feat(cli): enhance auth config and README with deploy guidance (#587)

Author: oscabriel

apps/cli/src/helpers/core/create-readme.ts

@@ -128,6 +128,8 @@ ${
 		: ""
 }
 
+${generateWorkersRuntimeNotes(runtime)}
+
 ${generateDeploymentCommands(packageManagerRunCmd, webDeploy, serverDeploy)}
 
 ## Project Structure
@@ -653,6 +655,29 @@ function generateScriptsList(
 	return scripts;
 }
 
+function generateWorkersRuntimeNotes(runtime: Runtime) {
+	if (runtime !== "workers") {
+		return "";
+	}
+
+	return `
+## Before Deploying to Cloudflare
+
+When you are ready to deploy your app to Cloudflare Workers, you'll have to make a couple changes.
+- Change your url environment variables to match your \`*.workers.dev\` domains generated by Cloudflare:
+
+\`\`\`bash
+# apps/web/.env
+SERVER_URL={your-production-server-domain}
+
+# apps/server/.env
+CORS_ORIGIN={your-production-web-domain}
+BETTER_AUTH_URL={your-production-server-domain}
+\`\`\`
+- In \`apps/server/lib/auth.ts\`, uncomment the \`session.cookieCache\` and \`advanced.crossSubDomainCookies\` sections and replace \`<your-workers-subdomain>\` with your actual workers subdomain. These settings are required to ensure cookies are transferred properly between your web and server domains.
+`;
+}
+
 function generateDeploymentCommands(
 	packageManagerRunCmd: string,
 	webDeploy?: string,

apps/cli/templates/auth/better-auth/server/base/src/lib/auth.ts.hbs

@@ -164,6 +164,13 @@ export const auth = betterAuth<BetterAuthOptions>({
   emailAndPassword: {
     enabled: true,
   },
+  // uncomment cookieCache setting when ready to deploy to Cloudflare using *.workers.dev domains
+  // session: {
+  //   cookieCache: {
+  //     enabled: true,
+  //     maxAge: 60,
+  //   },
+  // },
   secret: env.BETTER_AUTH_SECRET,
   baseURL: env.BETTER_AUTH_URL,
   advanced: {
@@ -172,6 +179,12 @@ export const auth = betterAuth<BetterAuthOptions>({
       secure: true,
       httpOnly: true,
     },
+    // uncomment crossSubDomainCookies setting when ready to deploy and replace <your-workers-subdomain> with your actual workers subdomain
+    // https://developers.cloudflare.com/workers/wrangler/configuration/#workersdev
+    // crossSubDomainCookies: {
+    //   enabled: true,
+    //   domain: "<your-workers-subdomain>",
+    // },
   },
   {{#if (eq payments "polar")}}
   plugins: [