Module plugins 

Re-exports

pub use custom_session::CustomSessionPlugin;

pub use custom_session::SessionTransform;

pub use last_login_method::LastLoginMethodConfig;

pub use last_login_method::LastLoginMethodPlugin;

pub use oauth_popup::OAuthPopupPlugin;

pub use account_management::AccountManagementPlugin;

pub use admin::AdminBannedUserMessage;

pub use admin::AdminBannedUserMessageHandler;

pub use admin::AdminConfig;

pub use admin::AdminPlugin;

pub use admin::RolePermissions;

pub use anonymous::AnonymousConfig;

pub use anonymous::AnonymousPlugin;

pub use api_key::ApiKeyConfig;

pub use api_key::ApiKeyPlugin;

pub use bearer::BearerConfig;

pub use bearer::BearerPlugin;

pub use device_authorization::DeviceAuthorizationPlugin;

pub use email_otp::EmailOtpConfig;

pub use email_otp::EmailOtpPlugin;

pub use email_otp::SendEmailOtp;

pub use email_password::EmailPasswordConfig;

pub use email_password::EmailPasswordPlugin;

pub use email_verification::EmailVerificationConfig;

pub use email_verification::EmailVerificationHook;

pub use email_verification::EmailVerificationPlugin;

pub use email_verification::SendVerificationEmail;

pub use haveibeenpwned::HaveIBeenPwnedConfig;

pub use haveibeenpwned::HaveIBeenPwnedPlugin;

pub use haveibeenpwned::PwnedPasswordClient;

pub use magic_link::MagicLinkConfig;

pub use magic_link::MagicLinkPlugin;

pub use magic_link::SendMagicLink;

pub use organization::OrganizationConfig;

pub use organization::OrganizationCreatePatch;

pub use organization::OrganizationCreatedContext;

pub use organization::OrganizationCreationHooks;

pub use organization::OrganizationDraftContext;

pub use organization::OrganizationMemberCreatePatch;

pub use organization::OrganizationMemberDraftContext;

pub use organization::OrganizationPlugin;

pub use passkey::PasskeyConfig;

pub use passkey::PasskeyPlugin;

pub use password_management::PasswordManagementConfig;

pub use password_management::PasswordManagementPlugin;

pub use password_management::SendResetPassword;

pub use session_management::SessionManagementPlugin;

pub use siwe::SiweConfig;

pub use siwe::SiwePlugin;

pub use two_factor::SendTwoFactorOtp;

pub use two_factor::TwoFactorBackupCipher;

pub use two_factor::TwoFactorBackupStorage;

pub use two_factor::TwoFactorConfig;

pub use two_factor::TwoFactorOtpCipher;

pub use two_factor::TwoFactorOtpHasher;

pub use two_factor::TwoFactorOtpStorage;

pub use two_factor::TwoFactorPlugin;

pub use user_management::ChangeEmailConfig;

pub use user_management::DeleteUserConfig;

pub use user_management::UserManagementConfig;

pub use user_management::UserManagementPlugin;

Modules

access

Public access-control utilities matching Better Auth’s resource and action rules.

account_management

admin

anonymous

Anonymous accounts and their cleanup when a proven account replaces them.

api_key

bearer

Bearer authentication through the ordinary signed session-cookie lifecycle.

captcha

CAPTCHA admission before endpoint parsing and authentication side effects.

custom_session

Application-owned asynchronous session response projection.

device_authorization

email_otp

Passwordless email authentication and verification using single-use codes.

email_password

email_verification

haveibeenpwned

Compromised-password policy at initialized password hashing.

helpers

Shared helpers for plugin implementations.

jwt

Asymmetric session JWTs, public JWKS, and trusted server-side signing.

last_login_method

Remember successful session issuance without changing authentication authority.

magic_link

Single-use mailbox authentication links, with native delivery callbacks.

multi_session

Browser-local selection and revocation of several authenticated accounts.

oauth

oauth_popup

Popup OAuth entry and callback delivery, paired with the official popup client.

oauth_proxy

OAuth code exchange on a production host, followed by stateful completion on the originating preview host with database or authenticated cookie state.

oauth_token_conversion

Explicit administrative conversion of pre-Source native OAuth token rows.

one_tap

Google One Tap authentication with verified Google ID tokens.

one_time_token

Short-lived, single-use credentials that hand an existing session to a client.

open_api

OpenAPI schema generation and Scalar reference page.

organization

passkey

password_management

phone_number

Phone ownership verification, password login and scoped password reset.

session_management

siwe

Sign in with Ethereum using a single-use challenge and application-owned signature verification, including contract-wallet RPC providers.

two_factor

user_management

Traits

PasswordHasher

Custom password hasher trait for pluggable password hashing strategies.