authentication

Authentication for multi-tenant Next.js legal apps is established by running discovery prompts to gather requirements, then integrating Better Auth with a PostgreSQL database using Drizzle to enforce organization-level permissions. This provides secure user sessions and compliant role management across firms.

Configuring OAuth and 2FA login workflows for law firm clients is achieved using provided code templates and runtime patterns for Better Auth. This supports secure sign-in, allowing employees and clients to access only their own matters with organization-level permissions.

Better Auth works seamlessly with Drizzle and PostgreSQL backends for Next.js 15+ applications. The skill provides specific templates and references to integrate these technologies, ensuring secure user sessions and compliant role management.

This authentication approach fully supports organization-level permissions for different firm environments. It includes optional organizations and discovery-driven requirements gathering to implement compliant role management and multi-tenant access patterns.

Discovery-driven requirements gathering works by guiding teams through prompts in the SKILL.md to understand user requirements before implementing auth. This process clarifies multi-tenant and role-based access patterns, ensuring the authentication setup matches specific firm needs.

Better Auth for Next.js legal applications requires a YAML frontmatter with name and description and depends on PostgreSQL with Drizzle. It is specifically tailored for Next.js 15+ legal apps, meaning standard non-legal or older Next.js implementations may not align with its compliant role management templates.