[{"data":1,"prerenderedAt":843},["ShallowReactive",2],{"navigation_docs":3,"-core-concepts-security-caveats":216,"-core-concepts-security-caveats-surround":838},[4,42,68,115,136,157],{"title":5,"path":6,"stem":7,"children":8,"icon":11},"Getting Started","\u002Fgetting-started","1.getting-started\u002F0.index",[9,12,17,22,27,32,37],{"title":10,"path":6,"stem":7,"icon":11},"Introduction","i-lucide-sparkles",{"title":13,"path":14,"stem":15,"icon":16},"Installation","\u002Fgetting-started\u002Finstallation","1.getting-started\u002F1.installation","i-lucide-download",{"title":18,"path":19,"stem":20,"icon":21},"Configuration","\u002Fgetting-started\u002Fconfiguration","1.getting-started\u002F2.configuration","i-lucide-settings",{"title":23,"path":24,"stem":25,"icon":26},"Client Setup","\u002Fgetting-started\u002Fclient-setup","1.getting-started\u002F3.client-setup","i-lucide-monitor",{"title":28,"path":29,"stem":30,"icon":31},"Type Augmentation","\u002Fgetting-started\u002Ftype-augmentation","1.getting-started\u002F4.type-augmentation","i-lucide-type",{"title":33,"path":34,"stem":35,"icon":36},"Schema Generation (NuxtHub)","\u002Fgetting-started\u002Fschema-generation","1.getting-started\u002F5.schema-generation","i-lucide-database",{"title":38,"path":39,"stem":40,"icon":41},"How It Works","\u002Fgetting-started\u002Fhow-it-works","1.getting-started\u002F6.how-it-works","i-lucide-workflow",{"title":43,"path":44,"stem":45,"children":46,"page":67},"Core Concepts","\u002Fcore-concepts","2.core-concepts",[47,51,55,59,63],{"title":48,"path":49,"stem":50},"serverAuth()","\u002Fcore-concepts\u002Fserver-auth","2.core-concepts\u002F1.server-auth",{"title":52,"path":53,"stem":54},"Sessions","\u002Fcore-concepts\u002Fsessions","2.core-concepts\u002F2.sessions",{"title":56,"path":57,"stem":58},"Route Protection","\u002Fcore-concepts\u002Froute-protection","2.core-concepts\u002F3.route-protection",{"title":60,"path":61,"stem":62},"Auto‑Imports and Aliases","\u002Fcore-concepts\u002Fauto-imports-aliases","2.core-concepts\u002F4.auto-imports-aliases",{"title":64,"path":65,"stem":66},"Security & Caveats","\u002Fcore-concepts\u002Fsecurity-caveats","2.core-concepts\u002F5.security-caveats",false,{"title":69,"path":70,"stem":71,"children":72,"page":67},"Guides","\u002Fguides","3.guides",[73,77,82,86,90,94,99,103,107,111],{"title":74,"path":75,"stem":76},"Role‑Based Access","\u002Fguides\u002Frole-based-access","3.guides\u002F1.role-based-access",{"title":78,"path":79,"stem":80,"icon":81},"Setup diagnostics","\u002Fguides\u002Fdiagnostics","3.guides\u002F10.diagnostics","i-lucide-circle-alert",{"title":83,"path":84,"stem":85},"OAuth Providers","\u002Fguides\u002Foauth-providers","3.guides\u002F2.oauth-providers",{"title":87,"path":88,"stem":89},"Custom Database","\u002Fguides\u002Fcustom-database","3.guides\u002F3.custom-database",{"title":91,"path":92,"stem":93},"Database-less Mode","\u002Fguides\u002Fdatabase-less-mode","3.guides\u002F4.database-less-mode",{"title":95,"path":96,"stem":97,"icon":98},"External Auth Backend","\u002Fguides\u002Fexternal-auth-backend","3.guides\u002F5.external-auth-backend","i-lucide-server",{"title":100,"path":101,"stem":102},"Migrating from nuxt-auth-utils","\u002Fguides\u002Fmigrate-from-nuxt-auth-utils","3.guides\u002F6.migrate-from-nuxt-auth-utils",{"title":104,"path":105,"stem":106},"Two-Factor Authentication (TOTP + Backup Codes)","\u002Fguides\u002Ftwo-factor-auth","3.guides\u002F7.two-factor-auth",{"title":108,"path":109,"stem":110},"Testing","\u002Fguides\u002Ftesting","3.guides\u002F8.testing",{"title":112,"path":113,"stem":114},"Production