Hi everyone, I’m building an APP interacting with an API that has none of the classic cross website / SSO possibilities. The user enter their email/password, my app requests the API and it answers with a token. What I want is for that to be enough to create an account on my app. No passwords. I’v…

Preface: I think no-password login is an important login model. And also, security is important (and interesting!). You simply want the user to submit an email without a password and somehow the user is logged in…at least in a limited respect until they can verify their email? I’m not aware of a wa…

humm no my users are typing correct email/password and authentication is done by the external API. I “just” don’t want to store that password on my side nor for them to create a new password for my app. I essentially want to replicate the logic of a login via facebook.

Here’s what I’m doing to authenticate against an external API: //server/main.ts Accounts.registerLoginHandler("custom", (loginRequest:LoginRequest) => { if(!loginRequest.custom) return undefined; try { //Here you're doing your auth logic. Mine errors out with wrong credentials hence t…

Hi, thanks for the reply. I don’t really understand the goal of your "registerLoginHandler ". Is it what is called by the client ? I’m trying to use Accounts.callLoginMethod but unfortunately, it still requires a password, which is what I want to avoid. How come you use a password if you identify…

There are specific atmosphere packages for magic links or login links and you can easily adapt their code to your use case.

After testing, there’s no way calling a login without a password from the client can be secured, as the client can be modified so that this login function can be called from anywhere in the code, even before the API authentication…

It of course requires a second factor in order to be secure. This is where magic links or one time passwords come into play that are sent via email to the registered user. When the one-time-password in the link is verified the user can be seen as authenticated and you can assign a login token.

I saw that Titan has a magic link authentication, maybe that approach can help you: [image] Titan | Meteor + Apollo Starter Kit - With Magic Link authentication, TypeScript, Storybook and Jest set-up! announce The first time I used Meteor, something clicked. I…

Meteor accounts with no passwords

help

storyteller April 16, 2020, 1:48pm 9

I saw that Titan has a magic link authentication, maybe that approach can help you: