tauri-plugin-better-auth 0.1.1 → 0.2.0-alpha.1

package/README.md

@@ -1,12 +1,12 @@
 # tauri-plugin-better-auth
 
-[Better Auth](https://better-auth.com) for [Tauri 2](https://tauri.app). Users
+[Better Auth](https://better-auth.com) for [Tauri 3](https://tauri.app). Users
 sign in through the system browser with PKCE. The session lives in Rust, and
 webview code never sees a token.
 
-> **Tauri 2 line (`0.1.x`).** For Tauri 3 (alpha), install
-> `tauri-plugin-better-auth@next` and use crate version `0.2.0-alpha.1`
-> ([`v3` branch](https://github.com/laakal/tauri-plugin-better-auth/tree/v3)).
+> **Tauri 3 line (`0.2.x` pre-releases).** For Tauri 2, install
+> `tauri-plugin-better-auth@latest` and use crate version `0.1`
+> ([`main` branch](https://github.com/laakal/tauri-plugin-better-auth)).
 > Keep the npm package and the crate on the same line.
 
 This npm package is one half of the plugin. The other half is the Rust crate
@@ -51,5 +51,6 @@ const authClient = asTauriClient(
 await requestAuth();
 ```
 
-Requires `better-auth` >= 1.7.4 and, for `/client`, `@tauri-apps/api` >= 2.11.
+Requires `better-auth` >= 1.7.4 and, for `/client`, `@tauri-apps/api` 3 (alpha). For Tauri 2,
+use `0.1.x`.
 MIT licensed.

package/dist/client.d.ts

@@ -1,5 +1,6 @@
 import { UnlistenFn } from "@tauri-apps/api/event";
 import { BetterAuthClientOptions } from "@better-auth/core";
+//#region src/client/commands.d.ts
 /** How the browser hands the sign-in back to the app. */
 type Transport = 'auto' | 'deep-link' | 'loopback';
 /** The signed-in user (Better Auth user object). */
@@ -59,6 +60,8 @@ export declare function getSession<U = TauriUser>(options?: {
 }): Promise<TauriSessionSnapshot<U> | null>;
 /** Signs out locally (always) and on the server (best effort). */
 export declare function signOut(): Promise<void>;
+//#endregion
+//#region src/client/events.d.ts
 /** Why the user is no longer signed in. */
 type SignOutReason = 'user' | 'revoked' | 'expired';
 /** Payload of the error event. */
@@ -77,6 +80,8 @@ export declare function onSignedOut(callback: (event: {
 }) => void): Promise<UnlistenFn>;
 /** Fires when a background sign-in (deep link or loopback) fails. */
 export declare function onAuthError(callback: (error: TauriAuthErrorEvent) => void): Promise<UnlistenFn>;
+//#endregion
+//#region src/client/fetch.d.ts
 /**
  * A `fetch` that sends the request through the plugin's Rust bridge.
  *
@@ -89,6 +94,8 @@ export declare function onAuthError(callback: (error: TauriAuthErrorEvent) => vo
  * `fetch` of your API client. Bodies are buffered (no streaming).
  */
 export declare const tauriFetch: typeof fetch;
+//#endregion
+//#region src/client/plugin.d.ts
 /**
  * Better Auth client plugin for the Tauri webview. Refreshes `useSession()`
  * when a browser sign-in completes or the session ends, and adds
@@ -145,6 +152,8 @@ type WithTauri<O extends BetterAuthClientOptions> = Omit<O, 'plugins' | 'fetchOp
  * ```
  */
 export declare function withTauri<O extends BetterAuthClientOptions>(options: O): WithTauri<O>;
+//#endregion
+//#region src/client/types.d.ts
 /**
  * Types that describe a Better Auth client as it behaves inside a Tauri
  * webview: sessions carry no token, and only the operations the Rust bridge
@@ -219,4 +228,5 @@ type TauriAuthClient<C, ExtraSignIn extends string = never> = Omit<C, 'useSessio
  * Runtime no-op: the bridge already enforces all of this.
  */
 export declare function asTauriClient<C, ExtraSignIn extends string = never>(client: C): TauriAuthClient<C, ExtraSignIn>;
+//#endregion
 export type { RequestAuthOptions, RequestAuthResult, SignOutReason, TauriAuthClient, TauriAuthErrorEvent, TauriSessionSnapshot, TauriSignInMethod, TauriUnsupportedAction, TauriUser, Tokenless, Transport, WithTauri };

