sonamu 0.12.0 → 0.13.0

package/dist/auth/plugins/wrappers/sso.d.ts

@@ -22,10 +22,6 @@ export declare const sso: (options?: SSOOptions) => {
             method: "GET";
             query: import("zod").ZodObject<{
                 providerId: import("zod").ZodString;
-                format: import("zod").ZodDefault<import("zod").ZodEnum<{
-                    json: "json";
-                    xml: "xml";
-                }>>;
             }, import("zod/v4/core").$strip>;
             metadata: {
                 openapi: {
@@ -43,84 +39,9 @@ export declare const sso: (options?: SSOOptions) => {
         registerSSOProvider: import("better-auth").StrictEndpoint<"/sso/register", {
             method: "POST";
             body: import("zod").ZodObject<{
-                providerId: import("zod").ZodString;
-                issuer: import("zod").ZodString;
-                domain: import("zod").ZodString;
-                oidcConfig: import("zod").ZodOptional<import("zod").ZodObject<{
-                    clientId: import("zod").ZodString;
-                    clientSecret: import("zod").ZodString;
-                    authorizationEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
-                    tokenEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
-                    userInfoEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
-                    tokenEndpointAuthentication: import("zod").ZodOptional<import("zod").ZodEnum<{
-                        client_secret_post: "client_secret_post";
-                        client_secret_basic: "client_secret_basic";
-                    }>>;
-                    jwksEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
-                    discoveryEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
-                    skipDiscovery: import("zod").ZodOptional<import("zod").ZodBoolean>;
-                    scopes: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
-                    pkce: import("zod").ZodOptional<import("zod").ZodDefault<import("zod").ZodBoolean>>;
-                    mapping: import("zod").ZodOptional<import("zod").ZodObject<{
-                        id: import("zod").ZodString;
-                        email: import("zod").ZodString;
-                        emailVerified: import("zod").ZodOptional<import("zod").ZodString>;
-                        name: import("zod").ZodString;
-                        image: import("zod").ZodOptional<import("zod").ZodString>;
-                        extraFields: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodAny>>;
-                    }, import("zod/v4/core").$strip>>;
-                }, import("zod/v4/core").$strip>>;
-                samlConfig: import("zod").ZodOptional<import("zod").ZodObject<{
-                    entryPoint: import("zod").ZodString;
-                    cert: import("zod").ZodString;
-                    callbackUrl: import("zod").ZodString;
-                    audience: import("zod").ZodOptional<import("zod").ZodString>;
-                    idpMetadata: import("zod").ZodOptional<import("zod").ZodObject<{
-                        metadata: import("zod").ZodOptional<import("zod").ZodString>;
-                        entityID: import("zod").ZodOptional<import("zod").ZodString>;
-                        cert: import("zod").ZodOptional<import("zod").ZodString>;
-                        privateKey: import("zod").ZodOptional<import("zod").ZodString>;
-                        privateKeyPass: import("zod").ZodOptional<import("zod").ZodString>;
-                        isAssertionEncrypted: import("zod").ZodOptional<import("zod").ZodBoolean>;
-                        encPrivateKey: import("zod").ZodOptional<import("zod").ZodString>;
-                        encPrivateKeyPass: import("zod").ZodOptional<import("zod").ZodString>;
-                        singleSignOnService: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodObject<{
-                            Binding: import("zod").ZodString;
-                            Location: import("zod").ZodString;
-                        }, import("zod/v4/core").$strip>>>;
-                    }, import("zod/v4/core").$strip>>;
-                    spMetadata: import("zod").ZodObject<{
-                        metadata: import("zod").ZodOptional<import("zod").ZodString>;
-                        entityID: import("zod").ZodOptional<import("zod").ZodString>;
-                        binding: import("zod").ZodOptional<import("zod").ZodString>;
-                        privateKey: import("zod").ZodOptional<import("zod").ZodString>;
-                        privateKeyPass: import("zod").ZodOptional<import("zod").ZodString>;
-                        isAssertionEncrypted: import("zod").ZodOptional<import("zod").ZodBoolean>;
-                        encPrivateKey: import("zod").ZodOptional<import("zod").ZodString>;
-                        encPrivateKeyPass: import("zod").ZodOptional<import("zod").ZodString>;
-                    }, import("zod/v4/core").$strip>;
-                    wantAssertionsSigned: import("zod").ZodOptional<import("zod").ZodBoolean>;
-                    authnRequestsSigned: import("zod").ZodOptional<import("zod").ZodBoolean>;
-                    signatureAlgorithm: import("zod").ZodOptional<import("zod").ZodString>;
