better-auth/better-auth 2ac00fe4..c14b9b0c
base and head as given
- Popup OAuth sign-in entered the authentication library as a new plugin.
- Client plugin exports now depend on popup OAuth.
- Server plugin exports now depend on popup OAuth.
- Popup OAuth exposes 17 new public APIs.
- files changed
- 11
- in a component
- 7
- lines in components
- 781
- components
- 3
- public routes changed
- 0
- schema statements
- 0
- new dependencies
- 0
- excluded by role
- 4
Popup OAuth sign-in
Added- Before
- Popup OAuth sign-in did not exist
- After
- OAuth sign-in finishes in a popup
Apps can finish OAuth sign-in in a popup, receiving completion or error without redirecting the opener. Embedded cross-origin apps store the returned token and send it as bearer authentication.
In favour
- In favour: Origin, message type, and nonce gate the popup token handoff
- In favour: Stored embedded tokens clear after sign-out and session revocation
Against
- Against: Embedded deployments require the bearer plugin for authenticated follow-up requests
Inspect 7 source files behind this explanation
- packages/better-auth/src/client/plugins/index.ts
- packages/better-auth/src/plugins/index.ts
- packages/better-auth/src/plugins/oauth-popup/index.ts
- packages/better-auth/src/plugins/oauth-popup/client.ts
- packages/better-auth/src/plugins/oauth-popup/types.ts
- packages/better-auth/src/plugins/oauth-popup/constants.ts
- packages/better-auth/src/plugins/oauth-popup/error-codes.ts
2 new dependencies between components — Client → OAuth Popup · Plugins → OAuth Popup
What else could behave differently
5 components · 8 filesThese components import changed code, directly or through other files. A traced dependency is a place to review, not a confirmed runtime failure.
Reached 3
| Component | Symbol | Cited at | Files | Reached by |
|---|---|---|---|---|
| Clientpackages/better-auth/src/client/ | Added OAUTH_POPUP_MESSAGE_TYPE1 of 9 changed symbols reaching it | packages/better-auth/src/plugins/oauth-popup/constants.ts:2 | 1 | none direct · 1 at two stepsTrace pathShortest component path from the changed symbol:
Later steps follow file imports; they do not prove this symbol is called. |
| Pluginspackages/better-auth/src/plugins/ | Added OAUTH_POPUP_MESSAGE_TYPE1 of 6 changed symbols reaching it | packages/better-auth/src/plugins/oauth-popup/constants.ts:2 | 1 | none direct · 1 at two stepsTrace pathShortest component path from the changed symbol:
Later steps follow file imports; they do not prove this symbol is called. |
| OAuth Popuppackages/better-auth/src/plugins/oauth-popup/ | Added OAUTH_POPUP_MESSAGE_TYPE1 of 9 changed symbols reaching it | packages/better-auth/src/plugins/oauth-popup/constants.ts:2 | 3 | 3 directTrace pathShortest component path from the changed symbol:
Later steps follow file imports; they do not prove this symbol is called. |
Held back 2
| Component | Files | Reached by | Resolution |
|---|---|---|---|
| packages/better-auth/src/test-utils/ | 2 | none direct · 1 at three steps · 1 at four steps | precise |
| packages/better-auth/src/plugins/custom-session/ | 1 | none direct · 1 at three steps | precise |
Statements 3
OAUTH_POPUP_MESSAGE_TYPE export reached 1 file in Client; all 4 names in its file changed. 1OAUTH_POPUP_MESSAGE_TYPE export reached 1 file in Plugins; all 4 names in its file changed. 1OAUTH_POPUP_MESSAGE_TYPE export reached 3 files in OAuth Popup; all 4 names in its file changed. 368 reached files belong to no component — tests, docs and config.
Routes, schema, dependencies
No public URL, no migration and no new package.
Not stated
- 2 import edges resolve to more than one file. A reach that passes through one is held back rather than claimed, and said so where it is listed.
- 28 routes were found on files whose role excludes them, so no route is claimed for them.
- 5 database accesses were found on files whose role excludes them, and no data claim states them.
Inspect components, files and symbols
Component
File
Function
imports what changeddownstream of it, one mark per step
Diff
Analysis scope
1898 → 3- files at head1,898
- components121
- changed by this change3
Where the new files landed
5 new files| New file | Belongs to | Used by | Calls | Serves |
|---|---|---|---|---|
| packages/better-auth/src/plugins/oauth-popup/5 new files | OAuth Popupnew territory | ClientPlugins | packages/better-auth/src/packages/better-auth/src/api/state/packages/better-auth/src/context/packages/better-auth/src/cookies/packages/better-auth/src/crypto/packages/better-auth/src/utils/ | — |
4 added files carry no component — 2 docs, 2 test.
11 files changed, 9 claims stated. 5 components reached in total.