Every feature ships wired, typed, and documented

Better Auth core: sign-up/sign-in, secure httpOnly session cookies, session management, and the auth HTTP handler.

• Session management

Require users to verify their email address before the account is considered active.

Secure forgot-password flow with single-use, time-limited reset tokens.

Sign in with a one-time link sent to the email address, no password required.

Sign in with Google, GitHub, and Apple. Provider config is env-driven, add credentials and it activates.

• Google
• GitHub
• Apple
• Extensible provider config

TOTP-based two-factor authentication with one-time recovery codes for account lockout scenarios.

• TOTP authenticator apps
• Recovery codes
• 2FA challenge on sign-in

Phishing-resistant sign-in with platform passkeys (Face ID, Touch ID, Windows Hello).

Multi-session support: users see every signed-in device and can revoke any of them remotely.

• Active device list
• Remote logout
• Revoke all other sessions

Rate-limited sign-in with temporary lockout after repeated failed attempts, plus IP throttling.

Organization-scoped SSO with SAML 2.0 and OIDC providers via the Better Auth SSO plugin.

Admin plugin: user roles, permissions, ban/unban, and server-side role guards.

• Roles & permissions
• Ban/unban users
• Server-side role guards

One-time backup codes for account recovery when a 2FA device is unavailable.

Per-device session list with remote logout and "log out everywhere else".

Stripe client, checkout sessions, customer records, and signature-verified idempotent webhooks.

• Checkout sessions
• Webhooks with signature verification + idempotency
• Customer records

Stripe-hosted portal for plan changes, payment methods, invoices, and cancellation.

Upgrade, downgrade, cancel, pause, resume, plus trials and automatic proration.

• Upgrade/downgrade
• Cancel & pause/resume
• Trials (with/without card)
• Proration handling

Apply Stripe coupons and promotion codes at checkout.

Per-user pricing with quantity sync: invites add seats, removals release them.

Meter credits, tokens, or API calls and report them to Stripe (or invoice manually).

Multi-line-item checkout with tiered pricing and optional add-ons.

Map plans to feature entitlements and gate features server-side.

Stripe Tax automatic tax calculation, hosted invoices, and multi-currency prices.

• Stripe Tax
• Invoicing
• Multi-currency support

Provider-agnostic billing interface with Stripe implemented and adapters for Lemon Squeezy, Paddle, Polar, Creem, and Dodo.

Complete Lemon Squeezy flow: tiered subscriptions and one-time lifetime purchases, signed webhooks, entitlements, pricing page with plan states, and customer portal.

• Subscriptions + one-time lifetime variants
• Signed webhooks (order + subscription events)
• Entitlements with tier ranking
• Pricing page with current-plan state
• Customer portal redirect

Create, edit, delete, and switch between organization (team/workspace) accounts with settings and avatars.

• Create/edit/delete orgs
• Organization switching
• Org settings & avatars

Invite members by email or link, assign roles on invite, and manage leave/remove flows.

• Email + link invites
• Role assignment on invite
• Leave/remove member flows

Owner, Admin, Member roles plus custom roles with a permission matrix.

Per-user and per-org scoping patterns for every query, the tenancy security backbone.

Transfer organization ownership to another member with confirmation.

Personal accounts alongside org accounts: users own private data and team data simultaneously.

Subscriptions owned by organizations instead of individuals, seats and entitlements per org.

Admin user list with search, filtering, and ban/unban (reason + expiration).

• User list, search, filtering
• Ban/unban with reason + expiration

Admins can sign in as a user for support and debugging, with an audit trail.

Admin view of all organizations with member counts and deletion.

Overview of all subscriptions with manual plan overrides for support.

Admin dashboard: users, active subscriptions, MRR estimate, and churn.

Append-only audit trail for privileged actions, with an admin viewer.

Admin-controlled runtime configuration and feature flag overrides.

View and edit display name, bio, and other profile fields.

