Does it support passwordless login?

Yes, it provides implementation patterns for both magic link email verification and WebAuthn-based passkey authentication.

Is Redis required for session management?

While the pattern recommends Upstash Redis for distributed session storage in production, it can be adapted for other storage backends supported by better-auth.

What authentication library does this skill use?

This skill primarily utilizes better-auth, integrated with Drizzle ORM and TanStack Start for a modern, type-safe authentication flow.

How are sensitive API secrets managed?

The skill implements Doppler for runtime secret management, ensuring sensitive credentials like OAuth keys are never committed to version control.

How does it handle multi-tenancy?

It enforces a mandatory tenant_id field in both users and sessions tables to ensure strict data isolation and multi-tenant security.

Multi-Tenant Authentication Patterns

Name: Multi-Tenant Authentication Patterns
Author: greyhaven-ai

bygreyhaven-ai

•

安全与测试

Implements production-grade multi-tenant authentication patterns using better-auth, magic links, and passkeys.

This skill provides a comprehensive framework for implementing secure, multi-tenant authentication in TanStack Start applications. It leverages better-auth for versatile login methods including magic links and passkeys, integrates Doppler for secret management, and enforces strict multi-tenancy by requiring tenant_id across users and sessions. It is specifically designed for developers building SaaS applications who need scalable, secure session management with Redis and robust OAuth integration while maintaining high security standards through RLS and environment variable protection.

主要功能

01Secure secret management integration using Doppler

0215 GitHub stars

03Pre-configured protected route templates for TanStack Router

04Optimized session management with Redis and Upstash

05Support for Magic Links, WebAuthn Passkeys, and OAuth providers

06Strict multi-tenant architecture with mandatory tenant_id isolation

使用场景

01Building a B2B SaaS application requiring secure multi-tenant data isolation

02Implementing passwordless authentication via magic links or biometric passkeys

03Securing TanStack Start applications with centralized session management

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add greyhaven-ai/claude-code-config authentication-patterns

For use in Claude.ai and ChatGPT

Download Skill