Recipes

Each recipe is a self-contained, runnable example. Pick one, copy the code, adapt the names — done.

Multi-platform / multi-tenant production patterns

• Multi-platform login with guards — admin / portal / mobile served from one backend, with origin-aware login gating.
• Seeding roles & permissions — idempotent bootstrap of isSystem roles per guard.

Extending the auth lifecycle

• React to a new signup with UserRegisteredEvent — create your AppUser, link a referral, queue a welcome email.
• React to login with UserLoggedInEvent — last-login tracking, role sync, audit writes.
• Custom OAuth provider — extend BaseAuthProvider.
• Extra signup fields with collectProfileFields.
• Pre-built React login / signup / MFA / forgot-password forms.

Schema & migration

• Migrate an existing user table.

Frontend integration

• Next.js dashboard behind <RequireRole>.
• Tenant-picker dropdown.
• Remember-this-device with trusted-device tokens.

Tokens & sessions

• Custom JWT claims.

Notifications

• Single notification service for email + SMS.

Identity & accounts

• Link multiple OAuth providers to one account.
• External role resolver (Okta / Auth0 / custom IDP).

Configuration

• Per-request config (mobile vs web).
• Custom error transformation per flow.
• Custom trusted-device header name.

Account management

• Account suspension and reactivation.
• IP allowlist via guards.beforeAuth.
• MFA recovery codes — generate, show, and store.
• normalizedEmail / normalizedPhone for consistent identity matching.