Implement User Authentication Mutations

[0xdevcollins]

Description

Create mutation hooks for user authentication operations including password management, session handling, and sign-out functionality using Better Auth.

Context

This issue covers the core authentication mutations that allow users to manage their authentication state and credentials.

Reference:

• https://www.better-auth.com/docs/basic-usage#signout
• https://www.better-auth.com/docs/concepts/session-management#revoke-session
• https://www.better-auth.com/docs/concepts/users-accounts#change-password

Files to create

• change-password-mutation.ts
• sign-out-mutation.ts
• revoke-session-mutation.ts

Mutations to Implement

1. Change Password Mutation

File: user/change-password-mutation.ts

• Create useChangePassword mutation hook

    const { mutate: changePassword, isPending, isError } = useChangePassword();
  
    changePassword({
      currentPassword: string;
      newPassword: string;
      confirmPassword: string;
      revokeOtherSessions?: boolean;
    });

• Validate current password before change

• Enforce password strength requirements

• Handle Better Auth password change API

• Show success/error notifications

• Invalidate user session if needed

Acceptance Criteria:

• Validates current password is correct
• New password meets security requirements (min 8 chars, uppercase, lowercase, number, special char)
• Passwords match validation
• Error handling for weak passwords
• Success toast notification
• Auto sign-out after password change (optional)

2. Sign Out Mutation

File: user/sign-out-mutation.ts

• Create useSignOut mutation hook

const { mutate: signOut, isPending } = useSignOut();

signOut(); // Signs out current user

• Clear Better Auth session
• Clear local storage/cookies
• Redirect to login page
• Clear React Query cache
• Handle sign-out errors gracefully

Acceptance Criteria:

• Clears all authentication tokens
• Removes user data from state
• Redirects to /login or home page
• Clears cached queries
• Shows confirmation toast
• Handles network errors

3. Revoke Session Mutation

File: user/revoke-session-mutation.ts

• Create useRevokeSession mutation hook

const { mutate: revokeSession } = useRevokeSession();

revokeSession({ sessionId: string });

• Revoke specific user session by ID
• Support revoking all sessions except current
• Integrate with Better Auth session management
• Update active sessions list
• Show revocation confirmation

Acceptance Criteria:

• Can revoke individual sessions
• Option to revoke all other sessions
• Updates session list immediately
• Shows success confirmation
• Handles already-revoked sessions gracefully

Technical Requirements

React Query Setup

• Use useMutation from @tanstack/react-query
• Proper error handling with Better Auth error types
• Optimistic updates where applicable
• Query invalidation after successful mutations
  Type Safety

interface ChangePasswordInput {
  currentPassword: string;
  newPassword: string;
  confirmPassword: string;
}

interface RevokeSessionInput {
  sessionId: string;
  revokeAll?: boolean;
}

Error Handling

• Handle Better Auth specific errors
• Network error handling
• Form validation errors
• User-friendly error messages

[linear]

BOU-57

[drips-wave]

This issue has been added to the Stellar Wave Program and is worth 200 Points.

🧑‍💻 Interested in contributing? Apply to work on this issue on Drips Wave, earn points, and receive rewards.

Warning

Only applications submitted via the apply link above will be considered. Please do not apply by commenting on the issue or opening a PR directly.

🤠 Repo maintainers: You can manage this issue's Points and Complexity on your Maintainer Dashboard here. Please keep an eye on applications and respond quickly 💙

ℹ️ Learn more about Drips Wave

[coderabbitai]

📝 CodeRabbit Plan Mode

Generate an implementation plan and prompts that you can use with your favorite coding agent.

• Create Plan

Examples

• Example 1
• Example 2

---

⚠️ Possible Duplicate Issue

• https://github.com/boundlessfi/bounties/issues/35

🔗 Related PRs

#16 - Add GitHub Authentication via Better Auth [closed]
#30 - feat: Implement React Query hooks for managing bounties [closed]

---

🧪 Issue enrichment is currently in open beta.

You can configure auto-planning by selecting labels in the issue_enrichment configuration.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord!

[Dprof-in-tech]

@Dprof-in-tech has applied to work on this issue as part of the Stellar Wave Program's 1st wave.

Hello, please i would love to work on this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Dprof-in-tech to this issue.

[drips-wave]

Congratulations, @Dprof-in-tech! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on January 31, 2026.

🧑‍💻 @Dprof-in-tech: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are issued when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊

[Dprof-in-tech]

Hello @0xdevcollins , thank you for assigning this issue. I have linked a PR to close it

[drips-wave]

This issue has been completed by @Dprof-in-tech as part of the Stellar Wave Program's 1st Wave 🥳

😎 @Dprof-in-tech: You earned 600 Points for completing this issue! After the current Wave ends, you'll be eligible for a percentage of the Wave's reward pool based on the percentage of total points you've earned. Learn more here.

🧑‍💻 Repo maintainers: How'd the contributor do? If you like, you can reward them with additional points by making a compliment within seven days after the Wave Program's current wave ends.