better-ts-stack 2.0.2 → 2.1.1

package/templates/frontend/tanstack/src/routes/index.tsx.hbs

@@ -1,102 +1,103 @@
-import { createFileRoute{{#if useAuth}}, Link{{/if}} } from "@tanstack/react-router";
-import { ArrowRight } from "lucide-react";
-
-import { buttonVariants } from "~/components/ui/button";
-import { Card, CardContent, CardHeader, CardTitle } from "~/components/ui/card";
-import { cn } from "~/lib/utils";
-
-export const Route = createFileRoute("/")({
-  component: Home,
-});
-
-const featureList = [
-  "TanStack Start SSR",
-  "TanStack Router and Query",
-  "React 19 and TypeScript",
-  "Tailwind CSS v4",
-  {{#if useAuth}}"Better Auth-ready session flow",{{/if}}
-  {{#if (eq database "prisma")}}"Prisma database tooling",{{/if}}
-  {{#if (eq database "drizzle")}}"Drizzle database tooling",{{/if}}
-];
-
-function Home() {
-  return (
-    <main className="min-h-screen bg-background text-foreground">
-      <div className="mx-auto flex min-h-screen max-w-6xl flex-col justify-center gap-12 px-6 py-16 sm:px-10 lg:px-12">
-        <section className="grid gap-10 lg:grid-cols-[1.2fr_0.8fr] lg:items-center">
-          <div className="space-y-6">
-            <span className="inline-flex w-fit items-center rounded-full border border-border bg-card px-3 py-1 text-xs font-medium uppercase tracking-[0.24em] text-muted-foreground shadow-sm">
-              Created with better-ts-stack
-            </span>
-            <div className="space-y-4">
-              <h1 className="max-w-3xl text-4xl font-semibold tracking-tight sm:text-5xl">
-                Ship your stack faster with a polished TypeScript foundation.
-              </h1>
-              <p className="max-w-2xl text-base leading-7 text-muted-foreground sm:text-lg">
-                Your project already includes the core app shell, database wiring,
-                and a shadcn-compatible UI foundation so you can keep building
-                instead of setting up boilerplate.
-              </p>
-            </div>
-            <div className="flex flex-col gap-3 sm:flex-row">
-              {{#if useAuth}}
-              <Link
-                to="/sign-up"
-                className={cn(buttonVariants({ size: "lg" }), "gap-2")}
-              >
-                Create an account
-                <ArrowRight className="size-4" />
-              </Link>
-              <Link
-                to="/sign-in"
-                className={buttonVariants({ variant: "outline", size: "lg" })}
-              >
-                Login
-              </Link>
-              {{else}}
-              <a
-                href="https://github.com/Abdullah-dev0/better-ts-stack"
-                target="_blank"
-                rel="noreferrer"
-                className={cn(buttonVariants({ size: "lg" }), "gap-2")}
-              >
-                Explore the docs
-                <ArrowRight className="size-4" />
-              </a>
-              <a
-                href="https://tanstack.com/start/latest"
-                target="_blank"
-                rel="noreferrer"
-                className={buttonVariants({ variant: "outline", size: "lg" })}
-              >
-                TanStack guide
-              </a>
-              {{/if}}
-            </div>
-          </div>
-
-          <Card className="border-border bg-card shadow-sm">
-            <CardHeader>
-              <CardTitle>Included in this starter</CardTitle>
-            </CardHeader>
-            <CardContent className="space-y-4">
-              <ul className="space-y-3 text-sm text-muted-foreground">
-                {featureList.map((feature) => (
-                  <li key={feature} className="flex items-center gap-3">
-                    <span className="size-2 rounded-full bg-primary" />
-                    <span>{feature}</span>
-                  </li>
-                ))}
-              </ul>
-              <div className="rounded-2xl border border-border bg-muted px-4 py-3 text-sm text-muted-foreground">
-                Start editing{" "}
-                <code className="font-mono">src/routes/index.tsx</code> and
-                shape the project around your product instead of setup chores.
-              </div>
-            </CardContent>
-          </Card>
-        </section>
-      </div>
-    </main>
-  );
+import { createFileRoute{{#if useAuth}}, Link{{/if}} } from "@tanstack/react-router";
+import { ArrowRight } from "lucide-react";
+
+import { buttonVariants } from "~/components/ui/button";
+import { Card, CardContent, CardHeader, CardTitle } from "~/components/ui/card";
+import { cn } from "~/lib/utils";
+
+export const Route = createFileRoute("/")({
+  component: Home,
+});
+
+const featureList = [
+  "TanStack Start SSR",
+  "TanStack Router and Query",
+  "React 19 and TypeScript",
+  "Tailwind CSS v4",
+  {{#if useAuth}}"Better Auth-ready session flow",{{/if}}
+  {{#if (eq database "prisma")}}"Prisma database tooling",{{/if}}
+  {{#if (eq database "drizzle")}}"Drizzle database tooling",{{/if}}
+  {{#if (eq database "mongoose")}}"Mongoose database tooling",{{/if}}
+];
+
+function Home() {
+  return (
+    <main className="min-h-screen bg-background text-foreground">
+      <div className="mx-auto flex min-h-screen max-w-6xl flex-col justify-center gap-12 px-6 py-16 sm:px-10 lg:px-12">
+        <section className="grid gap-10 lg:grid-cols-[1.2fr_0.8fr] lg:items-center">
+          <div className="space-y-6">
+            <span className="inline-flex w-fit items-center rounded-full border border-border bg-card px-3 py-1 text-xs font-medium uppercase tracking-[0.24em] text-muted-foreground shadow-sm">
+              Created with better-ts-stack
+            </span>
+            <div className="space-y-4">
+              <h1 className="max-w-3xl text-4xl font-semibold tracking-tight sm:text-5xl">
+                Ship your stack faster with a polished TypeScript foundation.
+              </h1>
+              <p className="max-w-2xl text-base leading-7 text-muted-foreground sm:text-lg">
+                Your project already includes the core app shell, database wiring,
+                and a shadcn-compatible UI foundation so you can keep building
+                instead of setting up boilerplate.
+              </p>
+            </div>
+            <div className="flex flex-col gap-3 sm:flex-row">
+              {{#if useAuth}}
+              <Link
+                to="/sign-up"
+                className={cn(buttonVariants({ size: "lg" }), "gap-2")}
+              >
+                Create an account
+                <ArrowRight className="size-4" />
+              </Link>
+              <Link
+                to="/sign-in"
+                className={buttonVariants({ variant: "outline", size: "lg" })}
+              >
+                Login
+              </Link>
+              {{else}}
+              <a
+                href="https://better-ts-stack.abdullahtech.me/docs"
+                target="_blank"
+                rel="noreferrer"
+                className={cn(buttonVariants({ size: "lg" }), "gap-2")}
+              >
+                Explore the docs
+                <ArrowRight className="size-4" />
+              </a>
+              <a
+                href="https://tanstack.com/start/latest"
+                target="_blank"
+                rel="noreferrer"
+                className={buttonVariants({ variant: "outline", size: "lg" })}
+              >
+                TanStack guide
+              </a>
+              {{/if}}
+            </div>
+          </div>
+
+          <Card className="border-border bg-card shadow-sm">
+            <CardHeader>
+              <CardTitle>Included in this starter</CardTitle>
+            </CardHeader>
+            <CardContent className="space-y-4">
+              <ul className="space-y-3 text-sm text-muted-foreground">
+                {featureList.map((feature) => (
+                  <li key={feature} className="flex items-center gap-3">
+                    <span className="size-2 rounded-full bg-primary" />
+                    <span>{feature}</span>
+                  </li>
+                ))}
+              </ul>
+              <div className="rounded-2xl border border-border bg-muted px-4 py-3 text-sm text-muted-foreground">
+                Start editing{" "}
+                <code className="font-mono">src/routes/index.tsx</code> and
+                shape the project around your product instead of setup chores.
+              </div>
+            </CardContent>
+          </Card>
+        </section>
+      </div>
+    </main>
+  );
 }