package/dist/client.js

@@ -1,6 +1,6 @@
 import { invoke, isTauri } from "@tauri-apps/api/core";
 import { listen } from "@tauri-apps/api/event";
-// src/client/commands.ts
+//#region src/client/commands.ts
 /** Error raised by the plugin commands; `code` is stable (see the README). */
 var TauriAuthError = class extends Error {
 	code;
@@ -57,7 +57,8 @@ function getSession(options = {}) {
 function signOut() {
 	return call("sign_out");
 }
-// src/client/events.ts
+//#endregion
+//#region src/client/events.ts
 const EVENT_AUTHENTICATED = "better-auth://authenticated";
 const EVENT_SIGNED_OUT = "better-auth://signed-out";
 const EVENT_ERROR = "better-auth://error";
@@ -73,7 +74,8 @@ function onSignedOut(callback) {
 function onAuthError(callback) {
 	return listen(EVENT_ERROR, (event) => callback(event.payload));
 }
-// src/client/fetch.ts
+//#endregion
+//#region src/client/fetch.ts
 const NULL_BODY_STATUSES = /* @__PURE__ */ new Set([
 	101,
 	204,
@@ -167,7 +169,8 @@ const tauriFetch = async (input, init) => {
 		signal?.removeEventListener("abort", onAbort);
 	}
 };
-// src/client/plugin.ts
+//#endregion
+//#region src/client/plugin.ts
 /**
 * Better Auth client plugin for the Tauri webview. Refreshes `useSession()`
 * when a browser sign-in completes or the session ends, and adds
@@ -228,7 +231,8 @@ function withTauri(options) {
 		plugins: [...options.plugins ?? [], tauriClient()]
 	};
 }
-// src/client/types.ts
+//#endregion
+//#region src/client/types.ts
 /**
 * Narrows a client created with `withTauri` to {@link TauriAuthClient}.
 * Runtime no-op: the bridge already enforces all of this.
@@ -236,4 +240,5 @@ function withTauri(options) {
 function asTauriClient(client) {
 	return client;
 }
+//#endregion
 export { EVENT_AUTHENTICATED, EVENT_ERROR, EVENT_SIGNED_OUT, TauriAuthError, asTauriClient, authenticate, cancelAuth, getSession, isTauriAuthError, onAuthError, onAuthenticated, onSignedOut, requestAuth, signOut, tauriClient, tauriFetch, withTauri };

package/dist/{index-CyIlgWoG.d.ts → index-DZZMJtAS.d.ts}

@@ -1,5 +1,6 @@
 import "zod";
 import { User } from "better-auth";
+//#region src/types.d.ts
 /** Options of the {@link tauri} server plugin. */
 interface TauriOptions {
   /**
@@ -43,6 +44,8 @@ interface ResolvedTauriOptions {
     max: number;
   } | false;
 }
+//#endregion
+//#region src/error-codes.d.ts
 /**
  * Error codes returned by the `/tauri/*` endpoints. Stable within protocol v1:
  * the Rust plugin and apps switch on `code`, never on `message`.
@@ -59,6 +62,8 @@ declare const TAURI_ERROR_CODES: {
   STATE_MISMATCH: import("better-auth").RawError<"STATE_MISMATCH">;
   USER_NOT_FOUND: import("better-auth").RawError<"USER_NOT_FOUND">;
 };
+//#endregion
+//#region src/protocol.d.ts
 /**
  * Wire protocol v1, shared by the server plugin, the web hand-off client and
  * the Rust plugin. Documented in PROTOCOL.md. Within v1, changes are additive
@@ -92,6 +97,8 @@ type CallbackTarget = {
   kind: 'loopback';
   redirectUri: string;
 };
+//#endregion
+//#region src/routes.d.ts
 /** Response body of `POST /tauri/token`. */
 interface TauriTokenResponse {
   /** Session token, used as `Authorization: Bearer` by the app. */
@@ -101,11 +108,15 @@ interface TauriTokenResponse {
   /** Wire protocol version (see PROTOCOL.md). */
   protocol: typeof PROTOCOL_VERSION;
 }
+//#endregion
+//#region src/version.d.ts
 /**
  * Package version. Released in lockstep with the Rust crate; CI fails when this
  * constant, `package.json` and `Cargo.toml` disagree.
  */
-declare const VERSION = "0.1.1";
+declare const VERSION = "0.2.0-alpha.1";
+//#endregion
+//#region src/index.d.ts
 /** What `init` needs from Better Auth's context. */
 interface InitContext {
   hasPlugin(pluginId: string): boolean;
@@ -277,4 +288,5 @@ declare module '@better-auth/core' {
     };
   }
 }
+//#endregion
 export { PROTOCOL_VERSION as a, isValidScheme as c, TauriOptions as d, CallbackTarget as i, TAURI_ERROR_CODES as l, VERSION as n, TauriConfigError as o, TauriTokenResponse as r, isLoopbackRedirectUri as s, tauri as t, ResolvedTauriOptions as u };

