Authentication Setup

TL;DR: Email/Password works out of the box. Enable social logins in appConfig.

Straktur uses Better Auth for authentication - a modern, type-safe auth library.

Available Methods

Configuration

All auth methods are configured in src/lib/config/index.ts:

export const appConfig = {
  auth: {
    methods: {
      emailPassword: true,      // ✅ Default
      passwordReset: true,      // ✅ Default
      magicLink: false,         // Enable below
      google: false,            // Enable below
      github: false,            // Enable below
      discord: false,           // Enable below
      apple: false,             // Enable below
    }
  }
}

Magic Link

Passwordless login via email link.

Setup

1. Configure an email provider (Resend or SMTP)

2. Enable in config:

auth: {
  methods: {
    magicLink: true
  }
}

That's it. Users can now sign in with just their email.

Google OAuth

Setup

1. Go to Google Cloud Console

2. Create project → APIs & Services → Credentials

3. Create OAuth 2.0 Client ID (Web application)

4. Add authorized redirect URI:

   http://localhost:3000/api/auth/callback/google
   https://yourdomain.com/api/auth/callback/google

5. Add environment variables:

NEXT_PUBLIC_GOOGLE_CLIENT_ID=your-client-id.apps.googleusercontent.com
GOOGLE_CLIENT_SECRET=GOCSPX-your-secret

6. Enable in config:

auth: {
  methods: {
    google: true
  }
}

GitHub OAuth

Setup

1. Go to GitHub Developer Settings

2. OAuth Apps → New OAuth App

3. Set callback URL:

   http://localhost:3000/api/auth/callback/github

4. Add environment variables:

NEXT_PUBLIC_GITHUB_CLIENT_ID=your-client-id
GITHUB_CLIENT_SECRET=your-client-secret

5. Enable in config:

auth: {
  methods: {
    github: true
  }
}

Discord OAuth

Setup

1. Go to Discord Developer Portal

2. Create application → OAuth2 → General

3. Add redirect:

   http://localhost:3000/api/auth/callback/discord

4. Add environment variables:

NEXT_PUBLIC_DISCORD_CLIENT_ID=your-client-id
DISCORD_CLIENT_SECRET=your-client-secret

5. Enable in config:

auth: {
  methods: {
    discord: true
  }
}

Apple OAuth

Setup

1. Go to Apple Developer

2. Create App ID with Sign in with Apple

3. Create Service ID with callback:

   https://yourdomain.com/api/auth/callback/apple

4. Add environment variables:

NEXT_PUBLIC_APPLE_CLIENT_ID=your-service-id
APPLE_CLIENT_SECRET=your-generated-secret

5. Enable in config:

auth: {
  methods: {
    apple: true
  }
}

Required Environment Variables

Generate Secret

openssl rand -base64 32

Sign-up Modes

Control how new users join your app in appConfig:

auth: {
  signupMode: "join_default_org_pending_approval"
}

Common Issues