UNPKG

better-auth

Version:

The most comprehensive authentication framework for TypeScript.

17 lines (16 loc) 1.23 kB
import { GenericEndpointContext } from "@better-auth/core"; import * as _$better_call0 from "better-call"; //#region src/api/middlewares/origin-check.d.ts /** * A middleware to validate callbackURL and origin against trustedOrigins. * Also handles CSRF protection using Fetch Metadata for first-login scenarios. */ declare const originCheckMiddleware: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>; declare const originCheck: (getValue: (ctx: GenericEndpointContext) => string | string[]) => _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>; /** * Middleware for CSRF protection using Fetch Metadata headers. * This prevents cross-site navigation login attacks while supporting progressive enhancement. */ declare const formCsrfMiddleware: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>; //#endregion export { formCsrfMiddleware, originCheck, originCheckMiddleware };