Guides authentication in Nuxt apps using @nuxtjs/better-auth. Use when installing or configuring the module, using its client or server APIs, protecting routes, refreshing sessions, or integrating Better Auth plugins.
Install
npx skills add https://github.com/onmax/nuxt-skills --skill nuxt-better-authSKILL.md
Nuxt Better Auth
Use the smallest reference that matches the task.
Pick a reference
| Task | Read |
|---|---|
| Install the module, configure environment variables, or create config files | references/installation.md |
| Read client session state, build auth forms, call plugins, or fetch auth-bound data | references/client-auth.md |
| Read or enforce sessions in server handlers, create sessions, or refresh cached session data | references/server-auth.md |
| Protect pages or API routes and configure redirects | references/route-protection.md |
| Register Better Auth plugins and their client companions | references/plugins.md |
| Configure NuxtHub, generated schema, or secondary storage | references/database.md |
| Connect a Nuxt frontend to an external Better Auth server | references/client-only.md |
| Use inferred auth types or add project fields | references/types.md |
Rules that apply across tasks
- Confirm the consumer's installed package version supports each API you use. The published skill may be newer than the consumer's lockfile.
- Enforce protected API reads and mutations server-side with
requireUserSession(event). Route rules and page meta also control navigation. - Navigate only to validated local redirect paths.
- In
clientOnlymode, do not use local server helpers or expect SSR session hydration. - After server-side changes to session payload fields, call
refreshSessionCookieCache(event). Wrap custom client auth endpoints that create or change the current session withrunWithSessionRefresh().
Before finishing an implementation, run the consumer's typecheck and the narrowest relevant auth test.
Resources
Related skills
entra-app-registrationmicrosoft606KGuides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Key Vault secrets (use azure-keyvault-expiration-audit), general Azure resource security guidance.azure-messagingmicrosoft595KTroubleshoot and resolve issues with Azure Messaging SDKs for Event Hubs and Service Bus. Covers connection failures, authentication errors, message processing issues, and SDK configuration problems. WHEN: event hub SDK error, service bus SDK issue, messaging connection failure, AMQP error, event processor host issue, message lock lost, message lock expired, lock renewal, lock renewal batch, send timeout, receiver disconnected, SDK troubleshooting, azure messaging SDK, event hub consumer, servicentra-agent-idmicrosoft328KProvision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmi_path, OBO, cross-tenant) including the Microsoft Entra SDK for AgentID sidecar. USE FOR: Agent Identity Blueprint, BlueprintPrincipal, agent OAuth, fmi_path token exchange, agent OBO, Workload Identity Federation for agents, polyglot agent auth, Microsoft.Identity.Web.AgentIdentities. DO NOT USE FOR: standard Entra app registsupabasesupabase298KUse when doing ANY task involving Supabase. Triggers: Supabase products (Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, Queues); client libraries and SSR integrations (supabase-js, @supabase/ssr) in Next.js, React, SvelteKit, Astro, Remix; auth issues (login, logout, sessions, JWT, cookies, getSession, getUser, getClaims, RLS); Supabase CLI or MCP server; schema changes, migrations, declarative schemas, security audits, Postgres extensions (pg_graphql, pg_cron, pg_vector); deb