Verifies signed session cookies and extracts user IDs.
Use for multi-tenant deployments where users authenticate via web sessions.
Example
// Multi-tenant server setup with session-based user authentication constuserAuth = newSessionUserAuth({ sessionSecret:process.env.SESSION_SECRET!, cookieName:'app_session', });
// Create OAuth adapters with session-based user identification constoauthAdapters = awaitcreateOAuthAdapters( config.transport, { service:'gmail', clientId:process.env.GOOGLE_CLIENT_ID!, clientSecret:process.env.GOOGLE_CLIENT_SECRET, scope:GOOGLE_SCOPE, auth:'loopback-oauth', headless:false, redirectUri:undefined, }, { logger, tokenStore, userAuth, // Session-based user identification for multi-tenant deployments } );
// Use auth middleware with tools const { middleware: authMiddleware } = oauthAdapters; consttools = toolFactories.map(f=>f()).map(authMiddleware.withToolAuth);
Session-based user authentication provider
Verifies signed session cookies and extracts user IDs. Use for multi-tenant deployments where users authenticate via web sessions.
Example