-                    digestAlgorithm: import("zod").ZodOptional<import("zod").ZodString>;
-                    identifierFormat: import("zod").ZodOptional<import("zod").ZodString>;
-                    privateKey: import("zod").ZodOptional<import("zod").ZodString>;
-                    decryptionPvk: import("zod").ZodOptional<import("zod").ZodString>;
-                    additionalParams: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodAny>>;
-                    mapping: import("zod").ZodOptional<import("zod").ZodObject<{
-                        id: import("zod").ZodString;
-                        email: import("zod").ZodString;
-                        emailVerified: import("zod").ZodOptional<import("zod").ZodString>;
-                        name: import("zod").ZodString;
-                        firstName: import("zod").ZodOptional<import("zod").ZodString>;
-                        lastName: import("zod").ZodOptional<import("zod").ZodString>;
-                        extraFields: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodAny>>;
-                    }, import("zod/v4/core").$strip>>;
-                }, import("zod/v4/core").$strip>>;
-                organizationId: import("zod").ZodOptional<import("zod").ZodString>;
-                overrideUserInfo: import("zod").ZodOptional<import("zod").ZodDefault<import("zod").ZodBoolean>>;
+                [x: string]: import("zod").ZodOptional<import("zod").ZodAny>;
             }, import("zod/v4/core").$strip>;
-            use: ((inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+            use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
                 session: {
                     session: Record<string, any> & {
                         id: string;
@@ -142,8 +63,11 @@ export declare const sso: (options?: SSOOptions) => {
                         image?: string | null | undefined;
                     };
                 };
-            }>)[];
+            }>>[];
             metadata: {
+                $Infer: {
+                    body: Record<string, any>;
+                };
                 openapi: {
                     operationId: string;
                     summary: string;
@@ -240,10 +164,6 @@ export declare const sso: (options?: SSOOptions) => {
                                                         type: string;
                                                         nullable: boolean;
                                                         properties: {
-                                                            id: {
-                                                                type: string;
-                                                                description: string;
-                                                            };
                                                             email: {
                                                                 type: string;
                                                                 description: string;
@@ -271,7 +191,6 @@ export declare const sso: (options?: SSOOptions) => {
                                                                 description: string;
                                                             };
                                                         };
-                                                        required: string[];
                                                     };
                                                 };
                                                 required: string[];
@@ -329,6 +248,7 @@ export declare const sso: (options?: SSOOptions) => {
                 newUserCallbackURL: import("zod").ZodOptional<import("zod").ZodString>;
                 scopes: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
                 loginHint: import("zod").ZodOptional<import("zod").ZodString>;
+                additionalParams: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodString>>;
                 requestSignUp: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 providerType: import("zod").ZodOptional<import("zod").ZodEnum<{
                     saml: "saml";
@@ -350,7 +270,7 @@ export declare const sso: (options?: SSOOptions) => {
                                             type: string;
                                             description: string;
                                         };
-                                        issuer: {
+                                        organizationSlug: {
                                             type: string;
                                             description: string;
                                         };
@@ -358,6 +278,10 @@ export declare const sso: (options?: SSOOptions) => {
                                             type: string;
                                             description: string;
                                         };
+                                        domain: {
+                                            type: string;
+                                            description: string;
+                                        };
                                         callbackURL: {
                                             type: string;
                                             description: string;
@@ -370,10 +294,33 @@ export declare const sso: (options?: SSOOptions) => {
