feat(auth): setup authentication with better-auth

.env.example

@@ -24,3 +24,7 @@ POSTHOG_CLI_ENV_ID=<***>
 # Personal API key with error tracking write and organization read scopes
 # See https://app.posthog.com/settings/user-api-keys#variables
 POSTHOG_CLI_TOKEN=<***>
+
+# Auth - Better Auth
+# Generate the secret using `openssl rand -base64 32`.
+AUTH_SECRET=<***>

alchemy.run.ts

@@ -17,9 +17,11 @@ import { CloudflareStateStore, FileSystemStateStore } from 'alchemy/state';
 
 import packageJson from './package.json' with { type: 'json' };
 import { alchemyEnv } from './src/lib/env/alchemy.ts';
+import { serverEnv } from './src/lib/env/server.ts';
 
 const ALCHEMY_SECRET = alchemyEnv.ALCHEMY_SECRET;
 const ALCHEMY_STATE_TOKEN = alchemy.secret(alchemyEnv.ALCHEMY_STATE_TOKEN);
+const AUTH_SECRET = alchemy.secret(serverEnv.AUTH_SECRET);
 
 function isProductionStage(scope: Scope) {
   return scope.stage === 'production';
@@ -57,7 +59,10 @@ export const worker = await TanStackStart('website', {
   domains: isProductionStage(app) ? [alchemyEnv.HOSTNAME] : undefined,
   placement: isProductionStage(app) ? { mode: 'smart' } : undefined,
   bindings: {
+    // Services
     DATABASE: database,
+    // Environment variables
+    AUTH_SECRET: AUTH_SECRET,
   },
 });
 

