Overview
Authentication module for managing user authentication and authorization. The module automatically stores tokens in local storage when available and manages authorization headers for API requests.Features
This module provides comprehensive authentication functionality including:- Email/password login and registration
- Token management
- User profile access and updates
- Password reset flows
- OTP verification
- User invitations
Authentication Modes
The auth module is only available in user authentication mode (base44.auth).
Methods
me()
me():Gets the current authenticated user’s information.Promise<User>
Returns
User
An authenticated user.
Properties
Properties
Unique user identifier.
When the user was created.
When the user was last updated.
User’s email address.
User’s full name.
Whether the user is disabled.
Whether the user’s email has been verified.
The app ID this user belongs to.
Whether this is a service account.
User’s role in the app. Roles are configured in the app settings and determine the user’s permissions and access levels.
Additional custom fields defined in the user schema. Any custom properties added to the user schema in the app will be available here with their configured types and values.
Example
updateMe()
updateMe(Updates the current authenticated user’s information. You can updatedata):Promise<User>
role and any custom fields defined in your
User entity schema.
The role value must be either 'user' or 'admin'.
The following fields are read-only and can’t be changed with this method:
id, email, full_name, created_date, updated_date, and created_by.Parameters
Object containing the fields to update.
Returns
User
An authenticated user.
Properties
Properties
Unique user identifier.
When the user was created.
When the user was last updated.
User’s email address.
User’s full name.
Whether the user is disabled.
Whether the user’s email has been verified.
The app ID this user belongs to.
Whether this is a service account.
User’s role in the app. Roles are configured in the app settings and determine the user’s permissions and access levels.
Additional custom fields defined in the user schema. Any custom properties added to the user schema in the app will be available here with their configured types and values.
Example
redirectToLogin()
redirectToLogin(Redirects the user to the app’s login page. Redirects with a callback URL to return to after successful authentication. Requires a browser environment and can’t be used in the backend.nextUrl):void
Parameters
URL to redirect to after successful login.
Returns
void
Throws
When not in a browser environment.Examples
loginWithProvider()
loginWithProvider(Redirects the user to a third-party authentication provider’s login page. Initiates an OAuth login flow with one of the built-in providers. Requires a browser environment and can’t be used in the backend. Supported providers:provider,fromUrl?):void
'google': Google OAuth. Enabled by default.'microsoft': Microsoft OAuth. Enable Microsoft in your app’s authentication settings before specifying this provider.'facebook': Facebook Login. Enable Facebook in your app’s authentication settings before using.'apple': Sign in with Apple. Enable Apple in your app’s authentication settings before using this provider.'sso': Enterprise SSO. Set up an SSO provider in your app’s authentication settings before using this provider.
Parameters
Properties
Properties
Returns
void
Examples
logout()
logout(Logs out the current user. Removes the authentication token from local storage and Axios headers, then optionally redirects to a URL or reloads the page. Requires a browser environment and can’t be used in the backend.redirectUrl?):void
Parameters
Optional URL to redirect to after logout. Reloads the page if not provided.
Returns
void
Examples
setToken()
setToken(Sets the authentication token. Updates the authorization header for API requests and optionally saves the token to local storage for persistence. Saving to local storage requires a browser environment and is automatically skipped in backend environments.token,saveToStorage?):void
Parameters
Properties
Properties
Returns
void
Examples
loginViaEmailPassword()
loginViaEmailPassword(Logs in a registered user using email and password. Authenticates a user with email and password credentials. The user must already have a registered account. For new users, use
password,
turnstileToken?
):Promise<LoginResponse>
register() first to create an account. On successful login, automatically sets the token for subsequent requests.
Parameters
Properties
Properties
User’s email address.
User’s password.
Optional Cloudflare Turnstile CAPTCHA token for bot protection.
Returns
LoginResponse
Response from login endpoints containing user information and access token.
Properties
Properties
JWT access token for authentication.
User information.
Properties
Properties
Unique user identifier.
When the user was created.
When the user was last updated.
User’s email address.
User’s full name.
Whether the user is disabled.
Whether the user’s email has been verified.
The app ID this user belongs to.
Whether this is a service account.
User’s role in the app. Roles are configured in the app settings and determine the user’s permissions and access levels.
Examples
isAuthenticated()
isAuthenticated():Checks if the current user is authenticated.Promise<boolean>
Returns
Promise<boolean>
Promise resolving to true if authenticated, false otherwise.
Example
inviteUser()
inviteUser(Invites a user to the app. Sends an invitation email to a potential user with a specific role. Roles are configured in the app settings and determine the user’s permissions and access levels.userEmail,role):Promise<any>
Parameters
Properties
Properties
Returns
Promise<any>
Promise that resolves when the invitation is sent successfully. Throws an error if the invitation fails.
Example
register()
register(Registers a new user account. Creates a new user account with email and password. Registration sends an OTP code to the user’s email. Pass that code toparams):Promise<any>
verifyOtp() to complete verification, then log the user
in with loginViaEmailPassword().
Parameters
Registration details including email, password, and optional fields.
Properties
Properties
Returns
Promise<any>
Promise resolving to the registration response.
Example
verifyOtp()
verifyOtp(Verifies an OTP (one-time password) code. Confirms that the user owns the email address by checking the code sent to their inbox duringparams):Promise<any>
register(). After a successful
call, log the user in with
loginViaEmailPassword(). If the code
has expired or the user didn’t receive it, send a fresh one with
resendOtp().
Parameters
The email being verified and the OTP code the user entered.
Properties
Properties
Returns
Promise<any>
Promise resolving to the verification response, which includes an
access token for the now-verified user.
Throws
Error if the OTP code is invalid or expired.Examples
resendOtp()
resendOtp(Resends an OTP code to the user’s email address. Call this when the user didn’t receive the original code sent byPromise<any>
register(), or when the previous code has expired.
The new code replaces the previous one. Pass it to
verifyOtp() to complete verification.
Parameters
Email address to send the new OTP to.
Returns
Promise<any>
Promise resolving once the new OTP has been sent, with a
confirmation message and the new code’s expiration window.
Throws
Error if the email is invalid or the request fails.Example
resetPasswordRequest()
resetPasswordRequest(Requests a password reset. Sends a password reset email to the specified email address.Promise<any>
Parameters
Email address for the account to reset.
Returns
Promise<any>
Promise resolving when the password reset email is sent successfully.
Throws
Error if the email is invalid or the request fails.Example
resetPassword()
resetPassword(Resets password using a reset token. Completes the password reset flow by setting a new password using the token received by email.params):Promise<any>
Parameters
Object containing the reset token and new password.
Properties
Properties
Returns
Promise<any>
Promise resolving when the password is reset successfully.
Throws
Error if the reset token is invalid, expired, or the request fails.Example
changePassword()
changePassword(Changes the user’s password. Updates the password for an authenticated user by verifying the current password and setting a new one.params):Promise<any>
Parameters
Object containing user ID, current password, and new password.
Properties
Properties
Returns
Promise<any>
Promise resolving when the password is changed successfully.

