Skip to content

04. Authentication Strategies

Gabriel Lebec edited this page Sep 14, 2016 · 3 revisions

All possible authentication strategies live in the server/app/configure/authentication folder. They can be toggled on and off using the ENABLED_AUTH_STRATEGIES array in server/app/configure/authentication/index.js.

Local strategy

Note that a local strategy is turned on by default, providing prebuilt /login and and /logout routes. As of 2016-09-14, there is no signup route included; you will have to implement it yourself.

Third-party strategies

Each included OAuth strategy is built enough only to be able to create new users based on third-party authentication. If you need to access specific APIs using returned access tokens and the like, you will have to implement it yourself. The included OAuth strategies are disabled by default.