[{"data":1,"prerenderedAt":840},["ShallowReactive",2],{"navigation_docs":3,"-core-concepts-security-caveats":216,"-core-concepts-security-caveats-surround":835},[4,42,68,115,136,157],{"title":5,"path":6,"stem":7,"children":8,"icon":11},"Getting Started","\u002Fgetting-started","1.getting-started\u002F0.index",[9,12,17,22,27,32,37],{"title":10,"path":6,"stem":7,"icon":11},"Introduction","i-lucide-sparkles",{"title":13,"path":14,"stem":15,"icon":16},"Installation","\u002Fgetting-started\u002Finstallation","1.getting-started\u002F1.installation","i-lucide-download",{"title":18,"path":19,"stem":20,"icon":21},"Configuration","\u002Fgetting-started\u002Fconfiguration","1.getting-started\u002F2.configuration","i-lucide-settings",{"title":23,"path":24,"stem":25,"icon":26},"Client Setup","\u002Fgetting-started\u002Fclient-setup","1.getting-started\u002F3.client-setup","i-lucide-monitor",{"title":28,"path":29,"stem":30,"icon":31},"Type Augmentation","\u002Fgetting-started\u002Ftype-augmentation","1.getting-started\u002F4.type-augmentation","i-lucide-type",{"title":33,"path":34,"stem":35,"icon":36},"Schema Generation (NuxtHub)","\u002Fgetting-started\u002Fschema-generation","1.getting-started\u002F5.schema-generation","i-lucide-database",{"title":38,"path":39,"stem":40,"icon":41},"How It Works","\u002Fgetting-started\u002Fhow-it-works","1.getting-started\u002F6.how-it-works","i-lucide-workflow",{"title":43,"path":44,"stem":45,"children":46,"page":67},"Core Concepts","\u002Fcore-concepts","2.core-concepts",[47,51,55,59,63],{"title":48,"path":49,"stem":50},"serverAuth()","\u002Fcore-concepts\u002Fserver-auth","2.core-concepts\u002F1.server-auth",{"title":52,"path":53,"stem":54},"Sessions","\u002Fcore-concepts\u002Fsessions","2.core-concepts\u002F2.sessions",{"title":56,"path":57,"stem":58},"Route Protection","\u002Fcore-concepts\u002Froute-protection","2.core-concepts\u002F3.route-protection",{"title":60,"path":61,"stem":62},"Auto‑Imports and Aliases","\u002Fcore-concepts\u002Fauto-imports-aliases","2.core-concepts\u002F4.auto-imports-aliases",{"title":64,"path":65,"stem":66},"Security & Caveats","\u002Fcore-concepts\u002Fsecurity-caveats","2.core-concepts\u002F5.security-caveats",false,{"title":69,"path":70,"stem":71,"children":72,"page":67},"Guides","\u002Fguides","3.guides",[73,77,82,86,90,94,99,103,107,111],{"title":74,"path":75,"stem":76},"Role‑Based Access","\u002Fguides\u002Frole-based-access","3.guides\u002F1.role-based-access",{"title":78,"path":79,"stem":80,"icon":81},"Setup diagnostics","\u002Fguides\u002Fdiagnostics","3.guides\u002F10.diagnostics","i-lucide-circle-alert",{"title":83,"path":84,"stem":85},"OAuth Providers","\u002Fguides\u002Foauth-providers","3.guides\u002F2.oauth-providers",{"title":87,"path":88,"stem":89},"Custom Database","\u002Fguides\u002Fcustom-database","3.guides\u002F3.custom-database",{"title":91,"path":92,"stem":93},"Database-less Mode","\u002Fguides\u002Fdatabase-less-mode","3.guides\u002F4.database-less-mode",{"title":95,"path":96,"stem":97,"icon":98},"External Auth Backend","\u002Fguides\u002Fexternal-auth-backend","3.guides\u002F5.external-auth-backend","i-lucide-server",{"title":100,"path":101,"stem":102},"Migrating from nuxt-auth-utils","\u002Fguides\u002Fmigrate-from-nuxt-auth-utils","3.guides\u002F6.migrate-from-nuxt-auth-utils",{"title":104,"path":105,"stem":106},"Two-Factor Authentication (TOTP + Backup Codes)","\u002Fguides\u002Ftwo-factor-auth","3.guides\u002F7.two-factor-auth",{"title":108,"path":109,"stem":110},"Testing","\u002Fguides\u002Ftesting","3.guides\u002F8.testing",{"title":112,"path":113,"stem":114},"Production