package/templates/frontend/tanstack/vite.config.ts

@@ -1,14 +1,23 @@
-import { tanstackStart } from "@tanstack/react-start/plugin/vite";
-import tailwindcss from "@tailwindcss/vite";
-import viteReact from "@vitejs/plugin-react";
-import { defineConfig } from "vite";
-
-export default defineConfig({
-  server: {
-    port: 3000,
-  },
-  resolve: {
-    tsconfigPaths: true,
-  },
-  plugins: [tanstackStart({ srcDirectory: "src" }), tailwindcss(), viteReact()],
-});
+import { tanstackStart } from "@tanstack/react-start/plugin/vite";
+import tailwindcss from "@tailwindcss/vite";
+import viteReact from "@vitejs/plugin-react";
+import { nitro } from "nitro/vite";
+import { defineConfig } from "vite";
+
+export default defineConfig(({ command, isPreview }) => ({
+  server: {
+    port: 3000,
+  },
+  resolve: {
+    tsconfigPaths: true,
+  },
+  plugins: [
+    tanstackStart({ srcDirectory: "src" }),
+    tailwindcss(),
+    viteReact(),
+    // Nitro builds the production server in .output/ (run with node) and serves
+    // it for `vite preview`. It is left out of `vite dev`, where TanStack Start's
+    // own dev server is steadier
+    (command === "build" || isPreview) && nitro(),
+  ],
+}));

