tauri-plugin-better-auth 0.1.0 → 0.1.1

package/README.md

@@ -4,6 +4,11 @@
 sign in through the system browser with PKCE. The session lives in Rust, and
 webview code never sees a token.
 
+> **Tauri 2 line (`0.1.x`).** For Tauri 3 (alpha), install
+> `tauri-plugin-better-auth@next` and use crate version `0.2.0-alpha.1`
+> ([`v3` branch](https://github.com/laakal/tauri-plugin-better-auth/tree/v3)).
+> Keep the npm package and the crate on the same line.
+
 This npm package is one half of the plugin. The other half is the Rust crate
 [`tauri-plugin-better-auth`](https://crates.io/crates/tauri-plugin-better-auth).
 Full documentation:

package/dist/client.d.ts

@@ -1,6 +1,5 @@
 import { UnlistenFn } from "@tauri-apps/api/event";
 import { BetterAuthClientOptions } from "@better-auth/core";
-//#region src/client/commands.d.ts
 /** How the browser hands the sign-in back to the app. */
 type Transport = 'auto' | 'deep-link' | 'loopback';
 /** The signed-in user (Better Auth user object). */
@@ -60,8 +59,6 @@ export declare function getSession<U = TauriUser>(options?: {
 }): Promise<TauriSessionSnapshot<U> | null>;
 /** Signs out locally (always) and on the server (best effort). */
 export declare function signOut(): Promise<void>;
-//#endregion
-//#region src/client/events.d.ts
 /** Why the user is no longer signed in. */
 type SignOutReason = 'user' | 'revoked' | 'expired';
 /** Payload of the error event. */
@@ -80,8 +77,6 @@ export declare function onSignedOut(callback: (event: {
 }) => void): Promise<UnlistenFn>;
 /** Fires when a background sign-in (deep link or loopback) fails. */
 export declare function onAuthError(callback: (error: TauriAuthErrorEvent) => void): Promise<UnlistenFn>;
-//#endregion
-//#region src/client/fetch.d.ts
 /**
  * A `fetch` that sends the request through the plugin's Rust bridge.
  *
@@ -94,8 +89,6 @@ export declare function onAuthError(callback: (error: TauriAuthErrorEvent) => vo
  * `fetch` of your API client. Bodies are buffered (no streaming).
  */
 export declare const tauriFetch: typeof fetch;
-//#endregion
-//#region src/client/plugin.d.ts
 /**
  * Better Auth client plugin for the Tauri webview. Refreshes `useSession()`
  * when a browser sign-in completes or the session ends, and adds
@@ -152,8 +145,6 @@ type WithTauri<O extends BetterAuthClientOptions> = Omit<O, 'plugins' | 'fetchOp
  * ```
  */
 export declare function withTauri<O extends BetterAuthClientOptions>(options: O): WithTauri<O>;
-//#endregion
-//#region src/client/types.d.ts
 /**
  * Types that describe a Better Auth client as it behaves inside a Tauri
  * webview: sessions carry no token, and only the operations the Rust bridge
@@ -228,5 +219,4 @@ type TauriAuthClient<C, ExtraSignIn extends string = never> = Omit<C, 'useSessio
  * Runtime no-op: the bridge already enforces all of this.
