create-scaffauth 0.1.0

package/dist/templates/hono/kysely-mysql/db/types.ts

@@ -0,0 +1,54 @@
+import type { Generated, ColumnType } from "kysely";
+
+export interface Database {
+  user: UserTable;
+  session: SessionTable;
+  account: AccountTable;
+  verification: VerificationTable;
+}
+
+export interface UserTable {
+  id: string;
+  name: string;
+  email: string;
+  emailVerified: boolean;
+  image: string | null;
+  createdAt: Generated<Date>;
+  updatedAt: Generated<Date>;
+}
+
+export interface SessionTable {
+  id: string;
+  expiresAt: Date;
+  token: string;
+  createdAt: Generated<Date>;
+  updatedAt: Generated<Date>;
+  ipAddress: string | null;
+  userAgent: string | null;
+  userId: string;
+}
+
+export interface AccountTable {
+  id: string;
+  accountId: string;
+  providerId: string;
+  userId: string;
+  accessToken: string | null;
+  refreshToken: string | null;
+  idToken: string | null;
+  accessTokenExpiresAt: Date | null;
+  refreshTokenExpiresAt: Date | null;
+  scope: string | null;
+  password: string | null;
+  createdAt: Generated<Date>;
+  updatedAt: Generated<Date>;
+}
+
+export interface VerificationTable {
+  id: string;
+  identifier: string;
+  value: string;
+  expiresAt: Date;
+  createdAt: Generated<Date>;
+  updatedAt: Generated<Date>;
+}

package/dist/templates/hono/kysely-mysql/package.json.hbs

@@ -0,0 +1,29 @@
+{
+  "name": "{{projectName}}",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "tsx watch src/index.ts",
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "db:migrate": "tsx db/migrate.ts"
+  },
+  "dependencies": {
+    "better-auth": "^1.2.0",
+    "hono": "^4.7.0",
+    "kysely": "^0.27.0",
+    "mysql2": "^3.11.0"
+{{#if (eq emailProvider "resend")}},
+    "resend": "^4.0.0"{{/if}}{{#if (eq emailProvider "sendgrid")}},
+    "@sendgrid/mail": "^8.1.0"{{/if}}{{#if (eq emailProvider "smtp")}},
+    "nodemailer": "^6.9.0"{{/if}}
+  },
+  "devDependencies": {
+    "@types/node": "^22.13.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0"
+{{#if (eq emailProvider "smtp")}},
+    "@types/nodemailer": "^6.4.0"{{/if}}
+  }
+}

