go-dev-auth

Authentication for Go

better-auth’s feature set with a zero-dependency core. One config struct. Batteries included. Own your users.

auth, err := godevauth.New(godevauth.Config{
  BaseURL:  "https://example.com",
  Secret:   os.Getenv("AUTH_SECRET"),
  Database: store,
  EmailAndPassword: godevauth.
    EmailPasswordConfig{Enabled: true},
})

mux.Handle("/api/auth/", auth.Handler())

Zero dependencies

The core is pure standard library. No framework, no ORM, no transitive tree to audit.

Proven on real databases

Conformance suite, migrations and the full auth flow run against live PostgreSQL, MySQL and SQLite in CI on every push.

Batteries included

Email and password, social sign-on with PKCE, sessions, 2FA, magic links, organizations, admin, API keys and JWT.

Security tied to tests

A written threat model where every claim maps to the test that pins it. Rate limiting on by default.

Any router

A plain http.Handler. Mounts on chi, echo, gorilla or gin the same way.

Refuses to start unsafe

Misconfiguration is a startup error with a clear message, not a production incident.