  */
 export declare function asTauriClient<C, ExtraSignIn extends string = never>(client: C): TauriAuthClient<C, ExtraSignIn>;
-//#endregion
 export type { RequestAuthOptions, RequestAuthResult, SignOutReason, TauriAuthClient, TauriAuthErrorEvent, TauriSessionSnapshot, TauriSignInMethod, TauriUnsupportedAction, TauriUser, Tokenless, Transport, WithTauri };

package/dist/client.js

@@ -1,6 +1,6 @@
 import { invoke, isTauri } from "@tauri-apps/api/core";
 import { listen } from "@tauri-apps/api/event";
-//#region src/client/commands.ts
+// src/client/commands.ts
 /** Error raised by the plugin commands; `code` is stable (see the README). */
 var TauriAuthError = class extends Error {
 	code;
@@ -57,8 +57,7 @@ function getSession(options = {}) {
 function signOut() {
 	return call("sign_out");
 }
-//#endregion
-//#region src/client/events.ts
+// src/client/events.ts
 const EVENT_AUTHENTICATED = "better-auth://authenticated";
 const EVENT_SIGNED_OUT = "better-auth://signed-out";
 const EVENT_ERROR = "better-auth://error";
@@ -74,8 +73,7 @@ function onSignedOut(callback) {
 function onAuthError(callback) {
 	return listen(EVENT_ERROR, (event) => callback(event.payload));
 }
-//#endregion
-//#region src/client/fetch.ts
+// src/client/fetch.ts
 const NULL_BODY_STATUSES = /* @__PURE__ */ new Set([
 	101,
 	204,
@@ -169,8 +167,7 @@ const tauriFetch = async (input, init) => {
 		signal?.removeEventListener("abort", onAbort);
 	}
 };
-//#endregion
-//#region src/client/plugin.ts
+// src/client/plugin.ts
 /**
 * Better Auth client plugin for the Tauri webview. Refreshes `useSession()`
 * when a browser sign-in completes or the session ends, and adds
@@ -231,8 +228,7 @@ function withTauri(options) {
 		plugins: [...options.plugins ?? [], tauriClient()]
 	};
 }
-//#endregion
-//#region src/client/types.ts
+// src/client/types.ts
 /**
 * Narrows a client created with `withTauri` to {@link TauriAuthClient}.
 * Runtime no-op: the bridge already enforces all of this.
@@ -240,5 +236,4 @@ function withTauri(options) {
 function asTauriClient(client) {
 	return client;
 }
-//#endregion
 export { EVENT_AUTHENTICATED, EVENT_ERROR, EVENT_SIGNED_OUT, TauriAuthError, asTauriClient, authenticate, cancelAuth, getSession, isTauriAuthError, onAuthError, onAuthenticated, onSignedOut, requestAuth, signOut, tauriClient, tauriFetch, withTauri };

package/dist/{index-DYZxnm2f.d.ts → index-CyIlgWoG.d.ts}

@@ -1,6 +1,5 @@
 import "zod";
 import { User } from "better-auth";
-//#region src/types.d.ts
 /** Options of the {@link tauri} server plugin. */
 interface TauriOptions {
   /**
@@ -44,8 +43,6 @@ interface ResolvedTauriOptions {
     max: number;
   } | false;
 }
-//#endregion
-//#region src/error-codes.d.ts
 /**
  * Error codes returned by the `/tauri/*` endpoints. Stable within protocol v1:
  * the Rust plugin and apps switch on `code`, never on `message`.
@@ -62,8 +59,6 @@ declare const TAURI_ERROR_CODES: {
   STATE_MISMATCH: import("better-auth").RawError<"STATE_MISMATCH">;
   USER_NOT_FOUND: import("better-auth").RawError<"USER_NOT_FOUND">;
 };
-//#endregion
-//#region src/protocol.d.ts
 /**
  * Wire protocol v1, shared by the server plugin, the web hand-off client and
  * the Rust plugin. Documented in PROTOCOL.md. Within v1, changes are additive
@@ -97,8 +92,6 @@ type CallbackTarget = {
   kind: 'loopback';
   redirectUri: string;
 };
-//#endregion
-//#region src/routes.d.ts
 /** Response body of `POST /tauri/token`. */
 interface TauriTokenResponse {
   /** Session token, used as `Authorization: Bearer` by the app. */
@@ -108,15 +101,11 @@ interface TauriTokenResponse {
   /** Wire protocol version (see PROTOCOL.md). */
   protocol: typeof PROTOCOL_VERSION;
 }
-//#endregion
-//#region src/version.d.ts
 /**
  * Package version. Released in lockstep with the Rust crate; CI fails when this
  * constant, `package.json` and `Cargo.toml` disagree.