Deployment","\u002Fguides\u002Fproduction-deployment","3.guides\u002F9.production-deployment",{"title":116,"path":117,"stem":118,"children":119,"page":67},"Integrations","\u002Fintegrations","4.integrations",[120,124,128,132],{"title":121,"path":122,"stem":123},"NuxtHub","\u002Fintegrations\u002Fnuxthub","4.integrations\u002F1.nuxthub",{"title":125,"path":126,"stem":127},"DevTools","\u002Fintegrations\u002Fdevtools","4.integrations\u002F2.devtools",{"title":129,"path":130,"stem":131},"Convex","\u002Fintegrations\u002Fconvex","4.integrations\u002F3.convex",{"title":133,"path":134,"stem":135},"i18n","\u002Fintegrations\u002Fi18n","4.integrations\u002F4.i18n",{"title":137,"path":138,"stem":139,"children":140,"page":67},"API Reference","\u002Fapi","5.api",[141,145,149,153],{"title":142,"path":143,"stem":144},"Composables","\u002Fapi\u002Fcomposables","5.api\u002F1.composables",{"title":146,"path":147,"stem":148},"Server Utilities","\u002Fapi\u002Fserver-utils","5.api\u002F2.server-utils",{"title":150,"path":151,"stem":152},"Components","\u002Fapi\u002Fcomponents","5.api\u002F3.components",{"title":154,"path":155,"stem":156},"Types","\u002Fapi\u002Ftypes","5.api\u002F4.types",{"title":158,"path":159,"stem":160,"children":161,"icon":81},"Errors","\u002Ferrors","6.errors\u002F0.index",[162,164,168,172,176,180,184,188,192,196,200,204,208,212],{"title":163,"path":159,"stem":160},"Overview",{"title":165,"path":166,"stem":167},"Better Auth CLI is not installed","\u002Ferrors\u002Fnuxt-auth-cli-missing","6.errors\u002Fnuxt-auth-cli-missing",{"title":169,"path":170,"stem":171},"Better Auth CLI version does not match better-auth","\u002Ferrors\u002Fnuxt-auth-cli-version-mismatch","6.errors\u002Fnuxt-auth-cli-version-mismatch",{"title":173,"path":174,"stem":175},"Auth configuration failed to load","\u002Ferrors\u002Fnuxt-auth-config-load-failed","6.errors\u002Fnuxt-auth-config-load-failed",{"title":177,"path":178,"stem":179},"Schema generator returned no code","\u002Ferrors\u002Fnuxt-auth-empty-schema","6.errors\u002Fnuxt-auth-empty-schema",{"title":181,"path":182,"stem":183},"Invalid server auth config export","\u002Ferrors\u002Fnuxt-auth-invalid-config-export","6.errors\u002Fnuxt-auth-invalid-config-export",{"title":185,"path":186,"stem":187},"Auth plugin path must be absolute","\u002Ferrors\u002Fnuxt-auth-invalid-plugin-source","6.errors\u002Fnuxt-auth-invalid-plugin-source",{"title":189,"path":190,"stem":191},"Missing auth configuration","\u002Ferrors\u002Fnuxt-auth-missing-config","6.errors\u002Fnuxt-auth-missing-config",{"title":193,"path":194,"stem":195},"NuxtHub database alias is missing","\u002Ferrors\u002Fnuxt-auth-missing-hub-db","6.errors\u002Fnuxt-auth-missing-hub-db",{"title":197,"path":198,"stem":199},"No database provider is enabled","\u002Ferrors\u002Fnuxt-auth-no-database-provider","6.errors\u002Fnuxt-auth-no-database-provider",{"title":201,"path":202,"stem":203},"Auth schema generation failed","\u002Ferrors\u002Fnuxt-auth-schema-generation-failed","6.errors\u002Fnuxt-auth-schema-generation-failed",{"title":205,"path":206,"stem":207},"Custom session storage is missing","\u002Ferrors\u002Fnuxt-auth-schema-storage-required","6.errors\u002Fnuxt-auth-schema-storage-required",{"title":209,"path":210,"stem":211},"Secondary storage in client-only mode","\u002Ferrors\u002Fnuxt-auth-storage-client-only","6.errors\u002Fnuxt-auth-storage-client-only",{"title":213,"path":214,"stem":215},"Unsupported database dialect","\u002Ferrors\u002Fnuxt-auth-unsupported-dialect","6.errors\u002Fnuxt-auth-unsupported-dialect",{"id":217,"title":64,"body":218,"description":832,"extension":833,"links":834,"meta":835,"navigation":295,"path":65,"seo":836,"stem":66,"__hash__":837},"docs\u002F2.core-concepts\u002F5.security-caveats.md",{"type":219,"value":220,"toc":822},"minimark",[221,225,230,233,237,253,364,371,375,398,422,442,453,458,461,467,624,629,686,697,760,764,775,782,786,797,800,803,807,818],[222,223,224],"p",{},"Use