* chore: consistent package names
* chore: init changesets
* chore: update contribution doc to include generating a changeset
* chore: configure all better auth packages to always have the same version number
* chore: update nextjs demo package name
* chore(changesets): ignore all private packages
* chore(changesets): check for changesets in CI
* chore(changesets): install chagesets cli
* chore(changesets): use orgin as main
* chore(changesets): fix typo
* chore(changesets): check for changes since main in ci
* chore(changesets): check for changes since main in ci with the correct command
* chore(changesets): check against `origin/main`
* chore(changesets): checking for changesets should be the last action
* chore(changesets): run changelog check after stoping the docker containers
* chore(changesets): run changelog check after building
* chore(changesets): run changelog check after starting docker compose
* chore(changesets): run changelog check after linting
* chore(changesets): run changelog check after testing
* Revert "chore(changesets): run changelog check after testing"
This reverts commit 6dc000f78d.
* chore: export siwe in better-auth/plugins (#3596)
The docs were using this import path, yet `siwe` wasn't exported there. This PR fixes this.
* chore: fix cookies test
* docs: make client-side vs. server-side explicit (#3603)
* docs: fix broken link to ERC-4361 in siwe docs (#3604)
* fix(jwt): ensure alg is added to the jwks when generating via /token endpoint (#3601)
* fix: Ensure alg is added to the jwks when generating via /token endpoint
* chore: resolve linting issues
* chore(example): fix SvelteKit example (#1742)
* refactor: upgrade Svelte, Vite and related packages
* refactor: replace no longer supported `body.callbackURL` with `onSuccess`
* fix: add missing `svelte-kit sync` on `prepare`
* fix: add missing `import`s
* chore(svelte-kit-example): show message & redirect to index after sign up
* chore: add npm script to migrate database
* doc: add more commands to set up
* chore: explicitly disable verification email on sign up
The example does not work if you set `sendOnSignUp: true` without setting up the email server.
* refactor(svelte-kit-example): add type for hooks
* chore(svelte-kit-example): redirect to sign in page if users open dashboard without log in
* chore: diable some rules for svelte-kit-example due to Biome's limited Svelte support
* style: fix format
* chore: update pnpm-lock.yaml
* chore: fix lock file
---------
Co-authored-by: Bereket Engida <Bekacru@gmail.com>
* fix: make sveltekit plugin ALS-agnostic (#3533)
* svelte cookie
* udpate
* update
* update
* update
* chore(cli): update zod to v4 (#3618)
* fix: correct typo in freeTrial variable name in Stripe integration
* chore: fix lock file
* chore: add changeset for typo fix in freeTrial
---------
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
Co-authored-by: Bereket Engida <Bekacru@gmail.com>
Co-authored-by: Justin <127172022+jl33-ai@users.noreply.github.com>
Co-authored-by: Elliott Minns <elliott.minns@pm.me>
Co-authored-by: Jumpei Ogawa <git@phanective.org>
Co-authored-by: KinfeMichael Tariku <65047246+Kinfe123@users.noreply.github.com>
6.9 KiB
Contributing to Better Auth
Thank you for your interest in contributing to Better Auth. This guide will help you get started with the contribution process.
Table of Contents
- Code of Conduct
- Security Issues
- Project Structure
- Development Guidelines
- Getting Started
- Code Formatting with BiomeJS
- Development Workflow
- Testing
- Pull Request Process
- Code Style
- Component-Specific Guidelines
Code of Conduct
This project and everyone participating in it is governed by our Code of Conduct. By participating, you are expected to uphold this code.
Security Issues
For security-related issues, please email security@better-auth.com. Include a detailed description of the vulnerability and steps to reproduce it. All reports will be reviewed and addressed promptly. For more information, see our security documentation.
