create-scaffauth 0.1.0

package/dist/templates/express/kysely-sqlite/package.json.hbs

@@ -0,0 +1,33 @@
+{
+  "name": "{{projectName}}",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "tsx watch src/index.ts",
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "db:migrate": "tsx db/migrate.ts"
+  },
+  "dependencies": {
+    "better-auth": "^1.2.0",
+    "better-sqlite3": "^11.7.0",
+    "cors": "^2.8.5",
+    "express": "^5.0.0",
+    "kysely": "^0.27.0"
+{{#if (eq emailProvider "resend")}},
+    "resend": "^4.0.0"{{/if}}{{#if (eq emailProvider "sendgrid")}},
+    "@sendgrid/mail": "^8.1.0"{{/if}}{{#if (eq emailProvider "smtp")}},
+    "nodemailer": "^6.9.0"{{/if}}
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.0",
+    "@types/cors": "^2.8.17",
+    "@types/express": "^5.0.0",
+    "@types/node": "^22.13.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0"
+{{#if (eq emailProvider "smtp")}},
+    "@types/nodemailer": "^6.4.0"{{/if}}
+  }
+}

package/dist/templates/express/kysely-sqlite/src/auth.ts.hbs

@@ -0,0 +1,114 @@
+import { betterAuth } from "better-auth";
+import { kyselyAdapter } from "better-auth/adapters/kysely";
+import { db } from "../db/db";
+{{#if twoFactor}}
+import { twoFactor } from "better-auth/plugins";
+{{/if}}
+{{#if rbac}}
+import { admin } from "better-auth/plugins";
+{{/if}}
+{{#if (eq emailProvider "resend")}}
+import { Resend } from "resend";
+
+const resend = new Resend(process.env.RESEND_API_KEY);
+{{/if}}
+{{#if (eq emailProvider "sendgrid")}}
+import sgMail from "@sendgrid/mail";
+
+sgMail.setApiKey(process.env.SENDGRID_API_KEY!);
+{{/if}}
+{{#if (eq emailProvider "smtp")}}
+import nodemailer from "nodemailer";
+
+const transporter = nodemailer.createTransport({
+  host: process.env.SMTP_HOST,
+  port: Number(process.env.SMTP_PORT) || 587,
+  auth: {
+    user: process.env.SMTP_USER,
+    pass: process.env.SMTP_PASS,
+  },
+});
+{{/if}}
+
+export const auth = betterAuth({
+  database: kyselyAdapter(db, {
+    type: "sqlite",
+  }),
+  emailAndPassword: {
+    enabled: true,
+{{#if emailProvider}}
+    requireEmailVerification: true,
+    sendResetPassword: async ({ user, url }) => {
+      await sendEmail(user.email, "Reset your password", `<a href="${url}">Reset password</a>`);
+    },
+{{/if}}
+  },
+  session: {
+    expiresIn: {{sessionExpiresIn}},
+    updateAge: {{sessionUpdateAge}},
+    cookieCache: {
+      enabled: {{sessionCookieCacheEnabled}},
+      maxAge: {{sessionCookieCacheMaxAge}},
+    },
+  },
+{{#if emailProvider}}
+  emailVerification: {
+    sendOnSignUp: true,
+    sendVerificationEmail: async ({ user, url }) => {
+      await sendEmail(user.email, "Verify your email", `<a href="${url}">Verify email</a>`);
+    },
+  },
+{{/if}}
+  {{#if providers.length}}
+  socialProviders: {
+    {{#each providers}}
+    {{this}}: {
+      clientId: process.env.{{uppercase this}}_CLIENT_ID!,
+      clientSecret: process.env.{{uppercase this}}_CLIENT_SECRET!,
+    },
+    {{/each}}
+  },
+  {{/if}}
+  {{#if (or twoFactor rbac)}}
+  plugins: [
+    {{#if twoFactor}}
+    twoFactor(),
+    {{/if}}
+    {{#if rbac}}
+    admin({
+      defaultRole: "user",
+    }),
+    {{/if}}
+  ],
+  {{/if}}
+  trustedOrigins: [process.env.CORS_ORIGIN || "http://localhost:3001"],
+});
+{{#if emailProvider}}
+
+async function sendEmail(to: string, subject: string, html: string) {
+{{#if (eq emailProvider "resend")}}
+  await resend.emails.send({
+    from: process.env.EMAIL_FROM || "noreply@example.com",
+    to,
+    subject,
+    html,
+  });
+{{/if}}
+{{#if (eq emailProvider "sendgrid")}}
+  await sgMail.send({
+    from: process.env.EMAIL_FROM || "noreply@example.com",
+    to,
+    subject,
+    html,
+  });
+{{/if}}
+{{#if (eq emailProvider "smtp")}}
+  await transporter.sendMail({
+    from: process.env.EMAIL_FROM || "noreply@example.com",
+    to,
+    subject,
+    html,
+  });
+{{/if}}
+}
+{{/if}}

