create-scaffauth 0.1.0

package/dist/templates/fastify/drizzle-postgres/drizzle.config.ts

@@ -0,0 +1,10 @@
+import { defineConfig } from "drizzle-kit";
+
+export default defineConfig({
+  schema: "./drizzle/schema.ts",
+  out: "./drizzle/migrations",
+  dialect: "postgresql",
+  dbCredentials: {
+    url: process.env.DATABASE_URL!,
+  },
+});

package/dist/templates/fastify/drizzle-postgres/package.json.hbs

@@ -0,0 +1,35 @@
+{
+  "name": "{{projectName}}",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "tsx watch src/index.ts",
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "db:generate": "drizzle-kit generate",
+    "db:migrate": "tsx drizzle/migrate.ts",
+    "db:push": "drizzle-kit push",
+    "db:studio": "drizzle-kit studio"
+  },
+  "dependencies": {
+    "@fastify/cors": "^10.0.0",
+    "better-auth": "^1.2.0",
+    "drizzle-orm": "^0.38.0",
+    "fastify": "^5.2.0",
+    "pg": "^8.13.0"
+{{#if (eq emailProvider "resend")}},
+    "resend": "^4.0.0"{{/if}}{{#if (eq emailProvider "sendgrid")}},
+    "@sendgrid/mail": "^8.1.0"{{/if}}{{#if (eq emailProvider "smtp")}},
+    "nodemailer": "^6.9.0"{{/if}}
+  },
+  "devDependencies": {
+    "@types/node": "^22.13.0",
+    "@types/pg": "^8.11.0",
+    "drizzle-kit": "^0.30.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0"
+{{#if (eq emailProvider "smtp")}},
+    "@types/nodemailer": "^6.4.0"{{/if}}
+  }
+}

package/dist/templates/fastify/drizzle-postgres/src/auth.ts.hbs

@@ -0,0 +1,114 @@
+import { betterAuth } from "better-auth";
+import { drizzleAdapter } from "better-auth/adapters/drizzle";
+import { db } from "../drizzle/db";
+{{#if twoFactor}}
+import { twoFactor } from "better-auth/plugins";
+{{/if}}
+{{#if rbac}}
+import { admin } from "better-auth/plugins";
+{{/if}}
+{{#if (eq emailProvider "resend")}}
+import { Resend } from "resend";
+
+const resend = new Resend(process.env.RESEND_API_KEY);
+{{/if}}
+{{#if (eq emailProvider "sendgrid")}}
+import sgMail from "@sendgrid/mail";
+
+sgMail.setApiKey(process.env.SENDGRID_API_KEY!);
+{{/if}}
+{{#if (eq emailProvider "smtp")}}
+import nodemailer from "nodemailer";
+
+const transporter = nodemailer.createTransport({
+  host: process.env.SMTP_HOST,
+  port: Number(process.env.SMTP_PORT) || 587,
+  auth: {
+    user: process.env.SMTP_USER,
+    pass: process.env.SMTP_PASS,
+  },
+});
+{{/if}}
+
+export const auth = betterAuth({
+  database: drizzleAdapter(db, {
+    provider: "pg",
+  }),
+  emailAndPassword: {
+    enabled: true,
+{{#if emailProvider}}
+    requireEmailVerification: true,
+    sendResetPassword: async ({ user, url }) => {
+      await sendEmail(user.email, "Reset your password", `<a href="${url}">Reset password</a>`);
+    },
+{{/if}}
+  },
+  session: {
+    expiresIn: {{sessionExpiresIn}},
+    updateAge: {{sessionUpdateAge}},
+    cookieCache: {
+      enabled: {{sessionCookieCacheEnabled}},
+      maxAge: {{sessionCookieCacheMaxAge}},
+    },
+  },
+{{#if emailProvider}}
+  emailVerification: {
+    sendOnSignUp: true,
+    sendVerificationEmail: async ({ user, url }) => {
+      await sendEmail(user.email, "Verify your email", `<a href="${url}">Verify email</a>`);
+    },
+  },
+{{/if}}
+  {{#if providers.length}}
+  socialProviders: {
+    {{#each providers}}
+    {{this}}: {
+      clientId: process.env.{{uppercase this}}_CLIENT_ID!,
+      clientSecret: process.env.{{uppercase this}}_CLIENT_SECRET!,
+    },
+    {{/each}}
+  },
+  {{/if}}
+  {{#if (or twoFactor rbac)}}
+  plugins: [
+    {{#if twoFactor}}
+    twoFactor(),
+    {{/if}}
+    {{#if rbac}}
+    admin({
+      defaultRole: "user",
+    }),
+    {{/if}}
+  ],
+  {{/if}}
+  trustedOrigins: [process.env.CORS_ORIGIN || "http://localhost:3001"],
+});
+{{#if emailProvider}}
+
+async function sendEmail(to: string, subject: string, html: string) {
+{{#if (eq emailProvider "resend")}}
+  await resend.emails.send({
+    from: process.env.EMAIL_FROM || "noreply@example.com",
+    to,
+    subject,
+    html,
+  });
+{{/if}}
+{{#if (eq emailProvider "sendgrid")}}
+  await sgMail.send({
+    from: process.env.EMAIL_FROM || "noreply@example.com",
+    to,
+    subject,
+    html,
+  });
+{{/if}}
+{{#if (eq emailProvider "smtp")}}
+  await transporter.sendMail({
+    from: process.env.EMAIL_FROM || "noreply@example.com",
+    to,
+    subject,
+    html,
+  });
+{{/if}}
+}
+{{/if}}