Upload profile avatars through the storage abstraction with signed URLs.

Change email (with re-verification), change password, and manage connected accounts.

• Email change
• Password change
• Connected accounts

Trackable setup checklist shown to new users until completed.

Create, scope, and revoke API keys. Keys are shown once and stored hashed.

Self-serve account deletion with cascading cleanup, plus GDPR-style data export.

• Account deletion
• GDPR-style data export

EmailProvider abstraction with Resend implemented and Mailgun/Postmark adapter slots.

• Resend implemented
• Mailgun/Postmark adapter interface

Typed, themeable email templates (welcome, reset, invite, billing) built with React Email.

Documentation and checklist for domain authentication so emails land in inboxes.

Notification feed stored per user with unread counts and a dropdown UI.

Per-user opt-in/out matrix for each notification channel and type.

Periodic summary emails (weekly activity) assembled from user data and sent on a schedule.

AnalyticsProvider abstraction with PostHog implemented; Mixpanel/Plausible adapter slots.

• PostHog implemented
• Mixpanel/Plausible adapter interface

Sign-ups, active users, and conversion charts from your own database.

Sentry-style error capture with a provider interface and server/client hooks.

Internal usage events per user/metric, feeds metered billing and dashboards.

Liveness/readiness endpoints for uptime monitors and orchestrators.

Vercel AI SDK with AI Gateway, server-only generation, and a typed generation service.

Streaming chat UI with persisted conversations and per-user scoping.

Ready-made server actions for summarize, rewrite, and extract with Zod-validated input.

Server-side image generation through the AI Gateway with size/format guards.

Schema-constrained generation with Zod, typed objects out, never free-text parsing.

Route requests across providers with automatic failover and per-task model selection.

Meter AI usage per user and gate on credits, ties AI spend to billing.

Document ingestion with chunking and embedding-based retrieval scaffolding.

AGENTS.md, Cursor rules, and MCP server patterns so coding agents work productively in the repo.

StorageProvider interface with Vercel Blob implemented and an S3 adapter slot; validated uploads.

• File uploads
• Vercel Blob default
• S3 adapter interface

Time-limited signed URLs for private files with server-side authorization.

Resize and convert uploaded images server-side before storage.

Per-user file manager: grid view, delete, and copy-URL flows.

Hero, features, social proof, and CTA sections with a conversion-focused layout.

Plan comparison grid wired to your billing plans with a checkout CTA.

Markdown-based blog with static generation and a post listing.

Per-page metadata, Open Graph images, sitemap, and robots.txt.

Email capture with duplicate-safe storage and a success state.

Testimonial grid component with avatar, quote, and attribution.

Privacy Policy, Terms of Service, and Cookie Policy pages rendered from markdown.

Product changelog rendered from markdown entries with a dated listing.

System/light/dark theme toggle with no flash of the wrong theme.

Server-side flag store with typed reads and admin overrides.

Multi-step onboarding wizard with resumable progress.

Unique referral codes per user with attribution on sign-up.

Pause/discount offers shown at cancellation to reduce churn.

Triggered emails for activation milestones, inactivity, and win-back.

Dismissible announcement banner driven by the database with a cookie-backed dismiss state.

Floating feedback widget capturing a 0-10 score and comment into the database.

Queue abstraction with an in-process driver for dev and a Vercel Queues adapter slot.

Vercel Cron wiring with a protected maintenance endpoint pattern.

In-memory sliding-window limiter with an Upstash Redis adapter slot for multi-region.

Baseline hardening headers (nosniff, HSTS, referrer policy, permissions policy) in next.config.

Typed env access with startup validation, fail fast on missing config.

Vitest unit tests and Playwright E2E scaffolding with example specs.

GitHub Actions workflow: typecheck, lint, test, and build on every push.

docs/ tree with per-feature guides, ADRs, and a README index.

Production Dockerfile (standalone output) and a compose file with Postgres for local development.