feat: integrate better-auth for OIDC authentication on Cloudflare Workers

migrations/0001_better_auth.sql

@@ -0,0 +1,48 @@
+-- better-auth required tables (SQLite / Cloudflare D1)
+-- Generated for better-auth v1.5 with genericOAuth + bearer plugins
+
+CREATE TABLE IF NOT EXISTS `user` (
+  `id`            TEXT NOT NULL PRIMARY KEY,
+  `name`          TEXT NOT NULL,
+  `email`         TEXT NOT NULL UNIQUE,
+  `emailVerified` INTEGER NOT NULL DEFAULT 0,
+  `image`         TEXT,
+  `createdAt`     TEXT NOT NULL,
+  `updatedAt`     TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS `session` (
+  `id`          TEXT NOT NULL PRIMARY KEY,
+  `userId`      TEXT NOT NULL REFERENCES `user`(`id`),
+  `token`       TEXT NOT NULL UNIQUE,
+  `expiresAt`   TEXT NOT NULL,
+  `ipAddress`   TEXT,
+  `userAgent`   TEXT,
+  `createdAt`   TEXT NOT NULL,
+  `updatedAt`   TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS `account` (
+  `id`                     TEXT NOT NULL PRIMARY KEY,
+  `userId`                 TEXT NOT NULL REFERENCES `user`(`id`),
+  `accountId`              TEXT NOT NULL,
+  `providerId`             TEXT NOT NULL,
+  `accessToken`            TEXT,
+  `refreshToken`           TEXT,
+  `idToken`                TEXT,
+  `accessTokenExpiresAt`   TEXT,
+  `refreshTokenExpiresAt`  TEXT,
+  `scope`                  TEXT,
+  `password`               TEXT,
+  `createdAt`              TEXT NOT NULL,
+  `updatedAt`              TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS `verification` (
+  `id`         TEXT NOT NULL PRIMARY KEY,
+  `identifier` TEXT NOT NULL,
+  `value`      TEXT NOT NULL,
+  `expiresAt`  TEXT NOT NULL,
+  `createdAt`  TEXT,
+  `updatedAt`  TEXT
+);

package.json

@@ -12,7 +12,9 @@
 		"check": "npx @biomejs/biome check --write ./src"
 	},
 	"dependencies": {
+		"@better-auth/kysely-adapter": "^1.5.6",
 		"@scalar/hono-api-reference": "^0.9.24",
+		"better-auth": "^1.5.6",
 		"chanfana": "^2.8.3",
 		"hono": "^4.10.4",
 		"kysely": "^0.28.8",