[{"data":1,"prerenderedAt":914},["ShallowReactive",2],{"navigation_docs":3,"-guides-external-auth-backend":152,"-guides-external-auth-backend-surround":909},[4,42,68,110,131],{"title":5,"path":6,"stem":7,"children":8,"icon":11},"Getting Started","/getting-started","1.getting-started/0.index",[9,12,17,22,27,32,37],{"title":10,"path":6,"stem":7,"icon":11},"Introduction","i-lucide-sparkles",{"title":13,"path":14,"stem":15,"icon":16},"Installation","/getting-started/installation","1.getting-started/1.installation","i-lucide-download",{"title":18,"path":19,"stem":20,"icon":21},"Configuration","/getting-started/configuration","1.getting-started/2.configuration","i-lucide-settings",{"title":23,"path":24,"stem":25,"icon":26},"Client Setup","/getting-started/client-setup","1.getting-started/3.client-setup","i-lucide-monitor",{"title":28,"path":29,"stem":30,"icon":31},"Type Augmentation","/getting-started/type-augmentation","1.getting-started/4.type-augmentation","i-lucide-type",{"title":33,"path":34,"stem":35,"icon":36},"Schema Generation (NuxtHub)","/getting-started/schema-generation","1.getting-started/5.schema-generation","i-lucide-database",{"title":38,"path":39,"stem":40,"icon":41},"How It Works","/getting-started/how-it-works","1.getting-started/6.how-it-works","i-lucide-workflow",{"title":43,"path":44,"stem":45,"children":46,"page":67},"Core Concepts","/core-concepts","2.core-concepts",[47,51,55,59,63],{"title":48,"path":49,"stem":50},"serverAuth()","/core-concepts/server-auth","2.core-concepts/1.server-auth",{"title":52,"path":53,"stem":54},"Sessions","/core-concepts/sessions","2.core-concepts/2.sessions",{"title":56,"path":57,"stem":58},"Route Protection","/core-concepts/route-protection","2.core-concepts/3.route-protection",{"title":60,"path":61,"stem":62},"Auto‑Imports and Aliases","/core-concepts/auto-imports-aliases","2.core-concepts/4.auto-imports-aliases",{"title":64,"path":65,"stem":66},"Security & Caveats","/core-concepts/security-caveats","2.core-concepts/5.security-caveats",false,{"title":69,"path":70,"stem":71,"children":72,"page":67},"Guides","/guides","3.guides",[73,77,81,85,89,94,98,102,106],{"title":74,"path":75,"stem":76},"Role‑Based Access","/guides/role-based-access","3.guides/1.role-based-access",{"title":78,"path":79,"stem":80},"OAuth Providers","/guides/oauth-providers","3.guides/2.oauth-providers",{"title":82,"path":83,"stem":84},"Custom Database","/guides/custom-database","3.guides/3.custom-database",{"title":86,"path":87,"stem":88},"Database-less Mode","/guides/database-less-mode","3.guides/4.database-less-mode",{"title":90,"path":91,"stem":92,"icon":93},"External Auth Backend","/guides/external-auth-backend","3.guides/5.external-auth-backend","i-lucide-server",{"title":95,"path":96,"stem":97},"Migrating from nuxt-auth-utils","/guides/migrate-from-nuxt-auth-utils","3.guides/6.migrate-from-nuxt-auth-utils",{"title":99,"path":100,"stem":101},"Two-Factor Authentication (TOTP + Backup Codes)","/guides/two-factor-auth","3.guides/7.two-factor-auth",{"title":103,"path":104,"stem":105},"Testing","/guides/testing","3.guides/8.testing",{"title":107,"path":108,"stem":109},"Production