Better-Auth x Inbound plugin
Plugins related
Next.js🤔Question
Next.js🤔QuestionI'm building an Inbound Email plugin for Better Auth that automatically sends transactional emails for security/auth events. Before I publish it, I wanted to confirm I'm not missing any important events.
Currently supporting these events via
| Event | Endpoint(s) | Description |
|-------|------------|-------------|
| Password Changed |
| Email Changed |
| New Device Sign-in |
| Account Created |
| 2FA Enabled/Disabled |
Questions:
1. Are there other security-critical events I should be listening for? For example:
- Account deletion?
- Session revocation (
- Failed login attempts?
- OAuth/social account linking/unlinking?
- Password reset requests (currently disabled by default since Better Auth handles sending those)?
- Account lockout?
2. Is there a canonical list of all Better Auth API endpoints that trigger user-facing actions? I want to make sure I'm covering the important ones.
3. For the
4. Is there a recommended way to detect session/account context in the hook handler? Currently parsing from
Thanks!
Currently supporting these events via
after| Event | Endpoint(s) | Description |
|-------|------------|-------------|
| Password Changed |
POST /change-password| Email Changed |
POST /change-email| New Device Sign-in |
POST /sign-in/email/sign-in/social/sign-in/magic-link/sign-in/passkey| Account Created |
POST /sign-up/email/sign-up/social| 2FA Enabled/Disabled |
POST /two-factor/enable/two-factor/disableQuestions:
1. Are there other security-critical events I should be listening for? For example:
- Account deletion?
- Session revocation (
/revoke-session- Failed login attempts?
- OAuth/social account linking/unlinking?
- Password reset requests (currently disabled by default since Better Auth handles sending those)?
- Account lockout?
2. Is there a canonical list of all Better Auth API endpoints that trigger user-facing actions? I want to make sure I'm covering the important ones.
3. For the
after4. Is there a recommended way to detect session/account context in the hook handler? Currently parsing from
ctx.context.sessionctx.context.newSessionThanks!
inbound
the modern email infrastructure platform for developers. receive, parse, and manage inbound emails with powerful apis, webhooks, and real-time processing.
Was this page helpful?
