pocket-auth · astro
Better Auth owns identity. PocketBase serves data.
A starter where PocketBase auth is fully replaced by Better Auth 1.7 — with PocketBase-style nanoid IDs in Postgres, a locked superuser-only data API, and SSO across every app in the repo.
Better Auth identity
Email/password, magic links, TOTP 2FA, passkeys, organizations and API keys — one session, every app.
PocketBase, locked down
A superuser-only data service. No PB users, no public API rules — ownership is enforced app-side.
shadcn-compatible themes
One oklch token contract, a brand theme per stack, light + dark. Same components everywhere.