feat: auth upgrade, experimental joins, IP config & cookie cache strategy (better-auth#261)

Author: ping-maxwell

.github/workflows/ci.yml

@@ -15,52 +15,36 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          cache: pnpm
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm lint
+      - uses: oven-sh/setup-bun@v2
+      - run: bun install --frozen-lockfile
+      - run: bun lint
 
   format:
     name: Format
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          cache: pnpm
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm fmt:check
+      - uses: oven-sh/setup-bun@v2
+      - run: bun install --frozen-lockfile
+      - run: bun fmt:check
 
   typecheck:
     name: Typecheck
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          cache: pnpm
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm typecheck
+      - uses: oven-sh/setup-bun@v2
+      - run: bun install --frozen-lockfile
+      - run: bun typecheck
 
   build:
     name: Build
     runs-on: ubuntu-latest
     needs: [lint, format, typecheck]
     steps:
       - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          cache: pnpm
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm build
+      - uses: oven-sh/setup-bun@v2
+      - run: bun install --frozen-lockfile
+      - run: bun run build
         env:
           SKIP_ENV_VALIDATION: true

apps/web/package.json

@@ -17,7 +17,7 @@
 		"@aws-sdk/client-s3": "^3.998.0",
 		"@aws-sdk/s3-request-presigner": "^3.998.0",
 		"@better-auth/infra": "0.1.9-beta.1",
-		"@better-auth/stripe": "1.5.0-beta.18",
+		"@better-auth/stripe": "1.5.1",
 		"@better-auth/utils": "^0.3.1",
 		"@mixedbread-ai/sdk": "^2.2.11",
 		"@octokit/rest": "^22.0.1",
@@ -46,7 +46,7 @@
 		"ai": "^6.0.97",
 		"auth": "1.5.0-beta.18",
 		"better-all": "^0.0.7",
-		"better-auth": "1.5.0-beta.18",
+		"better-auth": "1.5.1",
 		"class-variance-authority": "^0.7.1",
 		"clsx": "^2.1.1",
 		"cmdk": "^1.1.1",

apps/web/src/lib/auth.ts

@@ -28,9 +28,13 @@ async function getOctokitUser(token: string) {
 }
 
 export const auth = betterAuth({
+	appName: "Better Hub",
 	database: prismaAdapter(prisma, {
 		provider: "postgresql",
 	}),
+	experimental: {
+		joins: true,
+	},
 	plugins: [
 		dash({
 			activityTracking: {
@@ -113,6 +117,7 @@ export const auth = betterAuth({
 		cookieCache: {
 			enabled: true,
 			maxAge: 60 * 60 * 24 * 7,
+			strategy: "jwe",
 		},
 	},
 	trustedOrigins: [
@@ -123,6 +128,11 @@ export const auth = betterAuth({
 		// Beta site
 		"https://beta.better-hub.com",
 	],
+	advanced: {
+		ipAddress: {
+			ipAddressHeaders: ["x-vercel-forwarded-for", "x-forwarded-for"],
+		},
+	},
 });
 
 export const getServerSession = cache(async () => {