Enforce role-based authorization across Next.js and tRPC routes with Better Auth roles.
npx skills add https://github.com/johinsDev/loyalty-app --skill auth-johinsdev
Please help me install this Agent Skill. Skill: auth Source: https://github.com/johinsDev/loyalty-app/tree/main/.claude/skills/auth Command: npx skills add https://github.com/johinsDev/loyalty-app --skill auth-johinsdev
Role-based authorization is missing or inconsistent when new routes or tRPC/Next handlers are added, which can accidentally expose staff or owner functionality to the wrong users.
customer, staff, manager, owner) and how they map to sign-in surfaces across the web PWA and admin./api handler role enforcement) instead of relying on a single check.When you add a new protected admin page or tRPC mutation, select the appropriate guard (layout requireRole plus the matching staffProcedure/managerProcedure/ownerProcedure) and never rely on proxy.ts alone.
High-intent search queries and answers about installing and using this skill.
Role-based access control in a Next.js and tRPC monorepo is enforced by layering proxy redirects, Server Component role checks, and matching tRPC procedures like staffProcedure or ownerProcedure to prevent unauthorized access.
Protecting Next.js API routes with Better Auth involves applying the requireApiRole function to enforce organization membership roles, ensuring correct handling of session presence versus validity for admin and API endpoints.
Relying on proxy.ts alone for route authorization is insufficient. A defense-in-depth approach is required, combining layout requireRole checks with matching tRPC procedures to secure staff and owner functionality.
Bootstrapping the first owner in a multi-tenant application requires using a dedicated seed script to safely assign the owner role, ensuring dev-only routes remain protected until explicitly configured.
tRPC mutations expose staff functionality when missing or inconsistent role checks are applied. You must select the appropriate guard layer, such as managerProcedure or ownerProcedure, rather than relying on a single proxy check.
TKlerxManages multi-tenant organizations, roles, teams, and users in Better, the code editor.
fullstackheroAdd authorization permissions across .NET server and React admin UI.
gepetojjIntegrate Better Auth typed authentication into Next.js server actions.
udecodeIntegrate multi-tenant organization management with Better Auth and Convex.