOptions, StandardAccountOptions } from './settings.js';

package/dist/auth/index.js

@@ -2,5 +2,5 @@ export { acceptedOrigins, forwardedOrigin, parseOrigin, requireSameOrigin, trust
 export { configuredProviderOptions, configuredProviders, providerCredentials } from './providers.js';
 export { randomId, randomToken } from './random.js';
 export { persistedSecret } from './secret.js';
-export { standardRateLimitOptions, standardSessionOptions } from './settings.js';
+export { standardAccountOptions, standardRateLimitOptions, standardSessionOptions } from './settings.js';
 //# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,iBAAiB,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AAEvI,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AAEpG,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C,OAAO,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA","sourcesContent":["export { acceptedOrigins, forwardedOrigin, parseOrigin, requireSameOrigin, trustedOrigins, validSameOriginRequest } from './origins.js'\nexport type { OriginOptions } from './origins.js'\nexport { configuredProviderOptions, configuredProviders, providerCredentials } from './providers.js'\nexport type { ProviderCredentials } from './providers.js'\nexport { randomId, randomToken } from './random.js'\nexport { persistedSecret } from './secret.js'\nexport type { PersistedSecretOptions } from './secret.js'\nexport { standardRateLimitOptions, standardSessionOptions } from './settings.js'\nexport type { RateLimitRule } from './settings.js'\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,iBAAiB,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AAEvI,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AAEpG,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA","sourcesContent":["export { acceptedOrigins, forwardedOrigin, parseOrigin, requireSameOrigin, trustedOrigins, validSameOriginRequest } from './origins.js'\nexport type { OriginOptions } from './origins.js'\nexport { configuredProviderOptions, configuredProviders, providerCredentials } from './providers.js'\nexport type { ProviderCredentials, ProviderEnvironmentOptions } from './providers.js'\nexport { randomId, randomToken } from './random.js'\nexport { persistedSecret } from './secret.js'\nexport type { PersistedSecretOptions } from './secret.js'\nexport { standardAccountOptions, standardRateLimitOptions, standardSessionOptions } from './settings.js'\nexport type { RateLimitRule, SessionOptions, StandardAccountOptions } from './settings.js'\n"]}

package/dist/auth/providers.d.ts

@@ -2,6 +2,10 @@ export type ProviderCredentials = {
     clientId: string;
     clientSecret: string;
 };
-export declare function configuredProviders<const Provider extends string>(providers: readonly Provider[], environment?: NodeJS.ProcessEnv): Provider[];
-export declare function providerCredentials(provider: string, environment?: NodeJS.ProcessEnv): ProviderCredentials | undefined;
-export declare function configuredProviderOptions<const Provider extends string>(providers: readonly Provider[], environment?: NodeJS.ProcessEnv): Partial<Record<Provider, ProviderCredentials>>;
+export type ProviderEnvironmentOptions = {
+    prefix?: string;
+    rejectPartial?: boolean;
+};
+export declare function configuredProviders<const Provider extends string>(providers: readonly Provider[], environment?: NodeJS.ProcessEnv, options?: ProviderEnvironmentOptions): Provider[];
+export declare function providerCredentials(provider: string, environment?: NodeJS.ProcessEnv, options?: ProviderEnvironmentOptions): ProviderCredentials | undefined;
+export declare function configuredProviderOptions<const Provider extends string>(providers: readonly Provider[], environment?: NodeJS.ProcessEnv, environmentOptions?: ProviderEnvironmentOptions): Partial<Record<Provider, ProviderCredentials>>;

package/dist/auth/providers.js

@@ -1,22 +1,26 @@
-export function configuredProviders(providers, environment = process.env) {
-    return providers.filter((provider) => {
-        const prefix = provider.toUpperCase().replaceAll('-', '_');
-        return Boolean(environment[`${prefix}_CLIENT_ID`]?.trim() && environment[`${prefix}_CLIENT_SECRET`]?.trim());
-    });
+function providerEnvironmentKeys(provider, prefix = '') {
+    const name = provider.toUpperCase().replaceAll('-', '_');
+    return { clientId: `${prefix}${name}_CLIENT_ID`, clientSecret: `${prefix}${name}_CLIENT_SECRET` };
 }
-export function providerCredentials(provider, environment = process.env) {
-    const prefix = provider.toUpperCase().replaceAll('-', '_');
-    const clientId = environment[`${prefix}_CLIENT_ID`]?.trim();
-    const clientSecret = environment[`${prefix}_CLIENT_SECRET`]?.trim();
+export function configuredProviders(providers, environment = process.env, options = {}) {
+    return providers.filter((provider) => Boolean(providerCredentials(provider, environment, options)));
+}
+export function providerCredentials(provider, environment = process.env, options = {}) {
+    const keys = providerEnvironmentKeys(provider, options.prefix);
+    const clientId = environment[keys.clientId]?.trim();
+    const clientSecret = environment[keys.clientSecret]?.trim();
+    if (options.rejectPartial && Boolean(clientId) !== Boolean(clientSecret)) {
+        throw new Error(`${keys.clientId} and ${keys.clientSecret} must be configured together`);
+    }
     return clientId && clientSecret ? { clientId, clientSecret } : undefined;
 }
-export function configuredProviderOptions(providers, environment = process.env) {
-    const options = {};
+export function configuredProviderOptions(providers, environment = process.env, environmentOptions = {}) {
+    const providerOptions = {};
     for (const provider of providers) {
-        const credentials = providerCredentials(provider, environment);
+        const credentials = providerCredentials(provider, environment, environmentOptions);
         if (credentials)
-            options[provider] = credentials;
+            providerOptions[provider] = credentials;
     }
-    return options;
+    return providerOptions;
 }
 //# sourceMappingURL=providers.js.map