Deployment","/guides/production-deployment","3.guides/9.production-deployment",{"title":111,"path":112,"stem":113,"children":114,"page":67},"Integrations","/integrations","4.integrations",[115,119,123,127],{"title":116,"path":117,"stem":118},"NuxtHub","/integrations/nuxthub","4.integrations/1.nuxthub",{"title":120,"path":121,"stem":122},"DevTools","/integrations/devtools","4.integrations/2.devtools",{"title":124,"path":125,"stem":126},"Convex","/integrations/convex","4.integrations/3.convex",{"title":128,"path":129,"stem":130},"i18n","/integrations/i18n","4.integrations/4.i18n",{"title":132,"path":133,"stem":134,"children":135,"page":67},"API Reference","/api","5.api",[136,140,144,148],{"title":137,"path":138,"stem":139},"Composables","/api/composables","5.api/1.composables",{"title":141,"path":142,"stem":143},"Server Utilities","/api/server-utils","5.api/2.server-utils",{"title":145,"path":146,"stem":147},"Components","/api/components","5.api/3.components",{"title":149,"path":150,"stem":151},"Types","/api/types","5.api/4.types",{"id":153,"title":90,"body":154,"description":902,"extension":903,"links":904,"meta":905,"navigation":906,"path":91,"seo":907,"stem":92,"__hash__":908},"docs/3.guides/5.external-auth-backend.md",{"type":155,"value":156,"toc":889},"minimark",[157,161,169,174,197,200,205,295,299,313,325,328,332,335,439,443,576,580,609,625,642,646,653,667,852,855,859,867,871,885],[158,159,160],"p",{},"Use this guide when the Nuxt app is only the frontend and Better Auth runs somewhere else.",[158,162,163,164,168],{},"When your Better Auth server runs on a separate backend (e.g., standalone h3/Nitro project, Express, or any other server), use ",[165,166,167],"code",{},"clientOnly"," mode.",[170,171,173],"h2",{"id":172},"when-to-use","When to Use",[175,176,177,185,191],"ul",{},[178,179,180,184],"li",{},[181,182,183],"strong",{},"Microservices architecture",": Auth service is a separate deployment",[178,186,187,190],{},[181,188,189],{},"Shared auth",": Multiple frontends share one auth backend",[178,192,193,196],{},[181,194,195],{},"Existing backend",": You already have a Better Auth server running elsewhere",[170,198,18],{"id":199},"configuration",[201,202,204],"h3",{"id":203},"_1-enable-client-only-mode","1. Enable Client-Only Mode",[206,207,213],"pre",{"className":208,"code":209,"filename":210,"language":211,"meta":212,"style":212},"language-ts shiki shiki-themes one-light synthwave-84 synthwave-84","export default defineNuxtConfig({\n  modules: ['@onmax/nuxt-better-auth'],\n  auth: {\n    clientOnly: true,\n  },\n})\n","nuxt.config.ts","ts","",[165,214,215,236,257,268,283,289],{"__ignoreMap":212},[216,217,220,224,228,232],"span",{"class":218,"line":219},"line",1,[216,221,223],{"class":222},"sqe1H","export",[216,225,227],{"class":226},"sKg8T"," default",[216,229,231],{"class":230},"sfT9l"," defineNuxtConfig",[216,233,235],{"class":234},"s17Py","({\n",[216,237,239,243,247,250,254],{"class":218,"line":238},2,[216,240,242],{"class":241},"sYvLG","  modules",[216,244,246],{"class":245},"sVnqq",":",[216,248,249],{"class":234}," [",[216,251,253],{"class":252},"sPAZv","'@onmax/nuxt-better-auth'",[216,255,256],{"class":234},"],\n",[216,258,260,263,265],{"class":218,"line":259},3,[216,261,262],{"class":241},"  auth",[216,264,246],{"class":245},[216,266,267],{"class":234}," {\n",[216,269,271,274,276,280],{"class":218,"line":270},4,[216,272,273],{"class":241},"    