What problem does it solve?
This skill provides comprehensive guidance for implementing security features across Better Auth, including rate limiting, CSRF protection, session security, trusted origins, secret management, OAuth security, IP tracking, and security auditing to ensure consistent, safe defaults.
Core Features & Use Cases
- Rate limiting configuration and enforcement across authentication endpoints to prevent abuse.
- CSRF protection strategies including origin validation, fetch metadata checks, and layered defenses.
- Secure session handling with cookie policies, token encryption options, and fresh-auth requirements for sensitive actions.
- Trusted origins management to safeguard redirects and callback URLs across environments.
- Secret management best practices for signing keys, tokens, and encryption secrets.
- OAuth security considerations including PKCE, state handling, and encrypted token storage.
- IP tracking, auditing hooks, and background tasks to monitor security events and prevent timing attacks.
- Practical use cases and implementation patterns across development and production environments.
Quick Start
Configure your Better Auth setup following this guide to enable rate limiting, CSRF protection, and secure session handling in your app.
