Authentication

Authentication strategies allow users to identify themselves to Keystone. This can be used to restrict access to the AdminUI, and to configure access controls.

• For password logins see: auth-password
• For social logins using Passport.js see: auth-passport

Usage

const { PasswordAuthStrategy } = require('@keystonejs/auth-password');

const keystone = new Keystone({...});

const authStrategy = keystone.createAuthStrategy({
  type: PasswordAuthStrategy,
  list: 'User',
  config: {...},
  hooks: {...},
  plugins: [...],
});

You then provide authStrategy to apps that facilitate login (typically the Admin UI):

module.exports = {
  keystone,
  apps: [new AdminUIApp({ authStrategy })],
};

Config

Note: Different authentication strategies may have additional config options. See the documentation for individual authentication strategies for more details.

type

A valid authentication strategy.

list

Authentication strategies need to authenticate an item in a Keystone list (typically a User). The authenticated item will be provided to access control functions.

This list should have the { auth: true } access control set. See the Access control API docs for more details.

plugins

An array of functions that modify option values. Plugin functions receive (options, { keystone }), where options is the objects passed to createAuthStrategy (e.g. { type, list, config, hooks, plugins}), and keystone is the keystone object. They should return a valid options value. Plugin functions are executed in the order provided in the list, with the output options of one being passed as input to the next. The output of the final plugin is used to construct the authentication strategy.

const logAuth = ({ hooks, ...options }) => {
  return {
    ...options,
    hooks: {
      afterAuth: () => console.log('A user logged in!'),
      ...hooks,
    },
  };
};

const authStrategy = keystone.createAuthStrategy({
  type: PasswordAuthStrategy,
  list: 'User',
  plugin: [logAuth],
});

This provides a method for packaging features that can be applied to multiple lists.