What problem does it solve? Building authentication into a NocoBase 3 application requires coordinating Better Auth configuration, route protection, session handling, sign-in pages, and deployment secrets across server and client code. This Skill guides that work so routes are actually protected, sessions behave correctly, and new sign-in methods are added without breaking the database schema. ## Core Features & Use Cases - Route and page protection: Apply auth.required() and auth.optional() middleware to Hono API routes, and gate browser pages with RequiredAuthentication, GuestAuthentication, and route auth modes. - Sign-in methods: Add social providers, generic OAuth/OIDC, magic links, or a custom Better Auth plugin for proprietary protocols, including the required application migrations and client entry points. - Account lifecycle and deployment: Disable or reset accounts via UserAdministrationService, configure password-reset email, and prepare secrets, cookies, public origin, and shared cache storage for production. - Use Case: You need to add GitHub and OIDC login to a NocoBase app. The Skill walks you through registering the providers in server/config/auth.ts, adding the client plugin, wiring SSO buttons into the login page, and verifying callback URLs under a sub-path deployment. ## Quick Start Ask the assistant to protect an API route with authentication or to add a new sign-in method such as GitHub OAuth to your NocoBase application.
