Back to overviewOAuth scaffold

Better Auth + TanStack Start

Sign in to the modelling workbench.

V1 keeps authenticated control entirely inside the TanStack Start app. Google and GitHub are wired first because they are enough for dissertation demos and Railway deployment.

Runtime notes

What this scaffold already assumes

  • OAuth callbacks terminate at `/api/auth/callback/google` and `/api/auth/callback/github`.
  • Better Auth owns browser sessions for the full app control plane.
  • Postgres is shared, but auth tables stay separate from modelling and workflow tables.
No active session detected in the browser.
Add real Google and GitHub OAuth credentials in Railway before using social sign-in on this environment.