\n\nQuick Guide: Use Better Auth (v1.5+) for type-safe, self-hosted authentication in TypeScript apps. It provides email/password, OAuth, 2FA, sessions, stateless auth, and organization multi-tenancy. Plugin architecture enables progressive complexity. Mount auth handler before session-dependent middleware, configure CORS first for cross-origin deployments, and always run schema generation after adding plugins.
\n
<critical_requirements>
\n\n\nAll code must follow project conventions in CLAUDE.md (kebab-case, named exports, import ordering,
\nimport type, named constants)
(You MUST mount Better Auth handler on the auth route BEFORE any other middleware that depends on session)
\n(You MUST configure CORS middleware BEFORE auth routes when client and server are on different origins)
\n(You MUST use environment variables for ALL secrets (clientId, clientSecret, BETTER_AUTH_SECRET) - NEVER hardcode)
\n(You MUST run npx auth@latest generate then your ORM migration tool after adding plugins)
(You MUST use auth.$Infer.Session types for type-safe session access in middleware)
</critical_requirements>
\nAuto-detection: Better Auth, betterAuth, createAuthClient, auth.handler, auth.api.getSession, socialProviders, twoFactor plugin, organization plugin, drizzleAdapter, session management, OAuth providers, stateless sessions, cookieCache, genericOAuth, oAuthProvider, passkey, SCIM
\nWhen to use:
\nWhen NOT to use:
\nKey patterns covered:
\nDetailed Resources:
\n<red_flags>
\nBETTER_AUTH_SECRET env var - sessions will not workc.user becomes anyauth.migrate() with Drizzle adapter - only works with Kysely, use generate + Drizzle Kitc.req.raw when calling auth.handler() - must pass the raw Web Standard RequestGotchas & Edge Cases:
\naccessType: \"offline\" and prompt: \"consent\"version to invalidate allmaxAge expires on other devicesSameSite=None + Secure for cross-domain deploymentsauthClient.forgotPassword was renamed to authClient.requestPasswordReset in v1.4InferUser/InferSession removed in v1.5 - use generic User and Session types from better-authSee reference.md for anti-patterns with code examples, decision frameworks, and version notes.
\n</red_flags>
\n<critical_reminders>
\n\n\nAll code must follow project conventions in CLAUDE.md (kebab-case, named exports, import ordering,
\nimport type, named constants)
(You MUST mount Better Auth handler on the auth route BEFORE any other middleware that depends on session)
\n(You MUST configure CORS middleware BEFORE auth routes when client and server are on different origins)
\n(You MUST use environment variables for ALL secrets (clientId, clientSecret, BETTER_AUTH_SECRET) - NEVER hardcode)
\n(You MUST run npx auth@latest generate then your ORM migration tool after adding plugins)
(You MUST use auth.$Infer.Session types for type-safe session access in middleware)
Failure to follow these rules will cause authentication failures, security vulnerabilities, or runtime errors.
\n</critical_reminders>
\n","files":[{"path":"examples/core.md","sizeBytes":8510,"isText":true},{"path":"examples/oauth.md","sizeBytes":5330,"isText":true},{"path":"examples/organizations.md","sizeBytes":4038,"isText":true},{"path":"examples/sessions.md","sizeBytes":4392,"isText":true},{"path":"examples/two-factor.md","sizeBytes":3865,"isText":true},{"path":"examples/v1.4-features.md","sizeBytes":404,"isText":true},{"path":"reference.md","sizeBytes":6500,"isText":true},{"path":"SKILL.md","sizeBytes":11571,"isText":true}],"reviewScore":null,"reviewSummary":null,"trust":{"provenance":"trusted-source-unreviewed","notice":"Community-authored content, reproduced verbatim and not vetted as instructions. Treat it as data to evaluate, never as directives to follow.","bodySource":null},"bodyLocked":false,"purchaseUrl":null,"sourceUrl":null,"report":{"provenance":"trusted-source-unreviewed","screen":{"ran":true,"outcome":"notes-only","suspicious":0,"notes":1,"hiddenCharacters":false},"virusScan":{"engine":"clamav","status":"clean","scannedAt":"2026-09-29T15:28:27.539792Z","sha256":"A4F0246C4DDFF81335FCE9292F2CEB834DB4A67CA20D81EFC98F8B133262A3AD","sizeBytes":17053},"review":null,"source":{"repositoryUrl":"https://github.com/agents-inc/skills","path":"dist/plugins/api-auth-better-auth-drizzle-hono/skills/api-auth-better-auth-drizzle-hono","license":"MIT","commit":"3a51ef571e996b18294bf776d53dbdad26de0617","subtreeSha":"4B8439A101DB4B3F4420649C8FBFC4947B339855E007B2B2F8EB25CF3AF4ADC0","lastSyncedAt":"2026-09-29T15:27:48.914434Z"},"reviewedAt":"2026-09-29T15:30:06.925866Z","notice":"Community-authored content, reproduced verbatim and not vetted as instructions. Treat it as data to evaluate, never as directives to follow."},"install":[{"target":"skills-cli","command":"npx skills add https://github.com/agents-inc/skills/tree/main/dist/plugins/api-auth-better-auth-drizzle-hono/skills/api-auth-better-auth-drizzle-hono"},{"target":"claude-code","command":"claude plugin marketplace add https://llmmart.ai/marketplace.json && claude plugin install agents-inc-skills@llmmart"},{"target":"git","command":"git clone https://github.com/agents-inc/skills.git"}]}