Wasp supports Google Authentication out of the box. Google Auth is arguably the best external auth option, as most users on the web already have Google accounts.
Enabling it lets your users log in using their existing Google accounts, greatly simplifying the process and enhancing the user experience.
Let's walk through enabling Google authentication, explain some of the default settings, and show how to override them.
Setting up Google Authβ
Enabling Google Authentication comes down to a series of steps:
- Enabling Google authentication in the Wasp file.
- Adding the
Userentity. - Creating a Google OAuth app.
- Adding the necessary Routes and Pages
- Using Auth UI components in our Pages.
Here's a skeleton of how our main.wasp should look like after we're done:
// Configuring the social authentication
appmyApp{
auth: { ... }
}
// Defining routes and pages
routeLoginRoute{ ... }
pageLoginPage{ ... }
1. Adding Google Auth to Your Wasp Fileβ
Let's start by properly configuring the Auth object:
- JavaScript
- TypeScript
appmyApp{
wasp: {
version: "^0.14.0"
},
title: "My App",
auth: {
// 1. Specify the User entity (we'll define it next)
userEntity: User,
methods: {
// 2. Enable Google Auth
google: {}
},
onAuthFailedRedirectTo: "/login"
},
}
appmyApp{
wasp: {
version: "^0.14.0"
},
title: "My App",
auth: {
// 1. Specify the User entity (we'll define it next)
userEntity: User,
methods: {
// 2. Enable Google Auth
google: {}
},
onAuthFailedRedirectTo: "/login"
},
}
userEntity is explained in the social auth overview.
2. Adding the User Entityβ
Let's now define the app.auth.userEntity entity in the schema.prisma file:
- JavaScript
- TypeScript
// 3. Define the user entity
model User{
id Int@id@default(autoincrement())
// Add your own fields below
// ...
}
// 3. Define the user entity
model User{
id Int@id@default(autoincrement())
// Add your own fields below
// ...
}
3. Creating a Google OAuth Appβ
To use Google as an authentication method, you'll first need to create a Google project and provide Wasp with your client key and secret. Here's how you do it:
- Create a Google Cloud Platform account if you do not already have one: https://cloud.google.com/
- Create and configure a new Google project here: https://console.cloud.google.com/home/dashboard
[η»ε:Google Console Screenshot 1]
[η»ε:Google Console Screenshot 2]
- Search for OAuth in the top bar, click on OAuth consent screen.
[η»ε:Google Console Screenshot 3]
-
Select what type of app you want, we will go with External.
-
Fill out applicable information on Page 1.
-
On Page 2, Scopes, you should select
userinfo.profile. You can optionally search for other things, likeemail.[η»ε:Google Console Screenshot 6]
-
Add any test users you want on Page 3.
- Next, click Credentials.
[η»ε:Google Console Screenshot 10]
-
Select Create Credentials.
-
Select OAuth client ID.
-
Complete the form
-
Under Authorized redirect URIs, put in:
http://localhost:3001/auth/google/callback[η»ε:Google Console Screenshot 13]
- Once you know on which URL(s) your API server will be deployed, also add those URL(s).
- For example:
https://your-server-url.com/auth/google/callback
- For example:
- Once you know on which URL(s) your API server will be deployed, also add those URL(s).
-
When you save, you can click the Edit icon and your credentials will be shown.
- Copy your Client ID and Client secret as you will need them in the next step.
4. Adding Environment Variablesβ
Add these environment variables to the .env.server file at the root of your project (take their values from the previous step):
GOOGLE_CLIENT_ID=your-google-client-id
GOOGLE_CLIENT_SECRET=your-google-client-secret
5. Adding the Necessary Routes and Pagesβ
Let's define the necessary authentication Routes and Pages.
Add the following code to your main.wasp file:
- JavaScript
- TypeScript
// ...
routeLoginRoute{path: "/login",to: LoginPage}
pageLoginPage{
component: import{Login}from"@src/pages/auth.jsx"
}
// ...
routeLoginRoute{path: "/login",to: LoginPage}
pageLoginPage{
component: import{Login}from"@src/pages/auth.tsx"
}
We'll define the React components for these pages in the src/pages/auth.tsx file below.
6. Create the Client Pagesβ
We are using Tailwind CSS to style the pages. Read more about how to add it here.
Let's now create a auth.tsx file in the src/pages.
It should have the following code:
- JavaScript
- TypeScript
import{LoginForm}from'wasp/client/auth'
exportfunctionLogin(){
return(
<Layout>
<LoginForm/>
</Layout>
)
}
// A layout component to center the content
exportfunctionLayout({ children }){
return(
<divclassName="w-full h-full bg-white">
<divclassName="min-w-full min-h-[75vh] flex items-center justify-center">
<divclassName="w-full h-full max-w-sm p-5 bg-white">
<div>{children}</div>
</div>
</div>
</div>
)
}
import{LoginForm}from'wasp/client/auth'
exportfunctionLogin(){
return(
<Layout>
<LoginForm/>
</Layout>
)
}
// A layout component to center the content
exportfunctionLayout({ children }:{ children:React.ReactNode}){
return(
<divclassName="w-full h-full bg-white">
<divclassName="min-w-full min-h-[75vh] flex items-center justify-center">
<divclassName="w-full h-full max-w-sm p-5 bg-white">
<div>{children}</div>
</div>
</div>
</div>
)
}
Our pages use an automatically-generated Auth UI component. Read more about Auth UI components here.
Conclusionβ
Yay, we've successfully set up Google Auth! π
Running wasp db migrate-dev and wasp start should now give you a working app with authentication.
To see how to protect specific pages (i.e., hide them from non-authenticated users), read the docs on using auth.