package/dist/index.d.ts

@@ -1,2 +1,2 @@
-import { a as PROTOCOL_VERSION, c as isValidScheme, d as TauriOptions, l as TAURI_ERROR_CODES, n as VERSION, o as TauriConfigError, r as TauriTokenResponse, s as isLoopbackRedirectUri, t as tauri, u as ResolvedTauriOptions } from "./index-CyIlgWoG.js";
+import { a as PROTOCOL_VERSION, c as isValidScheme, d as TauriOptions, l as TAURI_ERROR_CODES, n as VERSION, o as TauriConfigError, r as TauriTokenResponse, s as isLoopbackRedirectUri, t as tauri, u as ResolvedTauriOptions } from "./index-DZZMJtAS.js";
 export { PROTOCOL_VERSION, type ResolvedTauriOptions, TAURI_ERROR_CODES, TauriConfigError, type TauriOptions, type TauriTokenResponse, VERSION, isLoopbackRedirectUri, isValidScheme, tauri };

package/dist/index.js

@@ -1,4 +1,4 @@
-import { a as CODE_VERIFIER_PATTERN, c as PROTOCOL_VERSION, d as TauriConfigError, f as assertClientId, g as isValidScheme, h as isLoopbackRedirectUri, i as CODE_PATTERN, n as CODE_CHALLENGE_PATTERN, r as CODE_IDENTIFIER_PREFIX, u as STATE_PATTERN } from "./protocol-BMPEciOV.js";
+import { a as CODE_VERIFIER_PATTERN, c as PROTOCOL_VERSION, d as TauriConfigError, f as assertClientId, g as isValidScheme, h as isLoopbackRedirectUri, i as CODE_PATTERN, n as CODE_CHALLENGE_PATTERN, r as CODE_IDENTIFIER_PREFIX, u as STATE_PATTERN } from "./protocol-Fcr7NzIh.js";
 import { defineErrorCodes } from "@better-auth/core/utils/error-codes";
 import { APIError } from "@better-auth/core/error";
 import { createAuthEndpoint, sensitiveSessionMiddleware } from "better-auth/api";
@@ -7,7 +7,7 @@ import { constantTimeEqual, generateRandomString } from "better-auth/crypto";
 import { parseUserOutput } from "better-auth/db";
 import { generateCodeChallenge } from "better-auth/oauth2";
 import * as z from "zod";
-// src/error-codes.ts
+//#region src/error-codes.ts
 /**
 * Error codes returned by the `/tauri/*` endpoints. Stable within protocol v1:
 * the Rust plugin and apps switch on `code`, never on `message`.
@@ -24,7 +24,8 @@ const TAURI_ERROR_CODES = defineErrorCodes({
 	USER_NOT_FOUND: "The user for this authorization no longer exists",
 	SESSION_REJECTED: "The server rejected the new session"
 });
-// src/routes.ts
+//#endregion
+//#region src/routes.ts
 const authorizeBody = z.object({
 	client_id: z.string().max(64),
 	state: z.string().max(256),
@@ -149,13 +150,15 @@ const createTokenEndpoint = (opts) => createAuthEndpoint("/tauri/token", {
 		protocol: 1
 	});
 });
-// src/version.ts
+//#endregion
+//#region src/version.ts
 /**
 * Package version. Released in lockstep with the Rust crate; CI fails when this
 * constant, `package.json` and `Cargo.toml` disagree.
 */
-const VERSION = "0.1.1";
-// src/index.ts
+const VERSION = "0.2.0-alpha.1";
+//#endregion
+//#region src/index.ts
 function resolveOptions(options = {}) {
 	const clientID = assertClientId(options.clientID ?? "tauri");
 	const codeExpiresIn = options.codeExpiresIn ?? 300;
@@ -228,4 +231,5 @@ const tauri = (options) => {
 		$ERROR_CODES: TAURI_ERROR_CODES
 	};
 };
+//#endregion
 export { PROTOCOL_VERSION, TAURI_ERROR_CODES, TauriConfigError, VERSION, isLoopbackRedirectUri, isValidScheme, tauri };

