new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

Better Auth · Plugins · all subjects

oauth-proxy/options

4 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

OAuth Proxy productionURL option

The productionURL is a required option that specifies the URL of the production server. If this value matches the baseURL in the auth config, requests will not be proxied. It defaults to the BETTER_AUTH_URL environment variable.

OAuth Proxy currentURL option

The currentURL option represents the application's current URL and is automatically determined by the plugin. It first checks the request URL, then vendor-specific environment variables from popular hosting providers, and finally falls back to the baseURL in the auth config. You only need to set this if the URL isn't being inferred correctly in your environment.

OAuth Proxy maxAge option

The maxAge option specifies the maximum age in seconds for encrypted profile payloads. Payloads older than this will be rejected to prevent replay attacks. The default is 60 seconds. It is recommended to keep this value short, between 30-60 seconds, to minimize the window for potential replay attacks while still allowing normal OAuth flows.

OAuth Proxy secret option

The secret is a dedicated secret used for encrypting and decrypting data during the OAuth proxy flow. When set, this secret is used instead of the global BETTER_AUTH_SECRET, limiting the blast radius if the key is shared across environments. A leaked proxy secret cannot forge sessions or decrypt other data protected by the main secret. All environments participating in the proxy flow must share the same secret value.

Give your agent this brain