Deployment","\u002Fguides\u002Fproduction-deployment","3.guides\u002F9.production-deployment",{"title":116,"path":117,"stem":118,"children":119,"page":67},"Integrations","\u002Fintegrations","4.integrations",[120,124,128,132],{"title":121,"path":122,"stem":123},"NuxtHub","\u002Fintegrations\u002Fnuxthub","4.integrations\u002F1.nuxthub",{"title":125,"path":126,"stem":127},"DevTools","\u002Fintegrations\u002Fdevtools","4.integrations\u002F2.devtools",{"title":129,"path":130,"stem":131},"Convex","\u002Fintegrations\u002Fconvex","4.integrations\u002F3.convex",{"title":133,"path":134,"stem":135},"i18n","\u002Fintegrations\u002Fi18n","4.integrations\u002F4.i18n",{"title":137,"path":138,"stem":139,"children":140,"page":67},"API Reference","\u002Fapi","5.api",[141,145,149,153],{"title":142,"path":143,"stem":144},"Composables","\u002Fapi\u002Fcomposables","5.api\u002F1.composables",{"title":146,"path":147,"stem":148},"Server Utilities","\u002Fapi\u002Fserver-utils","5.api\u002F2.server-utils",{"title":150,"path":151,"stem":152},"Components","\u002Fapi\u002Fcomponents","5.api\u002F3.components",{"title":154,"path":155,"stem":156},"Types","\u002Fapi\u002Ftypes","5.api\u002F4.types",{"title":158,"path":159,"stem":160,"children":161,"icon":81},"Errors","\u002Ferrors","6.errors\u002F0.index",[162,164,168,172,176,180,184,188,192,196,200,204,208,212],{"title":163,"path":159,"stem":160},"Overview",{"title":165,"path":166,"stem":167},"Better Auth CLI is not installed","\u002Ferrors\u002Fnuxt-auth-cli-missing","6.errors\u002Fnuxt-auth-cli-missing",{"title":169,"path":170,"stem":171},"Better Auth CLI version does not match better-auth","\u002Ferrors\u002Fnuxt-auth-cli-version-mismatch","6.errors\u002Fnuxt-auth-cli-version-mismatch",{"title":173,"path":174,"stem":175},"Auth configuration failed to load","\u002Ferrors\u002Fnuxt-auth-config-load-failed","6.errors\u002Fnuxt-auth-config-load-failed",{"title":177,"path":178,"stem":179},"Schema generator returned no code","\u002Ferrors\u002Fnuxt-auth-empty-schema","6.errors\u002Fnuxt-auth-empty-schema",{"title":181,"path":182,"stem":183},"Invalid server auth config export","\u002Ferrors\u002Fnuxt-auth-invalid-config-export","6.errors\u002Fnuxt-auth-invalid-config-export",{"title":185,"path":186,"stem":187},"Auth plugin path must be absolute","\u002Ferrors\u002Fnuxt-auth-invalid-plugin-source","6.errors\u002Fnuxt-auth-invalid-plugin-source",{"title":189,"path":190,"stem":191},"Missing auth configuration","\u002Ferrors\u002Fnuxt-auth-missing-config","6.errors\u002Fnuxt-auth-missing-config",{"title":193,"path":194,"stem":195},"NuxtHub database alias is missing","\u002Ferrors\u002Fnuxt-auth-missing-hub-db","6.errors\u002Fnuxt-auth-missing-hub-db",{"title":197,"path":198,"stem":199},"No database provider is enabled","\u002Ferrors\u002Fnuxt-auth-no-database-provider","6.errors\u002Fnuxt-auth-no-database-provider",{"title":201,"path":202,"stem":203},"Auth schema generation failed","\u002Ferrors\u002Fnuxt-auth-schema-generation-failed","6.errors\u002Fnuxt-auth-schema-generation-failed",{"title":205,"path":206,"stem":207},"Custom session storage is missing","\u002Ferrors\u002Fnuxt-auth-schema-storage-required","6.errors\u002Fnuxt-auth-schema-storage-required",{"title":209,"path":210,"stem":211},"Secondary storage in client-only mode","\u002Ferrors\u002Fnuxt-auth-storage-client-only","6.errors\u002Fnuxt-auth-storage-client-only",{"title":213,"path":214,"stem":215},"Unsupported database dialect","\u002Ferrors\u002Fnuxt-auth-unsupported-dialect","6.errors\u002Fnuxt-auth-unsupported-dialect",{"id":217,"title":64,"body":218,"description":829,"extension":830,"links":831,"meta":832,"navigation":295,"path":65,"seo":833,"stem":66,"__hash__":834},"docs\u002F2.core-concepts\u002F5.security-caveats.md",{"type":219,"value":220,"toc":819},"minimark",[221,225,230,233,237,253,364,371,375,398,422,439,450,455,458,464,621,626,683,694,757,761,772,779,783,794,797,800,804,815],[222,223,224],"p",{},"Use