Merge pull request #25 from nixopus/perf/redis-session-cache

perf: add Redis secondary storage and cookie cache for sessions

Author: raghavyuva

bun.lock

@@ -25,11 +25,13 @@
     "@better-auth/api-key": "^1.5.5",
     "@better-auth/oauth-provider": "^1.5.5",
     "@better-auth/passkey": "^1.5.5",
+    "@better-auth/redis-storage": "^1.5.6",
     "@dodopayments/better-auth": "^1.4.3",
     "better-auth": "^1.5.5",
     "dodopayments": "^2.17.2",
     "drizzle-orm": "^0.45.1",
     "hono": "^4.0.0",
+    "ioredis": "^5.10.1",
     "pg": "^8.17.1",
     "pino": "^10.3.1",
     "resend": "^6.7.0",

package.json

@@ -5,6 +5,8 @@ import { defaultRoles } from 'better-auth/plugins/organization/access';
 import { apiKey } from '@better-auth/api-key';
 import { passkey } from '@better-auth/passkey';
 import { oauthProvider } from '@better-auth/oauth-provider';
+import { redisStorage } from '@better-auth/redis-storage';
+import { Redis } from 'ioredis';
 import {
   dodopayments,
   checkout,
@@ -33,6 +35,7 @@ export const auth = betterAuth({
     provider: 'pg',
     schema,
   }),
+  ...(config.redisUrl ? { secondaryStorage: redisStorage({ client: new Redis(config.redisUrl) }) } : {}),
   baseURL: config.corsAllowedOrigins[0] || config.betterAuthUrl,
   basePath: '/api/auth',
   secret: config.betterAuthSecret,
@@ -191,6 +194,11 @@ export const auth = betterAuth({
     expiresIn: 60 * 60 * 24 * 7,
     updateAge: 60 * 60 * 24,
     storeSessionInDatabase: true,
+    cookieCache: {
+      enabled: true,
+      maxAge: 5 * 60,
+      strategy: 'compact',
+    },
   },
   hooks: {
     before: beforeHook,

src/auth/index.ts

@@ -36,6 +36,9 @@ export const config = {
   // Required for production, should be set via DATABASE_URL environment variable
   databaseUrl: process.env.DATABASE_URL || '',
 
+  // Redis URL for session caching (secondary storage)
+  redisUrl: process.env.REDIS_URL || '',
+
   // Auth service configuration
   betterAuthUrl: process.env.AUTH_SERVICE_URL || `http://localhost:${parseInt(process.env.PORT || '8080', 10)}`,
   betterAuthSecret: process.env.AUTH_SERVICE_SECRET || 'better-auth-secret-change-in-production',