Better auth is by far the best option out there. We've adopted it and couldn't be happier not having to manage 2 sources of truth.