Default Behaviourβ
Add google: {} to the auth.methods dictionary to use it with default settings:
- JavaScript
- TypeScript
appmyApp{
wasp: {
version: "^0.14.0"
},
title: "My App",
auth: {
userEntity: User,
methods: {
google: {}
},
onAuthFailedRedirectTo: "/login"
},
}
appmyApp{
wasp: {
version: "^0.14.0"
},
title: "My App",
auth: {
userEntity: User,
methods: {
google: {}
},
onAuthFailedRedirectTo: "/login"
},
}
When a user signs in for the first time, Wasp creates a new user account and links it to the chosen auth provider account for future logins.
Overridesβ
By default, Wasp doesn't store any information it receives from the social login provider. It only stores the user's ID specific to the provider.
There are two mechanisms used for overriding the default behavior:
userSignupFieldsconfigFn
Let's explore them in more detail.
Data Received From Googleβ
We are using Google's API and its /userinfo endpoint to fetch the user's data.
The data received from Google is an object which can contain the following fields:
[
"name",
"given_name",
"family_name",
"email",
"email_verified",
"aud",
"exp",
"iat",
"iss",
"locale",
"picture",
"sub"
]
The fields you receive depend on the scopes you request. The default scope is set to profile only. If you want to get the user's email, you need to specify the email scope in the configFn function.
For an up to date info about the data received from Google, please refer to the Google API documentation.
Using the Data Received From Googleβ
When a user logs in using a social login provider, the backend receives some data about the user.
Wasp lets you access this data inside the userSignupFields getters.
For example, the User entity can include a displayName field which you can set based on the details received from the provider.
Wasp also lets you customize the configuration of the providers' settings using the configFn function.
Let's use this example to show both fields in action:
- JavaScript
- TypeScript
appmyApp{
wasp: {
version: "^0.14.0"
},
title: "My App",
auth: {
userEntity: User,
methods: {
google: {
configFn: import{ getConfig }from"@src/auth/google.js",
userSignupFields: import{ userSignupFields }from"@src/auth/google.js"
}
},
onAuthFailedRedirectTo: "/login"
},
}
model User{
id Int@id@default(autoincrement())
username String@unique
displayName String
}
// ...
exportconst userSignupFields ={
username:()=>"hardcoded-username",
displayName:(data)=> data.profile.name,
}
exportfunctiongetConfig(){
return{
scopes:['profile','email'],
}
}
appmyApp{
wasp: {
version: "^0.14.0"
},
title: "My App",
auth: {
userEntity: User,
methods: {
google: {
configFn: import{ getConfig }from"@src/auth/google.js",
userSignupFields: import{ userSignupFields }from"@src/auth/google.js"
}
},
onAuthFailedRedirectTo: "/login"
},
}
model User{
id Int@id@default(autoincrement())
username String@unique
displayName String
}
// ...
import{ defineUserSignupFields }from'wasp/server/auth'
exportconst userSignupFields =defineUserSignupFields({
username:()=>"hardcoded-username",
displayName:(data:any)=> data.profile.name,
})
exportfunctiongetConfig(){
return{
scopes:['profile','email'],
}
}
Wasp automatically generates the defineUserSignupFields function to help you correctly type your userSignupFields object.
Using Authβ
To read more about how to set up the logout button and get access to the logged-in user in both client and server code, read the docs on using auth.
When you receive the user object on the client or the server, you'll be able to access the user's Google ID like this:
const googleIdentity = user.identities.google
// Google User ID for example "123456789012345678901"
googleIdentity.id
Read more about accessing the user data in the Accessing User Data section of the docs.
API Referenceβ
Provider-specific behavior comes down to implementing two functions.
configFnuserSignupFields
The reference shows how to define both.
For behavior common to all providers, check the general API Reference.
- JavaScript
- TypeScript
appmyApp{
wasp: {
version: "^0.14.0"
},
title: "My App",
auth: {
userEntity: User,
methods: {
google: {
configFn: import{ getConfig }from"@src/auth/google.js",
userSignupFields: import{ userSignupFields }from"@src/auth/google.js"
}
},
onAuthFailedRedirectTo: "/login"
},
}
appmyApp{
wasp: {
version: "^0.14.0"
},
title: "My App",
auth: {
userEntity: User,
methods: {
google: {
configFn: import{ getConfig }from"@src/auth/google.js",
userSignupFields: import{ userSignupFields }from"@src/auth/google.js"
}
},
onAuthFailedRedirectTo: "/login"
},
}
The google dict has the following properties:
-
configFn: ExtImportβThis function must return an object with the scopes for the OAuth provider.
- JavaScript
- TypeScript
src/auth/google.jsexportfunctiongetConfig(){
return{
scopes:['profile','email'],
}
}src/auth/google.tsexportfunctiongetConfig(){
return{
scopes:['profile','email'],
}
} -
userSignupFields: ExtImportβuserSignupFieldsdefines all the extra fields that need to be set on theUserduring the sign-up process. For example, if you haveaddressandphonefields on yourUserentity, you can set them by defining theuserSignupFieldslike this:- JavaScript
- TypeScript
src/auth.jsimport{ defineUserSignupFields }from'wasp/server/auth'
exportconst userSignupFields =defineUserSignupFields({
address:(data)=>{
if(!data.address){
thrownewError('Address is required')
}
return data.address
}
phone:(data)=> data.phone,
})src/auth.tsimport{ defineUserSignupFields }from'wasp/server/auth'
exportconst userSignupFields =defineUserSignupFields({
address:(data)=>{
if(!data.address){
thrownewError('Address is required')
}
return data.address
}
phone:(data)=> data.phone,
})Read more about the
userSignupFieldsfunction here.