messages/en.json

@@ -5,5 +5,97 @@
 
   "common_error_something_went_wrong": "Something went wrong",
   "common_error_form_validation_title": "There is something wrong with the form",
-  "common_error_form_validation_description": "Please review the form and correct them to continue."
+  "common_error_form_validation_description": "Please review the form and correct them to continue.",
+
+  "common_greeting_name": "Hi, {name}!",
+  "common_continue_as_name": "Continue as {name}",
+
+  "auth_get_started_title": "Let's Get You Started",
+  "auth_get_started_description": "Choose how you'd like to continue",
+  "auth_get_started_action": "Get Started",
+  "auth_get_started_signup_title": "Create Your Account",
+  "auth_get_started_signup_description": "New here? Sign up to create your account and start your journey with us.",
+  "auth_get_started_signin_title": "Existing Account",
+  "auth_get_started_signin_description": "Already have an account? Sign in to pick up right where you left off.",
+
+  "auth_continue_with_social_provider": "Continue with {provider}",
+  "auth_or_separator": "Or",
+
+  "auth_field_full_name_label": "Full name",
+  "auth_field_full_name_placeholder": "Devsantara Team",
+  "auth_field_email_label": "Email",
+  "auth_field_email_placeholder": "team@devsantara.com",
+  "auth_field_password_label": "Password",
+  "auth_field_confirm_password_label": "Confirm Password",
+  "auth_field_error_name_required": "Name is required",
+  "auth_field_error_email_invalid": "Please enter a valid email address",
+  "auth_field_error_password_min_length": "Password must be at least {min} characters",
+  "auth_field_error_confirm_password_not_match": "Password and confirmation password do not match",
+
+  "auth_sign_up_title": "Create your account",
+  "auth_sign_up_description": "Fill out the form below to create your account",
+  "auth_sign_up_action": "Create Account",
+  "auth_sign_up_already_have_account": "Already have an account?",
+  "auth_sign_up_sign_in_link": "Sign in",
+  "auth_sign_up_error_fail": "Sign up failed",
+  "auth_sign_up_success_title": "Account created successfully",
+  "auth_sign_up_success_description": "Please sign in to continue.",
+
+  "auth_sign_in_title": "Sign in to your account",
+  "auth_sign_in_description": "Please enter your details to continue.",
+  "auth_sign_in_action": "Sign in",
+  "auth_sign_in_fail": "Sign in failed",
+  "auth_sign_in_success_title": "Welcome back!",
+  "auth_sign_in_success_description": "We're happy to see you again.",
+  "auth_sign_in_no_account": "Don't have an account?",
+  "auth_sign_in_sign_up_link": "Sign up",
+
+  "auth_sign_out_action": "Sign out",
+  "auth_sign_out_error_fail": "Sign out failed",
+  "auth_sign_out_success_title": "You've been signed out",
+  "auth_sign_out_success_description": "We hope to see you again soon.",
+
+  "auth_error_base_user_not_found": "User not found",
+  "auth_error_base_failed_to_create_user": "Failed to create user",
+  "auth_error_base_failed_to_create_session": "Failed to create session",
+  "auth_error_base_failed_to_update_user": "Failed to update user",
+  "auth_error_base_failed_to_get_session": "Failed to get session",
+  "auth_error_base_invalid_password": "Invalid password",
+  "auth_error_base_invalid_email": "Invalid email",
+  "auth_error_base_invalid_email_or_password": "Invalid email or password",
+  "auth_error_base_social_account_already_linked": "Social account already linked",
+  "auth_error_base_provider_not_found": "Provider not found",
+  "auth_error_base_invalid_token": "Invalid token",
+  "auth_error_base_id_token_not_supported": "id_token not supported",
+  "auth_error_base_failed_to_get_user_info": "Failed to get user info",
+  "auth_error_base_user_email_not_found": "User email not found",
+  "auth_error_base_email_not_verified": "Email not verified",
+  "auth_error_base_password_too_short": "Password too short",
+  "auth_error_base_password_too_long": "Password too long",
+  "auth_error_base_user_already_exists": "User already exists.",
+  "auth_error_base_user_already_exists_use_another_email": "User already exists. Use another email.",
+  "auth_error_base_email_can_not_be_updated": "Email can not be updated",
+  "auth_error_base_credential_account_not_found": "Credential account not found",
+  "auth_error_base_session_expired": "Session expired. Re-authenticate to perform this action.",
+  "auth_error_base_failed_to_unlink_last_account": "You can't unlink your last account",
+  "auth_error_base_account_not_found": "Account not found",
+  "auth_error_base_user_already_has_password": "User already has a password. Provide that to delete the account.",
+  "auth_error_base_cross_site_navigation_login_blocked": "Cross-site navigation login blocked. This request appears to be a CSRF attack.",
+  "auth_error_base_verification_email_not_enabled": "Verification email isn't enabled",
+  "auth_error_base_email_already_verified": "Email is already verified",
+  "auth_error_base_email_mismatch": "Email mismatch",
+  "auth_error_base_session_not_fresh": "Session is not fresh",
+  "auth_error_base_linked_account_already_exists": "Linked account already exists",
+  "auth_error_base_invalid_origin": "Invalid origin",
+  "auth_error_base_invalid_callback_url": "Invalid callbackURL",
+  "auth_error_base_invalid_redirect_url": "Invalid redirectURL",
+  "auth_error_base_invalid_error_callback_url": "Invalid errorCallbackURL",
+  "auth_error_base_invalid_new_user_callback_url": "Invalid newUserCallbackURL",
+  "auth_error_base_missing_or_null_origin": "Missing or null Origin",
+  "auth_error_base_callback_url_required": "callbackURL is required",
+  "auth_error_base_failed_to_create_verification": "Unable to create verification",
+  "auth_error_base_field_not_allowed": "Field not allowed to be set",
+  "auth_error_base_async_validation_not_supported": "Async validation is not supported",
+  "auth_error_base_validation_error": "Validation Error",
+  "auth_error_base_missing_field": "Field is required"
 }

