Gustavo Valverde
94fd92491b
The `typecheck:dist` and smoke jobs failed because the discovery metadata merge cast `AuthServerMetadata` directly to an indexable record. That interface has no index signature, so the stricter declaration-emit typecheck rejected the cast (TS2352), and the smoke fixture that imports the package and emits declarations failed the same way. Widen the merge target through `unknown`, and route the aggregated contribution runtime through a `Record<string, unknown>` return so the internal `OAuthProviderRuntime` name no longer leaks into the plugin's emitted declaration (TS4023). Construction stays fully typed; readers recover the type through the existing accessor. The metadata merge now skips any key already present on the document, including one a host intentionally left undefined, so a contributor can never fill a core field the host omitted on purpose.
Better Auth
Better Auth is a framework-agnostic authentication (and authorization) framework for TypeScript. It provides a comprehensive set of features out of the box and includes a plugin ecosystem that simplifies adding advanced functionalities with minimal code in a short amount of time. Whether you need 2FA, multi-tenant support, or other complex features, it lets you focus on building your actual application instead of reinventing the wheel.
Why Better Auth
Authentication in the TypeScript ecosystem is a half-solved problem. Other open-source libraries often require a lot of additional code for anything beyond basic authentication. Rather than just pushing third-party services as the solution, I believe we can do better as a community—hence, Better Auth.
Contribution
Better Auth is a free and open source project licensed under the MIT License. You are free to do whatever you want with it.
You could help continuing its development by:
Security
If you discover a security vulnerability within Better Auth, please send an e-mail to security@better-auth.com.
All reports will be promptly addressed, and you'll be credited accordingly.