Gustavo Valverde
d3c97722cd
Declare @better-auth/sso as a dependency of the integration e2e runner so turbo
builds it before playwright: the regression spec imports it, but it sat only in a
sibling fixtures package's devDependencies, so the test bundle failed to resolve
@better-auth/sso/dist at load time. Fix the lint formatting in one-tap. Make the
docs APIMethod component tolerate a single-line code block so the new no-parameter
two-factor endpoints (typed `type X = {}`) no longer crash the docs prerender.
Align the vanilla-node two-factor regression e2e with next's behavior: device
approve now needs the /device claim step, generic OAuth signs in through
/sign-in/social, and the implicit OAuth link requires a verified local user. Add
OTP-only enablement edge cases (reject TOTP when disabled, reject OTP without
sendOTP) to the method-first suite.
Restore the demo: link the @better-auth/cimd workspace package and resync the
lockfile so install succeeds, and surface an error state on a failed
pending-challenge fetch instead of an empty 'no method' message across the
two-factor forms. Fix the clerk migration guide to hash recovery codes with
base64url (matching defaultKeyHasher), and bump the breaking changeset to minor
per the next pre-release convention.
Better Auth
Better Auth is a framework-agnostic authentication (and authorization) framework for TypeScript. It provides a comprehensive set of features out of the box and includes a plugin ecosystem that simplifies adding advanced functionalities with minimal code in a short amount of time. Whether you need 2FA, multi-tenant support, or other complex features, it lets you focus on building your actual application instead of reinventing the wheel.
Why Better Auth
Authentication in the TypeScript ecosystem is a half-solved problem. Other open-source libraries often require a lot of additional code for anything beyond basic authentication. Rather than just pushing third-party services as the solution, I believe we can do better as a community—hence, Better Auth.
Contribution
Better Auth is a free and open source project licensed under the MIT License. You are free to do whatever you want with it.
You could help continuing its development by:
Security
If you discover a security vulnerability within Better Auth, please send an e-mail to security@better-auth.com.
All reports will be promptly addressed, and you'll be credited accordingly.