# auth

Identity and request scope: responsibilities, supported exports and extension points.

## Purpose [#purpose]

The Better Auth factory configures sessions, Organizations, admin, passkeys, two-factor and MCP OAuth. Request scope shares the authorized database/auth instance through one HTTP invocation. Outcome modules normalize sign-in and challenge results.

## Public exports [#public-exports]

| Subpath                | Target                        |
| ---------------------- | ----------------------------- |
| `.`                    | `./src/index.ts`              |
| `./admin-audit`        | `./src/admin-audit.ts`        |
| `./errors`             | `./src/errors.ts`             |
| `./request-scope`      | `./src/request-scope.ts`      |
| `./server-session`     | `./src/server-session.ts`     |
| `./session-outcome`    | `./src/session-outcome.ts`    |
| `./two-factor-outcome` | `./src/two-factor-outcome.ts` |

These paths come from `packages/auth/package.json`. A `.` entry is the package root. Conditional targets distinguish platform or type resolution; consumers should import the subpath, not its source file.

## How to extend [#how-to-extend]

Change the factory for server behavior and the outcome modules for shared interpretations. Test revoked sessions, bans, impersonation and Organization membership. Do not export client constants through a server entry.

Read the [identity and request scope guide](/docs/features/auth) for the full flow.

## Key files [#key-files]

- [`packages/auth/package.json`](https://github.com/CarlosZiegler/template-cloudflare/blob/main/packages/auth/package.json)