package/dist/templates/express/kysely-sqlite/src/index.ts

@@ -0,0 +1,28 @@
+import express from "express";
+import cors from "cors";
+import { auth } from "./auth";
+import { toNodeHandler } from "better-auth/node";
+
+const app = express();
+
+// Middleware
+app.use(
+  cors({
+    origin: process.env.CORS_ORIGIN || "http://localhost:3001",
+    credentials: true,
+  }),
+);
+
+// Mount Better Auth handler
+app.all("/api/auth/*", toNodeHandler(auth));
+
+// Health check
+app.get("/", (_req, res) => {
+  res.json({ status: "ok", message: "Auth backend is running" });
+});
+
+// Start server
+const port = Number(process.env.PORT) || 3000;
+app.listen(port, () => {
+  console.log(`Server running on http://localhost:${port}`);
+});

package/dist/templates/express/kysely-sqlite/tsconfig.json

@@ -0,0 +1,19 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "lib": ["ES2022"],
+    "outDir": "dist",
+    "rootDir": ".",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true,
+    "declaration": true,
+    "sourceMap": true
+  },
+  "include": ["src/**/*.ts", "drizzle/**/*.ts"],
+  "exclude": ["node_modules", "dist"]
+}

package/dist/templates/express/prisma-mysql/.env.example.hbs

@@ -0,0 +1,39 @@
+# Database
+DATABASE_URL=mysql://user:password@localhost:3306/{{projectName}}
+
+# Better Auth
+BETTER_AUTH_SECRET={{authSecret}}
+BETTER_AUTH_URL=http://localhost:3000
+
+# CORS
+CORS_ORIGIN=http://localhost:3001
+
+# Server
+PORT=3000
+{{#each providers}}
+
+# {{uppercase this}} OAuth
+{{uppercase this}}_CLIENT_ID=
+{{uppercase this}}_CLIENT_SECRET=
+{{/each}}
+{{#if (eq emailProvider "resend")}}
+
+# Email (Resend)
+RESEND_API_KEY=
+EMAIL_FROM=noreply@example.com
+{{/if}}
+{{#if (eq emailProvider "sendgrid")}}
+
+# Email (SendGrid)
+SENDGRID_API_KEY=
+EMAIL_FROM=noreply@example.com
+{{/if}}
+{{#if (eq emailProvider "smtp")}}
+
+# Email (SMTP)
+SMTP_HOST=smtp.example.com
+SMTP_PORT=587
+SMTP_USER=
+SMTP_PASS=
+EMAIL_FROM=noreply@example.com
+{{/if}}