package/dist/templates/fastify/drizzle-postgres/src/index.ts

@@ -0,0 +1,34 @@
+import Fastify from "fastify";
+import cors from "@fastify/cors";
+import { auth } from "./auth";
+import { toNodeHandler } from "better-auth/node";
+
+const app = Fastify({ logger: true });
+
+// CORS
+await app.register(cors, {
+  origin: process.env.CORS_ORIGIN || "http://localhost:3001",
+  credentials: true,
+});
+
+// Mount Better Auth handler
+app.all("/api/auth/*", async (req, reply) => {
+  const handler = toNodeHandler(auth);
+  // @ts-ignore - bridge Fastify to Node handler
+  handler(req.raw, reply.raw);
+});
+
+// Health check
+app.get("/", async () => {
+  return { status: "ok", message: "Auth backend is running" };
+});
+
+// Start server
+const port = Number(process.env.PORT) || 3000;
+try {
+  await app.listen({ port, host: "0.0.0.0" });
+  console.log(`Server running on http://localhost:${port}`);
+} catch (err) {
+  app.log.error(err);
+  process.exit(1);
+}

package/dist/templates/fastify/drizzle-postgres/tsconfig.json

@@ -0,0 +1,19 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "lib": ["ES2022"],
+    "outDir": "dist",
+    "rootDir": ".",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true,
+    "declaration": true,
+    "sourceMap": true
+  },
+  "include": ["src/**/*.ts", "drizzle/**/*.ts"],
+  "exclude": ["node_modules", "dist"]
+}

package/dist/templates/fastify/drizzle-sqlite/.env.example.hbs

@@ -0,0 +1,39 @@
+# Database
+DATABASE_URL=sqlite.db
+
+# Better Auth
+BETTER_AUTH_SECRET={{authSecret}}
+BETTER_AUTH_URL=http://localhost:3000
+
+# CORS
+CORS_ORIGIN=http://localhost:3001
+
+# Server
+PORT=3000
+{{#each providers}}
+
+# {{uppercase this}} OAuth
+{{uppercase this}}_CLIENT_ID=
+{{uppercase this}}_CLIENT_SECRET=
+{{/each}}
+{{#if (eq emailProvider "resend")}}
+
+# Email (Resend)
+RESEND_API_KEY=
+EMAIL_FROM=noreply@example.com
+{{/if}}
+{{#if (eq emailProvider "sendgrid")}}
+
+# Email (SendGrid)
+SENDGRID_API_KEY=
+EMAIL_FROM=noreply@example.com
+{{/if}}
+{{#if (eq emailProvider "smtp")}}
+
+# Email (SMTP)
+SMTP_HOST=smtp.example.com
+SMTP_PORT=587
+SMTP_USER=
+SMTP_PASS=
+EMAIL_FROM=noreply@example.com
+{{/if}}