package/dist/templates/hono/kysely-mysql/src/auth.ts.hbs

@@ -0,0 +1,114 @@
+import { betterAuth } from "better-auth";
+import { kyselyAdapter } from "better-auth/adapters/kysely";
+import { db } from "../db/db";
+{{#if twoFactor}}
+import { twoFactor } from "better-auth/plugins";
+{{/if}}
+{{#if rbac}}
+import { admin } from "better-auth/plugins";
+{{/if}}
+{{#if (eq emailProvider "resend")}}
+import { Resend } from "resend";
+
+const resend = new Resend(process.env.RESEND_API_KEY);
+{{/if}}
+{{#if (eq emailProvider "sendgrid")}}
+import sgMail from "@sendgrid/mail";
+
+sgMail.setApiKey(process.env.SENDGRID_API_KEY!);
+{{/if}}
+{{#if (eq emailProvider "smtp")}}
+import nodemailer from "nodemailer";
+
+const transporter = nodemailer.createTransport({
+  host: process.env.SMTP_HOST,
+  port: Number(process.env.SMTP_PORT) || 587,
+  auth: {
+    user: process.env.SMTP_USER,
+    pass: process.env.SMTP_PASS,
+  },
+});
+{{/if}}
+
+export const auth = betterAuth({
+  database: kyselyAdapter(db, {
+    type: "mysql",
+  }),
+  emailAndPassword: {
+    enabled: true,
+{{#if emailProvider}}
+    requireEmailVerification: true,
+    sendResetPassword: async ({ user, url }) => {
+      await sendEmail(user.email, "Reset your password", `<a href="${url}">Reset password</a>`);
+    },
+{{/if}}
+  },
+  session: {
+    expiresIn: {{sessionExpiresIn}},
+    updateAge: {{sessionUpdateAge}},
+    cookieCache: {
+      enabled: {{sessionCookieCacheEnabled}},
+      maxAge: {{sessionCookieCacheMaxAge}},
+    },
+  },
+{{#if emailProvider}}
+  emailVerification: {
+    sendOnSignUp: true,
+    sendVerificationEmail: async ({ user, url }) => {
+      await sendEmail(user.email, "Verify your email", `<a href="${url}">Verify email</a>`);
+    },
+  },
+{{/if}}
+  {{#if providers.length}}
+  socialProviders: {
+    {{#each providers}}
+    {{this}}: {
+      clientId: process.env.{{uppercase this}}_CLIENT_ID!,
+      clientSecret: process.env.{{uppercase this}}_CLIENT_SECRET!,
+    },
+    {{/each}}
+  },
+  {{/if}}
+  {{#if (or twoFactor rbac)}}
+  plugins: [
+    {{#if twoFactor}}
+    twoFactor(),
+    {{/if}}
+    {{#if rbac}}
+    admin({
+      defaultRole: "user",
+    }),
+    {{/if}}
+  ],
+  {{/if}}
+  trustedOrigins: [process.env.CORS_ORIGIN || "http://localhost:3001"],
+});
+{{#if emailProvider}}
+
+async function sendEmail(to: string, subject: string, html: string) {
+{{#if (eq emailProvider "resend")}}
+  await resend.emails.send({
+    from: process.env.EMAIL_FROM || "noreply@example.com",
+    to,
+    subject,
+    html,
+  });
+{{/if}}
+{{#if (eq emailProvider "sendgrid")}}
+  await sgMail.send({
+    from: process.env.EMAIL_FROM || "noreply@example.com",
+    to,
+    subject,
+    html,
+  });
+{{/if}}
+{{#if (eq emailProvider "smtp")}}
+  await transporter.sendMail({
+    from: process.env.EMAIL_FROM || "noreply@example.com",
+    to,
+    subject,
+    html,
+  });
+{{/if}}
+}
+{{/if}}

package/dist/templates/hono/kysely-mysql/src/index.ts

@@ -0,0 +1,35 @@
+import { Hono } from "hono";
+import { cors } from "hono/cors";
+import { logger } from "hono/logger";
+import { auth } from "./auth";
+
+const app = new Hono();
+
+// Middleware
+app.use("*", logger());
+app.use(
+  "*",
+  cors({
+    origin: process.env.CORS_ORIGIN || "http://localhost:3001",
+    credentials: true,
+  }),
+);
+
+// Mount Better Auth handler
+app.on(["POST", "GET"], "/api/auth/**", (c) => {
+  return auth.handler(c.req.raw);
+});
+
+// Health check
+app.get("/", (c) => {
+  return c.json({ status: "ok", message: "Auth backend is running" });
+});
+
+// Start server
+const port = Number(process.env.PORT) || 3000;
+console.log(`Server running on http://localhost:${port}`);
+
+export default {
+  port,
+  fetch: app.fetch,
+};

package/dist/templates/hono/kysely-mysql/tsconfig.json

@@ -0,0 +1,19 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "lib": ["ES2022"],
+    "outDir": "dist",
+    "rootDir": ".",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true,
+    "declaration": true,
+    "sourceMap": true
+  },
+  "include": ["src/**/*.ts", "drizzle/**/*.ts"],
+  "exclude": ["node_modules", "dist"]
+}

package/dist/templates/hono/kysely-postgres/.env.example.hbs

@@ -0,0 +1,39 @@
+# Database
+DATABASE_URL=postgresql://user:password@localhost:5432/{{projectName}}
+
+# Better Auth
+BETTER_AUTH_SECRET={{authSecret}}
+BETTER_AUTH_URL=http://localhost:3000
+
+# CORS
+CORS_ORIGIN=http://localhost:3001
+
+# Server
+PORT=3000
+{{#each providers}}
+
+# {{uppercase this}} OAuth
+{{uppercase this}}_CLIENT_ID=
+{{uppercase this}}_CLIENT_SECRET=
+{{/each}}
+{{#if (eq emailProvider "resend")}}
+
+# Email (Resend)
+RESEND_API_KEY=
+EMAIL_FROM=noreply@example.com
+{{/if}}
+{{#if (eq emailProvider "sendgrid")}}
+
+# Email (SendGrid)
+SENDGRID_API_KEY=
+EMAIL_FROM=noreply@example.com
+{{/if}}
+{{#if (eq emailProvider "smtp")}}
+
+# Email (SMTP)
+SMTP_HOST=smtp.example.com
+SMTP_PORT=587
+SMTP_USER=
+SMTP_PASS=
+EMAIL_FROM=noreply@example.com
+{{/if}}