this page when you are moving from “it works locally” to “it is safe to deploy”.",[226,227,229],"h2",{"id":228},"client-redirects-are-not-security","Client redirects are not security",[222,231,232],{},"Client-side redirects improve UX but don't prevent unauthorized access. Always validate on the server.",[226,234,236],{"id":235},"csrf-origin-checks","CSRF \u002F origin checks",[222,238,239,240,244,245,248,249,252],{},"Better Auth performs origin checks for cookie-based requests (it validates ",[241,242,243],"code",{},"Origin"," \u002F ",[241,246,247],{},"Referer","). If you use multiple domains (custom domains, preview URLs, etc.), add them to ",[241,250,251],{},"trustedOrigins"," in your auth config.",[254,255,261],"pre",{"className":256,"code":257,"filename":258,"language":259,"meta":260,"style":260},"language-ts shiki shiki-themes one-light synthwave-84 synthwave-84","import { defineServerAuth } from '@nuxtjs\u002Fbetter-auth\u002Fconfig'\n\nexport default defineServerAuth({\n  trustedOrigins: [\n    'http:\u002F\u002Flocalhost:3000',\n    'https:\u002F\u002Fyour-domain.com',\n    'https:\u002F\u002Fyour-preview.workers.dev',\n  ],\n})\n","server\u002Fauth.config.ts","ts","",[241,262,263,290,297,314,327,336,344,352,358],{"__ignoreMap":260},[264,265,268,272,276,280,283,286],"span",{"class":266,"line":267},"line",1,[264,269,271],{"class":270},"sqe1H","import",[264,273,275],{"class":274},"s17Py"," { ",[264,277,279],{"class":278},"sYvLG","defineServerAuth",[264,281,282],{"class":274}," } ",[264,284,285],{"class":270},"from",[264,287,289],{"class":288},"sPAZv"," '@nuxtjs\u002Fbetter-auth\u002Fconfig'\n",[264,291,293],{"class":266,"line":292},2,[264,294,296],{"emptyLinePlaceholder":295},true,"\n",[264,298,300,303,307,311],{"class":266,"line":299},3,[264,301,302],{"class":270},"export",[264,304,306],{"class":305},"sKg8T"," default",[264,308,310],{"class":309},"sfT9l"," defineServerAuth",[264,312,313],{"class":274},"({\n",[264,315,317,320,324],{"class":266,"line":316},4,[264,318,319],{"class":278},"  trustedOrigins",[264,321,323],{"class":322},"sVnqq",":",[264,325,326],{"class":274}," [\n",[264,328,330,333],{"class":266,"line":329},5,[264,331,332],{"class":288},"    'http:\u002F\u002Flocalhost:3000'",[264,334,335],{"class":274},",\n",[264,337,339,342],{"class":266,"line":338},6,[264,340,341],{"class":288},"    'https:\u002F\u002Fyour-domain.com'",[264,343,335],{"class":274},[264,345,347,350],{"class":266,"line":346},7,[264,348,349],{"class":288},"    'https:\u002F\u002Fyour-preview.workers.dev'",[264,351,335],{"class":274},[264,353,355],{"class":266,"line":354},8,[264,356,357],{"class":274},"  ],\n",[264,359,361],{"class":266,"line":360},9,[264,362,363],{"class":274},"})\n",[365,366,367,368,370],"important",{},"If you deploy preview environments, you must include the preview origin in ",[241,369,251],{},". Otherwise, sign-in or sign-up requests can fail origin validation even when the API endpoint is healthy.",[226,372,374],{"id":373},"api-enforcement-behavior","API enforcement behavior",[222,376,377,378,381,382,385,386,389,390,393,394,397],{},"The built-in Nitro middleware checks ",[241,379,380],{},"routeRules.auth"," for app-owned ",[241,383,384],{},"\u002Fapi\u002F**"," routes. It skips Better Auth's ",[241,387,388],{},"\u002Fapi\u002Fauth\u002F**"," handler and known framework or module internals such as ",[241,391,392],{},"\u002Fapi\u002F_nuxt_icon\u002F**"," and ",[241,395,396],{},"\u002Fapi\u002F_better-auth\u002F**",", so broad route rules do not break auth, icons, or module