Minor Changes
-
Introduces machine authentication, supporting four token types:
api_key,oauth_token,machine_token, andsession_token. For backwards compatibility,session_tokenremains the default when no token type is specified. This enables machine-to-machine authentication and use cases such as API keys and OAuth integrations. Existing applications continue to work without modification. (#6067) by @wobsorianoYou can specify which token types are allowed by using the
acceptsTokenoption in thegetAuth()function. This option can be set to a specific type, an array of types, or'any'to accept all supported tokens.Example usage:
import Fastify from 'fastify'; import { getAuth } from '@clerk/fastify'; const fastify = Fastify(); fastify.get('/path', (request, reply) => { const authObject = getAuth(req, { acceptsToken: 'any' }); if (authObject.tokenType === 'session_token') { console.log('this is session token from a user'); } else { console.log('this is some other type of machine token'); console.log('more specifically, a ' + authObject.tokenType); } });