this page when you are moving from “it works locally” to “it is safe to deploy”.",[226,227,229],"h2",{"id":228},"client-redirects-are-not-security","Client redirects are not security",[222,231,232],{},"Client-side redirects improve UX but don't prevent unauthorized access. Always validate on the server.",[226,234,236],{"id":235},"csrf-origin-checks","CSRF \u002F origin checks",[222,238,239,240,244,245,248,249,252],{},"Better Auth performs origin checks for cookie-based requests (it validates ",[241,242,243],"code",{},"Origin"," \u002F ",[241,246,247],{},"Referer","). If you use multiple domains (custom domains, preview URLs, etc.), add them to ",[241,250,251],{},"trustedOrigins"," in your auth config.",[254,255,261],"pre",{"className":256,"code":257,"filename":258,"language":259,"meta":260,"style":260},"language-ts shiki shiki-themes one-light synthwave-84 synthwave-84","import { defineServerAuth } from '@nuxtjs\u002Fbetter-auth\u002Fconfig'\n\nexport default defineServerAuth({\n  trustedOrigins: [\n    'http:\u002F\u002Flocalhost:3000',\n    'https:\u002F\u002Fyour-domain.com',\n    'https:\u002F\u002Fyour-preview.workers.dev',\n  ],\n})\n","server\u002Fauth.config.ts","ts","",[241,262,263,290,297,314,327,336,344,352,358],{"__ignoreMap":260},[264,265,268,272,276,280,283,286],"span",{"class":266,"line":267},"line",1,[264,269,271],{"class":270},"sqe1H","import",[264,273,275],{"class":274},"s17Py"," { ",[264,277,279],{"class":278},"sYvLG","defineServerAuth",[264,281,282],{"class":274}," } ",[264,284,285],{"class":270},"from",[264,287,289],{"class":288},"sPAZv"," '@nuxtjs\u002Fbetter-auth\u002Fconfig'\n",[264,291,293],{"class":266,"line":292},2,[264,294,296],{"emptyLinePlaceholder":295},true,"\n",[264,298,300,303,307,311],{"class":266,"line":299},3,[264,301,302],{"class":270},"export",[264,304,306],{"class":305},"sKg8T"," default",[264,308,310],{"class":309},"sfT9l"," defineServerAuth",[264,312,313],{"class":274},"({\n",[264,315,317,320,324],{"class":266,"line":316},4,[264,318,319],{"class":278},"  trustedOrigins",[264,321,323],{"class":322},"sVnqq",":",[264,325,326],{"class":274}," [\n",[264,328,330,333],{"class":266,"line":329},5,[264,331,332],{"class":288},"    'http:\u002F\u002Flocalhost:3000'",[264,334,335],{"class":274},",\n",[264,337,339,342],{"class":266,"line":338},6,[264,340,341],{"class":288},"    'https:\u002F\u002Fyour-domain.com'",[264,343,335],{"class":274},[264,345,347,350],{"class":266,"line":346},7,[264,348,349],{"class":288},"    'https:\u002F\u002Fyour-preview.workers.dev'",[264,351,335],{"class":274},[264,353,355],{"class":266,"line":354},8,[264,356,357],{"class":274},"  ],\n",[264,359,361],{"class":266,"line":360},9,[264,362,363],{"class":274},"})\n",[365,366,367,368,370],"important",{},"If you deploy preview environments, you must include the preview origin in ",[241,369,251],{},". Otherwise, sign-in or sign-up requests can fail origin validation even when the API endpoint is healthy.",[226,372,374],{"id":373},"api-enforcement-behavior","API enforcement behavior",[222,376,377,378,381,382,385,386,389,390,393,394,397],{},"The built-in Nitro middleware checks ",[241,379,380],{},"routeRules.auth"," for app-owned ",[241,383,384],{},"\u002Fapi\u002F**"," routes. It skips Better Auth's ",[241,387,388],{},"\u002Fapi\u002Fauth\u002F**"," handler and known framework or module internals such as ",[241,391,392],{},"\u002Fapi\u002F_nuxt_icon\u002F**"," and ",[241,395,396],{},"\u002Fapi\u002F_better-auth\u002F**",", so broad route rules do not break