package/dist/templates/hono/kysely-postgres/README.md.hbs

@@ -0,0 +1,75 @@
+# {{projectName}}
+
+Authentication backend powered by [Better Auth](https://better-auth.com), built with Hono + Kysely + PostgreSQL.
+
+Generated with [Scaffauth](https://scaffauth.xyz).
+
+## Quick Start
+
+```bash
+# Install dependencies
+npm install
+
+# Copy environment variables
+cp .env.example .env
+
+# Update DATABASE_URL in .env with your PostgreSQL connection string
+
+# Run migrations
+npm run db:migrate
+
+# Start development server
+npm run dev
+```
+
+Your auth backend will be running at `http://localhost:3000`.
+
+## API Endpoints
+
+Better Auth provides these endpoints automatically:
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| POST | `/api/auth/sign-up/email` | Register with email/password |
+| POST | `/api/auth/sign-in/email` | Sign in with email/password |
+| POST | `/api/auth/sign-out` | Sign out |
+| GET | `/api/auth/session` | Get current session |
+{{#each providers}}
+| GET | `/api/auth/sign-in/social` | Sign in with {{this}} |
+{{/each}}
+
+## Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| `DATABASE_URL` | PostgreSQL connection string |
+| `BETTER_AUTH_SECRET` | Secret key for signing tokens |
+| `BETTER_AUTH_URL` | URL of the auth backend |
+| `CORS_ORIGIN` | Allowed frontend origin |
+| `PORT` | Server port (default: 3000) |
+{{#each providers}}
+| `{{uppercase this}}_CLIENT_ID` | {{this}} OAuth client ID |
+| `{{uppercase this}}_CLIENT_SECRET` | {{this}} OAuth client secret |
+{{/each}}
+
+## Database
+
+This project uses Kysely query builder with PostgreSQL.
+
+```bash
+npm run db:migrate    # Run migrations (creates tables)
+```
+
+## Frontend Integration
+
+```typescript
+import { createAuthClient } from "better-auth/react";
+
+export const authClient = createAuthClient({
+  baseURL: "http://localhost:3000",
+});
+```
+
+## License
+
+MIT

package/dist/templates/hono/kysely-postgres/db/db.ts

@@ -0,0 +1,11 @@
+import { Kysely, PostgresDialect } from "kysely";
+import pg from "pg";
+import type { Database } from "./types";
+
+const dialect = new PostgresDialect({
+  pool: new pg.Pool({
+    connectionString: process.env.DATABASE_URL,
+  }),
+});
+
+export const db = new Kysely<Database>({ dialect });

