Skip to main content

providers/credentials

Functions​

default()​

Signature​

default<CredentialsInputs>(config: Partial<CredentialsConfig<CredentialsInputs>>): CredentialsConfig

The Credentials provider allows you to handle signing in with arbitrary credentials, such as a username and password, domain, or two factor authentication or hardware device (e.g. YubiKey U2F / FIDO).

It is intended to support use cases where you have an existing system you need to authenticate users against.

It comes with the constraint that users authenticated in this manner are not persisted in the database, and consequently that the Credentials provider can only be used if JSON Web Tokens are enabled for sessions.

NOTE

The functionality provided for credentials based authentication is intentionally limited to discourage use of passwords due to the inherent security risks associated with them and the additional complexity associated with supporting usernames and passwords.

Example​

import Auth from "@auth/core"
import { Credentials } from "@auth/core/providers/credentials"

const request = new Request("https://example.com")
const resposne = await AuthHandler(request, {
  providers: [
    Credentials({
      credentials: {
        username: { label: "Username" },
        password: {  label: "Password", type: "password" }
      },
      async authorize({ request }) {
        const response = await fetch(request)
        if(!response.ok) return null
        return await response.json() ?? null
      }
    })
  ],
  secret: "...",
  trustHost: true,
})

See​

Type parameters​

Parameters​

NameType
configPartial<CredentialsConfig<CredentialsInputs>>

Returns​

CredentialsConfig

Interfaces​

CredentialInput​

Besieds providing type safety inside authorize it also determines how the credentials input fields will be rendered on the default sign in page.

CredentialsConfig<CredentialsInputs>​

The Credentials Provider needs to be configured.

Type parameters​

Properties​

authorize​
authorize: Function
Type declaration​

####### Signature

(credentials: undefined | Record<keyof CredentialsInputs, string>, request: Request): Awaitable<null | User>

Gives full control over how you handle the credentials received from the user.

danger

There is no validation on the user inputs by default, so make sure you do so by a popular library like Zod

####### Example

//...
async authorize(, request) {
  const response = await fetch(request)
  if(!response.ok) return null
  return await response.json() ?? null
}
//...

> ####### Parameters
>
> | Name | Type | Description |
> | :------ | :------ | :------ |
> | `credentials` | `undefined` \| `Record`<keyof `CredentialsInputs`, `string`\> | See [CredentialInput](providers_credentials.md#credentialinput) |
> | `request` | [Request]( https://developer.mozilla.org/en-US/docs/Web/API/Request ) | The original request is forward for convenience |
>
> ####### Returns
>
> `Awaitable`<`null` \| [User](types.md#user)\>
>

##### id

```ts
id: string

Uniquely identifies the provider in AuthConfig.providers It's also part of the URL

Inherited from: CommonProviderOptions.id

name​
name: string

The provider name used on the default sign-in page's sign-in button. For example if it's "Google", the corresponding button will say: "Sign in with Google"

Inherited from: CommonProviderOptions.name