                                             type: string;
                                             description: string;
                                         };
+                                        scopes: {
+                                            type: string;
+                                            items: {
+                                                type: string;
+                                            };
+                                            description: string;
+                                        };
                                         loginHint: {
                                             type: string;
                                             description: string;
                                         };
+                                        additionalParams: {
+                                            type: string;
+                                            additionalProperties: {
+                                                type: string;
+                                            };
+                                            description: string;
+                                        };
+                                        requestSignUp: {
+                                            type: string;
+                                            description: string;
+                                        };
+                                        providerType: {
+                                            type: string;
+                                            enum: string[];
+                                            description: string;
+                                        };
                                     };
                                     required: string[];
                                 };
@@ -415,7 +362,7 @@ export declare const sso: (options?: SSOOptions) => {
             method: "GET";
             query: import("zod").ZodObject<{
                 code: import("zod").ZodOptional<import("zod").ZodString>;
-                state: import("zod").ZodString;
+                state: import("zod").ZodOptional<import("zod").ZodString>;
                 error: import("zod").ZodOptional<import("zod").ZodString>;
                 error_description: import("zod").ZodOptional<import("zod").ZodString>;
             }, import("zod/v4/core").$strip>;
@@ -433,7 +380,7 @@ export declare const sso: (options?: SSOOptions) => {
                 };
                 scope: "server";
             };
-        }, void>>;
+        }, never>>;
         callbackSSOShared: ReturnType<(options?: SSOOptions) => import("better-auth").StrictEndpoint<"/sso/callback", {
             metadata: {
                 openapi: {
@@ -451,14 +398,14 @@ export declare const sso: (options?: SSOOptions) => {
             method: "GET";
             query: import("zod").ZodObject<{
                 code: import("zod").ZodOptional<import("zod").ZodString>;
-                state: import("zod").ZodString;
+                state: import("zod").ZodOptional<import("zod").ZodString>;
                 error: import("zod").ZodOptional<import("zod").ZodString>;
                 error_description: import("zod").ZodOptional<import("zod").ZodString>;
             }, import("zod/v4/core").$strip>;
             allowedMediaTypes: readonly ["application/x-www-form-urlencoded", "application/json"];
-        }, void>>;
-        callbackSSOSAML: ReturnType<(options?: SSOOptions) => import("better-auth").StrictEndpoint<"/sso/saml2/callback/:providerId", {
-            method: ("POST" | "GET")[];
+        }, never>>;
+        acsEndpoint: ReturnType<(options?: SSOOptions) => import("better-auth").StrictEndpoint<"/sso/saml2/sp/acs/:providerId", {
+            method: ("GET" | "POST")[];
             body: import("zod").ZodOptional<import("zod").ZodObject<{
                 SAMLResponse: import("zod").ZodString;
                 RelayState: import("zod").ZodOptional<import("zod").ZodString>;
@@ -479,28 +426,7 @@ export declare const sso: (options?: SSOOptions) => {
                         "400": {
                             description: string;
                         };
-                        "401": {
-                            description: string;
-                        };
-                    };
-                };
-                scope: "server";
-            };
-        }, never>>;
-        acsEndpoint: ReturnType<(options?: SSOOptions) => import("better-auth").StrictEndpoint<"/sso/saml2/sp/acs/:providerId", {
-            method: "POST";
-            body: import("zod").ZodObject<{
-                SAMLResponse: import("zod").ZodString;
-                RelayState: import("zod").ZodOptional<import("zod").ZodString>;
-            }, import("zod/v4/core").$strip>;
-            metadata: {
-                allowedMediaTypes: string[];
-                openapi: {
-                    operationId: string;
-                    summary: string;
-                    description: string;
-                    responses: {
-                        "302": {
+                        "404": {
                             description: string;
                         };
                     };
@@ -509,7 +435,7 @@ export declare const sso: (options?: SSOOptions) => {
             };
         }, never>>;