package/dist/auth/providers.js.map

@@ -1 +1 @@
-{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../src/auth/providers.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,mBAAmB,CACjC,SAA8B,EAC9B,WAAW,GAAsB,OAAO,CAAC,GAAG;IAE5C,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;QACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QAC1D,OAAO,OAAO,CAAC,WAAW,CAAC,GAAG,MAAM,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,WAAW,CAAC,GAAG,MAAM,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9G,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,WAAW,GAAsB,OAAO,CAAC,GAAG;IAChG,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC1D,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,MAAM,YAAY,CAAC,EAAE,IAAI,EAAE,CAAA;IAC3D,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,MAAM,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAA;IACnE,OAAO,QAAQ,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1E,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,SAA8B,EAC9B,WAAW,GAAsB,OAAO,CAAC,GAAG;IAE5C,MAAM,OAAO,GAAmD,EAAE,CAAA;IAClE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;QAC9D,IAAI,WAAW;YAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,WAAW,CAAA;IAClD,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC","sourcesContent":["export type ProviderCredentials = { clientId: string; clientSecret: string }\n\nexport function configuredProviders<const Provider extends string>(\n  providers: readonly Provider[],\n  environment: NodeJS.ProcessEnv = process.env,\n) {\n  return providers.filter((provider) => {\n    const prefix = provider.toUpperCase().replaceAll('-', '_')\n    return Boolean(environment[`${prefix}_CLIENT_ID`]?.trim() && environment[`${prefix}_CLIENT_SECRET`]?.trim())\n  })\n}\n\nexport function providerCredentials(provider: string, environment: NodeJS.ProcessEnv = process.env): ProviderCredentials | undefined {\n  const prefix = provider.toUpperCase().replaceAll('-', '_')\n  const clientId = environment[`${prefix}_CLIENT_ID`]?.trim()\n  const clientSecret = environment[`${prefix}_CLIENT_SECRET`]?.trim()\n  return clientId && clientSecret ? { clientId, clientSecret } : undefined\n}\n\nexport function configuredProviderOptions<const Provider extends string>(\n  providers: readonly Provider[],\n  environment: NodeJS.ProcessEnv = process.env,\n): Partial<Record<Provider, ProviderCredentials>> {\n  const options: Partial<Record<Provider, ProviderCredentials>> = {}\n  for (const provider of providers) {\n    const credentials = providerCredentials(provider, environment)\n    if (credentials) options[provider] = credentials\n  }\n  return options\n}\n"]}
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../src/auth/providers.ts"],"names":[],"mappings":"AAGA,SAAS,uBAAuB,CAAC,QAAgB,EAAE,MAAM,GAAG,EAAE;IAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACxD,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,GAAG,IAAI,YAAY,EAAE,YAAY,EAAE,GAAG,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAA;AACnG,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,SAA8B,EAC9B,WAAW,GAAsB,OAAO,CAAC,GAAG,EAC5C,OAAO,GAA+B,EAAE;IAExC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;AACrG,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,WAAW,GAAsB,OAAO,CAAC,GAAG,EAC5C,OAAO,GAA+B,EAAE;IAExC,MAAM,IAAI,GAAG,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAC9D,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAA;IACnD,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAA;IAC3D,IAAI,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,QAAQ,IAAI,CAAC,YAAY,8BAA8B,CAAC,CAAA;IAC1F,CAAC;IACD,OAAO,QAAQ,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1E,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,SAA8B,EAC9B,WAAW,GAAsB,OAAO,CAAC,GAAG,EAC5C,kBAAkB,GAA+B,EAAE;IAEnD,MAAM,eAAe,GAAmD,EAAE,CAAA;IAC1E,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAA;QAClF,IAAI,WAAW;YAAE,eAAe,CAAC,QAAQ,CAAC,GAAG,WAAW,CAAA;IAC1D,CAAC;IACD,OAAO,eAAe,CAAA;AACxB,CAAC","sourcesContent":["export type ProviderCredentials = { clientId: string; clientSecret: string }\nexport type ProviderEnvironmentOptions = { prefix?: string; rejectPartial?: boolean }\n\nfunction providerEnvironmentKeys(provider: string, prefix = '') {\n  const name = provider.toUpperCase().replaceAll('-', '_')\n  return { clientId: `${prefix}${name}_CLIENT_ID`, clientSecret: `${prefix}${name}_CLIENT_SECRET` }\n}\n\nexport function configuredProviders<const Provider extends string>(\n  providers: readonly Provider[],\n  environment: NodeJS.ProcessEnv = process.env,\n  options: ProviderEnvironmentOptions = {},\n) {\n  return providers.filter((provider) => Boolean(providerCredentials(provider, environment, options)))\n}\n\nexport function providerCredentials(\n  provider: string,\n  environment: NodeJS.ProcessEnv = process.env,\n  options: ProviderEnvironmentOptions = {},\n): ProviderCredentials | undefined {\n  const keys = providerEnvironmentKeys(provider, options.prefix)\n  const clientId = environment[keys.clientId]?.trim()\n  const clientSecret = environment[keys.clientSecret]?.trim()\n  if (options.rejectPartial && Boolean(clientId) !== Boolean(clientSecret)) {\n    throw new Error(`${keys.clientId} and ${keys.clientSecret} must be configured together`)\n  }\n  return clientId && clientSecret ? { clientId, clientSecret } : undefined\n}\n\nexport function configuredProviderOptions<const Provider extends string>(\n  providers: readonly Provider[],\n  environment: NodeJS.ProcessEnv = process.env,\n  environmentOptions: ProviderEnvironmentOptions = {},\n): Partial<Record<Provider, ProviderCredentials>> {\n  const providerOptions: Partial<Record<Provider, ProviderCredentials>> = {}\n  for (const provider of providers) {\n    const credentials = providerCredentials(provider, environment, environmentOptions)\n    if (credentials) providerOptions[provider] = credentials\n  }\n  return providerOptions\n}\n"]}