package/dist/{protocol-BMPEciOV.js → protocol-Fcr7NzIh.js}

@@ -1,4 +1,4 @@
-// src/protocol.ts
+//#region src/protocol.ts
 /**
 * Wire protocol v1, shared by the server plugin, the web hand-off client and
 * the Rust plugin. Documented in PROTOCOL.md. Within v1, changes are additive
@@ -107,4 +107,5 @@ function buildCallbackUrl(target, params) {
 	if (target.kind === "loopback") return `${target.redirectUri}?${search}`;
 	return `${target.scheme}://${target.callbackPath.slice(1)}?${search}`;
 }
+//#endregion
 export { normalizeCallbackPath as _, CODE_VERIFIER_PATTERN as a, PROTOCOL_VERSION as c, TauriConfigError as d, assertClientId as f, isValidScheme as g, isLoopbackRedirectUri as h, CODE_PATTERN as i, PROVIDER_PATTERN as l, buildCallbackUrl as m, CODE_CHALLENGE_PATTERN as n, DEFAULT_CALLBACK_PATH as o, assertScheme as p, CODE_IDENTIFIER_PREFIX as r, DEFAULT_CLIENT_ID as s, CLIENT_ID_PATTERN as t, STATE_PATTERN as u };

package/dist/proxy.d.ts

@@ -1,5 +1,6 @@
-import { i as CallbackTarget, t as tauri } from "./index-CyIlgWoG.js";
+import { i as CallbackTarget, t as tauri } from "./index-DZZMJtAS.js";
 import { BetterFetch, BetterFetchOption } from "@better-fetch/fetch";
+//#region src/proxy.d.ts
 /** Options of {@link tauriProxyClient}. */
 export interface TauriProxyClientOptions {
   /** Custom URI scheme the app registers, e.g. `"com.example.app"`. */
@@ -119,4 +120,5 @@ export declare const tauriProxyClient: (options: TauriProxyClientOptions) => {
     tauri: TauriProxyActions;
   };
 };
+//#endregion
 export type { CallbackTarget };

package/dist/proxy.js

@@ -1,5 +1,5 @@
-import { _ as normalizeCallbackPath, f as assertClientId, h as isLoopbackRedirectUri, l as PROVIDER_PATTERN, m as buildCallbackUrl, n as CODE_CHALLENGE_PATTERN, p as assertScheme, t as CLIENT_ID_PATTERN, u as STATE_PATTERN } from "./protocol-BMPEciOV.js";
-// src/proxy.ts
+import { _ as normalizeCallbackPath, f as assertClientId, h as isLoopbackRedirectUri, l as PROVIDER_PATTERN, m as buildCallbackUrl, n as CODE_CHALLENGE_PATTERN, p as assertScheme, t as CLIENT_ID_PATTERN, u as STATE_PATTERN } from "./protocol-Fcr7NzIh.js";
+//#region src/proxy.ts
 const QUERY_KEYS = [
 	"client_id",
 	"state",
@@ -213,4 +213,5 @@ const tauriProxyClient = (options) => {
 		}
 	};
 };
+//#endregion
 export { tauriProxyClient };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "tauri-plugin-better-auth",
-  "version": "0.1.1",
-  "description": "Better Auth for Tauri 2: browser sign-in with PKCE, a Rust-held session and a token-free webview.",
+  "version": "0.2.0-alpha.1",
+  "description": "Better Auth for Tauri 3: browser sign-in with PKCE, a Rust-held session and a token-free webview.",
   "keywords": [
     "auth",
     "authentication",
@@ -49,7 +49,8 @@
   },
   "publishConfig": {
     "access": "public",
-    "provenance": true
+    "provenance": true,
+    "tag": "next"
   },
   "scripts": {
     "build": "tsdown",
@@ -65,7 +66,7 @@
     "@arethetypeswrong/cli": "0.18.5",
     "@better-auth/core": "1.7.14",
     "@better-fetch/fetch": "1.3.3",
-    "@tauri-apps/api": "2.12.4",
+    "@tauri-apps/api": "3.0.0-alpha.3",
     "@types/node": "24.19.2",
     "@types/pg": "8.23.1",
     "better-auth": "1.7.14",
@@ -80,7 +81,7 @@
   "peerDependencies": {
     "@better-auth/core": ">=1.7.4 <2",
     "@better-fetch/fetch": "^1.3.1",
-    "@tauri-apps/api": ">=2.11.0 <3",
+    "@tauri-apps/api": ">=3.0.0-alpha.0 <4",
     "better-auth": ">=1.7.4 <2",
     "better-call": "^1.4.0"
   },