clientOnly",[216,275,246],{"class":245},[216,277,279],{"class":278},"s3ZNE"," true",[216,281,282],{"class":234},",\n",[216,284,286],{"class":218,"line":285},5,[216,287,288],{"class":234},"  },\n",[216,290,292],{"class":218,"line":291},6,[216,293,294],{"class":234},"})\n",[201,296,298],{"id":297},"_2-point-the-client-to-the-external-server","2. Point the Client to the External Server",[158,300,301,304,305,308,309,312],{},[165,302,303],{},"defineClientAuth"," is wrapped by the module at runtime, so ",[165,306,307],{},"baseURL"," here is ",[181,310,311],{},"overridden",".\nTo target an external auth server, set the site URL:",[206,314,319],{"className":315,"code":316,"filename":317,"language":318,"meta":212,"style":212},"language-ini shiki shiki-themes one-light synthwave-84 synthwave-84","NUXT_PUBLIC_SITE_URL=\"https://auth.example.com\"\n",".env","ini",[165,320,321],{"__ignoreMap":212},[216,322,323],{"class":218,"line":219},[216,324,316],{},[158,326,327],{},"This value becomes the Better Auth client base URL in client-only mode.",[201,329,331],{"id":330},"_3-configure-route-redirect-targets-optional","3. Configure Route Redirect Targets (Optional)",[158,333,334],{},"Control redirect paths directly in route auth rules:",[206,336,338],{"className":208,"code":337,"filename":210,"language":211,"meta":212,"style":212},"export default defineNuxtConfig({\n  routeRules: {\n    '/app/**': { auth: { only: 'user', redirectTo: '/login' } },\n    '/login': { auth: { only: 'guest', redirectTo: '/app' } },\n  },\n})\n",[165,339,340,350,359,398,431,435],{"__ignoreMap":212},[216,341,342,344,346,348],{"class":218,"line":219},[216,343,223],{"class":222},[216,345,227],{"class":226},[216,347,231],{"class":230},[216,349,235],{"class":234},[216,351,352,355,357],{"class":218,"line":238},[216,353,354],{"class":241},"  routeRules",[216,356,246],{"class":245},[216,358,267],{"class":234},[216,360,361,364,366,369,372,374,376,379,381,384,387,390,392,395],{"class":218,"line":259},[216,362,363],{"class":252},"    '/app/**'",[216,365,246],{"class":245},[216,367,368],{"class":234}," { ",[216,370,371],{"class":241},"auth",[216,373,246],{"class":245},[216,375,368],{"class":234},[216,377,378],{"class":241},"only",[216,380,246],{"class":245},[216,382,383],{"class":252}," 'user'",[216,385,386],{"class":234},", ",[216,388,389],{"class":241},"redirectTo",[216,391,246],{"class":245},[216,393,394],{"class":252}," '/login'",[216,396,397],{"class":234}," } },\n",[216,399,400,403,405,407,409,411,413,415,417,420,422,424,426,429],{"class":218,"line":270},[216,401,402],{"class":252},"    '/login'",[216,404,246],{"class":245},[216,406,368],{"class":234},[216,408,371],{"class":241},[216,410,246],{"class":245},[216,412,368],{"class":234},[216,414,378],{"class":241},[216,416,246],{"class":245},[216,418,419],{"class":252}," 'guest'",[216,421,386],{"class":234},[216,423,389],{"class":241},[216,425,246],{"class":245},[216,427,428],{"class":252}," '/app'",[216,430,397],{"class":234},[216,432,433],{"class":218,"line":285},[216,434,288],{"class":234},[216,436,437],{"class":218,"line":291},[216,438,294],{"class":234},[170,440,442],{"id":441},"what-changes-in-client-only-mode","What Changes in Client-Only Mode",[444,445,446,462],"table",{},[447,448,449],"thead",{},[450,451,452,456,459],"tr",{},[453,454,455],"th",{},"Feature",[453,457,458],{},"Full