nuxt-better-auth

onmax/nuxt-better-auth

Security

490

About

Use the smallest reference that matches the task.

Task	Read
Install the module, configure environment variables, or create config files	references/installation.md
Read client session state, build auth forms, call plugins, or fetch auth-bound data	references/client-auth.md
Read or enforce sessions in server handlers, create sessions, or refresh cached session data	references/server-auth.md
Protect pages or API routes and configure redirects	references/route-protection.md
Register Better Auth plugins and their client companions	references/plugins.md
Configure NuxtHub, generated schema, or secondary storage	references/database.md
Connect a Nuxt frontend to an external Better Auth server	references/client-only.md
Use inferred auth types or add project fields	references/types.md

Confirm the consumer's installed package version supports each API you use. The published skill may be newer than the consumer's lockfile.
Enforce protected API reads and mutations server-side with requireUserSession(event). Route rules and page meta also control navigation.
Navigate only to validated local redirect paths.
In clientOnly mode, do not use local server helpers or expect SSR session hydration.
After server-side changes to session payload fields, call refreshSessionCookieCache(event). Wrap custom client auth endpoints that create or change the current session with runWithSessionRefresh().

Before finishing an implementation, run the consumer's typecheck and the narrowest relevant auth test.