概述

export const auth = betterAuth({
	baseURL: getBaseUrl(), // 你的应用的 URL
	trustedOrigins: [getBaseUrl()],
	database: drizzleAdapter(db, { // 默认集成 drizzle 数据库
		provider: "pg", // 不同模板的数据库有所区别
		schema: { // 默认集成数据库对应的 schema
			user: user, // 用户表
			session: session, // 会话表
			account: account, // 账号表
			verification: verification, // 验证表
		},
	}),
	session: { 
		cookieCache: { // 默认开启 cookie 缓存
			enabled: true,
			maxAge: 5 * 60, // 缓存 5 分钟
		},
		expiresIn: 60 * 60 * 24 * 7, // 默认 7 天
		updateAge: 60 * 60 * 24, // 默认 1 天
		freshAge: 0, // 默认 0 秒
	},
	user: {
		deleteUser: { // 默认开启删除用户功能
			enabled: true,
		},
		additionalFields: { // 额外添加两个字段在 user 表中，可以根据你的需求添加更多的字段
			locale: { // 用户所选择的语言，在登录后会自动设置到 cookie 中
				type: "string",
				required: false,
			},
			customerId: { // 用户客户 ID
				type: "string",
				required: false,
			},
		},
		changeEmail: { // 默认开启修改邮箱功能
			enabled: true,
			sendChangeEmailVerification: async (
				{ user: { email, name }, url },
				request,
			) => {
				await sendEmail();
			},
		},
	},
	emailAndPassword: { // 默认开启 Email + Password 登录和注册功能
		enabled: true,
		requireEmailVerification: true,
		sendResetPassword: async ({ user: { email, name }, url }, request) => {
			await sendEmail();
		},
	},
	emailVerification: { // 默认开启邮箱验证功能，关闭后用户注册后不需要验证邮箱
		sendOnSignUp: true,
		autoSignInAfterVerification: true,
		sendVerificationEmail: async ({ user: { email, name }, url }, request) => {
			await sendEmail();
		},
	},
	account: {
		accountLinking: { // 默认开启账号关联功能，允许用户关联多个账号
			enabled: true,
			trustedProviders: ["google", "github"],
		},
	},
	socialProviders: { // 默认集成 Google 和 Github 的社交登录功能
		google: {
			clientId: process.env.GOOGLE_CLIENT_ID as string,
			clientSecret: process.env.GOOGLE_CLIENT_SECRET as string,
			scope: ["email", "profile"],
		},
		github: {
			clientId: process.env.GITHUB_CLIENT_ID as string,
			clientSecret: process.env.GITHUB_CLIENT_SECRET as string,
		},
	},
	plugins: [admin()], // 默认开启 admin 插件，允许你通过 role 来区分 user
	onAPIError: {
		onError(error, ctx) {
			console.error(error, { ctx });
		},
	},
});

export type Session = typeof auth.$Infer.Session;

GOOGLE_CLIENT_ID="your_google_client_id"
GOOGLE_CLIENT_SECRET="your_google_client_secret"

GITHUB_CLIENT_ID="your_github_client_id"
GITHUB_CLIENT_SECRET="your_github_client_secret"

socialProviders: {
	facebook: {
		clientId: process.env.FACEBOOK_CLIENT_ID as string,
		clientSecret: process.env.FACEBOOK_CLIENT_SECRET as string,

export const oAuthProviders = {
	google: {
		name: "Google",
		icon: Google,
	},
	github: {
		name: "GitHub",
		icon: GitHub,
	},
} as const satisfies Record<
	string,
	{
		name: string;
		icon: JSXElementConstructor<React.SVGProps<SVGSVGElement>>;
	}
>;

export type OAuthProvider = keyof typeof oAuthProviders;

const handleOAuthSignin = async (provider: OAuthProvider) => {
  try {
    setIsLoading(provider);

    await authClient.signIn.social({
      provider,
      callbackURL: `${window.location.origin}${redirectTo}`,
    });
  } catch (error) {
    console.error(`Error signing in with ${provider}:`, error);
  } finally {
    setIsLoading(null);
  }
};

src/
├── lib/
│   ├── auth.ts           # 主要 Better Auth 配置
│   └── auth/
│       ├── server.ts     # 服务器端认证工具
│       ├── client.ts     # 客户端认证工具
│       ├── api.ts        # API 工具
│       ├── edge.ts       # Edge 运行时工具
│       └── errors.ts     # 认证错误处理
├── components/
│   └── auth/
│       ├── login-form.tsx
│       ├── signup-form.tsx
│       ├── social-signin.tsx
│       └── forgot-password-form.tsx