IndieAuth authentication and authorization endpoint for Indiekit. Grants and verifies access tokens and authenticates users.
npm i @indiekit/endpoint-auth
Add @indiekit/endpoint-auth
to your list of plug-ins, specifying options as required:
{
"plugins": ["@indiekit/endpoint-auth"],
"@indiekit/endpoint-auth": {
"mountPath": "/authorize",
},
}
You will also need to set the following environment variables:
-
SECRET
- used to sign and verify tokens and salt password -
PASSWORD_SECRET
- hashed and salted password used when signing in. You can generate this value by visiting/auth/new-password
Option | Type | Description |
---|---|---|
mountPath |
string |
Path to authorization endpoint. Optional, defaults to /auth . |