OAuth 2.0 & OpenID Connect
Support for Google, Microsoft Entra ID, GitHub, and Auth0 providers
OAuth-based authentication with JWT token management
Support for Google, Microsoft Entra ID, GitHub, and Auth0 providers
Built-in password provider with magic link support for passwordless authentication
Automatic generation and validation of JSON Web Tokens (RFC 7519)
Built-in mock provider for effortless testing - no external dependencies or configuration needed
Built-in token refresh with configurable expiration times
Custom fetch instance that automatically injects bearer tokens and handles 401 token refresh
Flexible middleware for protecting server and client routes with declarative configuration
Admin users can impersonate others for debugging and support with full audit logging
Add application-specific claims to JWT tokens
No forced ORM or database - provides integration hooks to work with any storage layer (Prisma, Drizzle, raw SQL, MongoDB, etc.)
HTTP-only, secure cookies for refresh tokens
Easy to add custom OAuth providers
Written in TypeScript with full type definitions
Simple useAuth() composable for client-side authentication state