         sloEndpoint: ReturnType<(options?: SSOOptions) => import("better-auth").StrictEndpoint<"/sso/saml2/sp/slo/:providerId", {
-            method: ("POST" | "GET")[];
+            method: ("GET" | "POST")[];
             body: import("zod").ZodOptional<import("zod").ZodObject<{
                 SAMLRequest: import("zod").ZodOptional<import("zod").ZodString>;
                 SAMLResponse: import("zod").ZodOptional<import("zod").ZodString>;
@@ -534,7 +460,7 @@ export declare const sso: (options?: SSOOptions) => {
             body: import("zod").ZodObject<{
                 callbackURL: import("zod").ZodOptional<import("zod").ZodString>;
             }, import("zod/v4/core").$strip>;
-            use: ((inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+            use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
                 session: {
                     session: Record<string, any> & {
                         id: string;
@@ -556,14 +482,14 @@ export declare const sso: (options?: SSOOptions) => {
                         image?: string | null | undefined;
                     };
                 };
-            }>)[];
+            }>>[];
             metadata: {
                 readonly scope: "server";
             };
         }, never>>;
-        listSSOProviders: ReturnType<() => import("better-auth").StrictEndpoint<"/sso/providers", {
+        listSSOProviders: ReturnType<(options?: SSOOptions) => import("better-auth").StrictEndpoint<"/sso/providers", {
             method: "GET";
-            use: ((inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+            use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
                 session: {
                     session: Record<string, any> & {
                         id: string;
@@ -585,7 +511,7 @@ export declare const sso: (options?: SSOOptions) => {
                         image?: string | null | undefined;
                     };
                 };
-            }>)[];
+            }>>[];
             metadata: {
                 openapi: {
                     operationId: string;
@@ -615,32 +541,33 @@ export declare const sso: (options?: SSOOptions) => {
                     userInfoEndpoint: string | undefined;
                     jwksEndpoint: string | undefined;
                     scopes: string[] | undefined;
-                    tokenEndpointAuthentication: "client_secret_post" | "client_secret_basic" | undefined;
+                    tokenEndpointAuthentication: "client_secret_post" | "client_secret_basic" | "private_key_jwt" | undefined;
                 } | undefined;
                 samlConfig: {
                     entryPoint: string;
-                    callbackUrl: string;
+                    callbackUrl: string | undefined;
+                    idpInitiatedCallbackUrl: string | undefined;
                     audience: string | undefined;
                     wantAssertionsSigned: boolean | undefined;
                     authnRequestsSigned: boolean | undefined;
                     identifierFormat: string | undefined;
                     signatureAlgorithm: string | undefined;
                     digestAlgorithm: string | undefined;
-                    certificate: {
+                    certificate: ({
                         fingerprintSha256: string;
                         notBefore: string;
                         notAfter: string;
                         publicKeyAlgorithm: string;
                     } | {
                         error: string;
-                    };
+                    })[] | undefined;
                 } | undefined;
                 spMetadataUrl: string;
             }[];
         }>>;
-        getSSOProvider: ReturnType<() => import("better-auth").StrictEndpoint<"/sso/get-provider", {
+        getSSOProvider: ReturnType<(options?: SSOOptions) => import("better-auth").StrictEndpoint<"/sso/get-provider", {
             method: "GET";
-            use: ((inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+            use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
                 session: {
                     session: Record<string, any> & {
                         id: string;
@@ -662,7 +589,7 @@ export declare const sso: (options?: SSOOptions) => {
                         image?: string | null | undefined;
                     };
                 };
-            }>)[];
+            }>>[];
             query: import("zod").ZodObject<{
                 providerId: import("zod").ZodString;
             }, import("zod/v4/core").$strip>;
@@ -700,31 +627,32 @@ export declare const sso: (options?: SSOOptions) => {
                 userInfoEndpoint: string | undefined;
                 jwksEndpoint: string | undefined;
                 scopes: string[] | undefined;
-                tokenEndpointAuthentication: "client_secret_post" | "client_secret_basic" | undefined;
+                tokenEndpointAuthentication: "client_secret_post" | "client_secret_basic" | "private_key_jwt" | undefined;
             } | undefined;
             samlConfig: {
                 entryPoint: string;
-                callbackUrl: string;
+                callbackUrl: string | undefined;
+                idpInitiatedCallbackUrl: string | undefined;
                 audience: string | undefined;
                 wantAssertionsSigned: boolean | undefined;