messages/id.json

@@ -5,5 +5,97 @@
 
   "common_error_something_went_wrong": "Terjadi kesalahan",
   "common_error_form_validation_title": "Ada kesalahan pada formulir",
-  "common_error_form_validation_description": "Silakan periksa kembali formulir dan perbaiki untuk melanjutkan."
+  "common_error_form_validation_description": "Silakan periksa kembali formulir dan perbaiki untuk melanjutkan.",
+
+  "common_greeting_name": "Hai, {name}!",
+  "common_continue_as_name": "Lanjutkan sebagai {name}",
+
+  "auth_get_started_title": "Mari Memulai",
+  "auth_get_started_description": "Pilih cara untuk melanjutkan",
+  "auth_get_started_action": "Mulai",
+  "auth_get_started_signup_title": "Buat Akun Anda",
+  "auth_get_started_signup_description": "Baru di sini? Daftar untuk membuat akun dan mulai perjalanan Anda bersama kami.",
+  "auth_get_started_signin_title": "Akun yang Ada",
+  "auth_get_started_signin_description": "Sudah punya akun? Masuk untuk melanjutkan dari terakhir kali Anda berhenti.",
+
+  "auth_continue_with_social_provider": "Lanjutkan dengan {provider}",
+  "auth_or_separator": "Atau",
+
+  "auth_field_full_name_label": "Nama lengkap",
+  "auth_field_full_name_placeholder": "Tim Devsantara",
+  "auth_field_email_label": "Email",
+  "auth_field_email_placeholder": "team@devsantara.com",
+  "auth_field_password_label": "Kata sandi",
+  "auth_field_confirm_password_label": "Konfirmasi Kata Sandi",
+  "auth_field_error_name_required": "Nama wajib diisi",
+  "auth_field_error_email_invalid": "Silakan masukkan alamat email yang valid",
+  "auth_field_error_password_min_length": "Password harus memiliki minimal {min} karakter",
+  "auth_field_error_confirm_password_not_match": "Password dan konfirmasi password Anda tidak sama",
+
+  "auth_sign_up_title": "Buat akun Anda",
+  "auth_sign_up_description": "Isi formulir di bawah untuk membuat akun Anda",
+  "auth_sign_up_action": "Buat Akun",
+  "auth_sign_up_already_have_account": "Sudah punya akun?",
+  "auth_sign_up_sign_in_link": "Masuk",
+  "auth_sign_up_error_fail": "Pendaftaran gagal",
+  "auth_sign_up_success_title": "Akun berhasil dibuat",
+  "auth_sign_up_success_description": "Silakan masuk untuk melanjutkan.",
+
+  "auth_sign_in_title": "Masuk ke akun Anda",
+  "auth_sign_in_description": "Silakan masukkan detail Anda untuk melanjutkan.",
+  "auth_sign_in_action": "Masuk",
+  "auth_sign_in_fail": "Gagal masuk",
+  "auth_sign_in_success_title": "Selamat datang kembali!",
+  "auth_sign_in_success_description": "Senang melihat Anda kembali.",
+  "auth_sign_in_no_account": "Belum punya akun?",
+  "auth_sign_in_sign_up_link": "Daftar",
+
+  "auth_sign_out_action": "Keluar",
+  "auth_sign_out_error_fail": "Gagal keluar",
+  "auth_sign_out_success_title": "Berhasil keluar",
+  "auth_sign_out_success_description": "Sampai jumpa lagi.",
+
+  "auth_error_base_user_not_found": "Pengguna tidak ditemukan",
+  "auth_error_base_failed_to_create_user": "Gagal membuat pengguna",
+  "auth_error_base_failed_to_create_session": "Gagal membuat sesi",
+  "auth_error_base_failed_to_update_user": "Gagal memperbarui pengguna",