package/dist/templates/fastify/drizzle-sqlite/README.md.hbs

@@ -0,0 +1,78 @@
+# {{projectName}}
+
+Authentication backend powered by [Better Auth](https://better-auth.com), built with Fastify + Drizzle + PostgreSQL.
+
+Generated with [Scaffauth](https://scaffauth.xyz).
+
+## Quick Start
+
+```bash
+# Install dependencies
+npm install
+
+# Copy environment variables
+cp .env.example .env
+
+# Update DATABASE_URL in .env with your PostgreSQL connection string
+
+# Push database schema
+npm run db:push
+
+# Start development server
+npm run dev
+```
+
+Your auth backend will be running at `http://localhost:3000`.
+
+## API Endpoints
+
+Better Auth provides these endpoints automatically:
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| POST | `/api/auth/sign-up/email` | Register with email/password |
+| POST | `/api/auth/sign-in/email` | Sign in with email/password |
+| POST | `/api/auth/sign-out` | Sign out |
+| GET | `/api/auth/session` | Get current session |
+{{#each providers}}
+| GET | `/api/auth/sign-in/social` | Sign in with {{this}} |
+{{/each}}
+
+## Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| `DATABASE_URL` | PostgreSQL connection string |
+| `BETTER_AUTH_SECRET` | Secret key for signing tokens |
+| `BETTER_AUTH_URL` | URL of the auth backend |
+| `CORS_ORIGIN` | Allowed frontend origin |
+| `PORT` | Server port (default: 3000) |
+{{#each providers}}
+| `{{uppercase this}}_CLIENT_ID` | {{this}} OAuth client ID |
+| `{{uppercase this}}_CLIENT_SECRET` | {{this}} OAuth client secret |
+{{/each}}
+
+## Database
+
+This project uses Drizzle ORM with PostgreSQL.
+
+```bash
+npm run db:generate   # Generate migrations
+npm run db:migrate    # Run migrations
+npm run db:push       # Push schema changes directly
+npm run db:studio     # Open Drizzle Studio
+```
+
+## Frontend Integration
+
+```typescript
+import { createAuthClient } from "better-auth/react";
+
+export const authClient = createAuthClient({
+  baseURL: "http://localhost:3000",
+});
+```
+
+## License
+
+MIT

package/dist/templates/fastify/drizzle-sqlite/drizzle/db.ts

@@ -0,0 +1,6 @@
+import { drizzle } from "drizzle-orm/better-sqlite3";
+import Database from "better-sqlite3";
+
+const sqlite = new Database(process.env.DATABASE_URL || "sqlite.db");
+
+export const db = drizzle(sqlite);

package/dist/templates/fastify/drizzle-sqlite/drizzle/migrate.ts

@@ -0,0 +1,12 @@
+import { drizzle } from "drizzle-orm/better-sqlite3";
+import { migrate } from "drizzle-orm/better-sqlite3/migrator";
+import Database from "better-sqlite3";
+
+const sqlite = new Database(process.env.DATABASE_URL || "sqlite.db");
+const db = drizzle(sqlite);
+
+console.log("Running migrations...");
+migrate(db, { migrationsFolder: "./drizzle/migrations" });
+console.log("Migrations complete.");
+
+sqlite.close();

package/dist/templates/fastify/drizzle-sqlite/drizzle/schema.ts

@@ -0,0 +1,55 @@
+import {
+  sqliteTable,
+  text,
+  integer,
+} from "drizzle-orm/sqlite-core";
+
+export const user = sqliteTable("user", {
+  id: text("id").primaryKey(),
+  name: text("name").notNull(),
+  email: text("email").notNull().unique(),
+  emailVerified: integer("email_verified", { mode: "boolean" }).notNull().default(false),
+  image: text("image"),
+  createdAt: integer("created_at", { mode: "timestamp" }).notNull().$defaultFn(() => new Date()),
+  updatedAt: integer("updated_at", { mode: "timestamp" }).notNull().$defaultFn(() => new Date()),
+});
+
+export const session = sqliteTable("session", {
+  id: text("id").primaryKey(),
+  expiresAt: integer("expires_at", { mode: "timestamp" }).notNull(),
+  token: text("token").notNull().unique(),
+  createdAt: integer("created_at", { mode: "timestamp" }).notNull().$defaultFn(() => new Date()),
+  updatedAt: integer("updated_at", { mode: "timestamp" }).notNull().$defaultFn(() => new Date()),
+  ipAddress: text("ip_address"),
+  userAgent: text("user_agent"),
+  userId: text("user_id")
+    .notNull()
+    .references(() => user.id, { onDelete: "cascade" }),
+});
+
+export const account = sqliteTable("account", {
+  id: text("id").primaryKey(),
+  accountId: text("account_id").notNull(),
+  providerId: text("provider_id").notNull(),
+  userId: text("user_id")
+    .notNull()
+    .references(() => user.id, { onDelete: "cascade" }),
+  accessToken: text("access_token"),
+  refreshToken: text("refresh_token"),
+  idToken: text("id_token"),
+  accessTokenExpiresAt: integer("access_token_expires_at", { mode: "timestamp" }),
+  refreshTokenExpiresAt: integer("refresh_token_expires_at", { mode: "timestamp" }),
+  scope: text("scope"),
+  password: text("password"),
+  createdAt: integer("created_at", { mode: "timestamp" }).notNull().$defaultFn(() => new Date()),
+  updatedAt: integer("updated_at", { mode: "timestamp" }).notNull().$defaultFn(() => new Date()),
+});
+
+export const verification = sqliteTable("verification", {
+  id: text("id").primaryKey(),
+  identifier: text("identifier").notNull(),
+  value: text("value").notNull(),
+  expiresAt: integer("expires_at", { mode: "timestamp" }).notNull(),
+  createdAt: integer("created_at", { mode: "timestamp" }).notNull().$defaultFn(() => new Date()),
+  updatedAt: integer("updated_at", { mode: "timestamp" }).notNull().$defaultFn(() => new Date()),
+});

