API Keys & Bearer Tokens

// 1. Login to get bearer token
const loginResponse = await fetch('/api/auth/login', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({ email, password })
});

const { token } = await loginResponse.json();

// 2. Use bearer token for API calls
const apiResponse = await fetch('/api/user/profile', {
  headers: {
    'Authorization': `Bearer ${token}`,
    'Content-Type': 'application/json'
  }
});

// In src/lib/better-auth/auth.ts
apiKey() // Enables API key generation and management

// In src/lib/better-auth/auth.ts
bearer() // Enables JWT bearer token support

// Example API route protection
import { auth } from '@/lib/better-auth/auth'

export async function GET(request: Request) {
  const session = await auth.api.getSession({ headers: request.headers })

  if (!session) {
    return new Response('Unauthorized', { status: 401 })
  }

  // API logic here
  return Response.json({ data: 'protected data' })
}

// Token management endpoints
POST /api/auth/api-key/create    // Create new API key
GET  /api/auth/api-key/list      // List user's API keys
DELETE /api/auth/api-key/revoke  // Delete specific key

// Bearer token endpoints
POST /api/auth/login             // Get bearer token via login
POST /api/auth/refresh           // Refresh bearer token
POST /api/auth/logout            // Invalidate bearer token

// Store API key securely in mobile app
const API_KEY = await SecureStore.getItemAsync('api_key');

const fetchUserData = async () => {
  const response = await fetch('/api/user/profile', {
    headers: {
      'Authorization': `Bearer ${API_KEY}`,
      'Content-Type': 'application/json'
    }
  });
  return response.json();
};

# GitHub Actions example
- name: Deploy with API
  env:
    API_KEY: ${{ secrets.API_KEY }}
  run: |
    curl -H "Authorization: Bearer $API_KEY" \
         -X POST https://yourdomain.com/api/deploy