feat: added oidc auth plugin for better auth (#147)

* feat: added oidc auth plugin for better auth

* chore: remove unused code

* chore: revert change to pnpm workspace file

* chore: remove unused code

* chore: remove unused code

* chore: remove unused code

* chore: added requested changes

packages/auth/src/auth.ts

@@ -2,7 +2,7 @@ import { PutObjectCommand, S3Client } from "@aws-sdk/client-s3";
 import { betterAuth } from "better-auth";
 import { drizzleAdapter } from "better-auth/adapters/drizzle";
 import { createAuthEndpoint, createAuthMiddleware } from "better-auth/api";
-import { apiKey } from "better-auth/plugins";
+import { apiKey, genericOAuth } from "better-auth/plugins";
 import { magicLink } from "better-auth/plugins/magic-link";
 import { socialProviderList } from "better-auth/social-providers";
 import { env } from "next-runtime-env";
@@ -83,8 +83,20 @@ export const socialProvidersPlugin = () => ({
       {
         method: "GET",
       },
-      async (ctx) =>
-        ctx.json(ctx.context.socialProviders.map((p) => p.id.toLowerCase())),
+      async (ctx) => {
+        const providers = ctx.context.socialProviders.map((p) =>
+          p.id.toLowerCase(),
+        );
+        // Add OIDC provider if configured
+        if (
+          process.env.OIDC_CLIENT_ID &&
+          process.env.OIDC_CLIENT_SECRET &&
+          process.env.OIDC_DISCOVERY_URL
+        ) {
+          providers.push("oidc");
+        }
+        return ctx.json(providers);
+      },
     ),
   },
 });
@@ -162,6 +174,25 @@ export const initAuth = (db: dbClient) => {
           }
         },
       }),
+      // Generic OIDC provider
+      ...(process.env.OIDC_CLIENT_ID &&
+      process.env.OIDC_CLIENT_SECRET &&
+      process.env.OIDC_DISCOVERY_URL
+        ? [
+            genericOAuth({
+              config: [
+                {
+                  providerId: "oidc",
+                  clientId: process.env.OIDC_CLIENT_ID,
+                  clientSecret: process.env.OIDC_CLIENT_SECRET,
+                  discoveryUrl: process.env.OIDC_DISCOVERY_URL,
+                  scopes: ["openid", "email", "profile"],
+                  pkce: true,
+                },
+              ],
+            }),
+          ]
+        : []),
     ],
     databaseHooks: {
       user: {

packages/auth/src/client.ts

@@ -1,8 +1,13 @@
-import { BetterAuthClientPlugin } from "better-auth";
-import { apiKeyClient, magicLinkClient } from "better-auth/client/plugins";
-import { BetterFetchOption, createAuthClient } from "better-auth/react";
+import type { BetterAuthClientPlugin } from "better-auth";
+import type { BetterFetchOption } from "better-auth/react";
+import {
+  apiKeyClient,
+  genericOAuthClient,
+  magicLinkClient,
+} from "better-auth/client/plugins";
+import { createAuthClient } from "better-auth/react";
 
-import { socialProvidersPlugin } from "./auth";
+import type { socialProvidersPlugin } from "./auth";
 
 const socialProvidersPluginClient = {
   id: "social-providers-plugin",
@@ -21,5 +26,10 @@ const socialProvidersPluginClient = {
 } satisfies BetterAuthClientPlugin;
 
 export const authClient = createAuthClient({
-  plugins: [magicLinkClient(), apiKeyClient(), socialProvidersPluginClient],
+  plugins: [
+    magicLinkClient(),
+    apiKeyClient(),
+    genericOAuthClient(),
+    socialProvidersPluginClient,
+  ],
 });