better-auth

Secure authentication and authorization in TypeScript web apps can be implemented using a framework-agnostic library to configure email/password logins, OAuth providers, 2FA, and RBAC. You install the package, create a server config, and mount the API handler.

Yes, you can add passkeys and WebAuthn to your authentication flow alongside 2FA, magic links, and OAuth providers. This provides secure passwordless options while maintaining existing session management and RBAC configurations.

Framework-agnostic authentication works seamlessly with Next.js, Express, Nuxt, SvelteKit, and Remix. You mount the API handler in your chosen framework and generate database migrations to start managing user sessions.

Handling multi-tenant user lifecycles and role-based access is best achieved using a library with built-in RBAC and session management. This allows you to define roles and securely manage user states across multiple tenants without custom logic.

To set up OAuth providers and email/password login with rate limiting, configure your server instance with emailAndPassword enabled, add your OAuth identities, and activate the built-in rate limiting features to secure the endpoints.

No specific database is required because the library supports multi-database adapters. You can connect your preferred database, generate the necessary migrations, and manage sessions and authentication data across any supported Node.js environment.