+  "auth_error_base_failed_to_get_session": "Gagal mengambil sesi",
+  "auth_error_base_invalid_password": "Password tidak valid",
+  "auth_error_base_invalid_email": "Email tidak valid",
+  "auth_error_base_invalid_email_or_password": "Email atau password tidak valid",
+  "auth_error_base_social_account_already_linked": "Akun sosial sudah tertaut",
+  "auth_error_base_provider_not_found": "Provider tidak ditemukan",
+  "auth_error_base_invalid_token": "Token tidak valid",
+  "auth_error_base_id_token_not_supported": "id_token tidak didukung",
+  "auth_error_base_failed_to_get_user_info": "Gagal mengambil info pengguna",
+  "auth_error_base_user_email_not_found": "Email pengguna tidak ditemukan",
+  "auth_error_base_email_not_verified": "Email belum terverifikasi",
+  "auth_error_base_password_too_short": "Password terlalu pendek",
+  "auth_error_base_password_too_long": "Password terlalu panjang",
+  "auth_error_base_user_already_exists": "Pengguna sudah ada.",
+  "auth_error_base_user_already_exists_use_another_email": "Pengguna sudah ada. Gunakan email lain.",
+  "auth_error_base_email_can_not_be_updated": "Email tidak dapat diperbarui",
+  "auth_error_base_credential_account_not_found": "Akun kredensial tidak ditemukan",
+  "auth_error_base_session_expired": "Sesi kedaluwarsa. Silakan autentikasi ulang untuk melakukan tindakan ini.",
+  "auth_error_base_failed_to_unlink_last_account": "Anda tidak dapat melepas tautan akun terakhir Anda",
+  "auth_error_base_account_not_found": "Akun tidak ditemukan",
+  "auth_error_base_user_already_has_password": "Pengguna sudah memiliki password. Gunakan itu untuk menghapus akun.",
+  "auth_error_base_cross_site_navigation_login_blocked": "Login lintas-situs diblokir. Permintaan ini terindikasi sebagai serangan CSRF.",
+  "auth_error_base_verification_email_not_enabled": "Email verifikasi belum diaktifkan",
+  "auth_error_base_email_already_verified": "Email sudah terverifikasi",
+  "auth_error_base_email_mismatch": "Email tidak cocok",
+  "auth_error_base_session_not_fresh": "Sesi tidak lagi valid untuk aksi ini",
+  "auth_error_base_linked_account_already_exists": "Akun tertaut sudah ada",
+  "auth_error_base_invalid_origin": "Origin tidak valid",
+  "auth_error_base_invalid_callback_url": "callbackURL tidak valid",
+  "auth_error_base_invalid_redirect_url": "redirectURL tidak valid",
+  "auth_error_base_invalid_error_callback_url": "errorCallbackURL tidak valid",
+  "auth_error_base_invalid_new_user_callback_url": "newUserCallbackURL tidak valid",
+  "auth_error_base_missing_or_null_origin": "Origin hilang atau null",
+  "auth_error_base_callback_url_required": "callbackURL wajib diisi",
+  "auth_error_base_failed_to_create_verification": "Tidak dapat membuat verifikasi",
+  "auth_error_base_field_not_allowed": "Field tidak diizinkan untuk diatur",
+  "auth_error_base_async_validation_not_supported": "Validasi async tidak didukung",
+  "auth_error_base_validation_error": "Kesalahan validasi",
+  "auth_error_base_missing_field": "Field wajib diisi"
 }