Project Structure
The Better Auth monorepo is organized as follows:
/packages/better-auth- Core authentication library/packages/cli- Command-line interface tools/packages/expo- Expo integration/packages/stripe- Stripe payment integration/docs- Documentation website/examples- Example applications/demo- Demo applications
Development Guidelines
When contributing to Better Auth, please keep these principles in mind:
- Provide opinionated, best-practice defaults rather than extensive configurations
- Maintain a consistent and predictable API across all supported frameworks
- Ensure all code is type-safe and leverages TypeScript features effectively
- Write clear, self-documenting code with appropriate comments
- Follow existing code style and patterns
- Keep changes focused and well-documented
Prerequisites
Before you start development, ensure you have the following:
- Node.js LTS (latest version recommended)
- pnpm package manager
- Git
- (Optional) Any authentication provider accounts you plan to work with (Google, GitHub, etc.)
- (Optional) Database server if working with database-related features
Getting Started
-
Fork the repository to your GitHub account
-
Clone your fork locally:
git clone https://github.com/your-username/better-auth.git cd better-auth -
Install Node.js (LTS version recommended)
-
Install pnpm if you haven't already:
npm install -g pnpm -
Install project dependencies:
pnpm install -
Create a
.envfile from the example:- On Unix-based systems:
cp -n ./docs/.env.example ./docs/.env - On Windows:
copy /Y .\docs\.env.example .\docs\.env
- On Unix-based systems:
-
Build the project:
pnpm build -
Run the documentation locally:
pnpm -F docs dev
Code Formatting with BiomeJS
We use BiomeJS for code formatting and linting. Before committing, please ensure your code is properly formatted:
# Format all code
pnpm format
# Check for linting issues
pnpm lint
# Fix auto-fixable issues
pnpm lint:fix
Development Workflow
-
Create a new branch for your changes:
git checkout -b type/description # Example: git checkout -b feat/oauth-providerBranch type prefixes:
feat/- New featuresfix/- Bug fixesdocs/- Documentation changesrefactor/- Code refactoringtest/- Test-related changeschore/- Build process or tooling changes
-
Make your changes following the code style guidelines
-
Add tests for your changes
-
Run the test suite:
# Run all tests pnpm test # Run tests for a specific package pnpm --filter "{packagename}" test -
Ensure all tests pass and the code is properly formatted
-
If your change is either a bug fix or a feature in the following packages:
better-auth,@better-auth/cli,@better-auth/expo,@better-auth/ssoor@better-auth/stripe. Run the following command to create a changeset.pnpm changeset -
Commit your changes with a descriptive message following the Conventional Commits format:
type(scope): description [optional body] [optional footer(s)] -
Push your branch to your fork
-
Open a pull request against the main branch
Testing
All contributions must include appropriate tests. Follow these guidelines:
- Write unit tests for new features
- Ensure all tests pass before submitting a pull request
- Update existing tests if your changes affect their behavior
- Follow the existing test patterns and structure
- Test across different environments when applicable
Pull Request Process
- Create a draft pull request early to facilitate discussion
- Reference any related issues in your PR description (e.g., 'Closes #123')
- Ensure all tests pass and the build is successful
- Update documentation as needed
- Keep your PR focused on a single feature or bug fix
- Be responsive to code review feedback
- Update the CHANGELOG.md if your changes are user-facing
Code Style
- Follow the existing code style
- Use TypeScript types and interfaces effectively
- Keep functions small and focused
- Use meaningful variable and function names
- Add comments for complex logic
- Update relevant documentation when making API changes
- Follow the BiomeJS formatting rules
Component-Specific Guidelines
Core Library (/packages/better-auth)
- Keep the core library focused on essential authentication functionality
- Add new authentication methods as plugins when possible
- Ensure all public APIs are well-documented with JSDoc comments
- Maintain backward compatibility or provide a clear migration path
- Follow the existing patterns for error handling and logging
Documentation (/docs)
- Keep documentation up-to-date with code changes
- Use clear, concise language
- Include code examples for common use cases
- Document any breaking changes in the migration guide
- Follow the existing documentation style and structure
Plugins
- Keep plugins focused on a single responsibility
- Follow the naming convention
@better-auth/plugin-name - Document all configuration options and requirements
- Include TypeScript type definitions
- Add tests for all plugin functionality
- Document any required setup or dependencies
Examples (/examples and /demo)
- Keep examples simple and focused
- Include a README with setup instructions
- Document any prerequisites or setup steps
- Keep dependencies up to date
- Ensure examples follow security best practices