                 authnRequestsSigned: boolean | undefined;
                 identifierFormat: string | undefined;
                 signatureAlgorithm: string | undefined;
                 digestAlgorithm: string | undefined;
-                certificate: {
+                certificate: ({
                     fingerprintSha256: string;
                     notBefore: string;
                     notAfter: string;
                     publicKeyAlgorithm: string;
                 } | {
                     error: string;
-                };
+                })[] | undefined;
             } | undefined;
             spMetadataUrl: string;
         }>>;
         updateSSOProvider: ReturnType<(options: SSOOptions) => import("better-auth").StrictEndpoint<"/sso/update-provider", {
             method: "POST";
-            use: ((inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+            use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
                 session: {
                     session: Record<string, any> & {
                         id: string;
@@ -746,43 +674,69 @@ export declare const sso: (options?: SSOOptions) => {
                         image?: string | null | undefined;
                     };
                 };
-            }>)[];
+            }>>[];
             body: import("zod").ZodObject<{
                 issuer: import("zod").ZodOptional<import("zod").ZodString>;
                 domain: import("zod").ZodOptional<import("zod").ZodString>;
                 oidcConfig: import("zod").ZodOptional<import("zod").ZodObject<{
                     clientId: import("zod").ZodOptional<import("zod").ZodString>;
-                    clientSecret: import("zod").ZodOptional<import("zod").ZodString>;
-                    authorizationEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
-                    tokenEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
-                    userInfoEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
-                    tokenEndpointAuthentication: import("zod").ZodOptional<import("zod").ZodEnum<{
+                    clientSecret: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodString>>;
+                    authorizationEndpoint: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodString>>;
+                    tokenEndpoint: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodString>>;
+                    userInfoEndpoint: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodString>>;
+                    tokenEndpointAuthentication: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodEnum<{
                         client_secret_post: "client_secret_post";
                         client_secret_basic: "client_secret_basic";
-                    }>>;
-                    jwksEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
-                    discoveryEndpoint: import("zod").ZodOptional<import("zod").ZodString>;
-                    scopes: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
-                    pkce: import("zod").ZodOptional<import("zod").ZodBoolean>;
-                    overrideUserInfo: import("zod").ZodOptional<import("zod").ZodBoolean>;
-                    mapping: import("zod").ZodOptional<import("zod").ZodObject<{
-                        id: import("zod").ZodOptional<import("zod").ZodString>;
+                        private_key_jwt: "private_key_jwt";
+                    }>>>;
+                    privateKeyId: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodString>>;
+                    privateKeyAlgorithm: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodString>>;
+                    jwksEndpoint: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodString>>;
+                    discoveryEndpoint: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodString>>;
+                    skipDiscovery: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodBoolean>>;
+                    scopes: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>>;
+                    pkce: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodDefault<import("zod").ZodBoolean>>>;
+                    overrideUserInfo: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodBoolean>>;
+                    mapping: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodObject<{
                         email: import("zod").ZodOptional<import("zod").ZodString>;
                         emailVerified: import("zod").ZodOptional<import("zod").ZodString>;
                         name: import("zod").ZodOptional<import("zod").ZodString>;
                         image: import("zod").ZodOptional<import("zod").ZodString>;
                         extraFields: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodAny>>;
-                    }, import("zod/v4/core").$strip>>;
+                    }, import("zod/v4/core").$strict>>>;
                 }, import("zod/v4/core").$strip>>;
                 samlConfig: import("zod").ZodOptional<import("zod").ZodObject<{
-                    entryPoint: import("zod").ZodOptional<import("zod").ZodString>;
-                    cert: import("zod").ZodOptional<import("zod").ZodString>;
-                    callbackUrl: import("zod").ZodOptional<import("zod").ZodString>;
-                    audience: import("zod").ZodOptional<import("zod").ZodString>;
