Update features and dependencies

apps/web/lib/auth/server.ts

@@ -1,4 +1,5 @@
 import { betterAuth } from "better-auth";
+import { genericOAuth } from "better-auth/plugins";
 import { drizzleAdapter } from "better-auth/adapters/drizzle";
 import { db, users, sessions, accounts, verifications, eq, count } from "@epicure/db";
 import { sendEmail, verifyEmailHtml, resetPasswordHtml, welcomeHtml } from "@/lib/email";
@@ -38,8 +39,37 @@ export const auth = betterAuth({
       clientId: process.env["GOOGLE_CLIENT_ID"] ?? "",
       clientSecret: process.env["GOOGLE_CLIENT_SECRET"] ?? "",
     },
+    ...(process.env["GITHUB_CLIENT_ID"] && {
+      github: {
+        clientId: process.env["GITHUB_CLIENT_ID"],
+        clientSecret: process.env["GITHUB_CLIENT_SECRET"] ?? "",
+      },
+    }),
+    ...(process.env["DISCORD_CLIENT_ID"] && {
+      discord: {
+        clientId: process.env["DISCORD_CLIENT_ID"],
+        clientSecret: process.env["DISCORD_CLIENT_SECRET"] ?? "",
+      },
+    }),
   },
 
+  plugins: [
+    ...(process.env["AUTHENTIK_CLIENT_ID"] && process.env["AUTHENTIK_BASE_URL"] ? [
+      genericOAuth({
+        config: [
+          {
+            providerId: "authentik",
+            clientId: process.env["AUTHENTIK_CLIENT_ID"],
+            clientSecret: process.env["AUTHENTIK_CLIENT_SECRET"] ?? "",
+            // Authentik OIDC discovery URL: https://<your-authentik-domain>/application/o/<slug>/
+            discoveryUrl: `${process.env["AUTHENTIK_BASE_URL"]}/.well-known/openid-configuration`,
+            scopes: ["openid", "email", "profile"],
+          },
+        ],
+      }),
+    ] : []),
+  ],
+
   session: {
     cookieCache: {
       enabled: true,