🔑 Auth Module

Zero-boilerplate authentication support for Nuxt.js!

Read Documentation

Development

Running demo for development:

$ yarn install
$ yarn dev

License

MIT License - Copyright (c) Nuxt Community

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.9.1 (2020-04-16)

Bug Fixes

• oauth2: use normalized path for callback route check (#587) (ffda6b0)

4.9.0 (2020-03-15)

Features

• core: return response from loginWith (#541) (7e4f1ed), closes #144 #411 #249
• local scheme: add autoFetchUser option (#543) (344920c)

Bug Fixes

• clear tokens when calling $auth.reset() (#544) (ab75ebc), closes #172
• fix setUserToken issues (#528) (02d14ac), closes #278
• remove the trailing slash of paths in isSameURL (#542) (fb63f6f)
• module: don't log fatal error when vuex is disabled (#518) (59831fb)

4.8.5 (2019-12-27)

Bug Fixes

• core: always return boolean form hasScope (a2da3a4)
• core: support querystring only url for isRelativeURL (#492) (09d81ea)
• module: always transpile nanoiid (8ef5a9b), closes #472

4.8.4 (2019-09-12)

Bug Fixes

• oauth2: restore callback handling on static sites (#453) (06165a0)

4.8.3 (2019-09-10)

Bug Fixes

• core: set loggedIn after user (#449) (458d60b)

4.8.2 (2019-09-05)

4.8.1 (2019-06-24)

Bug Fixes

• utilities: avoid send xxx=undefined in query (#387) (7c79fd4)
• regression from #385 when callback is set to false (#391) (4605681)
• oauth2: correctly handle callback with hash (#394) (9cf304f)

4.8.0 (2019-06-23)

Bug Fixes

• don't redirect to login page if in guest mode (#385) (3ee609d)

Features

• oauth2: support server-side callback (#381) (af550d4)

4.7.0 (2019-06-13)

Features

• oauth2: support access_type=offline to enable refresh tokens from google (#303) (9553f5c)

4.6.6 (2019-06-05)

Bug Fixes

• set-cookie header contains undefined value (#372) (323346e)

4.6.5 (2019-06-03)

Bug Fixes

• fix typo in serializedCookie (648fdc9)

4.6.4 (2019-06-03)

Bug Fixes

• server side Set-Cookie always set an array. (#367) (4d3feff)

4.6.3 (2019-05-31)

Bug Fixes

• module: warn if default strategy is not valid (#365) (db6d3d4)

4.6.2 (2019-05-31)

Bug Fixes

• module: warn if default strategy is not valid (#365) (db6d3d4)

4.6.1 (2019-05-31)

Bug Fixes

• storage: accept expires as a number for cookie (dd92ec8)

4.6.0 (2019-05-30)

Bug Fixes

• accept state, nonce as login args (e5579e9)
• preserve query params when redirecting (#193) (39fa137)
• auth: handle mounted errors during init (#234) (03dba23)
• docs: GitHub capitalize (#246) (725e0c9)
• docs: GitHub capitalize (#246) (eb7dc9e)
• docs: spelling fix (#247) (c2b0d7b)
• docs: typo (#203) (3a0e080)
• local: prevent loggedIn being incorrectly set to true (#346) (aa5f29d)
• middleware: remove trailing slash from redirect paths (#235) (398a515)
• oauth2, auth0: add audience to requests (#222) (174e135)
• setUserToken: Add fallback to unimplemented strategies (c4691ab)
• randomString btoa fallback for SSR (#230) (604cc5d)
• remove default auth0 audience (#239) (abfa084)
• set extended for body-parser urlencoded to prevent the deprecation warning (#199) (0226836)
• storage.md: fix typo (a8fbda8)

Features

• improve storage (#360) (d05fcca)
• support onRedirect hook (#185) (aacb191)
• middleware: add guest option in auth middleware (#264) (54b0720)
• generate nounce for id_token response type (#298) (b730203)
• oauth2: support passing extra query params (#358) (0d60c2d)
• use strategy tokenName for requestWith (#301) (8654a48)
• oauth2-set-state: Allow set state in case it exists on oauth2 provider [#253] (6420ddc)
• setUserToken: Add functionality to manually set auth token (9f53a4f)
• add resetOnError (#197) (469f2f8)

4.5.2 (2018-09-18)

Bug Fixes

• api/auth.md: typo(#204) (f0e693a)
• docs: minor proper english revisions (#200) (619184b)
• docs: typo #224 (752f4ad)
• docs: update glossary read more title (a53c38c)
• middleware: remove trailing slash from redirect paths (#235) (c401122)

4.5.1 (2018-05-21)

Bug Fixes

• module: allow watchLoggedIn (471d59f)

4.5.0 (2018-05-21)

Bug Fixes

• auth: start watching loggedIn state after current strategy is fully mounted (#80) (2497cc0)
• docs: add comma following _scheme value (#189) (d993e01)

Features

• add watchLoggedIn option to optionally disable it (#80) (16a7904)

4.4.0 (2018-05-18)

Bug Fixes

• storage: use false value for unsetting token/user (#160) (0450b57), closes nuxt-community/auth-module#133

Features

• oauth2: set axios token (#175) (6206803)

Reverts

• revert #158 due to conflicts (2afe9ca)

4.3.0 (2018-04-28)

Bug Fixes

• github provider (#159) (8b1819f)

Features

• laravel passport provider (#157) (9b09459)

