🔐 Auth API - Better Auth Service

Status: ✅ Running

📍 Available Endpoints

🔑 Authentication

• POST /api/auth/sign-in/email - Email/password sign-in
• POST /api/auth/sign-up/email - Email/password sign-up
• POST /api/auth/sign-out - Sign out current session
• GET /api/auth/session - Get current session

📧 Password Reset

• POST /api/auth/forgot-password - Request password reset
• POST /api/auth/reset-password - Reset password with token

✉️ Email Verification

• POST /api/auth/send-verification-email - Send verification email
• POST /api/auth/verify-email - Verify email with token

🏢 Organization Management

• POST /api/auth/organization/create - Create organization
• GET /api/auth/organization/list - List user organizations
• POST /api/auth/organization/set-active - Switch organization

🔑 JWT & JWKS

• GET /api/auth/.well-known/openid-configuration - Public JWT keys (for APIM)
• POST /api/auth/get-token - Get JWT token for current session

🗄️ Database

• Type: Azure SQL Database
• Dialect: Kysely + Tedious (MSSQL)
• ORM: Better Auth native adapter

🚀 Deployment

• Target: Azure Container Apps
• Port: 3312 (development) / 80 (production)
• Cost: ~$20/month (vs $400/month for Vercel static IPs)

📚 Documentation

• Better Auth Docs
• JWKS Endpoint (for APIM integration)

Note: This is a server-side API service with no UI. All authentication logic is handled through the /api/auth/* endpoints.