Add four auth-provider example apps in plain Wasp auth form

Author: FranjoMindek

examples/auth-providers/README.md

@@ -0,0 +1,27 @@
+# Auth provider examples
+
+Four Wasp apps that are identical except for **which auth provider verifies the request**.
+
+They exist to answer one question: how much of an app's code survives swapping the auth
+provider? The answer, demonstrated rather than asserted, is _everything except the auth pages_.
+
+| App             | Provider                   | What it proves                                                        |
+| --------------- | -------------------------- | --------------------------------------------------------------------- |
+| `wasp-auth/`    | Wasp's own auth            | The interface is a faithful refactor — behaviour is unchanged         |
+| `better-auth/`  | Better Auth, in-process    | A provider that owns its own tables and routes                        |
+| `clerk/`        | Clerk, hosted              | A provider with no server-side login at all, and no schema of its own |
+| `custom-clerk/` | Clerk, hand-written in-app | The `customAuthProvider()` escape hatch — no adapter package needed   |
+
+All four start as clones of `wasp-auth/` running Wasp's own auth. Each app diverges only
+when its provider arrives later in this PR stack, so every diff in these apps from here
+on is auth-relevant.
+
+## Running them
+
+Each app is a normal Wasp app:
+
+```sh
+cd wasp-auth && wasp db migrate-dev && wasp start
+```
+
+See each app's own README for provider-specific setup.

examples/auth-providers/better-auth/.gitignore

@@ -0,0 +1,4 @@
+.wasp/
+node_modules/
+.env.server
+.env.client

examples/auth-providers/better-auth/.npmrc

@@ -0,0 +1,2 @@
+# Helps prevent supply chain attacks
+min-release-age=7

examples/auth-providers/better-auth/.prettierignore

@@ -0,0 +1,2 @@
+.wasp
+node_modules

examples/auth-providers/better-auth/.waspignore

@@ -0,0 +1,4 @@
+# Ignore editor tmp files
+**/*~
+**/#*#
+.DS_Store

examples/auth-providers/better-auth/.wasproot

@@ -0,0 +1 @@
+File marking the root of Wasp project.

examples/auth-providers/better-auth/README.md

@@ -0,0 +1,10 @@
+# Auth providers — Better Auth
+
+For now a byte-for-byte clone of `../wasp-auth` running Wasp's own auth. It switches to
+Better Auth via the `@wasp.sh/auth-better-auth` adapter package later in this PR stack.
+
+Two things are already in place so that the switch shows up as a pure auth diff:
+
+- the `better-auth` dependency is installed, and
+- `schema.prisma` carries Better Auth's own tables (`BetterAuth*`). They are plain
+  Prisma models and sit unused until the provider arrives.

examples/auth-providers/better-auth/eslint.config.js

@@ -0,0 +1,31 @@
+import js from "@eslint/js";
+import eslintPrettier from "eslint-config-prettier/flat";
+import eslintReact from "eslint-plugin-react";
+import { defineConfig } from "eslint/config";
+import globals from "globals";
+import eslintTypescript from "typescript-eslint";
+
+export default defineConfig([
+  {
+    files: ["**/*.{js,mjs,cjs,ts,mts,cts,jsx,tsx}"],
+    plugins: { js },
+    extends: ["js/recommended"],
+  },
+  {
+    files: ["**/*.{js,mjs,cjs,ts,mts,cts,jsx,tsx}"],
+    languageOptions: { globals: { ...globals.browser, ...globals.node } },
+  },
+  eslintTypescript.configs.recommended,
+  eslintReact.configs.flat.recommended,
+  eslintReact.configs.flat["jsx-runtime"],
+  eslintPrettier,
+  // Overrides:
+  {
+    // `@typescript-eslint/no-require-imports` is enabled by default in `typescript-eslint/recommended` config.
+    // This allows us to use `require` syntax in CJS files.
+    files: ["**/*.{cjs,cts}"],
+    rules: {
+      "@typescript-eslint/no-require-imports": ["off"],
+    },
+  },
+]);

