Minor Changes
-
Introduces machine authentication, supporting four token types:
api_key,oauth_token,machine_token, andsession_token. For backwards compatibility,session_tokenremains the default when no token type is specified. This enables machine-to-machine authentication and use cases such as API keys and OAuth integrations. Existing applications continue to work without modification. (#6391) by @wobsorianoYou can specify which token types are allowed by using the
acceptsTokenoption in theevent.context.auth()context. This option can be set to a specific type, an array of types, or'any'to accept all supported tokens.Example usage:
export default eventHandler(event => { const auth = event.locals.auth({ acceptsToken: 'any' }); if (authObject.tokenType === 'session_token') { console.log('this is session token from a user'); } else { console.log('this is some other type of machine token'); console.log('more specifically, a ' + authObject.tokenType); } return {}; });