package/templates/modules/auth/express/config.json

@@ -1,20 +1,20 @@
-{
-  "id": "auth",
-  "name": "JWT Auth",
-  "description": "JWT authentication with bcrypt password hashing",
-  "type": "feature",
-  "dependencies": {
-    "bcrypt": "^6.0.0",
-    "jsonwebtoken": "^9.0.3",
-    "zod": "^4.6.5"
-  },
-  "devDependencies": {
-    "@types/bcrypt": "^6.0.0",
-    "@types/jsonwebtoken": "^9.0.10"
-  },
-  "scripts": {},
-  "envVars": {
-    "JWT_SECRET": "please-change-me",
-    "JWT_EXPIRES_IN": "1h"
-  }
-}
+{
+  "id": "auth",
+  "name": "JWT Auth",
+  "description": "JWT authentication with bcrypt password hashing",
+  "type": "feature",
+  "dependencies": {
+    "bcrypt": "^6.0.0",
+    "jsonwebtoken": "^9.0.3",
+    "zod": "^4.6.7"
+  },
+  "devDependencies": {
+    "@types/bcrypt": "^6.0.0",
+    "@types/jsonwebtoken": "^9.0.10"
+  },
+  "scripts": {},
+  "envVars": {
+    "JWT_SECRET": "please-change-me",
+    "JWT_EXPIRES_IN": "1h"
+  }
+}

package/templates/modules/auth/express/src/middleware/requireAuth.ts.hbs

@@ -19,8 +19,7 @@ export function requireAuth(req: AuthenticatedRequest, res: Response, next: Next
     const payload = verifyToken(token);
     req.user = payload;
     next();
-  } catch (error) {
-    console.error('JWT verification failed:', error);
+  } catch {
     res.status(401).json({ error: 'Invalid or expired token' });
   }
 }

package/templates/modules/auth/express/src/routes/auth.ts.hbs

@@ -1,19 +1,27 @@
-import { Request, Response, NextFunction, Router } from 'express';
-import { login, me, register } from '../controllers/authController';
-import { requireAuth } from '../middleware/requireAuth';
-
-const router: Router = Router();
-
-function asyncHandler(
-  fn: (req: Request, res: Response, next: NextFunction) => Promise<void>
-): (req: Request, res: Response, next: NextFunction) => void {
-  return (req, res, next) => {
-    void fn(req, res, next).catch(next);
-  };
-}
-
-router.post('/register', asyncHandler(register));
-router.post('/login', asyncHandler(login));
-router.get('/me', requireAuth, me);
-
-export default router;
+import { Request, Response, NextFunction, Router } from 'express';
+import { login, me, register } from '../controllers/authController';
+{{#if useRateLimit}}
+import { authLimiter } from '../middleware/rateLimit';
+{{/if}}
+import { requireAuth } from '../middleware/requireAuth';
+
+const router: Router = Router();
+
+function asyncHandler(
+  fn: (req: Request, res: Response, next: NextFunction) => Promise<void>
+): (req: Request, res: Response, next: NextFunction) => void {
+  return (req, res, next) => {
+    void fn(req, res, next).catch(next);
+  };
+}
+
+{{#if useRateLimit}}
+router.post('/register', authLimiter, asyncHandler(register));
+router.post('/login', authLimiter, asyncHandler(login));
+{{else}}
+router.post('/register', asyncHandler(register));
+router.post('/login', asyncHandler(login));
+{{/if}}
+router.get('/me', requireAuth, me);
+
+export default router;

