a326e0ee88
* chore: Rate limiter audit api/users * Make requests required * api/collections * Remove checkRateLimit on FileOperation (now done at route level through rate limiter) * auth rate limit * Add metric logging when rate limit exceeded * Refactor to shared configs * test
Authentication Providers
A new auth provider can be added with the addition of a single file in this
folder, and (optionally) a matching logo in /app/components/AuthLogo/index.js
that will appear on the signin button.
Auth providers generally use Passport strategies,
although they can use any custom logic if needed. See the google auth provider for the cleanest example of what is required – some rules:
- The strategy name must be lowercase
- The strategy must call the
accountProvisionercommand in the verify callback - The auth file must export a
configobject withnameandenabledkeys - The auth file must have a default export with a koa-router