auth, icons, or module tooling.",[222,399,400,401,404,405,404,408,404,411,404,414,417,418,421],{},"Do not combine an auth rule with ",[241,402,403],{},"cache",", ",[241,406,407],{},"swr",[241,409,410],{},"isr",[241,412,413],{},"static",[241,415,416],{},"prerender",", or ",[241,419,420],{},"proxy",". Those rules can run before authentication or reuse a response across users. The module rejects direct and inherited combinations during setup.",[222,423,424,425,404,428,404,431,434,435,438],{},"Known public asset namespaces (",[241,426,427],{},"\u002F_fonts",[241,429,430],{},"\u002F_ipx",[241,432,433],{},"\u002F_nuxt",", and ",[241,436,437],{},"\u002Fapi\u002F_nuxt_icon",", including their subpaths) are excluded from route-rule auth and its conflict validation in development and production. These paths must not contain private application routes. Authentication and devtools API paths still undergo conflict validation.",[222,440,441,442,445,446,449],{},"Registering a dev server handler does not exempt an application route: handlers can fall through to Nitro. For a custom public asset prefix, explicitly set ",[241,443,444],{},"auth: false",". If an asset module overwrites that route rule during setup, set the exclusion in a ",[241,447,448],{},"nitro:config"," hook.",[451,452,454],"h3",{"id":453},"customizing-unauthorized-behavior","Customizing Unauthorized Behavior",[222,456,457],{},"By default, unauthorized requests to protected routes receive a 401 response. To customize:",[222,459,460],{},[461,462,463],"strong",{},"Redirect to login instead of 401:",[254,465,468],{"className":256,"code":466,"filename":467,"language":259,"meta":260,"style":260},"import { sendRedirect } from 'h3'\n\nexport default defineEventHandler(async (event) => {\n  const session = await getUserSession(event)\n  if (!session && event.path.startsWith('\u002Fapi\u002Fprotected')) {\n    return sendRedirect(event, '\u002Flogin', 302)\n  }\n})\n","server\u002Fmiddleware\u002Fauth.ts",[241,469,470,486,490,521,547,587,612,617],{"__ignoreMap":260},[264,471,472,474,476,479,481,483],{"class":266,"line":267},[264,473,271],{"class":270},[264,475,275],{"class":274},[264,477,478],{"class":278},"sendRedirect",[264,480,282],{"class":274},[264,482,285],{"class":270},[264,484,485],{"class":288}," 'h3'\n",[264,487,488],{"class":266,"line":292},[264,489,296],{"emptyLinePlaceholder":295},[264,491,492,494,496,499,502,505,508,512,515,518],{"class":266,"line":299},[264,493,302],{"class":270},[264,495,306],{"class":305},[264,497,498],{"class":309}," defineEventHandler",[264,500,501],{"class":274},"(",[264,503,504],{"class":270},"async",[264,506,507],{"class":274}," (",[264,509,511],{"class":510},"sgisi","event",[264,513,514],{"class":274},") ",[264,516,517],{"class":270},"=>",[264,519,520],{"class":274}," {\n",[264,522,523,526,530,534,537,540,542,544],{"class":266,"line":316},[264,524,525],{"class":270},"  const",[264,527,529],{"class":528},"s6Rhl"," session",[264,531,533],{"class":532},"sQBpM"," =",[264,535,536],{"class":270}," await",[264,538,539],{"class":309}," getUserSession",[264,541,501],{"class":274},[264,543,511],{"class":278},[264,545,546],{"class":274},")\n",[264,548,549,552,554,558,561,564,568,571,574,576,579,581,584],{"class":266,"line":329},[264,550,551],{"class":270},"  if",[264,553,507],{"class":274},[264,555,557],{"class":556},"sn-Jc","!",[264,559,560],{"class":278},"session",[264,562,563],{"class":556}," &&",[264,565,567],{"class":566},"svFNh"," event",[264,569,570],{"class":274},".",[264,572,573],{"class":278},"path",[264,575,570],{"class":274},[264,577,578],{"class":309},"startsWith",[264,580,501],{"class":274},[264,582,583],{"class":288},"'\u002Fapi\u002Fprotected'",[264,585,586],{"class":274},")) {\n",[264,588,589,592,595,597,599,601,604,606,610],{"class":266,"line":338},[264,590,591],{"class":270},"    