#@authxyz/local

Authxyz's local auth provider comes with a wide range of functionality like login , register, reset password , verification and so on...

Create a new project with an awsome name and install the following dependencies.

npm i @authxyz/local @authxyz/adapter-mongo express dotenv zod mongoose

Add this code to your file to make your project up and running.

import mongoose from "mongoose";
import { config } from "dotenv";

import MongoAdapter from "@authxyz/adapter-mongodb"
import Local from "@authxyz/local";

config();

const app = express();

app.use(express.json())

app.listen(3000, () => {
    console.log("App running on port 3000");
});

A database adapter is something that will handle the read & writes for our package for authentication.

const database = mongoose.createConnection(process.env.DATABASE_URL)

const adapter = new MongoAdapter({
    database: database
})

adapter.addUserSchema();

adataper.addUserSchema() will create a User model in your database which have a schema like this.

const schema = new Schema({
  name: String,
  email: {
    type: String,
    required: true,
    unique: true,
  },
  password: {
    type: String,
    required: true,
  },
  profileImage: String,
  role: {
    type: String,
  },
  isVerified: {
    type: Boolean,
    default: false,
  },
  provider: String,
  auth: {
    access_token: String,
    expires_in: Number,
    scope: String,
    token_type: String,
    refresh_token: String,
  },
});

const localAuth = new Local({
    roles: ["user"],
    adapter: adapter,
    auth: {
        options: { expiresIn: "7days" },
        type: "JWT",
        secret: process.env.JWT_SECRET
    }
});

• roles : Roles is an array of strings which you going to have in your app. For example user , admin etc.
• adapter : Database adapter for read & write.
• auth : An auth object which contains configuration for auth.

To create a user register route we have to use the register function provided by the Local class.

app.use(localAuth.register("/api/register", { role: "user" }));

This will create a user and returns the auth token depending upon your auth strategy.

You can customise the functions upto how much you want, simply it's upto you. See this to extend your functionality.

On a successful registration you will get a response from the server :

{
  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjY2MWZmOWRhZmM3MGVjMjhmYzRhNGQ4NiIsImlhdCI6MTcxMzM3MTYxMCwiZXhwIjoxNzEzOTc2NDEwfQ.eV7q3mi7ZmFKF-IoDVlbvy025sm23aQljhsZTAVcqio"
}

To create a user register route we have to use the register function provided by the Local class.

app.use(localAuth.login("/api/login", { role: "user" }));

See this to extend your functionality.

On a successful login you will get a response from the server :

You can use the built-in RBAC middleware of local auth to protect the routes.

app.get("/", localAuth.protect(["user"]), (req, res) =>
  res.send("protected route")
);

localAuth.protect(["user"]) this function alone will take care of the upcoming request and let the user access the endpoint if it has a role of user. You can pass down multiple roles as an array also.

Similarly you can use other functions such as forgotPassword , resetPassword, verify, resendVerification.

• #Forgot Password

  You can use forgotPassword method to add password reset functionality into your application. This requires a mail trigger.

  app.use(localAuth.forgotPassword("/forgot-password", { role: "user" }));
  

  Method	Payload
  POST	{"email": "user@example.com"}

  On a successful request you will get a response from the server :

    ```json
    { "message": "Password reset code sent." }
    ```
  

  But this alone can't do all the things. You have to actually send the password reset code to the user.

  • Create a mail client with Nodemailer and add it to your localAuth using mailConfig method.
  const mail = createTransport({
    host: "smtp.gmail.com",
    port: 465,
    secure: true,
    auth: {
      user: "<your-mail-client>",
      pass: "<your-mail-password>",
    },
  });
  
  localAuth.mailConfig(mail);
  

  • Now add a trigger so that whenever a api request to the forgot password route is successful then send a mail to the user.
  localAuth.addTrigger("onForgotPassword", ({ verificationCode, user }) => {
    const email = user["email"];
  
    return {
      config: {
        body: verificationCode,
        subject: "Password Reset Code",
        to: email,
        type: "text",
      },
      type: "onForgotPassword",
    };
  });
  

  Now this will add a trigger so that we can send a mail to the user with the reset code .

  See more about mail trigger.

• #Reset Password

  You can use resetPassword method to add password reset functionality into your application.

  app.use(localAuth.resetPassword("/reset-password", { role: "user" }));
  

  Method	Payload
  POST	{"email": "user@example.com", "password" : "new-password", "code" : 983276}

  On a successful request you will get a response from the server :

  { "message": "Password Changed." }
  

See a full example app build with the local auth provider