Operations at scale
Cleanup, bulk operations, indexes, and shared rate limits.
Expired-invite cleanup
Cleanup is batched: POST /invite/cleanup-expired (server-only) deletes in passes of batchSize (default 500, max 5000) until drained, so table size never dictates the request's memory or duration. Run it on a cron.
const { deleted } = await auth.api.cleanupExpiredInvites();Bulk org operations
disableOrg with banMembers and deleteOrg read and delete in pages of 1000, so they stay within driver bind-parameter limits on orgs of any size.
Indexes
The schema ships with single-column indexes on the hot columns, and large invite tables benefit from two composite ones. The Database page lists them and explains the migration caveat.
Rate limits
Limits ship with the plugin (5/min on redemption endpoints, 10/min on get/check-slug) but Better Auth stores counters in memory by default. If you run more than one instance, configure Better Auth's rateLimit.storage (for example "secondary-storage" with Redis) so the limits are shared instead of per-pod.
Last updated on