4.2.1 (2018-04-27)

Bug Fixes

• storage cookie get on client side (#153) (8275e60)
• watch loggedIn: disable redirect on direct page loads (#158) (0386eb9)

4.2.0 (2018-04-20)

Bug Fixes

• add check for req object on getCookie (#132) (7d17f75)
• don't redirect callback to login when using 'auth' globally (#131) (08d86cb)
• docs: update redirect in options.md (#146) (19de22b)
• fullPathRedirect with query support (#149) (a37d599)
• logout locally before logging in. fixes #136. (#151) (b6cfad4)

Features

• oauth2: support authorization code grant and refresh token (#145) (18ecca5)
• add support for custom token key in request header (#152) (f7576e3)

4.1.0 (2018-04-09)

Features

• scheme/oauth2: add option to use IdToken instead of AccessToken (#121) (554a042)
• add support for logging out without an API endpoint (#124) (6189c6d)

4.0.1 (2018-04-03)

Bug Fixes

• local-scheme-token: avoid token type duplicata on Axios requests (3908563)
• local-scheme-token: removed token type from axios setToken (c64e7f1), closes #113
• scheme-resolution: fix problem with backslashes in path to schemes on windows (77161b8)
• no token exception when tokenRequired is set to false (#118) (56265a7)

4.0.0 (2018-04-02)

Bug Fixes

• clear axios token after logout (#84) (be65f09)
• Typo in README.md (1ec0882)
• use getToken (bec8518)
• wrong axios ordering in windows platform. (#56) (44db0d4)
• auth: return promise reject on request error (f2883c6)
• fetchUser: fetchUser should only be called when enabled (dd0638e)
• fetchUser: fetchUser should only be called when enabled (#60) (beb3121)
• module: remove duplicate strategy options (2e167f8)

Features

• add auth0-js scheme (c38a1e4)
• package: add client-oauth2 (e0efa60)
• redirect: add full path redirect option (#96) (ca8785f)
• allow extending auth with plugins (#98) (3712a60)
• allow providers params to be overloaded from nuxt.config.js (#77) (8542959)
• handle invalid strategy (f079ae2)
• loginWith function (2aed448)
• test: add custom _provider and _scheme for basic fixture (7423e77)
• use consola for cli messages (1db2b2e)
• user and loggedIn shortcuts (13a5eec)

Performance Improvements

• module: optimize plugin (b7998c6)

4.0.0-rc.3 (2018-02-04)

Bug Fixes

• fix scope checks during logout (e2ebd97)

Features

• refactor init logic to $auth.init and improve error handling (b58ca17)

4.0.0-rc.2 (2018-02-03)

Bug Fixes

• Auth: register vuex store before all watchers (006650f)

4.0.0-rc.1 (2018-02-03)

Bug Fixes

• deps: update dependencies (5d6cb8a)
• watcher: close #52 and undefined bug (2a03f2f)

Features

• watchState and watchLoggedIn (b628455), closes #52

4.0.0-rc.0 (2018-02-02)

Bug Fixes

• guard check (cf013a0)
• prevent middleware infinite loops (6ec1b34)
• ssr and code reduction (952700c)
• typo in lodash template (eac33d2)

Features

• $auth.hasScope (6d6c7b3)
• $auth.onError (151868a)
• allow token to be a nested object in the response (#45) (8064839)
• handle endpoints.propertyName (710561b), closes #46
• rewriteRedirects (dde409a)
• update defaults to axios 5.x (10157aa)
• use new Auth class (d4da740)

Performance Improvements

• improve cookie handling (c50e68f)

BREAKING CHANGES

• Lot's of API and Usage changes

3.4.1 (2017-12-29)

Bug Fixes

• rc11 backward compatibility (c0222e9)

3.4.0 (2017-12-29)

Bug Fixes

• store: return promise in all actions (1a9a76e)

Features

• improve compatibility for nuxt 1.0.0 (7740dec)

3.3.0 (2017-12-28)

Features

• add fetchUser option (#27) (1b8856c)
• allow customizing http method for user endpoint (#28) (994152b)
• more compatibility for nuxt@next (d50be11)

3.2.1 (2017-12-20)

3.2.0 (2017-11-18)

Bug Fixes

• store: skip only if token is not set. resolves #20. (23b12d5)

Features

• store: resetOnFail option (55e2397)

3.1.1 (2017-11-17)

Bug Fixes

• store: better check for loggedIn (37f22fe)

3.1.0 (2017-11-15)

Features

• store: let LocalStorage to be optional (#18, @epartipilo) (b4086a0)
• improve token options (2a2c4c2)

3.0.1 (2017-11-12)

Bug Fixes

• middleware: redirects (77bd1e4)

3.0.0 (2017-11-10)

Features

• improve auth store (499c28a)
• improvements (#11) (5d870c2)

Performance Improvements

• import only needed lodash functions (#14, @leahciMic) (fc6ae68)

BREAKING CHANGES

• Some options changed and/or simplified

2.0.7 (2017-10-19)

2.0.6 (2017-10-19)

2.0.5 (2017-09-06)

Bug Fixes

• warn only needed (a9dbe04)

2.0.4 (2017-09-05)

Bug Fixes

• warn when axios module is not registered (6ace50b)

2.0.3 (2017-09-04)

Bug Fixes

• package: publish templates (eb1706a)

2.0.2 (2017-09-04)

2.0.1 (2017-09-04)

0.0.1 (2017-09-04)