package/dist/templates/hono/kysely-postgres/db/migrate.ts

@@ -0,0 +1,77 @@
+import { Kysely, PostgresDialect, sql } from "kysely";
+import pg from "pg";
+import type { Database } from "./types";
+
+async function main() {
+  const dialect = new PostgresDialect({
+    pool: new pg.Pool({
+      connectionString: process.env.DATABASE_URL,
+    }),
+  });
+
+  const db = new Kysely<Database>({ dialect });
+
+  console.log("Running migrations...");
+
+  await db.schema
+    .createTable("user")
+    .ifNotExists()
+    .addColumn("id", "text", (col) => col.primaryKey())
+    .addColumn("name", "text", (col) => col.notNull())
+    .addColumn("email", "text", (col) => col.notNull().unique())
+    .addColumn("email_verified", "boolean", (col) => col.notNull().defaultTo(false))
+    .addColumn("image", "text")
+    .addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`))
+    .addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`))
+    .execute();
+
+  await db.schema
+    .createTable("session")
+    .ifNotExists()
+    .addColumn("id", "text", (col) => col.primaryKey())
+    .addColumn("expires_at", "timestamptz", (col) => col.notNull())
+    .addColumn("token", "text", (col) => col.notNull().unique())
+    .addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`))
+    .addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`))
+    .addColumn("ip_address", "text")
+    .addColumn("user_agent", "text")
+    .addColumn("user_id", "text", (col) => col.notNull().references("user.id"))
+    .execute();
+
+  await db.schema
+    .createTable("account")
+    .ifNotExists()
+    .addColumn("id", "text", (col) => col.primaryKey())
+    .addColumn("account_id", "text", (col) => col.notNull())
+    .addColumn("provider_id", "text", (col) => col.notNull())
+    .addColumn("user_id", "text", (col) => col.notNull().references("user.id"))
+    .addColumn("access_token", "text")
+    .addColumn("refresh_token", "text")
+    .addColumn("id_token", "text")
+    .addColumn("access_token_expires_at", "timestamptz")
+    .addColumn("refresh_token_expires_at", "timestamptz")
+    .addColumn("scope", "text")
+    .addColumn("password", "text")
+    .addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`))
+    .addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`))
+    .execute();
+
+  await db.schema
+    .createTable("verification")
+    .ifNotExists()
+    .addColumn("id", "text", (col) => col.primaryKey())
+    .addColumn("identifier", "text", (col) => col.notNull())
+    .addColumn("value", "text", (col) => col.notNull())
+    .addColumn("expires_at", "timestamptz", (col) => col.notNull())
+    .addColumn("created_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`))
+    .addColumn("updated_at", "timestamptz", (col) => col.notNull().defaultTo(sql`now()`))
+    .execute();
+
+  console.log("Migrations complete.");
+  await db.destroy();
+}
+
+main().catch((err) => {
+  console.error("Migration failed:", err);
+  process.exit(1);
+});

package/dist/templates/hono/kysely-postgres/db/types.ts

@@ -0,0 +1,54 @@
+import type { Generated, ColumnType } from "kysely";
+
+export interface Database {
+  user: UserTable;
+  session: SessionTable;
+  account: AccountTable;
+  verification: VerificationTable;
+}
+
+export interface UserTable {
+  id: string;
+  name: string;
+  email: string;
+  emailVerified: boolean;
+  image: string | null;
+  createdAt: Generated<Date>;
+  updatedAt: Generated<Date>;
+}
+
+export interface SessionTable {
+  id: string;
+  expiresAt: Date;
+  token: string;
+  createdAt: Generated<Date>;
+  updatedAt: Generated<Date>;
+  ipAddress: string | null;
+  userAgent: string | null;
+  userId: string;
+}
+
+export interface AccountTable {
+  id: string;
+  accountId: string;
+  providerId: string;
+  userId: string;
+  accessToken: string | null;
+  refreshToken: string | null;
+  idToken: string | null;
+  accessTokenExpiresAt: Date | null;
+  refreshTokenExpiresAt: Date | null;
+  scope: string | null;
+  password: string | null;
+  createdAt: Generated<Date>;
+  updatedAt: Generated<Date>;
+}
+
+export interface VerificationTable {
+  id: string;
+  identifier: string;
+  value: string;
+  expiresAt: Date;
+  createdAt: Generated<Date>;
+  updatedAt: Generated<Date>;
+}

package/dist/templates/hono/kysely-postgres/package.json.hbs

@@ -0,0 +1,30 @@
+{
+  "name": "{{projectName}}",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "tsx watch src/index.ts",
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "db:migrate": "tsx db/migrate.ts"
+  },
+  "dependencies": {
+    "better-auth": "^1.2.0",
+    "hono": "^4.7.0",
+    "kysely": "^0.27.0",
+    "pg": "^8.13.0"
+{{#if (eq emailProvider "resend")}},
+    "resend": "^4.0.0"{{/if}}{{#if (eq emailProvider "sendgrid")}},
+    "@sendgrid/mail": "^8.1.0"{{/if}}{{#if (eq emailProvider "smtp")}},
+    "nodemailer": "^6.9.0"{{/if}}
+  },
+  "devDependencies": {
+    "@types/node": "^22.13.0",
+    "@types/pg": "^8.11.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0"
+{{#if (eq emailProvider "smtp")}},
+    "@types/nodemailer": "^6.4.0"{{/if}}
+  }
+}