examples/auth-providers/better-auth/main.wasp.ts

@@ -0,0 +1,28 @@
+import { action, app, page, query, route } from "@wasp.sh/spec";
+import { MainPage } from "./src/MainPage" with { type: "ref" };
+import { LoginPage } from "./src/auth/LoginPage" with { type: "ref" };
+import { createTask, getMyTasks } from "./src/operations" with { type: "ref" };
+
+export default app({
+  name: "authProviderBetterAuth",
+  wasp: { version: "^0.26.0" },
+  title: "Auth providers — Better Auth",
+
+  auth: {
+    userEntity: "User",
+    // Wasp's own auth. `provider` is left unset, which is the default and means
+    // "use Wasp's built-in auth" -- exactly what every existing Wasp app does.
+    methods: {
+      usernameAndPassword: {},
+    },
+    onAuthFailedRedirectTo: "/login",
+    onAuthSucceededRedirectTo: "/",
+  },
+
+  spec: [
+    route("MainRoute", "/", page(MainPage, { authRequired: true })),
+    route("LoginRoute", "/login", page(LoginPage)),
+    query(getMyTasks, { entities: ["Task"], auth: true }),
+    action(createTask, { entities: ["Task"], auth: true }),
+  ],
+});

examples/auth-providers/better-auth/migrations/20260813194519_init/migration.sql

@@ -0,0 +1,106 @@
+-- CreateTable
+CREATE TABLE "User" (
+    "id" TEXT NOT NULL PRIMARY KEY
+);
+
+-- CreateTable
+CREATE TABLE "Task" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "description" TEXT NOT NULL,
+    "isDone" BOOLEAN NOT NULL DEFAULT false,
+    "userId" TEXT NOT NULL,
+    CONSTRAINT "Task_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "better_auth_user" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "name" TEXT NOT NULL,
+    "email" TEXT NOT NULL,
+    "emailVerified" BOOLEAN NOT NULL DEFAULT false,
+    "image" TEXT,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL
+);
+
+-- CreateTable
+CREATE TABLE "better_auth_session" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "token" TEXT NOT NULL,
+    "expiresAt" DATETIME NOT NULL,
+    "ipAddress" TEXT,
+    "userAgent" TEXT,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL,
+    "userId" TEXT NOT NULL,
+    CONSTRAINT "better_auth_session_userId_fkey" FOREIGN KEY ("userId") REFERENCES "better_auth_user" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "better_auth_account" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "accountId" TEXT NOT NULL,
+    "providerId" TEXT NOT NULL,
+    "accessToken" TEXT,
+    "refreshToken" TEXT,
+    "idToken" TEXT,
+    "accessTokenExpiresAt" DATETIME,
+    "refreshTokenExpiresAt" DATETIME,
+    "scope" TEXT,
+    "password" TEXT,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL,
+    "userId" TEXT NOT NULL,
+    CONSTRAINT "better_auth_account_userId_fkey" FOREIGN KEY ("userId") REFERENCES "better_auth_user" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "better_auth_verification" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "identifier" TEXT NOT NULL,
+    "value" TEXT NOT NULL,
+    "expiresAt" DATETIME NOT NULL,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL
+);
+
+-- CreateTable
+CREATE TABLE "Auth" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "userId" TEXT,
+    CONSTRAINT "Auth_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "AuthIdentity" (
+    "providerName" TEXT NOT NULL,
+    "providerUserId" TEXT NOT NULL,
+    "providerData" TEXT NOT NULL DEFAULT '{}',
+    "authId" TEXT NOT NULL,
+
+    PRIMARY KEY ("providerName", "providerUserId"),
+    CONSTRAINT "AuthIdentity_authId_fkey" FOREIGN KEY ("authId") REFERENCES "Auth" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "Session" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "expiresAt" DATETIME NOT NULL,
+    "userId" TEXT NOT NULL,
+    CONSTRAINT "Session_userId_fkey" FOREIGN KEY ("userId") REFERENCES "Auth" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "better_auth_user_email_key" ON "better_auth_user"("email");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "better_auth_session_token_key" ON "better_auth_session"("token");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Auth_userId_key" ON "Auth"("userId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Session_id_key" ON "Session"("id");
+
+-- CreateIndex
+CREATE INDEX "Session_userId_idx" ON "Session"("userId");