Search for a command to run...
Chapter 13 of Comprehensive Guide to SvelteKitAuth: Secure Authentication for SvelteKit Apps
Senior Frontend Dev. Mostly Angular and Svelte. I will be sharing my day-to-day learning experiences here with the community.
No comments yet. Be the first to comment.
Implement secure authentication in SvelteKit effortlessly with SvelteKitAuth. Streamline OAuth integration, manage sessions, and customize flows with ease, ensuring robust user security and seamless experiences across your applications.
Chapter 14 of Comprehensive Guide to SvelteKitAuth: Secure Authentication for SvelteKit Apps
Chapter 15 of Comprehensive Guide to SvelteKitAuth: Secure Authentication for SvelteKit Apps
Chapter 14 of Comprehensive Guide to SvelteKitAuth: Secure Authentication for SvelteKit Apps
Chapter 12 of Comprehensive Guide to SvelteKitAuth: Secure Authentication for SvelteKit Apps
Chapter 11 of Comprehensive Guide to SvelteKitAuth: Secure Authentication for SvelteKit Apps
Auth.js automatically creates simple, unbranded authentication pages for handling Sign in, Sign out, Email Verification and displaying error messages. The options displayed on the sign-up page are automatically generated based on the providers specified in the options passed to Auth.js. It also provides us with the flexibility to customize them as per our requirements. In this article, we will explore the Pages option in Auth.js, its importance, and various use-cases.
In Auth.js (formerly known as NextAuth.js), pages refer to custom user interface pages that you can create to handle various authentication-related actions. These pages allow you to customize the look and feel of the authentication process to better match your application's design and user experience. The need for custom pages arises when the default pages provided by Auth.js do not meet your specific requirements or branding guidelines.
You can configure custom pages for different actions such as sign-in, sign-out, and error handling. This is done by specifying the URLs of your custom pages in the Auth.js configuration. For example, you can create custom sign-in and sign-out pages to provide a more personalized experience for your users.
Examples of custom pages include:
Built-in: The default pages provided by Auth.js.
Sign-in: A custom page where users can log in to your application.
Sign-out: A custom page that users see when they log out.
Error: A custom page to display error messages related to authentication.
Configuring custom pages is very easy; all we have to do is provide the path of the corresponding +page.svelte file in the SvelteKitAuthConfig object.
import type { Handle } from '@sveltejs/kit';
import { SvelteKitAuth, type SvelteKitAuthConfig } from '@auth/sveltekit';
import { VERCEL_SECRET, CLIENT_ID, CLIENT_SECRET, ISSUER, WELL_KNOWN } from '$env/static/private';
const { handle: getAuthConfig } = SvelteKitAuth(async (event) => {
const config: SvelteKitAuthConfig = {
...
pages: {
signIn: '/auth/signin', // src/routes/auth/signin/+page.svelte
signOut: '/auth/signout', // src/routes/auth/signout/+page.svelte
error: '/auth/error' // src/routes/auth/error/+page.svelte
}
};
return config;
});
export const handle = SvelteKitAuth(getAuthConfig) satisfies Handle;
With this simple configuration, we can display our own brand of pages for sign-in, sign-out, and error.
In the next section we will learn about the Events available with Auth.js.
In Auth.js, events are hooks that allow you to execute custom code in response to specific actions during the authentication process. These events can be used to extend the functionality of your authentication system, such as logging, analytics, or triggering other side effects. Some of the key events in Auth.js include:
signin: Triggered when a user signs in.
signout: Triggered when a user signs out.
session: Sent at the end of a request for the current session.
Configuring custom events is very easy; all we have to do is provide the path of the corresponding +page.svelte file in the SvelteKitAuthConfig object.
import type { Handle } from '@sveltejs/kit';
import { SvelteKitAuth, type SvelteKitAuthConfig } from '@auth/sveltekit';
import { VERCEL_SECRET, CLIENT_ID, CLIENT_SECRET, ISSUER, WELL_KNOWN } from '$env/static/private';
const { handle: getAuthConfig } = SvelteKitAuth(async (event) => {
const config: SvelteKitAuthConfig = {
...
events: {
signOut(message) {
// message.token & message.session
},
signIn({ account, user, isNewUser, profile }) { ... },
session({ session, token }) { ... }
}
};
return config;
});
export const handle = SvelteKitAuth(getAuthConfig) satisfies Handle;
With this simple configuration, we can respond to the events in case of sign-in and sign-out.
In conclusion, customizing authentication pages and handling events in SvelteKitAuth allows you to create a more personalized and seamless user experience. By configuring custom pages, you can ensure that your application's branding and design are consistent throughout the authentication process. Additionally, leveraging events in Auth.js enables you to execute custom code in response to specific actions, enhancing the functionality and flexibility of your authentication system. Whether you need to log user activities, integrate analytics, or trigger other side effects, these features provide the tools necessary to tailor the authentication flow to your specific needs.
Here is the link to the GitHub repository with the codebase. In the next article, we will learn to how to manage shared session between different applications in SvelteKitAuth.