package/dist/templates/hono/kysely-postgres/src/auth.ts.hbs

@@ -0,0 +1,114 @@
+import { betterAuth } from "better-auth";
+import { kyselyAdapter } from "better-auth/adapters/kysely";
+import { db } from "../db/db";
+{{#if twoFactor}}
+import { twoFactor } from "better-auth/plugins";
+{{/if}}
+{{#if rbac}}
+import { admin } from "better-auth/plugins";
+{{/if}}
+{{#if (eq emailProvider "resend")}}
+import { Resend } from "resend";
+
+const resend = new Resend(process.env.RESEND_API_KEY);
+{{/if}}
+{{#if (eq emailProvider "sendgrid")}}
+import sgMail from "@sendgrid/mail";
+
+sgMail.setApiKey(process.env.SENDGRID_API_KEY!);
+{{/if}}
+{{#if (eq emailProvider "smtp")}}
+import nodemailer from "nodemailer";
+
+const transporter = nodemailer.createTransport({
+  host: process.env.SMTP_HOST,
+  port: Number(process.env.SMTP_PORT) || 587,
+  auth: {
+    user: process.env.SMTP_USER,
+    pass: process.env.SMTP_PASS,
+  },
+});
+{{/if}}
+
+export const auth = betterAuth({
+  database: kyselyAdapter(db, {
+    type: "pg",
+  }),
+  emailAndPassword: {
+    enabled: true,
+{{#if emailProvider}}
+    requireEmailVerification: true,
+    sendResetPassword: async ({ user, url }) => {
+      await sendEmail(user.email, "Reset your password", `<a href="${url}">Reset password</a>`);
+    },
+{{/if}}
+  },
+  session: {
+    expiresIn: {{sessionExpiresIn}},
+    updateAge: {{sessionUpdateAge}},
+    cookieCache: {
+      enabled: {{sessionCookieCacheEnabled}},
+      maxAge: {{sessionCookieCacheMaxAge}},
+    },
+  },
+{{#if emailProvider}}
+  emailVerification: {
+    sendOnSignUp: true,
+    sendVerificationEmail: async ({ user, url }) => {
+      await sendEmail(user.email, "Verify your email", `<a href="${url}">Verify email</a>`);
+    },
+  },
+{{/if}}
+  {{#if providers.length}}
+  socialProviders: {
+    {{#each providers}}
+    {{this}}: {
+      clientId: process.env.{{uppercase this}}_CLIENT_ID!,
+      clientSecret: process.env.{{uppercase this}}_CLIENT_SECRET!,
+    },
+    {{/each}}
+  },
+  {{/if}}
+  {{#if (or twoFactor rbac)}}
+  plugins: [
+    {{#if twoFactor}}
+    twoFactor(),
+    {{/if}}
+    {{#if rbac}}
+    admin({
+      defaultRole: "user",
+    }),
+    {{/if}}
+  ],
+  {{/if}}
+  trustedOrigins: [process.env.CORS_ORIGIN || "http://localhost:3001"],
+});
+{{#if emailProvider}}
+
+async function sendEmail(to: string, subject: string, html: string) {
+{{#if (eq emailProvider "resend")}}
+  await resend.emails.send({
+    from: process.env.EMAIL_FROM || "noreply@example.com",
+    to,
+    subject,
+    html,
+  });
+{{/if}}
+{{#if (eq emailProvider "sendgrid")}}
+  await sgMail.send({
+    from: process.env.EMAIL_FROM || "noreply@example.com",
+    to,
+    subject,
+    html,
+  });
+{{/if}}
+{{#if (eq emailProvider "smtp")}}
+  await transporter.sendMail({
+    from: process.env.EMAIL_FROM || "noreply@example.com",
+    to,
+    subject,
+    html,
+  });
+{{/if}}
+}
+{{/if}}

package/dist/templates/hono/kysely-postgres/src/index.ts

@@ -0,0 +1,35 @@
+import { Hono } from "hono";
+import { cors } from "hono/cors";
+import { logger } from "hono/logger";
+import { auth } from "./auth";
+
+const app = new Hono();
+
+// Middleware
+app.use("*", logger());
+app.use(
+  "*",
+  cors({
+    origin: process.env.CORS_ORIGIN || "http://localhost:3001",
+    credentials: true,
+  }),
+);
+
+// Mount Better Auth handler
+app.on(["POST", "GET"], "/api/auth/**", (c) => {
+  return auth.handler(c.req.raw);
+});
+
+// Health check
+app.get("/", (c) => {
+  return c.json({ status: "ok", message: "Auth backend is running" });
+});
+
+// Start server
+const port = Number(process.env.PORT) || 3000;
+console.log(`Server running on http://localhost:${port}`);
+
+export default {
+  port,
+  fetch: app.fetch,
+};