Does it support passwordless login?

Yes, it provides implementation patterns for both magic link email verification and WebAuthn-based passkey authentication.

Is Redis required for session management?

While the pattern recommends Upstash Redis for distributed session storage in production, it can be adapted for other storage backends supported by better-auth.

What authentication library does this skill use?

This skill primarily utilizes better-auth, integrated with Drizzle ORM and TanStack Start for a modern, type-safe authentication flow.

How are sensitive API secrets managed?

The skill implements Doppler for runtime secret management, ensuring sensitive credentials like OAuth keys are never committed to version control.

How does it handle multi-tenancy?

It enforces a mandatory tenant_id field in both users and sessions tables to ensure strict data isolation and multi-tenant security.

Multi-Tenant Authentication Patterns

Name: Multi-Tenant Authentication Patterns
Author: greyhaven-ai

bygreyhaven-ai

•

セキュリティとテスト

Implements production-grade multi-tenant authentication patterns using better-auth, magic links, and passkeys.

概要

This skill provides a comprehensive framework for implementing secure, multi-tenant authentication in TanStack Start applications. It leverages better-auth for versatile login methods including magic links and passkeys, integrates Doppler for secret management, and enforces strict multi-tenancy by requiring tenant_id across users and sessions. It is specifically designed for developers building SaaS applications who need scalable, secure session management with Redis and robust OAuth integration while maintaining high security standards through RLS and environment variable protection.

主な機能

Secure secret management integration using Doppler
15 GitHub stars
Pre-configured protected route templates for TanStack Router
Optimized session management with Redis and Upstash
Support for Magic Links, WebAuthn Passkeys, and OAuth providers
Strict multi-tenant architecture with mandatory tenant_id isolation

ユースケース

Building a B2B SaaS application requiring secure multi-tenant data isolation
Implementing passwordless authentication via magic links or biometric passkeys
Securing TanStack Start applications with centralized session management

概要

主な機能

Secure secret management integration using Doppler
15 GitHub stars
Pre-configured protected route templates for TanStack Router
Optimized session management with Redis and Upstash
Support for Magic Links, WebAuthn Passkeys, and OAuth providers
Strict multi-tenant architecture with mandatory tenant_id isolation

ユースケース

Building a B2B SaaS application requiring secure multi-tenant data isolation
Implementing passwordless authentication via magic links or biometric passkeys
Securing TanStack Start applications with centralized session management