Welcome to GoBetterAuth

GoBetterAuth is A comprehensive, framework-agnostic authentication and authorization library for Go, inspired by Better Auth.

Note: This project is still a work in progress. Contributions are most welcome!

✨ Features

🔑 Email & Password Authentication – Secure, production-ready authentication with argon2 password hashing
🌐 Social OAuth Providers – Google, GitHub, Discord, and extensible generic OAuth2 support
🔐 Session Management – Secure, customizable session handling with refresh and expiration controls
✉️ Email Verification – Optional, configurable email verification workflow
🔄 Password Reset – Secure password reset with customizable email callbacks
🏗️ Clean Architecture – Go Clean Architecture: domain, usecase, repository, handler, and infrastructure layers
🔌 Plugin System – Extensible plugin architecture for custom business logic and routes
💾 Multiple Database Support – SQLite and PostgreSQL adapters, with migration scripts included
🛡️ Security First – CSRF protection, secure cookies, rate limiting, and input validation
⚡ Rate Limiting – Configurable, per-endpoint rate limiting with memory or database storage
🔁 Token Refresh Flow – Automatic token refresh and session extension
📦 Minimal Dependencies – Standard library first, production-ready, and framework-agnostic
🧩 Comprehensive Configuration – Flexible, type-safe config with sensible defaults and environment variable support
🧪 Test Coverage – Unit, integration, and E2E tests reflecting production scenarios