tooling.",[222,399,400,401,404,405,404,408,404,411,404,414,417,418,421],{},"Do not combine an auth rule with ",[241,402,403],{},"cache",", ",[241,406,407],{},"swr",[241,409,410],{},"isr",[241,412,413],{},"static",[241,415,416],{},"prerender",", or ",[241,419,420],{},"proxy",". Those rules can run before authentication or reuse a response across users. The module rejects direct and inherited combinations during setup.",[222,423,424,425,404,428,404,431,404,434,437,438,441],{},"Known public asset namespaces (",[241,426,427],{},"\u002F_fonts",[241,429,430],{},"\u002F_ipx",[241,432,433],{},"\u002F_nuxt",[241,435,436],{},"\u002F_scripts\u002Fassets",", and ",[241,439,440],{},"\u002Fapi\u002F_nuxt_icon",", including their subpaths) are excluded from route-rule auth and its conflict validation in development and production. These paths must not contain private application routes. Authentication and devtools API paths still undergo conflict validation.",[222,443,444,445,448,449,452],{},"Registering a dev server handler does not exempt an application route: handlers can fall through to Nitro. For a custom public asset prefix, explicitly set ",[241,446,447],{},"auth: false",". If an asset module overwrites that route rule during setup, set the exclusion in a ",[241,450,451],{},"nitro:config"," hook.",[454,455,457],"h3",{"id":456},"customizing-unauthorized-behavior","Customizing Unauthorized Behavior",[222,459,460],{},"By default, unauthorized requests to protected routes receive a 401 response. To customize:",[222,462,463],{},[464,465,466],"strong",{},"Redirect to login instead of 401:",[254,468,471],{"className":256,"code":469,"filename":470,"language":259,"meta":260,"style":260},"import { sendRedirect } from 'h3'\n\nexport default defineEventHandler(async (event) => {\n  const session = await getUserSession(event)\n  if (!session && event.path.startsWith('\u002Fapi\u002Fprotected')) {\n    return sendRedirect(event, '\u002Flogin', 302)\n  }\n})\n","server\u002Fmiddleware\u002Fauth.ts",[241,472,473,489,493,524,550,590,615,620],{"__ignoreMap":260},[264,474,475,477,479,482,484,486],{"class":266,"line":267},[264,476,271],{"class":270},[264,478,275],{"class":274},[264,480,481],{"class":278},"sendRedirect",[264,483,282],{"class":274},[264,485,285],{"class":270},[264,487,488],{"class":288}," 'h3'\n",[264,490,491],{"class":266,"line":292},[264,492,296],{"emptyLinePlaceholder":295},[264,494,495,497,499,502,505,508,511,515,518,521],{"class":266,"line":299},[264,496,302],{"class":270},[264,498,306],{"class":305},[264,500,501],{"class":309}," defineEventHandler",[264,503,504],{"class":274},"(",[264,506,507],{"class":270},"async",[264,509,510],{"class":274}," (",[264,512,514],{"class":513},"sgisi","event",[264,516,517],{"class":274},") ",[264,519,520],{"class":270},"=>",[264,522,523],{"class":274}," {\n",[264,525,526,529,533,537,540,543,545,547],{"class":266,"line":316},[264,527,528],{"class":270},"  const",[264,530,532],{"class":531},"s6Rhl"," session",[264,534,536],{"class":535},"sQBpM"," =",[264,538,539],{"class":270}," await",[264,541,542],{"class":309}," getUserSession",[264,544,504],{"class":274},[264,546,514],{"class":278},[264,548,549],{"class":274},")\n",[264,551,552,555,557,561,564,567,571,574,577,579,582,584,587],{"class":266,"line":329},[264,553,554],{"class":270},"  if",[264,556,510],{"class":274},[264,558,560],{"class":559},"sn-Jc","!",[264,562,563],{"class":278},"session",[264,565,566],{"class":559}," &&",[264,568,570],{"class":569},"svFNh"," event",[264,572,573],{"class":274},".",[264,575,576],{"class":278},"path",[264,578,573],{"class":274},[264,580,581],{"class":309},"startsWith",[264,583,504],{"class":274},[264,585,586],{"class":288},"'\u002Fapi\u002Fprotected'",[264,588,589],{"class":274},")) {\n",[264,591,592,595,598,600,602,604,607,609,613],{"class":266,"line":338},[264,593,594],{"class":270},"    