package/dist/templates/express/prisma-mysql/README.md.hbs

@@ -0,0 +1,79 @@
+# {{projectName}}
+
+Authentication backend powered by [Better Auth](https://better-auth.com), built with Hono + Prisma + PostgreSQL.
+
+Generated with [Scaffauth](https://scaffauth.xyz).
+
+## Quick Start
+
+```bash
+# Install dependencies
+npm install
+
+# Copy environment variables
+cp .env.example .env
+
+# Update DATABASE_URL in .env with your PostgreSQL connection string
+
+# Generate Prisma client and push schema
+npm run db:generate
+npm run db:push
+
+# Start development server
+npm run dev
+```
+
+Your auth backend will be running at `http://localhost:3000`.
+
+## API Endpoints
+
+Better Auth provides these endpoints automatically:
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| POST | `/api/auth/sign-up/email` | Register with email/password |
+| POST | `/api/auth/sign-in/email` | Sign in with email/password |
+| POST | `/api/auth/sign-out` | Sign out |
+| GET | `/api/auth/session` | Get current session |
+{{#each providers}}
+| GET | `/api/auth/sign-in/social` | Sign in with {{this}} |
+{{/each}}
+
+## Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| `DATABASE_URL` | PostgreSQL connection string |
+| `BETTER_AUTH_SECRET` | Secret key for signing tokens |
+| `BETTER_AUTH_URL` | URL of the auth backend |
+| `CORS_ORIGIN` | Allowed frontend origin |
+| `PORT` | Server port (default: 3000) |
+{{#each providers}}
+| `{{uppercase this}}_CLIENT_ID` | {{this}} OAuth client ID |
+| `{{uppercase this}}_CLIENT_SECRET` | {{this}} OAuth client secret |
+{{/each}}
+
+## Database
+
+This project uses Prisma ORM with PostgreSQL.
+
+```bash
+npm run db:generate   # Generate Prisma client
+npm run db:migrate    # Run migrations
+npm run db:push       # Push schema changes directly
+npm run db:studio     # Open Prisma Studio
+```
+
+## Frontend Integration
+
+```typescript
+import { createAuthClient } from "better-auth/react";
+
+export const authClient = createAuthClient({
+  baseURL: "http://localhost:3000",
+});
+```
+
+## License
+
+MIT

package/dist/templates/express/prisma-mysql/package.json.hbs

@@ -0,0 +1,35 @@
+{
+  "name": "{{projectName}}",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "tsx watch src/index.ts",
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "db:generate": "prisma generate",
+    "db:migrate": "prisma migrate dev",
+    "db:push": "prisma db push",
+    "db:studio": "prisma studio"
+  },
+  "dependencies": {
+    "@prisma/client": "^6.3.0",
+    "better-auth": "^1.2.0",
+    "cors": "^2.8.5",
+    "express": "^5.0.0"
+{{#if (eq emailProvider "resend")}},
+    "resend": "^4.0.0"{{/if}}{{#if (eq emailProvider "sendgrid")}},
+    "@sendgrid/mail": "^8.1.0"{{/if}}{{#if (eq emailProvider "smtp")}},
+    "nodemailer": "^6.9.0"{{/if}}
+  },
+  "devDependencies": {
+    "@types/cors": "^2.8.17",
+    "@types/express": "^5.0.0",
+    "@types/node": "^22.13.0",
+    "prisma": "^6.3.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0"
+{{#if (eq emailProvider "smtp")}},
+    "@types/nodemailer": "^6.4.0"{{/if}}
+  }
+}