package/dist/templates/fastify/drizzle-sqlite/drizzle.config.ts

@@ -0,0 +1,10 @@
+import { defineConfig } from "drizzle-kit";
+
+export default defineConfig({
+  schema: "./drizzle/schema.ts",
+  out: "./drizzle/migrations",
+  dialect: "sqlite",
+  dbCredentials: {
+    url: process.env.DATABASE_URL || "sqlite.db",
+  },
+});

package/dist/templates/fastify/drizzle-sqlite/package.json.hbs

@@ -0,0 +1,35 @@
+{
+  "name": "{{projectName}}",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "tsx watch src/index.ts",
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "db:generate": "drizzle-kit generate",
+    "db:migrate": "tsx drizzle/migrate.ts",
+    "db:push": "drizzle-kit push",
+    "db:studio": "drizzle-kit studio"
+  },
+  "dependencies": {
+    "@fastify/cors": "^10.0.0",
+    "better-auth": "^1.2.0",
+    "better-sqlite3": "^11.7.0",
+    "drizzle-orm": "^0.38.0",
+    "fastify": "^5.2.0"
+{{#if (eq emailProvider "resend")}},
+    "resend": "^4.0.0"{{/if}}{{#if (eq emailProvider "sendgrid")}},
+    "@sendgrid/mail": "^8.1.0"{{/if}}{{#if (eq emailProvider "smtp")}},
+    "nodemailer": "^6.9.0"{{/if}}
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.0",
+    "@types/node": "^22.13.0",
+    "drizzle-kit": "^0.30.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0"
+{{#if (eq emailProvider "smtp")}},
+    "@types/nodemailer": "^6.4.0"{{/if}}
+  }
+}

package/dist/templates/fastify/drizzle-sqlite/src/auth.ts.hbs

@@ -0,0 +1,114 @@
+import { betterAuth } from "better-auth";
+import { drizzleAdapter } from "better-auth/adapters/drizzle";
+import { db } from "../drizzle/db";
+{{#if twoFactor}}
+import { twoFactor } from "better-auth/plugins";
+{{/if}}
+{{#if rbac}}
+import { admin } from "better-auth/plugins";
+{{/if}}
+{{#if (eq emailProvider "resend")}}
+import { Resend } from "resend";
+
+const resend = new Resend(process.env.RESEND_API_KEY);
+{{/if}}
+{{#if (eq emailProvider "sendgrid")}}
+import sgMail from "@sendgrid/mail";
+
+sgMail.setApiKey(process.env.SENDGRID_API_KEY!);
+{{/if}}
+{{#if (eq emailProvider "smtp")}}
+import nodemailer from "nodemailer";
+
+const transporter = nodemailer.createTransport({
+  host: process.env.SMTP_HOST,
+  port: Number(process.env.SMTP_PORT) || 587,
+  auth: {
+    user: process.env.SMTP_USER,
+    pass: process.env.SMTP_PASS,
+  },
+});
+{{/if}}
+
+export const auth = betterAuth({
+  database: drizzleAdapter(db, {
+    provider: "sqlite",
+  }),
+  emailAndPassword: {
+    enabled: true,
+{{#if emailProvider}}
+    requireEmailVerification: true,
+    sendResetPassword: async ({ user, url }) => {
+      await sendEmail(user.email, "Reset your password", `<a href="${url}">Reset password</a>`);
+    },
+{{/if}}
+  },
+  session: {
+    expiresIn: {{sessionExpiresIn}},
+    updateAge: {{sessionUpdateAge}},
+    cookieCache: {
+      enabled: {{sessionCookieCacheEnabled}},
+      maxAge: {{sessionCookieCacheMaxAge}},
+    },
+  },
+{{#if emailProvider}}
+  emailVerification: {
+    sendOnSignUp: true,
+    sendVerificationEmail: async ({ user, url }) => {
+      await sendEmail(user.email, "Verify your email", `<a href="${url}">Verify email</a>`);
+    },
+  },
+{{/if}}
+  {{#if providers.length}}
+  socialProviders: {
+    {{#each providers}}
+    {{this}}: {
+      clientId: process.env.{{uppercase this}}_CLIENT_ID!,
+      clientSecret: process.env.{{uppercase this}}_CLIENT_SECRET!,
+    },
+    {{/each}}
+  },
+  {{/if}}
+  {{#if (or twoFactor rbac)}}
+  plugins: [
+    {{#if twoFactor}}
+    twoFactor(),
+    {{/if}}
+    {{#if rbac}}
+    admin({
+      defaultRole: "user",
+    }),
+    {{/if}}
+  ],
+  {{/if}}
+  trustedOrigins: [process.env.CORS_ORIGIN || "http://localhost:3001"],
+});
+{{#if emailProvider}}
+
+async function sendEmail(to: string, subject: string, html: string) {
+{{#if (eq emailProvider "resend")}}
+  await resend.emails.send({
+    from: process.env.EMAIL_FROM || "noreply@example.com",
+    to,
+    subject,
+    html,
+  });
+{{/if}}
+{{#if (eq emailProvider "sendgrid")}}
+  await sgMail.send({
+    from: process.env.EMAIL_FROM || "noreply@example.com",
+    to,
+    subject,
+    html,
+  });
+{{/if}}
+{{#if (eq emailProvider "smtp")}}
+  await transporter.sendMail({
+    from: process.env.EMAIL_FROM || "noreply@example.com",
+    to,
+    subject,
+    html,
+  });
+{{/if}}
+}
+{{/if}}