return",[264,593,594],{"class":309}," sendRedirect",[264,596,501],{"class":274},[264,598,511],{"class":278},[264,600,404],{"class":274},[264,602,603],{"class":288},"'\u002Flogin'",[264,605,404],{"class":274},[264,607,609],{"class":608},"s3ZNE","302",[264,611,546],{"class":274},[264,613,614],{"class":266,"line":346},[264,615,616],{"class":274},"  }\n",[264,618,619],{"class":266,"line":354},[264,620,363],{"class":274},[222,622,623],{},[461,624,625],{},"Return JSON error for API routes:",[254,627,629],{"className":256,"code":628,"language":259,"meta":260,"style":260},"\u002F\u002F This is the default behavior for \u002Fapi\u002F* routes\nthrow createError({\n  statusCode: 401,\n  data: { error: 'Authentication required' }\n})\n",[241,630,631,637,647,659,679],{"__ignoreMap":260},[264,632,633],{"class":266,"line":267},[264,634,636],{"class":635},"st7cf","\u002F\u002F This is the default behavior for \u002Fapi\u002F* routes\n",[264,638,639,642,645],{"class":266,"line":292},[264,640,641],{"class":270},"throw",[264,643,644],{"class":309}," createError",[264,646,313],{"class":274},[264,648,649,652,654,657],{"class":266,"line":299},[264,650,651],{"class":278},"  statusCode",[264,653,323],{"class":322},[264,655,656],{"class":608}," 401",[264,658,335],{"class":274},[264,660,661,664,666,668,671,673,676],{"class":266,"line":316},[264,662,663],{"class":278},"  data",[264,665,323],{"class":322},[264,667,275],{"class":274},[264,669,670],{"class":278},"error",[264,672,323],{"class":322},[264,674,675],{"class":288}," 'Authentication required'",[264,677,678],{"class":274}," }\n",[264,680,681],{"class":266,"line":329},[264,682,363],{"class":274},[222,684,685,686,689,690,693],{},"If you want different behavior (e.g. enforce ",[241,687,688],{},"auth: 'user'"," for APIs), add your own Nitro middleware and\u002For call ",[241,691,692],{},"requireUserSession(event)"," directly inside handlers.",[254,695,698],{"className":256,"code":696,"filename":697,"language":259,"meta":260,"style":260},"export default defineEventHandler(async (event) => {\n  await requireUserSession(event)\n  return { ok: true }\n})\n","server\u002Fapi\u002Fsecret.get.ts",[241,699,700,722,736,753],{"__ignoreMap":260},[264,701,702,704,706,708,710,712,714,716,718,720],{"class":266,"line":267},[264,703,302],{"class":270},[264,705,306],{"class":305},[264,707,498],{"class":309},[264,709,501],{"class":274},[264,711,504],{"class":270},[264,713,507],{"class":274},[264,715,511],{"class":510},[264,717,514],{"class":274},[264,719,517],{"class":270},[264,721,520],{"class":274},[264,723,724,727,730,732,734],{"class":266,"line":292},[264,725,726],{"class":270},"  await",[264,728,729],{"class":309}," requireUserSession",[264,731,501],{"class":274},[264,733,511],{"class":278},[264,735,546],{"class":274},[264,737,738,741,743,746,748,751],{"class":266,"line":299},[264,739,740],{"class":270},"  return",[264,742,275],{"class":274},[264,744,745],{"class":278},"ok",[264,747,323],{"class":322},[264,749,750],{"class":608}," true",[264,752,678],{"class":274},[264,754,755],{"class":266,"line":316},[264,756,363],{"class":274},[226,758,760],{"id":759},"default-login-route","Default login route",[222,762,763,764,767,768,771],{},"Unauthenticated users are redirected to ",[241,765,766],{},"\u002Flogin"," when a page requires auth. To use another path, set ",[241,769,770],{},"redirectTo"," on the protected route rule (or page meta auth object).",[773,774,775,776,778],"warning",{},"If your ",[241,777,770],{}," target does not exist, users will be redirected to a 404 page. Ensure redirect targets