package/dist/templates/express/prisma-mysql/prisma/schema.prisma

@@ -0,0 +1,66 @@
+generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "mysql"
+  url      = env("DATABASE_URL")
+}
+
+model User {
+  id            String    @id @db.VarChar(36)
+  name          String
+  email         String    @unique @db.VarChar(255)
+  emailVerified Boolean   @default(false)
+  image         String?   @db.Text
+  createdAt     DateTime  @default(now())
+  updatedAt     DateTime  @updatedAt
+  sessions      Session[]
+  accounts      Account[]
+
+  @@map("user")
+}
+
+model Session {
+  id        String   @id @db.VarChar(36)
+  expiresAt DateTime
+  token     String   @unique @db.VarChar(255)
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+  ipAddress String?  @db.VarChar(255)
+  userAgent String?  @db.Text
+  userId    String   @db.VarChar(36)
+  user      User     @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@map("session")
+}
+
+model Account {
+  id                    String    @id @db.VarChar(36)
+  accountId             String    @db.Text
+  providerId            String    @db.Text
+  userId                String    @db.VarChar(36)
+  user                  User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+  accessToken           String?   @db.Text
+  refreshToken          String?   @db.Text
+  idToken               String?   @db.Text
+  accessTokenExpiresAt  DateTime?
+  refreshTokenExpiresAt DateTime?
+  scope                 String?   @db.Text
+  password              String?   @db.Text
+  createdAt             DateTime  @default(now())
+  updatedAt             DateTime  @updatedAt
+
+  @@map("account")
+}
+
+model Verification {
+  id         String   @id @db.VarChar(36)
+  identifier String   @db.Text
+  value      String   @db.Text
+  expiresAt  DateTime
+  createdAt  DateTime @default(now())
+  updatedAt  DateTime @updatedAt
+
+  @@map("verification")
+}

package/dist/templates/express/prisma-mysql/src/auth.ts.hbs

@@ -0,0 +1,114 @@
+import { betterAuth } from "better-auth";
+import { prismaAdapter } from "better-auth/adapters/prisma";
+import { prisma } from "./db";
+{{#if twoFactor}}
+import { twoFactor } from "better-auth/plugins";
+{{/if}}
+{{#if rbac}}
+import { admin } from "better-auth/plugins";
+{{/if}}
+{{#if (eq emailProvider "resend")}}
+import { Resend } from "resend";
+
+const resend = new Resend(process.env.RESEND_API_KEY);
+{{/if}}
+{{#if (eq emailProvider "sendgrid")}}
+import sgMail from "@sendgrid/mail";
+
+sgMail.setApiKey(process.env.SENDGRID_API_KEY!);
+{{/if}}
+{{#if (eq emailProvider "smtp")}}
+import nodemailer from "nodemailer";
+
+const transporter = nodemailer.createTransport({
+  host: process.env.SMTP_HOST,
+  port: Number(process.env.SMTP_PORT) || 587,
+  auth: {
+    user: process.env.SMTP_USER,
+    pass: process.env.SMTP_PASS,
+  },
+});
+{{/if}}
+
+export const auth = betterAuth({
+  database: prismaAdapter(prisma, {
+    provider: "mysql",
+  }),
+  emailAndPassword: {
+    enabled: true,
+{{#if emailProvider}}
+    requireEmailVerification: true,
+    sendResetPassword: async ({ user, url }) => {
+      await sendEmail(user.email, "Reset your password", `<a href="${url}">Reset password</a>`);
+    },
+{{/if}}
+  },
+  session: {
+    expiresIn: {{sessionExpiresIn}},
+    updateAge: {{sessionUpdateAge}},
+    cookieCache: {
+      enabled: {{sessionCookieCacheEnabled}},
+      maxAge: {{sessionCookieCacheMaxAge}},
+    },
+  },
+{{#if emailProvider}}
+  emailVerification: {
+    sendOnSignUp: true,
+    sendVerificationEmail: async ({ user, url }) => {
+      await sendEmail(user.email, "Verify your email", `<a href="${url}">Verify email</a>`);
+    },
+  },
+{{/if}}
+  {{#if providers.length}}
+  socialProviders: {
+    {{#each providers}}
+    {{this}}: {
+      clientId: process.env.{{uppercase this}}_CLIENT_ID!,
+      clientSecret: process.env.{{uppercase this}}_CLIENT_SECRET!,
+    },
+    {{/each}}
+  },
+  {{/if}}
+  {{#if (or twoFactor rbac)}}
+  plugins: [
+    {{#if twoFactor}}
+    twoFactor(),
+    {{/if}}
+    {{#if rbac}}
+    admin({
+      defaultRole: "user",
+    }),
+    {{/if}}
+  ],
+  {{/if}}
+  trustedOrigins: [process.env.CORS_ORIGIN || "http://localhost:3001"],
+});
+{{#if emailProvider}}
+
+async function sendEmail(to: string, subject: string, html: string) {
+{{#if (eq emailProvider "resend")}}
+  await resend.emails.send({
+    from: process.env.EMAIL_FROM || "noreply@example.com",
+    to,
+    subject,
+    html,
+  });
+{{/if}}
+{{#if (eq emailProvider "sendgrid")}}
+  await sgMail.send({
+    from: process.env.EMAIL_FROM || "noreply@example.com",
+    to,
+    subject,
+    html,
+  });
+{{/if}}
+{{#if (eq emailProvider "smtp")}}
+  await transporter.sendMail({
+    from: process.env.EMAIL_FROM || "noreply@example.com",
+    to,
+    subject,
+    html,
+  });
+{{/if}}
+}
+{{/if}}

