better-auth-security-best-practices

Secure Better Auth deployments by enforcing rate limiting, CSRF protection, and trusted origins alongside robust session handling. This skill provides cohesive cross-cutting security controls across all authentication plugins and services.

Cross-cutting session security centralizes trusted origins, IP tracking, and OAuth security controls across the entire Better Auth stack. It ensures consistent session validation and token management spanning all plugins and services.

Yes, you can audit existing Better Auth implementations to identify security gaps. It evaluates rate limiting, CSRF protection, session security, secret management, and OAuth configurations against consolidated best practices.

Implement centralized secret management by applying cross-cutting security controls across all Better Auth services. This enforces strong secrets, robust session handling, and audit logging for secure multi-service authentication flows.

No external dependencies are required to configure trusted origins and IP tracking. The skill provides standalone guidance for deployment, configuration, and auditing tasks directly within the Better Auth stack.