return",[264,596,597],{"class":309}," sendRedirect",[264,599,504],{"class":274},[264,601,514],{"class":278},[264,603,404],{"class":274},[264,605,606],{"class":288},"'\u002Flogin'",[264,608,404],{"class":274},[264,610,612],{"class":611},"s3ZNE","302",[264,614,549],{"class":274},[264,616,617],{"class":266,"line":346},[264,618,619],{"class":274},"  }\n",[264,621,622],{"class":266,"line":354},[264,623,363],{"class":274},[222,625,626],{},[464,627,628],{},"Return JSON error for API routes:",[254,630,632],{"className":256,"code":631,"language":259,"meta":260,"style":260},"\u002F\u002F This is the default behavior for \u002Fapi\u002F* routes\nthrow createError({\n  statusCode: 401,\n  data: { error: 'Authentication required' }\n})\n",[241,633,634,640,650,662,682],{"__ignoreMap":260},[264,635,636],{"class":266,"line":267},[264,637,639],{"class":638},"st7cf","\u002F\u002F This is the default behavior for \u002Fapi\u002F* routes\n",[264,641,642,645,648],{"class":266,"line":292},[264,643,644],{"class":270},"throw",[264,646,647],{"class":309}," createError",[264,649,313],{"class":274},[264,651,652,655,657,660],{"class":266,"line":299},[264,653,654],{"class":278},"  statusCode",[264,656,323],{"class":322},[264,658,659],{"class":611}," 401",[264,661,335],{"class":274},[264,663,664,667,669,671,674,676,679],{"class":266,"line":316},[264,665,666],{"class":278},"  data",[264,668,323],{"class":322},[264,670,275],{"class":274},[264,672,673],{"class":278},"error",[264,675,323],{"class":322},[264,677,678],{"class":288}," 'Authentication required'",[264,680,681],{"class":274}," }\n",[264,683,684],{"class":266,"line":329},[264,685,363],{"class":274},[222,687,688,689,692,693,696],{},"If you want different behavior (e.g. enforce ",[241,690,691],{},"auth: 'user'"," for APIs), add your own Nitro middleware and\u002For call ",[241,694,695],{},"requireUserSession(event)"," directly inside handlers.",[254,698,701],{"className":256,"code":699,"filename":700,"language":259,"meta":260,"style":260},"export default defineEventHandler(async (event) => {\n  await requireUserSession(event)\n  return { ok: true }\n})\n","server\u002Fapi\u002Fsecret.get.ts",[241,702,703,725,739,756],{"__ignoreMap":260},[264,704,705,707,709,711,713,715,717,719,721,723],{"class":266,"line":267},[264,706,302],{"class":270},[264,708,306],{"class":305},[264,710,501],{"class":309},[264,712,504],{"class":274},[264,714,507],{"class":270},[264,716,510],{"class":274},[264,718,514],{"class":513},[264,720,517],{"class":274},[264,722,520],{"class":270},[264,724,523],{"class":274},[264,726,727,730,733,735,737],{"class":266,"line":292},[264,728,729],{"class":270},"  await",[264,731,732],{"class":309}," requireUserSession",[264,734,504],{"class":274},[264,736,514],{"class":278},[264,738,549],{"class":274},[264,740,741,744,746,749,751,754],{"class":266,"line":299},[264,742,743],{"class":270},"  return",[264,745,275],{"class":274},[264,747,748],{"class":278},"ok",[264,750,323],{"class":322},[264,752,753],{"class":611}," true",[264,755,681],{"class":274},[264,757,758],{"class":266,"line":316},[264,759,363],{"class":274},[226,761,763],{"id":762},"default-login-route","Default login route",[222,765,766,767,770,771,774],{},"Unauthenticated users are redirected to ",[241,768,769],{},"\u002Flogin"," when a page requires auth. To use another path, set ",[241,772,773],{},"redirectTo"," on the protected route rule (or page meta auth object).",[776,777,778,779,781],"warning",{},"If your ",[241,780,773],{}," target does not exist, users will be redirected to a 404 page. Ensure redirect