better-auth_skill

Overview

This skill implements authentication and authorization using Better Auth, a framework-agnostic TypeScript authentication framework. It provides email/password, social OAuth, two-factor (TOTP/SMS), passkeys/WebAuthn, session management, RBAC, rate limiting, and database adapter support. Use it to add a complete, extensible auth stack to web apps with standardized flows and plugin-based advanced features.

How this skill works

The skill generates a server-side auth instance that handles user lifecycle, verification, session tokens, and rate limiting, plus a client library for frontend hooks and API calls. It exposes configurable modules for email/password, social providers, 2FA, passkeys, magic links, and organizational features. Database adapters and schema generation tools integrate migrations and store identities, sessions, and roles.

When to use it

• Adding authentication to TypeScript/JavaScript web apps
• Implementing OAuth sign-in (Google, GitHub, Discord, etc.)
• Setting up two-factor authentication or passkeys for stronger security
• Managing sessions, RBAC, and multi-tenant organizations
• Protecting APIs and rate-limiting auth endpoints

Best practices

• Set BETTER_AUTH_SECRET and BETTER_AUTH_URL in environment variables before deployment
• Run schema generation and migrations after enabling plugins that add tables
• Enable email verification and password reset flows for production apps
• Use rate limiting on auth endpoints and monitor sign-in attempts
• Combine multiple auth methods (email, OAuth, passkeys) to support varied user preferences

Example use cases

• Standard web app: email/password sign-up, verification, and session management
• SaaS multi-tenant app: organizations plugin with role-based access control
• Security-first product: enable TOTP and WebAuthn passkeys for MFA
• Mobile+web: OAuth social login for quick onboarding and sessions for API access
• Progressive enhancement: start with email login then add magic links and passkeys