better-auth

Package : better-auth@1.4.16 (Jan 21, 2026) Breaking Changes : ESM-only (v1.4.0), Admin impersonation prevention default (v1.4.6), Multi-team table changes (v1.3), D1 requires Drizzle/Kysely (no direct adapter) better-auth DOES NOT have d1Adapter() . You MUST use: See Issue #1 below for details. Major Features: Admin Plugin Updates: Security Fixes: 📚 Docs : Major Features: 📚 Docs : Major Features: 📚 Docs : If you prefer Kysely over Drizzle: File : src/auth.ts Why CamelCasePlugin? If your Drizzle schema uses snake_case column names (e.g., email_verified ), but better-auth expects camelCase (e.g., emailVerified ), the CamelCasePlugin automatically converts between the two. ⚠️ Cloudflare Workers Note : D1 database bindings are only available inside the request handler (the fetch() function). You cannot initialize better-auth outside the request context. Use a factory function pattern: Community Validation : Multiple production implementations confirm this pattern (Medium, AnswerOverflow, official Hono examples). ⚠️ CRITICAL : TanStack Start requires the reactStartCookies plugin to handle cookie setting properly. Why it's needed : TanStack Start uses a special cookie handling system. Without this plugin, auth functions like signInEmail() and signUpEmail() won't set cookies properly, causing authentication to fail.