Mode",[453,460,461],{},"Client-Only",[463,464,465,479,493,504,514,523,532,543,555,565],"tbody",{},[450,466,467,473,476],{},[468,469,470],"td",{},[165,471,472],{},"server/auth.config.ts",[468,474,475],{},"Required",[468,477,478],{},"Not needed",[450,480,481,487,490],{},[468,482,483,486],{},[165,484,485],{},"/api/auth/**"," handlers",[468,488,489],{},"Auto-registered",[468,491,492],{},"Skipped",[450,494,495,500,502],{},[468,496,497],{},[165,498,499],{},"NUXT_BETTER_AUTH_SECRET",[468,501,475],{},[468,503,478],{},[450,505,506,509,512],{},[468,507,508],{},"Server middleware",[468,510,511],{},"Enabled",[468,513,492],{},[450,515,516,519,521],{},[468,517,518],{},"Schema generation",[468,520,511],{},[468,522,492],{},[450,524,525,528,530],{},[468,526,527],{},"Devtools",[468,529,511],{},[468,531,492],{},[450,533,534,537,540],{},[468,535,536],{},"SSR session hydration",[468,538,539],{},"Server-side",[468,541,542],{},"Client-side only",[450,544,545,550,553],{},[468,546,547],{},[165,548,549],{},"useUserSession()",[468,551,552],{},"Works",[468,554,552],{},[450,556,557,560,562],{},[468,558,559],{},"Route protection",[468,561,552],{},[468,563,564],{},"Works (client-side)",[450,566,567,572,574],{},[468,568,569],{},[165,570,571],{},"\u003CBetterAuthState>",[468,573,552],{},[468,575,552],{},[170,577,579],{"id":578},"important-notes","Important Notes",[581,582,583,586],"warning",{},[158,584,585],{},"In client-only mode, all auth requests go directly to your external server. Ensure:",[175,587,588,595,602],{},[178,589,590,591,594],{},"CORS is configured on your auth server to allow requests from your frontend (with ",[165,592,593],{},"credentials: true",")",[178,596,597,598,601],{},"Cookies use ",[165,599,600],{},"SameSite=None; Secure"," for cross-origin requests (HTTPS required)",[178,603,604,605,608],{},"Your auth server's ",[165,606,607],{},"trustedOrigins"," includes your frontend URL",[610,611,612,613,616,617,620,621,624],"note",{},"In client-only mode, ",[165,614,615],{},"NUXT_PUBLIC_SITE_URL"," is used as the auth client base URL.\nUse ",[165,618,619],{},"routeRules.auth.redirectTo"," (or page meta ",[165,622,623],{},"auth.redirectTo",") to control frontend navigation paths.",[610,626,627,628,386,630,633,634,637,638,641],{},"Server utilities like ",[165,629,48],{},[165,631,632],{},"getUserSession()"," and ",[165,635,636],{},"requireUserSession()"," are ",[181,639,640],{},"not available"," in client-only mode since there's no local auth server.",[170,643,645],{"id":644},"ssr-considerations","SSR Considerations",[158,647,648,649,652],{},"In client-only mode, session data is fetched ",[181,650,651],{},"client-side only",". This means:",[175,654,655,658,661],{},[178,656,657],{},"Server-rendered pages won't have access to session data during SSR",[178,659,660],{},"Pages will initially render as \"unauthenticated\" and hydrate with session data on the client",[178,662,663,664,666],{},"Use ",[165,665,571],{}," component to handle loading states gracefully",[206,668,672],{"className":669,"code":670,"language":671,"meta":212,"style":212},"language-vue shiki shiki-themes one-light synthwave-84 synthwave-84","\u003Ctemplate>\n  \u003CBetterAuthState>\n    \u003Ctemplate #default=\"{ user }\">\n      \u003Cdiv v-if=\"user\">Welcome, {{ user.name }}\u003C/div>\n      \u003Cdiv v-else>Please log in\u003C/div>\n    \u003C/template>\n    \u003Ctemplate #placeholder>\n      \u003Cdiv>Loading...