better-auth-fraud-detection
Version:
Real-time fraud detection plugin for Better Auth - Prevent account takeovers, bot attacks, and suspicious activities
40 lines (37 loc) • 1.04 kB
TypeScript
import { BetterAuthPlugin } from 'better-auth';
interface FraudProvider {
service: string;
apiKey: string;
[key: string]: any;
}
interface FraudDetectionOptions {
providers?: {
ipReputation?: FraudProvider;
deviceFingerprint?: FraudProvider;
mlScoring?: FraudProvider;
};
rules?: {
blockThreshold?: number;
mfaThreshold?: number;
challengeThreshold?: number;
};
signals?: {
newDevice?: boolean;
newLocation?: boolean;
impossibleTravel?: boolean;
bruteForce?: boolean;
credentialStuffing?: boolean;
suspiciousUserAgent?: boolean;
};
actions?: {
block?: {
message?: string;
};
challenge?: {
type: "recaptcha" | "hcaptcha" | "turnstile";
siteKey: string;
};
};
}
declare function fraudDetectionPlugin(options?: FraudDetectionOptions): BetterAuthPlugin;
export { type FraudDetectionOptions, type FraudProvider, fraudDetectionPlugin };