Introduction
Deploy a production-grade auth service to your own Cloudflare account in minutes.
bao is an auth service built on better-auth that deploys directly to your Cloudflare account. Your users’ data lives in your own D1 database — it never touches our servers.
What’s included
- Secret rotation — versioned secrets encrypted at rest in KV, rotated automatically every quarter
- JWKS & asymmetric keys — service-to-service auth without sharing secrets
- Social auth — GitHub and Google out of the box
- Payments — Polar integration for subscriptions and checkouts
- Config dashboard — manage everything from console.getbao.dev