messages/zh-CN.json

@@ -5,5 +5,97 @@
 
   "common_error_something_went_wrong": "出现了一些问题",
   "common_error_form_validation_title": "表单存在问题",
-  "common_error_form_validation_description": "请检查表单并更正后继续。"
+  "common_error_form_validation_description": "请检查表单并更正后继续。",
+
+  "common_greeting_name": "嗨，{name}！",
+  "common_continue_as_name": "以 {name} 身份继续",
+
+  "auth_get_started_title": "让我们开始吧",
+  "auth_get_started_description": "选择如何继续",
+  "auth_get_started_action": "开始",
+  "auth_get_started_signup_title": "创建您的账户",
+  "auth_get_started_signup_description": "初来乍到？注册创建账户，开启您的旅程。",
+  "auth_get_started_signin_title": "现有账户",
+  "auth_get_started_signin_description": "已有账户？登录以继续您上次的进度。",
+
+  "auth_continue_with_social_provider": "⁠⁠继续使用 {provider} 继续",
+  "auth_or_separator": "或",
+
+  "auth_field_full_name_label": "全名",
+  "auth_field_full_name_placeholder": "Devsantara 团队",
+  "auth_field_email_label": "邮箱",
+  "auth_field_email_placeholder": "team@devsantara.com",
+  "auth_field_password_label": "密码",
+  "auth_field_confirm_password_label": "确认密码",
+  "auth_field_error_name_required": "姓名不能为空",
+  "auth_field_error_email_invalid": "请输入有效的邮箱地址",
+  "auth_field_error_password_min_length": "密码至少需要 {min} 个字符",
+  "auth_field_error_confirm_password_not_match": "密码与确认密码不一致",
+
+  "auth_sign_up_title": "创建你的账户",
+  "auth_sign_up_description": "请填写下方表单以创建你的账户",
+  "auth_sign_up_action": "创建账户",
+  "auth_sign_up_already_have_account": "已有账户？",
+  "auth_sign_up_sign_in_link": "登录",
+  "auth_sign_up_error_fail": "注册失败",
+  "auth_sign_up_success_title": "账户创建成功",
+  "auth_sign_up_success_description": "请登录以继续。",
+
+  "auth_sign_in_title": "登录到你的账户",
+  "auth_sign_in_description": "请输入你的信息以继续。",
+  "auth_sign_in_action": "登录",
+  "auth_sign_in_fail": "登录失败",
+  "auth_sign_in_success_title": "欢迎回来！",
+  "auth_sign_in_success_description": "很高兴再次见到你。",
+  "auth_sign_in_no_account": "还没有账户？",
+  "auth_sign_in_sign_up_link": "注册",
+
+  "auth_sign_out_action": "退出登录",
+  "auth_sign_out_error_fail": "退出登录失败",
+  "auth_sign_out_success_title": "成功退出登录",
+  "auth_sign_out_success_description": "期待下次再见。",
+
+  "auth_error_base_user_not_found": "未找到用户",
+  "auth_error_base_failed_to_create_user": "创建用户失败",
+  "auth_error_base_failed_to_create_session": "创建会话失败",
+  "auth_error_base_failed_to_update_user": "更新用户失败",
+  "auth_error_base_failed_to_get_session": "获取会话失败",
+  "auth_error_base_invalid_password": "密码无效",
+  "auth_error_base_invalid_email": "邮箱无效",
+  "auth_error_base_invalid_email_or_password": "邮箱或密码无效",
+  "auth_error_base_social_account_already_linked": "社交账号已绑定",
+  "auth_error_base_provider_not_found": "未找到提供方",
+  "auth_error_base_invalid_token": "令牌无效",
+  "auth_error_base_id_token_not_supported": "不支持 id_token",
+  "auth_error_base_failed_to_get_user_info": "获取用户信息失败",
+  "auth_error_base_user_email_not_found": "未找到用户邮箱",
+  "auth_error_base_email_not_verified": "邮箱未验证",
+  "auth_error_base_password_too_short": "密码太短",
+  "auth_error_base_password_too_long": "密码太长",
+  "auth_error_base_user_already_exists": "用户已存在。",
+  "auth_error_base_user_already_exists_use_another_email": "用户已存在。请使用其他邮箱。",
+  "auth_error_base_email_can_not_be_updated": "邮箱无法更新",
+  "auth_error_base_credential_account_not_found": "未找到凭证账号",
+  "auth_error_base_session_expired": "会话已过期。请重新认证以执行此操作。",
+  "auth_error_base_failed_to_unlink_last_account": "你不能解绑最后一个账号",
+  "auth_error_base_account_not_found": "未找到账号",
+  "auth_error_base_user_already_has_password": "用户已设置密码。请提供该密码以删除账号。",
+  "auth_error_base_cross_site_navigation_login_blocked": "已阻止跨站导航登录。此请求疑似 CSRF 攻击。",
+  "auth_error_base_verification_email_not_enabled": "未启用验证邮件",
+  "auth_error_base_email_already_verified": "邮箱已验证",
+  "auth_error_base_email_mismatch": "邮箱不匹配",
+  "auth_error_base_session_not_fresh": "会话不够新",
+  "auth_error_base_linked_account_already_exists": "已存在绑定的账号",
+  "auth_error_base_invalid_origin": "Origin 无效",
+  "auth_error_base_invalid_callback_url": "callbackURL 无效",
+  "auth_error_base_invalid_redirect_url": "redirectURL 无效",
+  "auth_error_base_invalid_error_callback_url": "errorCallbackURL 无效",
+  "auth_error_base_invalid_new_user_callback_url": "newUserCallbackURL 无效",
+  "auth_error_base_missing_or_null_origin": "Origin 缺失或为 null",
+  "auth_error_base_callback_url_required": "callbackURL 为必填项",
+  "auth_error_base_failed_to_create_verification": "无法创建验证",
+  "auth_error_base_field_not_allowed": "不允许设置该字段",
+  "auth_error_base_async_validation_not_supported": "不支持异步校验",
+  "auth_error_base_validation_error": "验证错误",
+  "auth_error_base_missing_field": "字段为必填项"
 }

package.json

@@ -51,6 +51,8 @@
     "@tanstack/react-form-start": "^1.27.7",
     "@tanstack/react-router": "^1.144.0",
     "@tanstack/react-start": "^1.145.5",
+    "@tanstack/zod-adapter": "^1.157.16",
+    "better-auth": "^1.4.15",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",