\u003C/div>\n    \u003C/template>\n  \u003C/BetterAuthState>\n\u003C/template>\n","vue",[165,673,674,687,697,734,763,783,792,806,824,833,843],{"__ignoreMap":212},[216,675,676,680,684],{"class":218,"line":219},[216,677,679],{"class":678},"sL9le","\u003C",[216,681,683],{"class":682},"stweg","template",[216,685,686],{"class":678},">\n",[216,688,689,692,695],{"class":218,"line":238},[216,690,691],{"class":678},"  \u003C",[216,693,694],{"class":682},"BetterAuthState",[216,696,686],{"class":678},[216,698,699,702,704,708,712,716,720,723,727,730,732],{"class":218,"line":259},[216,700,701],{"class":678},"    \u003C",[216,703,683],{"class":682},[216,705,707],{"class":706},"sEEOt"," #",[216,709,711],{"class":710},"s0frj","default",[216,713,715],{"class":714},"sNM9w","=",[216,717,719],{"class":718},"ss3L-","\"",[216,721,722],{"class":706},"{ ",[216,724,726],{"class":725},"svFNh","user",[216,728,729],{"class":706}," }",[216,731,719],{"class":718},[216,733,686],{"class":678},[216,735,736,739,742,745,747,750,753,756,759,761],{"class":218,"line":270},[216,737,738],{"class":678},"      \u003C",[216,740,741],{"class":682},"div",[216,743,744],{"class":710}," v-if",[216,746,715],{"class":714},[216,748,749],{"class":252},"\"user\"",[216,751,752],{"class":678},">",[216,754,755],{"class":706},"Welcome, {{ user.name }}",[216,757,758],{"class":678},"\u003C/",[216,760,741],{"class":682},[216,762,686],{"class":678},[216,764,765,767,769,772,774,777,779,781],{"class":218,"line":285},[216,766,738],{"class":678},[216,768,741],{"class":682},[216,770,771],{"class":710}," v-else",[216,773,752],{"class":678},[216,775,776],{"class":706},"Please log in",[216,778,758],{"class":678},[216,780,741],{"class":682},[216,782,686],{"class":678},[216,784,785,788,790],{"class":218,"line":291},[216,786,787],{"class":678},"    \u003C/",[216,789,683],{"class":682},[216,791,686],{"class":678},[216,793,795,797,799,801,804],{"class":218,"line":794},7,[216,796,701],{"class":678},[216,798,683],{"class":682},[216,800,707],{"class":706},[216,802,803],{"class":710},"placeholder",[216,805,686],{"class":678},[216,807,809,811,813,815,818,820,822],{"class":218,"line":808},8,[216,810,738],{"class":678},[216,812,741],{"class":682},[216,814,752],{"class":678},[216,816,817],{"class":706},"Loading...",[216,819,758],{"class":678},[216,821,741],{"class":682},[216,823,686],{"class":678},[216,825,827,829,831],{"class":218,"line":826},9,[216,828,787],{"class":678},[216,830,683],{"class":682},[216,832,686],{"class":678},[216,834,836,839,841],{"class":218,"line":835},10,[216,837,838],{"class":678},"  \u003C/",[216,840,694],{"class":682},[216,842,686],{"class":678},[216,844,846,848,850],{"class":218,"line":845},11,[216,847,758],{"class":678},[216,849,683],{"class":682},[216,851,686],{"class":678},[158,853,854],{},"If you need SSR session hydration, consider using full mode with a local auth server instead.",[170,856,858],{"id":857},"example-architecture","Example Architecture",[206,860,865],{"className":861,"code":863,"language":864},[862],"language-text","┌─────────────────┐     ┌─────────────────┐\n│   Nuxt App      │────▶│  Auth Server    │\n│  (clientOnly)   │     │ (Better Auth)   │\n│                 │◀────│                 │\n└─────────────────┘     └────────┬────────┘\n                                 │\n                        ┌────────▼────────┐\n                        │    Database     │\n                        └─────────────────┘\n","text",[165,866,863],{"__ignoreMap":212},[170,868,870],{"id":869},"related","Related",[175,872,873,879],{},[178,874,875,878],{},[876,877,18],"a",{"href":19}," - Module options reference",[178,880,881,884],{},[876,882,883],{"href":87},"Database-Less Mode"," - JWE sessions without database",[886,887,888],"style",{},"html pre.shiki code .sqe1H, html code.shiki .sqe1H{--shiki-light:#A626A4;--shiki-default:#FEDE5D;--shiki-dark:#FEDE5D}html pre.shiki code .sKg8T, html code.shiki .sKg8T{--shiki-light:#E45649;--shiki-default:#FEDE5D;--shiki-dark:#FEDE5D}html pre.shiki code .sfT9l, html code.shiki .sfT9l{--shiki-light:#4078F2;--shiki-default:#36F9F6;--shiki-dark:#36F9F6}html pre.shiki code .s17Py, html code.shiki .s17Py{--shiki-light:#383A42;--shiki-default:#BBBBBB;--shiki-dark:#BBBBBB}html pre.shiki code .sYvLG, html code.shiki .sYvLG{--shiki-light:#E45649;--shiki-default:#FF7EDB;--shiki-dark:#FF7EDB}html pre.shiki code .sVnqq, html code.shiki .sVnqq{--shiki-light:#0184BC;--shiki-default:#B6B1B1;--shiki-dark:#B6B1B1}html pre.shiki code .sPAZv, html code.shiki .sPAZv{--shiki-light:#50A14F;--shiki-default:#FF8B39;--shiki-dark:#FF8B39}html pre.shiki code .s3ZNE, html code.shiki .s3ZNE{--shiki-light:#986801;--shiki-default:#F97E72;--shiki-dark:#F97E72}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sL9le, html code.shiki .sL9le{--shiki-light:#383A42;--shiki-default:#36F9F6;--shiki-dark:#36F9F6}html pre.shiki code .stweg, html code.shiki .stweg{--shiki-light:#E45649;--shiki-default:#72F1B8;--shiki-dark:#72F1B8}html pre.shiki code .sEEOt, html code.shiki .sEEOt{--shiki-light:#383A42;--shiki-default:#FFFFFFEE;--shiki-dark:#FFFFFFEE}html pre.shiki code .s0frj, html code.shiki .s0frj{--shiki-light:#986801;--shiki-light-font-style:inherit;--shiki-default:#FEDE5D;--shiki-default-font-style:italic;--shiki-dark:#FEDE5D;--shiki-dark-font-style:italic}html pre.shiki code .sNM9w, html code.shiki .sNM9w{--shiki-light:#383A42;--shiki-default:#B6B1B1;--shiki-dark:#B6B1B1}html pre.shiki code .ss3L-, html code.shiki .ss3L-{--shiki-light:#383A42;--shiki-default:#FF8B39;--shiki-dark:#FF8B39}html pre.shiki code .svFNh, html code.shiki .svFNh{--shiki-light:#383A42;--shiki-default:#FF7EDB;--shiki-dark:#FF7EDB}",{"title":212,"searchDepth":238,"depth":238,"links":890},[891,892,897,898,899,900,901],{"id":172,"depth":238,"text":173},{"id":199,"depth":238,"text":18,"children":893},[894,895,896],{"id":203,"depth":259,"text":204},{"id":297,"depth":259,"text":298},{"id":330,"depth":259,"text":331},{"id":441,"depth":238,"text":442},{"id":578,"depth":238,"text":579},{"id":644,"depth":238,"text":645},{"id":857,"depth":238,"text":858},{"id":869,"depth":238,"text":870},"Use nuxt-better-auth with a separate Better Auth server.","md",null,{},{"icon":93},{"title":90,"description":902},"-7PFhfY4CXJnjkrjDHU_f39oaeth30dlV7HDrM_1zAA",[910,912],{"title":86,"path":87,"stem":88,"description":911,"children":-1},"Run Better Auth without a database for edge and serverless deployments.",{"title":95,"path":96,"stem":97,"description":913,"children":-1},"Step-by-step guide to migrate from nuxt-auth-utils to Nuxt Better Auth.",1777451673889]