  */
-declare const VERSION = "0.1.0";
-//#endregion
-//#region src/index.d.ts
+declare const VERSION = "0.1.1";
 /** What `init` needs from Better Auth's context. */
 interface InitContext {
   hasPlugin(pluginId: string): boolean;
@@ -288,5 +277,4 @@ declare module '@better-auth/core' {
     };
   }
 }
-//#endregion
 export { PROTOCOL_VERSION as a, isValidScheme as c, TauriOptions as d, CallbackTarget as i, TAURI_ERROR_CODES as l, VERSION as n, TauriConfigError as o, TauriTokenResponse as r, isLoopbackRedirectUri as s, tauri as t, ResolvedTauriOptions as u };

package/dist/index.d.ts

@@ -1,2 +1,2 @@
-import { a as PROTOCOL_VERSION, c as isValidScheme, d as TauriOptions, l as TAURI_ERROR_CODES, n as VERSION, o as TauriConfigError, r as TauriTokenResponse, s as isLoopbackRedirectUri, t as tauri, u as ResolvedTauriOptions } from "./index-DYZxnm2f.js";
+import { a as PROTOCOL_VERSION, c as isValidScheme, d as TauriOptions, l as TAURI_ERROR_CODES, n as VERSION, o as TauriConfigError, r as TauriTokenResponse, s as isLoopbackRedirectUri, t as tauri, u as ResolvedTauriOptions } from "./index-CyIlgWoG.js";
 export { PROTOCOL_VERSION, type ResolvedTauriOptions, TAURI_ERROR_CODES, TauriConfigError, type TauriOptions, type TauriTokenResponse, VERSION, isLoopbackRedirectUri, isValidScheme, tauri };

package/dist/index.js

@@ -1,4 +1,4 @@
-import { a as CODE_VERIFIER_PATTERN, c as PROTOCOL_VERSION, d as TauriConfigError, f as assertClientId, g as isValidScheme, h as isLoopbackRedirectUri, i as CODE_PATTERN, n as CODE_CHALLENGE_PATTERN, r as CODE_IDENTIFIER_PREFIX, u as STATE_PATTERN } from "./protocol-Fcr7NzIh.js";
+import { a as CODE_VERIFIER_PATTERN, c as PROTOCOL_VERSION, d as TauriConfigError, f as assertClientId, g as isValidScheme, h as isLoopbackRedirectUri, i as CODE_PATTERN, n as CODE_CHALLENGE_PATTERN, r as CODE_IDENTIFIER_PREFIX, u as STATE_PATTERN } from "./protocol-BMPEciOV.js";
 import { defineErrorCodes } from "@better-auth/core/utils/error-codes";
 import { APIError } from "@better-auth/core/error";
 import { createAuthEndpoint, sensitiveSessionMiddleware } from "better-auth/api";
@@ -7,7 +7,7 @@ import { constantTimeEqual, generateRandomString } from "better-auth/crypto";
 import { parseUserOutput } from "better-auth/db";
 import { generateCodeChallenge } from "better-auth/oauth2";
 import * as z from "zod";
-//#region src/error-codes.ts
+// src/error-codes.ts
 /**
 * Error codes returned by the `/tauri/*` endpoints. Stable within protocol v1:
 * the Rust plugin and apps switch on `code`, never on `message`.
@@ -24,8 +24,7 @@ const TAURI_ERROR_CODES = defineErrorCodes({
 	USER_NOT_FOUND: "The user for this authorization no longer exists",
 	SESSION_REJECTED: "The server rejected the new session"
 });
-//#endregion
-//#region src/routes.ts
+// src/routes.ts
 const authorizeBody = z.object({
 	client_id: z.string().max(64),
 	state: z.string().max(256),
@@ -150,15 +149,13 @@ const createTokenEndpoint = (opts) => createAuthEndpoint("/tauri/token", {
 		protocol: 1
 	});
 });
-//#endregion
-//#region src/version.ts
+// src/version.ts
 /**
 * Package version. Released in lockstep with the Rust crate; CI fails when this
 * constant, `package.json` and `Cargo.toml` disagree.