package/dist/auth/settings.d.ts

@@ -2,10 +2,20 @@ export type RateLimitRule = {
     window: number;
     max: number;
 };
-export declare function standardSessionOptions(): {
+export type SessionOptions = {
+    expiresIn?: number | undefined;
+    updateAge?: number | undefined;
+};
+export type StandardAccountOptions = {
+    encryptOAuthTokens?: boolean;
+};
+export declare function standardSessionOptions<const Options extends object>(overrides?: Options & SessionOptions): Options & {
     expiresIn: number;
     updateAge: number;
 };
+export declare function standardAccountOptions<const Options extends object>(overrides?: Options & StandardAccountOptions): Options & {
+    encryptOAuthTokens: boolean;
+};
 export declare function standardRateLimitOptions(customRules?: Record<string, RateLimitRule>): {
     enabled: boolean;
     storage: 'database';
@@ -24,5 +34,9 @@ export declare function standardRateLimitOptions(customRules?: Record<string, Ra
             window: number;
             max: number;
         };
+        '/admin/set-user-password': {
+            window: number;
+            max: number;
+        };
     };
 };

package/dist/auth/settings.js

@@ -1,5 +1,15 @@
-export function standardSessionOptions() {
-    return { expiresIn: 60 * 60 * 24 * 90, updateAge: 60 * 60 * 24 };
+export function standardSessionOptions(overrides = {}) {
+    return {
+        ...overrides,
+        expiresIn: overrides.expiresIn ?? 60 * 60 * 24 * 90,
+        updateAge: overrides.updateAge ?? 60 * 60 * 24,
+    };
+}
+export function standardAccountOptions(overrides = {}) {
+    return {
+        ...overrides,
+        encryptOAuthTokens: overrides.encryptOAuthTokens ?? true,
+    };
 }
 export function standardRateLimitOptions(customRules = {}) {
     return {
@@ -11,6 +21,7 @@ export function standardRateLimitOptions(customRules = {}) {
             '/sign-in/email': { window: 60, max: 20 },
             '/sign-up/email': { window: 60, max: 15 },
             '/request-password-reset': { window: 60, max: 5 },
+            '/admin/set-user-password': { window: 60, max: 10 },
             ...customRules,
         },
     };

