Better Auth

Use this skill for self-hosted TypeScript authentication with Better Auth (better-auth@1.7.7): server instance, client SDK, plugins, adapters, framework mounts, and security.

Snapshot: 2026-10-01. latest is 1.7.7 (stable). Do not treat 1.7 as rc/beta. Require ≥ 1.7.7: earlier versions (back to 1.4.0-beta.18) have a critical Magic Link account takeover (GHSA-965c-763c-88jm) and an OAuth Proxy takeover (GHSA-r4xp-prcw-77qf); no 1.6.x fix exists. Refresh from source-map.md if versions differ.

Workflow