nuxt-better-auth

The nuxt-better-auth module integrates Better Auth directly into the Nuxt 4 environment, offering a dedicated layer for managing identity and access control. It provides server-side utilities, client-side composables, and integrated route protection rules that respect Nuxt's server architecture. The module handles session lifecycle, database interactions via NuxtHub or Drizzle, and authentication flows including email/password and social providers. It abstracts the complexity of manual session verification by injecting helper functions into both the Nitro server engine and Vue components. Currently in alpha development, this package serves as a bridge for developers who need to implement structured authentication in a modern Nuxt application without writing standard boilerplate for session management or database persistence from scratch. It maintains consistency by syncing client state with server-side authentication events.

When to Use This Skill

• •Building protected admin panels that require specific user roles
• •Implementing standard user registration and login forms with social providers
• •Creating guest-only pages like registration or login portals
• •Restricting API endpoint access to authenticated users only

How to Invoke This Skill

Example prompts that trigger this skill in Claude Code, Cursor, or Antigravity:

• “How do I protect my admin dashboard routes in Nuxt?
• “Show me how to implement login with nuxt-better-auth
• “How to use requireUserSession in a server route?
• “Setting up Better Auth with NuxtHub database
• “How to restrict pages to guest users only in Nuxt?

Pro Tips

• 💡Given its 'Alpha Status', always review the official `@onmax/nuxt-better-auth` documentation for the latest API changes before deployment to production environments.
• 💡Leverage the `useUserSession` composable for consistent client-side user state management, ensuring your UI reflects authentication changes in real-time.
• 💡When protecting server routes, combine this skill's guidance with Nuxt's server middleware for robust access control, especially for sensitive API endpoints.

What this skill does

• •Native route protection using Nuxt routeRules and page meta
• •Server-side session validation with requireUserSession
• •Type-safe access to user and session objects across the application
• •Plugin support for 2FA, passkeys, and admin dashboards
• •Direct integration with NuxtHub and Drizzle for persistent storage

When not to use it

• ✕Production-critical projects that cannot tolerate alpha-stage API instability
• ✕Projects requiring auth providers not supported by the underlying Better Auth library
• ✕Simple static sites that do not require server-side session persistence

Example workflow

1. Configure the module in nuxt.config.ts with database credentials
2. Define route protection rules for your dashboard using routeRules
3. Implement login and sign-up forms using the useUserSession composable
4. Restrict protected API routes using the requireUserSession utility
5. Validate user roles in server logic before returning sensitive data
6. Handle redirect logic after authentication success using the onSuccess callback

Prerequisites

• –Nuxt 4
• –Better Auth knowledge
• –NuxtHub or Drizzle configured

Pitfalls & limitations

• !The library is currently in alpha status, meaning APIs are subject to change
• !Incorrect route rule configuration can leave routes accidentally exposed
• !Relying on client-side authentication states without backend verification is insecure

FAQ

How it compares

Unlike manual implementations that require writing custom session middleware and database queries, this module provides a unified declarative API that synchronizes the server, client, and route layers automatically.

Source & trust

Recommended Rules

Recommended Workflows

Recommended MCP Servers