14 KiB
title |
---|
import useBaseUrl from '@docusaurus/useBaseUrl'; import DefaultBehaviour from './_default-behaviour.md'; import OverrideIntro from './_override-intro.md'; import OverrideExampleIntro from './_override-example-intro.md'; import UsingAuthNote from './_using-auth-note.md'; import WaspFileStructureNote from './_wasp-file-structure-note.md'; import UsernameGenerateExplanation from './_username-generate-explanation.md'; import GetUserFieldsType from './_getuserfields-type.md'; import ApiReferenceIntro from './_api-reference-intro.md';
Wasp supports Google Authentication out of the box. Google Auth is arguably the best external auth option, as most users on the web already have Google accounts.
Enabling it lets your users log in using their existing Google accounts, greatly simplifying the process and enhancing the user experience.
Let's walk through enabling Google authentication, explain some of the default settings, and show how to override them.
Setting up Google Auth
Enabling Google Authentication comes down to a series of steps:
- Enabling Google authentication in the Wasp file.
- Adding the
User
entity. - Creating a Google OAuth app.
- Adding the neccessary Routes and Pages
- Using Auth UI components in our Pages.
1. Adding Google Auth to Your Wasp File
Let's start by properly configuring the Auth object:
app myApp {
wasp: {
version: "^0.11.0"
},
title: "My App",
auth: {
// 1. Specify the User entity (we'll define it next)
// highlight-next-line
userEntity: User,
methods: {
// 2. Enable Google Auth
// highlight-next-line
google: {}
},
onAuthFailedRedirectTo: "/login"
},
}
app myApp {
wasp: {
version: "^0.11.0"
},
title: "My App",
auth: {
// 1. Specify the User entity (we'll define it next)
// highlight-next-line
userEntity: User,
methods: {
// 2. Enable Google Auth
// highlight-next-line
google: {}
},
onAuthFailedRedirectTo: "/login"
},
}
userEntity
is explained in the social auth overview.
2. Adding the User Entity
Let's now define the app.auth.userEntity
entity:
// ...
// 3. Define the User entity
// highlight-next-line
entity User {=psl
id Int @id @default(autoincrement())
// ...
psl=}
// ...
// 3. Define the User entity
// highlight-next-line
entity User {=psl
id Int @id @default(autoincrement())
// ...
psl=}
3. Creating a Google OAuth App
To use Google as an authentication method, you'll first need to create a Google project and provide Wasp with your client key and secret. Here's how you do it:
- Create a Google Cloud Platform account if you do not already have one: https://cloud.google.com/
- Create and configure a new Google project here: https://console.cloud.google.com/home/dashboard
- Search for OAuth in the top bar, click on OAuth consent screen.
-
Select what type of app you want, we will go with External.
-
Fill out applicable information on Page 1.
-
On Page 2, Scopes, you should select
userinfo.profile
. You can optionally search for other things, likeemail
. -
Add any test users you want on Page 3.
- Next, click Credentials.
-
Select Create Credentials.
-
Select OAuth client ID.
-
Complete the form
-
Under Authorized redirect URIs, put in:
http://localhost:3000/auth/login/google
- Once you know on which URL(s) your API server will be deployed, also add those URL(s).
- For example:
https://someotherhost.com/auth/login/google
- For example:
- Once you know on which URL(s) your API server will be deployed, also add those URL(s).
-
When you save, you can click the Edit icon and your credentials will be shown.
- Copy your Client ID and Client secret as you will need them in the next step.
4. Adding Environment Variables
Add these environment variables to the .env.server
file at the root of your project (take their values from the previous step):
GOOGLE_CLIENT_ID=your-google-client-id
GOOGLE_CLIENT_SECRET=your-google-client-secret
5. Adding the Necessary Routes and Pages
Let's define the necessary authentication Routes and Pages.
Add the following code to your main.wasp
file:
// ...
// 6. Define the routes
route LoginRoute { path: "/login", to: LoginPage }
page LoginPage {
component: import { Login } from "@client/pages/auth.jsx"
}
// ...
// 6. Define the routes
route LoginRoute { path: "/login", to: LoginPage }
page LoginPage {
component: import { Login } from "@client/pages/auth.tsx"
}
We'll define the React components for these pages in the client/pages/auth.{jsx,tsx}
file below.
6. Create the Client Pages
:::info We are using Tailwind CSS to style the pages. Read more about how to add it here. :::
Let's now create a auth.{jsx,tsx}
file in the client/pages
.
It should have the following code:
import { LoginForm } from '@wasp/auth/forms/Login'
export function Login() {
return (
<Layout>
<LoginForm />
</Layout>
)
}
// A layout component to center the content
export function Layout({ children }) {
return (
<div className="w-full h-full bg-white">
<div className="min-w-full min-h-[75vh] flex items-center justify-center">
<div className="w-full h-full max-w-sm p-5 bg-white">
<div>{children}</div>
</div>
</div>
</div>
)
}
import { LoginForm } from '@wasp/auth/forms/Login'
export function Login() {
return (
<Layout>
<LoginForm />
</Layout>
)
}
// A layout component to center the content
export function Layout({ children }: { children: React.ReactNode }) {
return (
<div className="w-full h-full bg-white">
<div className="min-w-full min-h-[75vh] flex items-center justify-center">
<div className="w-full h-full max-w-sm p-5 bg-white">
<div>{children}</div>
</div>
</div>
</div>
)
}
:::info Auth UI Our pages use an automatically-generated Auth UI component. Read more about Auth UI components here. :::
Conclusion
Yay, we've successfully set up Google Auth! 🎉
Running wasp db migrate-dev
and wasp start
should now give you a working app with authentication.