package/dist/auth/settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/auth/settings.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,sBAAsB;IACpC,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAA;AAClE,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,WAAW,GAAkC,EAAE;IACtF,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,UAAmB;QAC5B,MAAM,EAAE,EAAE;QACV,GAAG,EAAE,GAAG;QACR,WAAW,EAAE;YACX,gBAAgB,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACzC,gBAAgB,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACzC,yBAAyB,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE;YACjD,GAAG,WAAW;SACf;KACF,CAAA;AACH,CAAC","sourcesContent":["export type RateLimitRule = { window: number; max: number }\n\nexport function standardSessionOptions() {\n  return { expiresIn: 60 * 60 * 24 * 90, updateAge: 60 * 60 * 24 }\n}\n\nexport function standardRateLimitOptions(customRules: Record<string, RateLimitRule> = {}) {\n  return {\n    enabled: true,\n    storage: 'database' as const,\n    window: 60,\n    max: 120,\n    customRules: {\n      '/sign-in/email': { window: 60, max: 20 },\n      '/sign-up/email': { window: 60, max: 15 },\n      '/request-password-reset': { window: 60, max: 5 },\n      ...customRules,\n    },\n  }\n}\n"]}
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/auth/settings.ts"],"names":[],"mappings":"AAKA,MAAM,UAAU,sBAAsB,CAA+B,SAAS,GAA6B,EAA8B;IACvI,OAAO;QACL,GAAG,SAAS;QACZ,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;QACnD,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;KAC/C,CAAA;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,SAAS,GAAqC,EAAsC;IAEpF,OAAO;QACL,GAAG,SAAS;QACZ,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,IAAI,IAAI;KACzD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,WAAW,GAAkC,EAAE;IACtF,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,UAAmB;QAC5B,MAAM,EAAE,EAAE;QACV,GAAG,EAAE,GAAG;QACR,WAAW,EAAE;YACX,gBAAgB,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACzC,gBAAgB,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACzC,yBAAyB,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE;YACjD,0BAA0B,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACnD,GAAG,WAAW;SACf;KACF,CAAA;AACH,CAAC","sourcesContent":["export type RateLimitRule = { window: number; max: number }\n\nexport type SessionOptions = { expiresIn?: number | undefined; updateAge?: number | undefined }\nexport type StandardAccountOptions = { encryptOAuthTokens?: boolean }\n\nexport function standardSessionOptions<const Options extends object>(overrides: Options & SessionOptions = {} as Options & SessionOptions) {\n  return {\n    ...overrides,\n    expiresIn: overrides.expiresIn ?? 60 * 60 * 24 * 90,\n    updateAge: overrides.updateAge ?? 60 * 60 * 24,\n  }\n}\n\nexport function standardAccountOptions<const Options extends object>(\n  overrides: Options & StandardAccountOptions = {} as Options & StandardAccountOptions,\n) {\n  return {\n    ...overrides,\n    encryptOAuthTokens: overrides.encryptOAuthTokens ?? true,\n  }\n}\n\nexport function standardRateLimitOptions(customRules: Record<string, RateLimitRule> = {}) {\n  return {\n    enabled: true,\n    storage: 'database' as const,\n    window: 60,\n    max: 120,\n    customRules: {\n      '/sign-in/email': { window: 60, max: 20 },\n      '/sign-up/email': { window: 60, max: 15 },\n      '/request-password-reset': { window: 60, max: 5 },\n      '/admin/set-user-password': { window: 60, max: 10 },\n      ...customRules,\n    },\n  }\n}\n"]}

package/examples/full-stack/src/server/auth.ts

@@ -1,7 +1,7 @@
 import { drizzleAdapter } from '@better-auth/drizzle-adapter'
 import { betterAuth } from 'better-auth'
 import { tanstackStartCookies } from 'better-auth/tanstack-start'
-import { standardRateLimitOptions, standardSessionOptions } from 'ras-stack/auth'
+import { standardAccountOptions, standardRateLimitOptions, standardSessionOptions } from 'ras-stack/auth'
 import type { EmailDelivery } from 'ras-stack/email'
 import type { AppEnvironment } from './environment'
 import * as schema from './schema'
@@ -31,6 +31,7 @@ export function createAuth(options: { database: Database; email?: EmailDelivery;
     secret: options.secret,
     trustedOrigins: [options.environment.appUrl],
     database: drizzleAdapter(options.database, { provider: 'sqlite', schema }),
+    account: standardAccountOptions(),
     emailAndPassword: {
       enabled: true,
       requireEmailVerification: Boolean(email) && options.environment.requireEmailVerification,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ras-stack",
-  "version": "0.44.0",
+  "version": "0.45.0",
   "description": "Composable full-stack primitives shared across Richard Solomou's applications.",
   "keywords": [
     "authentication",