-                    idpMetadata: import("zod").ZodOptional<import("zod").ZodObject<{
+                    audience: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodString>>;
+                    mapping: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodObject<{
+                        email: import("zod").ZodOptional<import("zod").ZodString>;
+                        emailVerified: import("zod").ZodOptional<import("zod").ZodString>;
+                        name: import("zod").ZodOptional<import("zod").ZodString>;
+                        firstName: import("zod").ZodOptional<import("zod").ZodString>;
+                        lastName: import("zod").ZodOptional<import("zod").ZodString>;
+                        extraFields: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodAny>>;
+                    }, import("zod/v4/core").$strict>>>;
+                    privateKey: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodString>>;
+                    spMetadata: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodObject<{
                         metadata: import("zod").ZodOptional<import("zod").ZodString>;
                         entityID: import("zod").ZodOptional<import("zod").ZodString>;
-                        cert: import("zod").ZodOptional<import("zod").ZodString>;
+                        binding: import("zod").ZodOptional<import("zod").ZodString>;
+                        privateKey: import("zod").ZodOptional<import("zod").ZodString>;
+                        privateKeyPass: import("zod").ZodOptional<import("zod").ZodString>;
+                        isAssertionEncrypted: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                        encPrivateKey: import("zod").ZodOptional<import("zod").ZodString>;
+                        encPrivateKeyPass: import("zod").ZodOptional<import("zod").ZodString>;
+                    }, import("zod/v4/core").$strip>>>;
+                    cert: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodUnion<readonly [import("zod").ZodString, import("zod").ZodArray<import("zod").ZodString>]>>>;
+                    entryPoint: import("zod").ZodOptional<import("zod").ZodString>;
+                    callbackUrl: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodString>>;
+                    wantAssertionsSigned: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodBoolean>>;
+                    authnRequestsSigned: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodBoolean>>;
+                    signatureAlgorithm: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodString>>;
+                    digestAlgorithm: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodString>>;
+                    identifierFormat: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodString>>;
+                    idpInitiatedCallbackUrl: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+                    idpMetadata: import("zod").ZodOptional<import("zod").ZodObject<{
+                        cert: import("zod").ZodOptional<import("zod").ZodUnion<readonly [import("zod").ZodString, import("zod").ZodArray<import("zod").ZodString>]>>;
                         privateKey: import("zod").ZodOptional<import("zod").ZodString>;
                         privateKeyPass: import("zod").ZodOptional<import("zod").ZodString>;
                         isAssertionEncrypted: import("zod").ZodOptional<import("zod").ZodBoolean>;
@@ -792,33 +746,12 @@ export declare const sso: (options?: SSOOptions) => {
                             Binding: import("zod").ZodString;
                             Location: import("zod").ZodString;
                         }, import("zod/v4/core").$strip>>>;
-                    }, import("zod/v4/core").$strip>>;
-                    spMetadata: import("zod").ZodOptional<import("zod").ZodObject<{
+                        singleLogoutService: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodObject<{
+                            Binding: import("zod").ZodString;
+                            Location: import("zod").ZodString;
+                        }, import("zod/v4/core").$strip>>>;
                         metadata: import("zod").ZodOptional<import("zod").ZodString>;
                         entityID: import("zod").ZodOptional<import("zod").ZodString>;
-                        binding: import("zod").ZodOptional<import("zod").ZodString>;
-                        privateKey: import("zod").ZodOptional<import("zod").ZodString>;
-                        privateKeyPass: import("zod").ZodOptional<import("zod").ZodString>;
-                        isAssertionEncrypted: import("zod").ZodOptional<import("zod").ZodBoolean>;
-                        encPrivateKey: import("zod").ZodOptional<import("zod").ZodString>;
-                        encPrivateKeyPass: import("zod").ZodOptional<import("zod").ZodString>;
-                    }, import("zod/v4/core").$strip>>;
-                    wantAssertionsSigned: import("zod").ZodOptional<import("zod").ZodBoolean>;
-                    authnRequestsSigned: import("zod").ZodOptional<import("zod").ZodBoolean>;
-                    signatureAlgorithm: import("zod").ZodOptional<import("zod").ZodString>;
-                    digestAlgorithm: import("zod").ZodOptional<import("zod").ZodString>;
-                    identifierFormat: import("zod").ZodOptional<import("zod").ZodString>;