package/dist/templates/express/prisma-mysql/src/db.ts

@@ -0,0 +1,3 @@
+import { PrismaClient } from "@prisma/client";
+
+export const prisma = new PrismaClient();

package/dist/templates/express/prisma-mysql/src/index.ts

@@ -0,0 +1,28 @@
+import express from "express";
+import cors from "cors";
+import { auth } from "./auth";
+import { toNodeHandler } from "better-auth/node";
+
+const app = express();
+
+// Middleware
+app.use(
+  cors({
+    origin: process.env.CORS_ORIGIN || "http://localhost:3001",
+    credentials: true,
+  }),
+);
+
+// Mount Better Auth handler
+app.all("/api/auth/*", toNodeHandler(auth));
+
+// Health check
+app.get("/", (_req, res) => {
+  res.json({ status: "ok", message: "Auth backend is running" });
+});
+
+// Start server
+const port = Number(process.env.PORT) || 3000;
+app.listen(port, () => {
+  console.log(`Server running on http://localhost:${port}`);
+});

package/dist/templates/express/prisma-mysql/tsconfig.json

@@ -0,0 +1,19 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "lib": ["ES2022"],
+    "outDir": "dist",
+    "rootDir": ".",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true,
+    "declaration": true,
+    "sourceMap": true
+  },
+  "include": ["src/**/*.ts", "drizzle/**/*.ts"],
+  "exclude": ["node_modules", "dist"]
+}

package/dist/templates/express/prisma-postgres/.env.example.hbs

@@ -0,0 +1,39 @@
+# Database
+DATABASE_URL=postgresql://user:password@localhost:5432/{{projectName}}
+
+# Better Auth
+BETTER_AUTH_SECRET={{authSecret}}
+BETTER_AUTH_URL=http://localhost:3000
+
+# CORS
+CORS_ORIGIN=http://localhost:3001
+
+# Server
+PORT=3000
+{{#each providers}}
+
+# {{uppercase this}} OAuth
+{{uppercase this}}_CLIENT_ID=
+{{uppercase this}}_CLIENT_SECRET=
+{{/each}}
+{{#if (eq emailProvider "resend")}}
+
+# Email (Resend)
+RESEND_API_KEY=
+EMAIL_FROM=noreply@example.com
+{{/if}}
+{{#if (eq emailProvider "sendgrid")}}
+
+# Email (SendGrid)
+SENDGRID_API_KEY=
+EMAIL_FROM=noreply@example.com
+{{/if}}
+{{#if (eq emailProvider "smtp")}}
+
+# Email (SMTP)
+SMTP_HOST=smtp.example.com
+SMTP_PORT=587
+SMTP_USER=
+SMTP_PASS=
+EMAIL_FROM=noreply@example.com
+{{/if}}