Better Auth RS

API Routes

Complete list of all authentication endpoints.

All routes are relative to the auth mount point (e.g., /auth when using nest("/auth", ...)).

Core Endpoints

MethodPathAuthDescription
GET/okNoHealth check ({ "status": true })
GET/reference/openapi.jsonNoOpenAPI specification
POST/update-userYesUpdate user profile
POST/delete-userYesDelete user account
POST/change-emailYesChange email address
GET/delete-user/callbackNoConfirm deletion via email token

Email & Password (EmailPasswordPlugin)

MethodPathAuthDescription
POST/sign-up/emailNoRegister with email and password
POST/sign-in/emailNoSign in with email and password
POST/sign-in/usernameNoSign in with username and password

Session Management (SessionManagementPlugin)

MethodPathAuthDescription
GET/get-sessionYesGet current session and user
POST/get-sessionYesGet current session (alt method)
POST/sign-outYesRevoke current session
GET/list-sessionsYesList all user sessions
POST/revoke-sessionYesRevoke a specific session by token
POST/revoke-sessionsYesRevoke all user sessions
POST/revoke-other-sessionsYesRevoke all sessions except current

Password Management (PasswordManagementPlugin)

MethodPathAuthDescription
POST/forget-passwordNoRequest password reset email
POST/reset-passwordNoReset password with token
GET/reset-password/{token}NoValidate a reset token
POST/change-passwordYesChange password (requires current)
POST/set-passwordYesSet password for OAuth-only users

Email Verification (EmailVerificationPlugin)

MethodPathAuthDescription
POST/send-verification-emailYesSend verification email
GET/verify-emailNoVerify email with token (query param)

Account Management (AccountManagementPlugin)

MethodPathAuthDescription
GET/list-accountsYesList linked accounts
POST/unlink-accountYesUnlink an account provider

Authentication

Authenticated endpoints require a session token sent as:

  • Bearer token: Authorization: Bearer session_abc123...
  • Cookie: Cookie: better-auth.session-token=session_abc123...

On this page