targets are valid app routes.",[226,783,785],{"id":784},"rate-limiting","Rate limiting",[222,787,788,789,796],{},"Better Auth includes a ",[790,791,795],"a",{"href":792,"rel":793},"https:\u002F\u002Fwww.better-auth.com\u002Fdocs\u002Fconcepts\u002Frate-limit",[794],"nofollow","built-in rate limiter",". It is enabled by default in production with a 60-second window and a maximum of 100 requests. It is disabled by default in development.",[222,798,799],{},"Rate-limit data is stored in memory by default. For serverless or multi-instance deployments, configure Better Auth to use database, secondary storage, or custom storage so instances do not rely on separate in-memory counters.",[801,802],"read-more",{"title":112,"to":113},[226,804,806],{"id":805},"devtools-in-production","DevTools in production",[222,808,809,810,813,814,817],{},"DevTools are automatically disabled when ",[241,811,812],{},"NODE_ENV=production",". The ",[241,815,816],{},"\u002Fapi\u002F_better-auth\u002F*"," endpoints and devtools page are never registered in production builds.",[819,820,821],"style",{},"html pre.shiki code .sqe1H, html code.shiki .sqe1H{--shiki-light:#A626A4;--shiki-default:#FEDE5D;--shiki-dark:#FEDE5D}html pre.shiki code .s17Py, html code.shiki .s17Py{--shiki-light:#383A42;--shiki-default:#BBBBBB;--shiki-dark:#BBBBBB}html pre.shiki code .sYvLG, html code.shiki .sYvLG{--shiki-light:#E45649;--shiki-default:#FF7EDB;--shiki-dark:#FF7EDB}html pre.shiki code .sPAZv, html code.shiki .sPAZv{--shiki-light:#50A14F;--shiki-default:#FF8B39;--shiki-dark:#FF8B39}html pre.shiki code .sKg8T, html code.shiki .sKg8T{--shiki-light:#E45649;--shiki-default:#FEDE5D;--shiki-dark:#FEDE5D}html pre.shiki code .sfT9l, html code.shiki .sfT9l{--shiki-light:#4078F2;--shiki-default:#36F9F6;--shiki-dark:#36F9F6}html pre.shiki code .sVnqq, html code.shiki .sVnqq{--shiki-light:#0184BC;--shiki-default:#B6B1B1;--shiki-dark:#B6B1B1}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sgisi, html code.shiki .sgisi{--shiki-light:#383A42;--shiki-light-font-style:inherit;--shiki-default:#FF7EDB;--shiki-default-font-style:italic;--shiki-dark:#FF7EDB;--shiki-dark-font-style:italic}html pre.shiki code .s6Rhl, html code.shiki .s6Rhl{--shiki-light:#986801;--shiki-default:#FF7EDB;--shiki-dark:#FF7EDB}html pre.shiki code .sQBpM, html code.shiki .sQBpM{--shiki-light:#0184BC;--shiki-default:#FFFFFFEE;--shiki-dark:#FFFFFFEE}html pre.shiki code .sn-Jc, html code.shiki .sn-Jc{--shiki-light:#0184BC;--shiki-default:#FEDE5D;--shiki-dark:#FEDE5D}html pre.shiki code .svFNh, html code.shiki .svFNh{--shiki-light:#383A42;--shiki-default:#FF7EDB;--shiki-dark:#FF7EDB}html pre.shiki code .s3ZNE, html code.shiki .s3ZNE{--shiki-light:#986801;--shiki-default:#F97E72;--shiki-dark:#F97E72}html pre.shiki code .st7cf, html code.shiki .st7cf{--shiki-light:#A0A1A7;--shiki-light-font-style:italic;--shiki-default:#848BBD;--shiki-default-font-style:italic;--shiki-dark:#848BBD;--shiki-dark-font-style:italic}",{"title":260,"searchDepth":292,"depth":292,"links":823},[824,825,826,829,830,831],{"id":228,"depth":292,"text":229},{"id":235,"depth":292,"text":236},{"id":373,"depth":292,"text":374,"children":827},[828],{"id":456,"depth":299,"text":457},{"id":762,"depth":292,"text":763},{"id":784,"depth":292,"text":785},{"id":805,"depth":292,"text":806},"What is enforced where, and what you should not assume.","md",null,{},{"title":64,"description":832},"7cofrVR4BFl6XnfYCMdDl6upOfCtGffPzNkd60RHgaY",[839,841],{"title":60,"path":61,"stem":62,"description":840,"children":-1},"What the module registers for you.",{"title":74,"path":75,"stem":76,"description":842,"children":-1},"Protect routes using generic field matching on AuthUser.",1792535506863]