-                    privateKey: import("zod").ZodOptional<import("zod").ZodString>;
-                    decryptionPvk: import("zod").ZodOptional<import("zod").ZodString>;
-                    additionalParams: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodAny>>;
-                    mapping: import("zod").ZodOptional<import("zod").ZodObject<{
-                        id: import("zod").ZodOptional<import("zod").ZodString>;
-                        email: import("zod").ZodOptional<import("zod").ZodString>;
-                        emailVerified: import("zod").ZodOptional<import("zod").ZodString>;
-                        name: import("zod").ZodOptional<import("zod").ZodString>;
-                        firstName: import("zod").ZodOptional<import("zod").ZodString>;
-                        lastName: import("zod").ZodOptional<import("zod").ZodString>;
-                        extraFields: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodAny>>;
                     }, import("zod/v4/core").$strip>>;
                 }, import("zod/v4/core").$strip>>;
                 providerId: import("zod").ZodString;
@@ -857,31 +790,32 @@ export declare const sso: (options?: SSOOptions) => {
                 userInfoEndpoint: string | undefined;
                 jwksEndpoint: string | undefined;
                 scopes: string[] | undefined;
-                tokenEndpointAuthentication: "client_secret_post" | "client_secret_basic" | undefined;
+                tokenEndpointAuthentication: "client_secret_post" | "client_secret_basic" | "private_key_jwt" | undefined;
             } | undefined;
             samlConfig: {
                 entryPoint: string;
-                callbackUrl: string;
+                callbackUrl: string | undefined;
+                idpInitiatedCallbackUrl: string | undefined;
                 audience: string | undefined;
                 wantAssertionsSigned: boolean | undefined;
                 authnRequestsSigned: boolean | undefined;
                 identifierFormat: string | undefined;
                 signatureAlgorithm: string | undefined;
                 digestAlgorithm: string | undefined;
-                certificate: {
+                certificate: ({
                     fingerprintSha256: string;
                     notBefore: string;
                     notAfter: string;
                     publicKeyAlgorithm: string;
                 } | {
                     error: string;
-                };
+                })[] | undefined;
             } | undefined;
             spMetadataUrl: string;
         }>>;
-        deleteSSOProvider: ReturnType<() => import("better-auth").StrictEndpoint<"/sso/delete-provider", {
+        deleteSSOProvider: ReturnType<(options?: SSOOptions) => import("better-auth").StrictEndpoint<"/sso/delete-provider", {
             method: "POST";
-            use: ((inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+            use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
                 session: {
                     session: Record<string, any> & {
                         id: string;
@@ -903,7 +837,7 @@ export declare const sso: (options?: SSOOptions) => {
                         image?: string | null | undefined;
                     };
                 };
-            }>)[];
+            }>>[];
             body: import("zod").ZodObject<{
                 providerId: import("zod").ZodString;
             }, import("zod/v4/core").$strip>;
@@ -929,6 +863,23 @@ export declare const sso: (options?: SSOOptions) => {
             success: boolean;
         }>>;
     };
+    schema: {
+        ssoProvider: {
+            modelName: string;
+            fields: Record<string, import("better-auth").DBFieldAttribute>;
+        };
+    };
+    $Infer: {
+        SSOProvider: {
+            issuer: string;
+            oidcConfig?: import("@better-auth/sso").OIDCConfig | undefined;
+            samlConfig?: import("@better-auth/sso").SAMLConfig | undefined;
+            userId: string;
+            providerId: string;
+            organizationId?: string | undefined;
+            domain: string;
+        };
+    };
     options: NoInfer<SSOOptions>;
 };
 //# sourceMappingURL=sso.d.ts.map

package/dist/auth/plugins/wrappers/sso.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sso.d.ts","sourceRoot":"","sources":["../../../../src/auth/plugins/wrappers/sso.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,EAAE,UASxB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,GAAG,aAAa,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWtC,CAAC"}
+{"version":3,"file":"sso.d.ts","sourceRoot":"","sources":["../../../../src/auth/plugins/wrappers/sso.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,EAAE,UASxB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,GAAG,aAAa,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWtC,CAAC"}

package/dist/auth/plugins/wrappers/sso.js

@@ -1,5 +1,5 @@
 import { sso as sso$1 } from "@better-auth/sso";
-//#region src/auth/plugins/wrappers/sso.ts
+// src/auth/plugins/wrappers/sso.ts
 /**
 * SSO 플러그인 스키마
 *
@@ -35,7 +35,6 @@ const sso = (options = {}) => {
 	};
 	return sso$1(options);
 };
-//#endregion
 export { SSO_SCHEMA, sso };
 
 //# sourceMappingURL=data:application/json;charset=utf-8;base64,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