Reverify

If a user's session is not fresh, critical actions (e.g. deleting their account) will not be allowed. You would have to terminate their session, force them to sign-in again, and then be able to perform the action. Depending on your application, this may not be the best user experience. In some cases, routes can be protected and only accessible to active sessions. By terminating a session and making them sign-in, they're redirected to the login page and may not even know what happened.

Using Reverify, you can prompt the user to re-verify their identity without logging them out or terminating their current session.

npm install @better-auth-kit/reverify

import { reverify } from "@better-auth-kit/reverify";
 
export const auth = betterAuth({
  plugins: [reverify()],
});

import { reverifyClient } from "@better-auth-kit/reverify/client";
 
export const authClient = createAuthClient({
  plugins: [reverifyClient()],
});

const { data } = await client.reverify.password({
  password: "some-password",
});
 
const isValid = data?.valid;