Identity & Access

Identity & Access covers the Principal model, authentication backends, sessions, roles, scopes, and claims. Use this pillar when you are adding sign-in, selecting a backend, or reasoning about how identity flows through services and pages.

Overview & Concepts Auth model

Principal, session, backend, and authorization vocabulary.

Quickstart Workspace auth

Add authentication in the Workspace tutorial.

How-To Add authentication

Wire authentication into a generated workspace.

How-To better-auth plugins

Mount better-auth plugins through a typed passthrough; bearer and jwt run as-is, table-backed and interactive plugins carry caveats.

API Reference auth backends

Generated symbols for auth, better-auth, kv-oauth, and WorkOS packages.

API Reference plugin auth

Generated plugin-auth package symbols.