better-auth-v2_skill

Overview

This skill delivers a production-ready authentication system built on Better Auth v2, including OAuth providers, advanced RBAC, multi-tenant support, and security best practices. It produces tailored integration plans, configuration templates, database schemas, client components, and middleware to get a secure auth stack into your project quickly. The focus is on repeatable, auditable, and deployable authentication with onboarding flows and session protection.

How this skill works

The skill analyzes your project to detect framework, SSR/static mode, existing backend, and database/ORM. It then generates a step-by-step implementation plan: DB schema selection, backend wiring (in-project or separate Hono Node backend for static sites), Better Auth v2 configuration, OAuth provider setup, UI components, onboarding flow, and middleware for session and RBAC enforcement. Outputs include exact commands, code files, .env examples, and migration templates you can copy into your repo.

When to use it

• Starting a new app that needs modern, secure authentication
• Migrating legacy auth to Better Auth v2 with minimal downtime
• Building a multi-tenant SaaS with organization-aware access
• Adding social login, passkeys, or 2FA to an existing site
• Requiring advanced OAuth features like token encryption and account linking

Best practices

• Use PostgreSQL with Drizzle ORM for Better Auth’s recommended adapter
• Provide OAuth client IDs/secrets and manage them in a secure secrets store
• Run a security review before production deployment and rotate keys regularly
• Enable email verification, strong password rules, and 2FA for high-risk flows
• Use server-side session validation and middleware for protected routes

Example use cases

• Next.js App Router app with Prisma/Postgres: in-project integration plus onboarding questionnaire
• Static Astro site: separate Hono backend with social logins and a lightweight client
• Enterprise SaaS: multi-tenant config with organization invitations, RBAC, and audit logging
• Mobile-first product: OAuth-first config with token encryption and refresh handling