@clerk/[email protected]

Minor Changes

• Introduces machine authentication, supporting four token types: api_key, oauth_token, machine_token, and session_token. For backwards compatibility, session_token remains the default when no token type is specified. This enables machine-to-machine authentication and use cases such as API keys and OAuth integrations. Existing applications continue to work without modification. (#6391) by @wobsoriano

  You can specify which token types are allowed by using the acceptsToken option in the event.context.auth() context. This option can be set to a specific type, an array of types, or 'any' to accept all supported tokens.

  Example usage:

  export default eventHandler(event => {
    const auth = event.locals.auth({ acceptsToken: 'any' });
  
    if (authObject.tokenType === 'session_token') {
      console.log('this is session token from a user');
    } else {
      console.log('this is some other type of machine token');
      console.log('more specifically, a ' + authObject.tokenType);
    }
  
    return {};
  });

Patch Changes

• Updated dependencies [e404456, 2803133, f1d9d34, 0bdd0df, d58b959, 232d7d3, f6375f0, 822ba1f, af615b8, d4d2612]:
  • @clerk/[email protected]
  • @clerk/[email protected]
  • @clerk/[email protected]
  • @clerk/[email protected]