better-auth

Better Auth is a framework-agnostic authentication layer that eliminates boilerplate by providing email/password, OAuth, 2FA, passkeys, and session management out of the box. Install the package, configure BETTER_AUTH_SECRET and BETTER_AUTH_URL, connect your database, then mount the API handler in your framework—Next.js, Nuxt, SvelteKit, Remix, Hono, Express, or others.

Yes. Better Auth works framework-agnostic across Next.js, Nuxt, SvelteKit, Remix, Astro, Hono, and Express. You configure one auth server instance and database connection, then use framework-specific handlers like toNextJsHandler to mount the API—no rewriting authentication logic per framework.

Better Auth includes email/password and multiple OAuth providers built-in. Additional methods—2FA, passkeys, magic links, username authentication, and email OTP—are available through plugins. Multi-tenant organization support and advanced user management are also provided.

Better Auth supports SQLite, PostgreSQL, MySQL, and MongoDB databases with adapters for Drizzle, Prisma, and Kysely ORMs. Database adapters handle schema generation and migrations via CLI, and you select your database and ORM during configuration.

Better Auth provides end-to-end type-safe authentication with built-in session handling. TypeScript definitions are generated from your schema, ensuring type safety across server and client separation, and session tokens are managed automatically.

Better Auth is designed for multi-tenant support through its organization plugin, enabling team and organization management. However, complex custom authorization rules beyond built-in role and permission structures may require additional implementation.