Better Auth

Join the Better Auth server to ask questions!

Join

Better Auth

Join the community to ask questions about Better Auth and get answers from other members.

Join

bug-reports

help

Heyells

4/28/2025

Inferring Additional Fields on Server

Hello, I added gender to my user schema and I would like to infer the User type so I dont have ts error anymore....

ieedan

4/28/2025

Is it possible to get the user id from the cookie without having to verify to user and hit the DB?

Right now I have a call to the database that will check if the user with the id has access to the resource being requested. Because of this I need to get the session which can take ~200ms uncached. I don't really need to verify the user is valid before I get the resource and it would speed things up quite a bit if I could just do that at the same time as I am getting the resource. Is it possible to just get the userId from the cookie / apiToken without having to hit the DB first? Right now the code looks something like:...

Duki

4/28/2025

Is it possible to let the user set up multiple devices for 2FA using TOTP?

I see that the DB schema has a 1 to many relation to the user, meaning one user can have multiple twoFactors. Does it mean that a user can have multiple TOTPs set up? If so, how can I add an other TOTP and how can they be differentiated from one an other? I can't find anything regarding this in the docs....

Soheel

4/28/2025

Enabling OTP-Email 2FA Automatically on User Signup

Hello Community, I'm currently struggling with the 2FA plugin. I would like to enable OTP-Email 2FA automatically when users sign up. However, using auth.api.enable2FA does not allow specifying a user.id. Even when using impersonation through the admin API, I have found it impossible to properly enable 2FA from the server side during user creation. Does anyone have an idea or a workaround for ensuring that the 2FA data is generated and enabled automatically upon user creation?...

neetras

4/28/2025

I tried from the /api/auth/reference scaler page, curl and also postman, but the server doesn't return anything and the request gets hanged. ``` curl http://localhost:3000/api/auth/sign-in/email \ --request POST ...

dennis

4/28/2025

Error when trying to remove optional field from organization

Hey there, when I try to remove the logo from an organization like below I get an "No values to set" error. ``` await auth.api.updateOrganization({ body: {...

Soccerjunki

4/28/2025

SUBSCRIPTION_IS_NOT_ACTIVE when trying to restore a subscription cancelled during the trial period

When you try to restore a subscription (on a org) that is in the trial period, even if the trial period hasn't ended i get the error code: SUBSCRIPTION_IS_NOT_ACTIVE

delivery

4/28/2025

List open invites for a user

How do I get the open invites for a logged in user?

zander

4/28/2025

Custom Password Validation

Not sure if I'm just missing this in the docs, but is there anyway to set server side restrictions on what is accepted as a valid password? eg. must have 1 number, must have 1 uppercase. This can be done on the frontend form but it would nice to also have the option to verify this on the backend. Thanks!

!skyfall

4/27/2025

API Key plugin is always returning a KEY_NOT_FOUND error

I've got some basic Hono middleware to check API keys: ```ts app.use("*", async (c, next) => { const { error, key } = await auth.api.verifyApiKey({ body: {...

Solution:

Here's the fix, for those interested: ```diff apiKey({ customKeyGenerator: async () => { return crypto.randomUUID();...

jimin

4/27/2025

invalid base url

im deploying my app to vercel and im getting this error, is this not the correct base url?

Solution:

nvm i had the wrong google credentials and that was somehow affecting it?

Ashwanee Kumar Gupta

4/27/2025

updateAccountOnSignIn

How updateAccountOnSignIn works, I have a genericOauth configuration, where user has extra role property, which can be change in future. I want to take that role and update the user whenever he sign in.

phantom3313

4/27/2025

Intercept a email password sign-in at server?

I want to customize the behavior when an unverified user attempts to sign in. Currently, the built-in requireEmailVerification automatically sends a verification email, but I'd prefer to just return a 403 status and let my frontend handle requesting verification emails explicitly. Are there any hooks, middleware options, or configuration settings that would allow this customization?...

Kenny

4/27/2025

v1.2.6, v.1.2.7, and v1.2.8 throws errors when logging in

Upgrading better-auth to v1.2.6 (using D1Dialect / Cloudflare D1 via kysely-d1) against a verification table where expires_at is a TIMESTAMP/text column throws: ``` Oops! Field expires_at not found in model verification...

jan

4/27/2025

MongoDB Duplicate Key Session Error

Hey there, I have been facing this problem for almost a MONTH now and still couldn't find a solution to this. When I log in to my BetterAuth account, remove the session key from cookie, refresh the page and then log in again, I get an error from MongoDB. That's because there is already a session created for this user. So I have to manually remove session from db to log in again. But I don't understand how I could fix this error as it makes impossible to have more sessions for one account....

Andy

4/27/2025

Setting cookies with custom plugin auth

Hi, I'm having a few issues with setting this up the way that I want it to but I may be approaching it from the wrong way. I am using another application that I want users to be able to single click sign on into but it is not an Idp or oauth provider. Instead it providers a token in the URL that I can decrypt. The current imagined workflow is as follows: 1. User clicks button 2. Gets sent to /api/auth/test/sso...

JROCBABY

4/27/2025

BetterAuth GitHub OAuth Creates Only Verification Records, No User/Account/Session

```bash ✓ Compiled /auth/signin in 9.6s (9870 modules) GET /auth/signin 200 in 9866ms ○ Compiling /api/auth/[...all] ... ✓ Compiled /api/auth/[...all] in 2.5s (5762 modules)...

Sami

4/27/2025

is BETTER_AUTH_SECRET safe to expose on the client?

title, i guess it is if we're using the react hooks?

Mattèo

4/27/2025

How to handle phoneNumber.sendOtp errors ? Only 500 is returned

Hey, I wanted to know if it's possible to handle errors that happen in the sendOtp option of the phoneNumber plugin. Currently, throwed errors are sent as 500 without proper error message. If the user provides a malformed input, I may want to be able to return a specific error for that, not just 500. Does someone had this problem before, or can someone help me?...

JLipp

4/27/2025

Use auth.api as request only?

I'm using auth.api across multiple apps. They don't necessarily share the same DB, but I keep getting a "this relation does not exist" error when trying to use it. Using just fetch works without a problem. Any suggestions...

Previous Next

Gaming

Programming

Better Auth

Join the Better Auth server to ask questions!

Better Auth

Join the community to ask questions about Better Auth and get answers from other members.