Bazaar Authentication offers a straightforward and secure solution right out of the box.
Bazaar-powered apps require users to have a Bazaar account. Authentication is done via a user’s account, where they authorize their chosen apps. The authentication flow takes place in a Bazaar pop-up. Users can then manage app authorization from their Bazaar Dashboard.
Create a sign-up or login request:
bzr.login();The login method opens a login pop-up window. A user first creates a Bazaar account (or logs in to their existing Bazaar account), then authorizes your app. After authorizing your app, the pop-up window closes, and the SDK stores an access token in local storage. The user is now logged in, and a connection to the Data API is made.
Verify user login status:
bzr.isLoggedIn();Customize your login flow by setting a callback:
bzr.onLogin(async () => { // Custom login handling});Read the Auth docs.
Leveraging Bazaar’s database-per-user architecture, users gain immediate access to their databases, bypassing the need for complex access policies. For more refined control, the Permissions API allows assigning permissions with precision.
Underneath, Bazaar Authentication utilizes the OAuth2 Authorization Code Flow with PKCE extension, ensuring enhanced security. After authorization, a JWT access token is issued. Our SDK simplifies the process, managing login requests, auth code exchanges for access tokens, token storage, and integration with users’ realtime database, creating a cohesive and secure user experience.