better-auth-security-best-practices

What problem does it solve?

This Skill addresses the critical need for robust security in authentication systems by providing comprehensive guidance on best practices that go beyond individual plugin functionalities.

Core Features & Use Cases

• Holistic Security Guidance: Covers essential security aspects like secret management, rate limiting, CSRF protection, session security, trusted origins, OAuth security, IP tracking, and auditing.
• Production-Ready Configurations: Offers practical code examples and configuration options to implement these security measures effectively.
• Use Case: A developer needs to ensure their authentication flow is protected against common web vulnerabilities. They can consult this Skill for detailed instructions on setting up secure secrets, configuring rate limits to prevent brute-force attacks, and establishing trusted origins to prevent abuse.

Quick Start

Configure a strong secret for Better Auth using environment variables.