 */
-const VERSION = "0.1.0";
-//#endregion
-//#region src/index.ts
+const VERSION = "0.1.1";
+// src/index.ts
 function resolveOptions(options = {}) {
 	const clientID = assertClientId(options.clientID ?? "tauri");
 	const codeExpiresIn = options.codeExpiresIn ?? 300;
@@ -231,5 +228,4 @@ const tauri = (options) => {
 		$ERROR_CODES: TAURI_ERROR_CODES
 	};
 };
-//#endregion
 export { PROTOCOL_VERSION, TAURI_ERROR_CODES, TauriConfigError, VERSION, isLoopbackRedirectUri, isValidScheme, tauri };

package/dist/{protocol-Fcr7NzIh.js → protocol-BMPEciOV.js}

@@ -1,4 +1,4 @@
-//#region src/protocol.ts
+// src/protocol.ts
 /**
 * Wire protocol v1, shared by the server plugin, the web hand-off client and
 * the Rust plugin. Documented in PROTOCOL.md. Within v1, changes are additive
@@ -107,5 +107,4 @@ function buildCallbackUrl(target, params) {
 	if (target.kind === "loopback") return `${target.redirectUri}?${search}`;
 	return `${target.scheme}://${target.callbackPath.slice(1)}?${search}`;
 }
-//#endregion
 export { normalizeCallbackPath as _, CODE_VERIFIER_PATTERN as a, PROTOCOL_VERSION as c, TauriConfigError as d, assertClientId as f, isValidScheme as g, isLoopbackRedirectUri as h, CODE_PATTERN as i, PROVIDER_PATTERN as l, buildCallbackUrl as m, CODE_CHALLENGE_PATTERN as n, DEFAULT_CALLBACK_PATH as o, assertScheme as p, CODE_IDENTIFIER_PREFIX as r, DEFAULT_CLIENT_ID as s, CLIENT_ID_PATTERN as t, STATE_PATTERN as u };

package/dist/proxy.d.ts

@@ -1,6 +1,5 @@
-import { i as CallbackTarget, t as tauri } from "./index-DYZxnm2f.js";
+import { i as CallbackTarget, t as tauri } from "./index-CyIlgWoG.js";
 import { BetterFetch, BetterFetchOption } from "@better-fetch/fetch";
-//#region src/proxy.d.ts
 /** Options of {@link tauriProxyClient}. */
 export interface TauriProxyClientOptions {
   /** Custom URI scheme the app registers, e.g. `"com.example.app"`. */
@@ -120,5 +119,4 @@ export declare const tauriProxyClient: (options: TauriProxyClientOptions) => {
     tauri: TauriProxyActions;
   };
 };
-//#endregion
 export type { CallbackTarget };

package/dist/proxy.js

@@ -1,5 +1,5 @@
-import { _ as normalizeCallbackPath, f as assertClientId, h as isLoopbackRedirectUri, l as PROVIDER_PATTERN, m as buildCallbackUrl, n as CODE_CHALLENGE_PATTERN, p as assertScheme, t as CLIENT_ID_PATTERN, u as STATE_PATTERN } from "./protocol-Fcr7NzIh.js";
-//#region src/proxy.ts
+import { _ as normalizeCallbackPath, f as assertClientId, h as isLoopbackRedirectUri, l as PROVIDER_PATTERN, m as buildCallbackUrl, n as CODE_CHALLENGE_PATTERN, p as assertScheme, t as CLIENT_ID_PATTERN, u as STATE_PATTERN } from "./protocol-BMPEciOV.js";
+// src/proxy.ts
 const QUERY_KEYS = [
 	"client_id",
 	"state",
@@ -213,5 +213,4 @@ const tauriProxyClient = (options) => {
 		}
 	};
 };
-//#endregion
 export { tauriProxyClient };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tauri-plugin-better-auth",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Better Auth for Tauri 2: browser sign-in with PKCE, a Rust-held session and a token-free webview.",
   "keywords": [
     "auth",
@@ -63,14 +63,14 @@
   },
   "devDependencies": {
     "@arethetypeswrong/cli": "0.18.5",
-    "@better-auth/core": "1.7.11",
-    "@better-fetch/fetch": "1.3.2",
+    "@better-auth/core": "1.7.14",
+    "@better-fetch/fetch": "1.3.3",
     "@tauri-apps/api": "2.12.4",
     "@types/node": "24.19.2",
     "@types/pg": "8.23.1",
-    "better-auth": "1.7.11",
-    "better-call": "1.4.2",
-    "happy-dom": "21.0.3",
+    "better-auth": "1.7.14",
+    "better-call": "1.4.4",
+    "happy-dom": "21.0.4",
     "pg": "8.23.1",
     "publint": "0.3.25",
     "tsdown": "0.23.1",