Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
@nuxtjs-alt/auth
Advanced tools
Information
This module is meant as an alternative to @nuxtjs/auth, except this is for nuxt3 only with no backwards compatibility support. This will only work with pinia, I had originally had it work with vuex, but since that is in maintenece mode, I decided to switch to pinia. If you find any bugs please do tell me, I'm still working on this.
Typescript
Please note, any issues regarding typescript is not a priorty for me. If you're having issues with it it'll be noted but not a priority, I normally have typescript disabled to focus on the functionality of the module.
Refactored (Version 2.0.0+)
The module now requires '@nuxtjs-alt/http' to function in version 2.0.0 and up, that module extends ohmyfetch. Please note that if you were using data
to post data, you now need to use body
since this is what ohmyfetch
uses.
Please tell me if you encounter any issues with these changes.
Composable
A useAuth()
composable is available to utitlize if $auth
from useNuxtApp()
isnt working out for you in terms of type hinting.
Options/Extra Features
Besides what nuxt auth normally offers, here are some other options/changes
globalMiddleware
: boolean
(Default: false) - Enables/disables the middleware to be used globallyenableMiddleware
: boolean
(Default: true) - Enables/disables the built-in middlewarepinia.namespace
: string
(Default: 'auth') - Changed from vuex to pinia, this is the namespace to use for the pinia storesessionStorage
: string|false
(Default: 'auth.') - Similar to the localstorage option, there is a session storage options available for you to use.Cookie-based auth
If you have any specific changes that need to be made to accomodate cookie based-auth please tell me, at this moment the way I configured it is that it pretty much does the same thing as the official auth module cookie, but in cases where the server autmaitcally attaches the server cookie to all requests it will function conrrently (in this case setting a cookie on all requests via laravel).
the config would look like this
auth: {
strategies: {
localStorage: false,
cookie: {
cookie: {
server: true, // by default this is set based on if nuxt ssr is enabled
name: 'token',
},
endpoints: {
csrf: false,
login: {
url: '/api/user/login',
method: 'post'
},
user: {
url: '/api/user/me',
method: 'get'
}
},
user: {
property: {
client: false,
server: false
},
autoFetch: true
}
},
}
}
notice the cookie.server
property, this indicates that the cookie we will be looking for will be set upon login otherwise we will be looking at a client/browser cookie.
the cookie scheme has been moved to its own scheme so the user property takes place within the cookie strategy and doesnt extend the token scheme from the local scheme. There has also been 2 user properties one for the client/browser and one for the server.
Laravel Sanctum
Laravel Sanctum wokrs a tiny bit differently, It inherits the same config as the Cookie scheme (see above) here's what the config would look like:
auth: {
strategies: {
laravelSanctum: {
provider: 'laravel/sanctum',
cookie: {
server: true, // by default this is set based on if nuxt ssr is enabled
name: 'XSRF-TOKEN',
},
endpoints: {
csrf: {
url: '/sanctum/csrf-cookie'
},
login: {
url: '/login'
},
logout: {
url: '/logout'
},
user: {
url: '/api/user'
}
},
user: {
property: {
client: false,
server: false
},
autoFetch: true
}
},
}
}
Oauth2
Oauth2 now has client window authentication thanks to this pull request: https://github.com/nuxt-community/auth-module/pull/1746 properties have been changed to:
clientWindow
: boolean
clientWindowWidth
: number
clientWindowHeight
: number
Aliases
Available Aliases:
#auth/runtime
#auth/utils
#auth/providers
FAQs
An alternative module to @nuxtjs/auth
The npm package @nuxtjs-alt/auth receives a total of 0 weekly downloads. As such, @nuxtjs-alt/auth popularity was classified as not popular.
We found that @nuxtjs-alt/auth demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.