better-auth-authentication

为 TypeScript 应用打造更优的 Auth 认证流程。当您需要启用电子邮件/密码认证、配置社交登录提供商，或实现注册、登录与验证流程时，可选用此方案。

SKILL.md

--- frontmatter

name: better-auth-authentication
description: Better Auth authentication flows for TypeScript apps. Use when enabling email/password auth, configuring social providers, or implementing sign-up, sign-in, and verification flows.
progressive_disclosure:
  entry_point:
    summary: "Better Auth authentication flows for TypeScript apps. Use when enabling email/password auth, configuring social providers, or implementing sign-up, sign-in, and verification flows."
    when_to_use: "When implementing authentication, authorization, or security."
    quick_start: "1. Review the core concepts below. 2. Apply patterns to your use case. 3. Follow best practices for implementation."
  references:
    - email-password.md
    - providers.md

Better Auth Authentication

Goals

•Enable email/password authentication and social providers.
•Implement sign-up, sign-in, sign-out, and verification flows.
•Handle redirects and errors consistently.

Quick start

•Enable emailAndPassword and configure socialProviders.
•Create a client with createAuthClient.
•Use signUp.email, signIn.email, signIn.social, and signOut on the client.

ts

import { betterAuth } from "better-auth";

export const auth = betterAuth({
  emailAndPassword: { enabled: true },
  socialProviders: {
    github: {
      clientId: process.env.GITHUB_CLIENT_ID as string,
      clientSecret: process.env.GITHUB_CLIENT_SECRET as string,
    },
  },
});

ts

import { createAuthClient } from "better-auth/client";

const authClient = createAuthClient();

await authClient.signUp.email({
  email,
  password,
  name,
});

await authClient.signIn.email({
  email,
  password,
  callbackURL: "/dashboard",
});

await authClient.signIn.social({
  provider: "github",
  callbackURL: "/dashboard",
});

await authClient.signOut();

Email verification

•Provide emailVerification.sendVerificationEmail to send the verification link.
•Use emailAndPassword.requireEmailVerification to enforce verification before sign-in.

Social providers

•Configure providers in socialProviders with provider-specific credentials.
•Use signIn.social to start OAuth flows.
•Pass callbackURL, errorCallbackURL, and newUserCallbackURL for redirects.

Guardrails

•Call client methods from the client only.
•Keep secrets in server-only env variables.
•Use rememberMe to control persistent sessions on email/password sign-in.

References

•toolchains/platforms/auth/better-auth/better-auth-authentication/references/email-password.md
•toolchains/platforms/auth/better-auth/better-auth-authentication/references/providers.md