are valid app routes.",[226,780,782],{"id":781},"rate-limiting","Rate limiting",[222,784,785,786,793],{},"Better Auth includes a ",[787,788,792],"a",{"href":789,"rel":790},"https:\u002F\u002Fwww.better-auth.com\u002Fdocs\u002Fconcepts\u002Frate-limit",[791],"nofollow","built-in rate limiter",". It is enabled by default in production with a 60-second window and a maximum of 100 requests. It is disabled by default in development.",[222,795,796],{},"Rate-limit data is stored in memory by default. For serverless or multi-instance deployments, configure Better Auth to use database, secondary storage, or custom storage so instances do not rely on separate in-memory counters.",[798,799],"read-more",{"title":112,"to":113},[226,801,803],{"id":802},"devtools-in-production","DevTools in production",[222,805,806,807,810,811,814],{},"DevTools are automatically disabled when ",[241,808,809],{},"NODE_ENV=production",". The ",[241,812,813],{},"\u002Fapi\u002F_better-auth\u002F*"," endpoints and devtools page are never registered in production builds.",[816,817,818],"style",{},"html pre.shiki code .sqe1H, html code.shiki .sqe1H{--shiki-light:#A626A4;--shiki-default:#FEDE5D;--shiki-dark:#FEDE5D}html pre.shiki code .s17Py, html code.shiki .s17Py{--shiki-light:#383A42;--shiki-default:#BBBBBB;--shiki-dark:#BBBBBB}html pre.shiki code .sYvLG, html code.shiki .sYvLG{--shiki-light:#E45649;--shiki-default:#FF7EDB;--shiki-dark:#FF7EDB}html pre.shiki code .sPAZv, html code.shiki .sPAZv{--shiki-light:#50A14F;--shiki-default:#FF8B39;--shiki-dark:#FF8B39}html pre.shiki code .sKg8T, html code.shiki .sKg8T{--shiki-light:#E45649;--shiki-default:#FEDE5D;--shiki-dark:#FEDE5D}html pre.shiki code .sfT9l, html code.shiki .sfT9l{--shiki-light:#4078F2;--shiki-default:#36F9F6;--shiki-dark:#36F9F6}html pre.shiki code .sVnqq, html code.shiki .sVnqq{--shiki-light:#0184BC;--shiki-default:#B6B1B1;--shiki-dark:#B6B1B1}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sgisi, html code.shiki .sgisi{--shiki-light:#383A42;--shiki-light-font-style:inherit;--shiki-default:#FF7EDB;--shiki-default-font-style:italic;--shiki-dark:#FF7EDB;--shiki-dark-font-style:italic}html pre.shiki code .s6Rhl, html code.shiki .s6Rhl{--shiki-light:#986801;--shiki-default:#FF7EDB;--shiki-dark:#FF7EDB}html pre.shiki code .sQBpM, html code.shiki .sQBpM{--shiki-light:#0184BC;--shiki-default:#FFFFFFEE;--shiki-dark:#FFFFFFEE}html pre.shiki code .sn-Jc, html code.shiki .sn-Jc{--shiki-light:#0184BC;--shiki-default:#FEDE5D;--shiki-dark:#FEDE5D}html pre.shiki code .svFNh, html code.shiki .svFNh{--shiki-light:#383A42;--shiki-default:#FF7EDB;--shiki-dark:#FF7EDB}html pre.shiki code .s3ZNE, html code.shiki .s3ZNE{--shiki-light:#986801;--shiki-default:#F97E72;--shiki-dark:#F97E72}html pre.shiki code .st7cf, html code.shiki .st7cf{--shiki-light:#A0A1A7;--shiki-light-font-style:italic;--shiki-default:#848BBD;--shiki-default-font-style:italic;--shiki-dark:#848BBD;--shiki-dark-font-style:italic}",{"title":260,"searchDepth":292,"depth":292,"links":820},[821,822,823,826,827,828],{"id":228,"depth":292,"text":229},{"id":235,"depth":292,"text":236},{"id":373,"depth":292,"text":374,"children":824},[825],{"id":453,"depth":299,"text":454},{"id":759,"depth":292,"text":760},{"id":781,"depth":292,"text":782},{"id":802,"depth":292,"text":803},"What is enforced where, and what you should not assume.","md",null,{},{"title":64,"description":829},"Mk0o0NfjcoPcjNejWEI6iMTqN4ZGl69vthOvIq9Jgcg",[836,838],{"title":60,"path":61,"stem":62,"description":837,"children":-1},"What the module registers for you.",{"title":74,"path":75,"stem":76,"description":839,"children":-1},"Protect routes using generic field matching on AuthUser.",1792495723242]