To see how to protect specific pages (i.e., hide them from non-authenticated users), read the docs on using auth.
Default Behaviour
Add google: {}
to the auth.methods
dictionary to use it with default settings:
app myApp {
wasp: {
version: "^0.11.0"
},
title: "My App",
auth: {
userEntity: User,
methods: {
// highlight-next-line
google: {}
},
onAuthFailedRedirectTo: "/login"
},
}
app myApp {
wasp: {
version: "^0.11.0"
},
title: "My App",
auth: {
userEntity: User,
methods: {
// highlight-next-line
google: {}
},
onAuthFailedRedirectTo: "/login"
},
}
Overrides
Using the User's Provider Account Details
app myApp {
wasp: {
version: "^0.11.0"
},
title: "My App",
auth: {
userEntity: User,
methods: {
google: {
// highlight-next-line
configFn: import { getConfig } from "@server/auth/google.js",
// highlight-next-line
getUserFieldsFn: import { getUserFields } from "@server/auth/google.js"
}
},
onAuthFailedRedirectTo: "/login"
},
}
entity User {=psl
id Int @id @default(autoincrement())
username String @unique
displayName String
psl=}
// ...
import { generateAvailableDictionaryUsername } from '@wasp/core/auth.js'
export const getUserFields = async (_context, args) => {
const username = await generateAvailableDictionaryUsername()
const displayName = args.profile.displayName
return { username, displayName }
}
export function getConfig() {
return {
clientID, // look up from env or elsewhere
clientSecret, // look up from env or elsewhere
scope: ['profile', 'email'],
}
}
app myApp {
wasp: {
version: "^0.11.0"
},
title: "My App",
auth: {
userEntity: User,
methods: {
google: {
// highlight-next-line
configFn: import { getConfig } from "@server/auth/google.js",
// highlight-next-line
getUserFieldsFn: import { getUserFields } from "@server/auth/google.js"
}
},
onAuthFailedRedirectTo: "/login"
},
}
entity User {=psl
id Int @id @default(autoincrement())
username String @unique
displayName String
psl=}
// ...
import type { GetUserFieldsFn } from '@wasp/types'
import { generateAvailableDictionaryUsername } from '@wasp/core/auth.js'
export const getUserFields: GetUserFieldsFn = async (_context, args) => {
const username = await generateAvailableDictionaryUsername()
const displayName = args.profile.displayName
return { username, displayName }
}
export function getConfig() {
return {
clientID, // look up from env or elsewhere
clientSecret, // look up from env or elsewhere
scope: ['profile', 'email'],
}
}
Using Auth
API Reference
app myApp {
wasp: {
version: "^0.11.0"
},
title: "My App",
auth: {
userEntity: User,
methods: {
google: {
// highlight-next-line
configFn: import { getConfig } from "@server/auth/google.js",
// highlight-next-line
getUserFieldsFn: import { getUserFields } from "@server/auth/google.js"
}
},
onAuthFailedRedirectTo: "/login"
},
}
app myApp {
wasp: {
version: "^0.11.0"
},
title: "My App",
auth: {
userEntity: User,
methods: {
google: {
// highlight-next-line
configFn: import { getConfig } from "@server/auth/google.js",
// highlight-next-line
getUserFieldsFn: import { getUserFields } from "@server/auth/google.js"
}
},
onAuthFailedRedirectTo: "/login"
},
}
The google
dict has the following properties:
-
configFn: ServerImport
This function must return an object with the Client ID, the Client Secret, and the scope for the OAuth provider.
export function getConfig() { return { clientID, // look up from env or elsewhere clientSecret, // look up from env or elsewhere scope: ['profile', 'email'], } }
export function getConfig() { return { clientID, // look up from env or elsewhere clientSecret, // look up from env or elsewhere scope: ['profile', 'email'], } }
-
getUserFieldsFn: ServerImport
This function must return the user fields to use when creating a new user.
The
context
contains theUser
entity, and theargs
object contains Google profile information. You can do whatever you want with this information (e.g., generate a username).Here is how to generate a username based on the Google display name:
import { generateAvailableUsername } from '@wasp/core/auth.js' export const getUserFields = async (_context, args) => { const username = await generateAvailableUsername( args.profile.displayName.split(' '), { separator: '.' } ) return { username } }
import type { GetUserFieldsFn } from '@wasp/types' import { generateAvailableUsername } from '@wasp/core/auth.js' export const getUserFields: GetUserFieldsFn = async (_context, args) => { const username = await generateAvailableUsername( args.profile.displayName.split(' '), { separator: '.' } ) return { username } }