package/templates/modules/auth/nestjs/config.json

@@ -1,20 +1,20 @@
-{
-  "id": "auth",
-  "name": "JWT Auth",
-  "description": "JWT authentication for NestJS with bcrypt password hashing",
-  "type": "feature",
-  "dependencies": {
-    "bcrypt": "^6.0.0",
-    "jsonwebtoken": "^9.0.3",
-    "zod": "^4.6.5"
-  },
-  "devDependencies": {
-    "@types/bcrypt": "^6.0.0",
-    "@types/jsonwebtoken": "^9.0.10"
-  },
-  "scripts": {},
-  "envVars": {
-    "JWT_SECRET": "please-change-me",
-    "JWT_EXPIRES_IN": "1h"
-  }
-}
+{
+  "id": "auth",
+  "name": "JWT Auth",
+  "description": "JWT authentication for NestJS with bcrypt password hashing",
+  "type": "feature",
+  "dependencies": {
+    "bcrypt": "^6.0.0",
+    "jsonwebtoken": "^9.0.3",
+    "zod": "^4.6.7"
+  },
+  "devDependencies": {
+    "@types/bcrypt": "^6.0.0",
+    "@types/jsonwebtoken": "^9.0.10"
+  },
+  "scripts": {},
+  "envVars": {
+    "JWT_SECRET": "please-change-me",
+    "JWT_EXPIRES_IN": "1h"
+  }
+}

package/templates/modules/auth/nestjs/src/auth/{auth.controller.ts → auth.controller.ts.hbs}

@@ -7,6 +7,9 @@ import {
   Req,
   UseGuards,
 } from "@nestjs/common";
+{{#if useRateLimit}}
+import { Throttle } from "@nestjs/throttler";
+{{/if}}
 
 import { type AuthenticatedRequest, AuthGuard } from "./auth.guard.js";
 import {
@@ -19,11 +22,20 @@ import { type AuthResponse, AuthService } from "./auth.service.js";
 import type { AuthTokenPayload } from "./jwt.js";
 import { ZodValidationPipe } from "./zod-validation.pipe.js";
 
+{{#if useRateLimit}}
+// Sign-up and login: 10 attempts per client IP in 15 minutes, against
+// password guessing
+const AUTH_LIMIT = { default: { ttl: 15 * 60 * 1000, limit: 10 } };
+
+{{/if}}
 @Controller("auth")
 export class AuthController {
   constructor(private readonly authService: AuthService) {}
 
   @Post("register")
+  {{#if useRateLimit}}
+  @Throttle(AUTH_LIMIT)
+  {{/if}}
   register(
     @Body(new ZodValidationPipe(registerSchema)) body: RegisterInput
   ): Promise<AuthResponse> {
@@ -32,6 +44,9 @@ export class AuthController {
 
   @Post("login")
   @HttpCode(200)
+  {{#if useRateLimit}}
+  @Throttle(AUTH_LIMIT)
+  {{/if}}
   login(
     @Body(new ZodValidationPipe(loginSchema)) body: LoginInput
   ): Promise<AuthResponse> {

package/templates/modules/auth/nextjs/config.json

@@ -4,10 +4,10 @@
   "description": "Better Auth for Next.js with optional Prisma or Drizzle adapter",
   "type": "feature",
   "dependencies": {
-    "@hookform/resolvers": "^5.9.1",
-    "better-auth": "^1.7.3",
-    "react-hook-form": "^7.87.0",
-    "zod": "^4.6.5"
+    "@hookform/resolvers": "^5.9.2",
+    "better-auth": "^1.7.14",
+    "react-hook-form": "^7.91.0",
+    "zod": "^4.6.7"
   },
   "devDependencies": {},
   "scripts": {},

package/templates/{frontend/nextjs/proxy.ts.hbs → modules/auth/nextjs/proxy.ts}

@@ -1,8 +1,6 @@
+import { getSessionCookie } from "better-auth/cookies";
 import { NextResponse } from "next/server";
-
-{{#if useAuth}}
 import type { NextRequest } from "next/server";
-import { getSessionCookie } from "better-auth/cookies";
 
 export function proxy(request: NextRequest) {
   const sessionCookie = getSessionCookie(request);
@@ -17,8 +15,3 @@ export function proxy(request: NextRequest) {
 export const config = {
   matcher: ["/dashboard/:path*"],
 };
-{{else}}
-export function proxy() {
-  return NextResponse.next();
-}
-{{/if}}

package/templates/modules/auth/tanstack/config.json

@@ -4,11 +4,11 @@
   "description": "Better Auth for TanStack Start with optional Prisma, Drizzle, or MongoDB adapter",
   "type": "feature",
   "dependencies": {
-    "@hookform/resolvers": "^5.9.1",
-    "better-auth": "^1.7.3",
+    "@hookform/resolvers": "^5.9.2",
+    "better-auth": "^1.7.14",
     "dotenv": "^17.4.2",
-    "react-hook-form": "^7.87.0",
-    "zod": "^4.6.5"
+    "react-hook-form": "^7.91.0",
+    "zod": "^4.6.7"
   },
   "devDependencies": {},
   "scripts": {},