package/dist/templates/fastify/drizzle-sqlite/src/index.ts

@@ -0,0 +1,34 @@
+import Fastify from "fastify";
+import cors from "@fastify/cors";
+import { auth } from "./auth";
+import { toNodeHandler } from "better-auth/node";
+
+const app = Fastify({ logger: true });
+
+// CORS
+await app.register(cors, {
+  origin: process.env.CORS_ORIGIN || "http://localhost:3001",
+  credentials: true,
+});
+
+// Mount Better Auth handler
+app.all("/api/auth/*", async (req, reply) => {
+  const handler = toNodeHandler(auth);
+  // @ts-ignore - bridge Fastify to Node handler
+  handler(req.raw, reply.raw);
+});
+
+// Health check
+app.get("/", async () => {
+  return { status: "ok", message: "Auth backend is running" };
+});
+
+// Start server
+const port = Number(process.env.PORT) || 3000;
+try {
+  await app.listen({ port, host: "0.0.0.0" });
+  console.log(`Server running on http://localhost:${port}`);
+} catch (err) {
+  app.log.error(err);
+  process.exit(1);
+}

package/dist/templates/fastify/drizzle-sqlite/tsconfig.json

@@ -0,0 +1,19 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "lib": ["ES2022"],
+    "outDir": "dist",
+    "rootDir": ".",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true,
+    "declaration": true,
+    "sourceMap": true
+  },
+  "include": ["src/**/*.ts", "drizzle/**/*.ts"],
+  "exclude": ["node_modules", "dist"]
+}

package/dist/templates/fastify/kysely-mysql/.env.example.hbs

@@ -0,0 +1,39 @@
+# Database
+DATABASE_URL=mysql://user:password@localhost:3306/{{projectName}}
+
+# Better Auth
+BETTER_AUTH_SECRET={{authSecret}}
+BETTER_AUTH_URL=http://localhost:3000
+
+# CORS
+CORS_ORIGIN=http://localhost:3001
+
+# Server
+PORT=3000
+{{#each providers}}
+
+# {{uppercase this}} OAuth
+{{uppercase this}}_CLIENT_ID=
+{{uppercase this}}_CLIENT_SECRET=
+{{/each}}
+{{#if (eq emailProvider "resend")}}
+
+# Email (Resend)
+RESEND_API_KEY=
+EMAIL_FROM=noreply@example.com
+{{/if}}
+{{#if (eq emailProvider "sendgrid")}}
+
+# Email (SendGrid)
+SENDGRID_API_KEY=
+EMAIL_FROM=noreply@example.com
+{{/if}}
+{{#if (eq emailProvider "smtp")}}
+
+# Email (SMTP)
+SMTP_HOST=smtp.example.com
+SMTP_PORT=587
+SMTP_USER=
+SMTP_PASS=
+EMAIL_FROM=noreply@example.com
+{{/if}}