options

General options shared with all strategies. See defaults.js for defaults.

redirect

Default:

auth: {
  redirect: {
    login: '/login',
    logout: '/',
    callback: '/login',
    home: '/'
  }
}

  • login: User will be redirected to this path if login is required.

  • logout: User will be redirected to this path if after logout, current route is protected.

  • home: User will be redirect to this path after login. (rewriteRedirects will rewrite this path)

  • callback: User will be redirected to this path by the identity provider after login. (Should match configured Allowed Callback URLs (or similar setting) in your app/client with the identity provider)

Each redirect path can be disabled by setting to false. Also you can disable all redirects by setting redirect to false

watchLoggedIn

  • Default: true

When enabled (default) user will be redirected on login/logouts.

token

Auth tokens are stored in various storage providers (cookie, localStorage, vuex) on user login to provide a seamless auth experience across server-side rendering (SSR) and client-side rendering. Tokens are stored under with storage keys of the format: {storageProvider.prefix}{token.prefix}{strategy}. See auth.js - Token helpers and storage.js for more details.

Default:

auth: {
  token: {
    prefix: '_token.'
  }
}

  • prefix - Default prefix used in building a key for token storage across all storage providers.

localStorage

Default:

auth: {
  localStorage: {
    prefix: 'auth.'
  }
}

  • prefix - Default token prefix used in building a key for token storage in the browser's localStorage.

You can disable use of localStorage by setting localStorage to false, like so:

auth {
  localStorage: false
}

Otherwise the auth token will be stored in localStorage at a default key of: auth._token.{provider}.

cookie

Default:

auth: {
  cookie: {
    prefix: 'auth.',
    options: {
      path: '/'
    }
  }
}

  • prefix - Default token prefix used in building a key for token storage in the browser's localStorage.

  • options - Additional cookie options, passed to cookie.

    • path - path where the cookie is visible. Default is '/'.

    • expires - can be used to specify cookie lifetime in Number of days or specific Date. Default is session only.

    • maxAge - Specifies the number (in seconds) to be the value for the Max-Age (preferred over expires)

    • domain - domain (and by extension subdomain/s) where the cookie is visible. Default is domain and all subdomains.

    • secure - sets whether the cookie requires a secure protocol (https). Default is false, should be set to true if possible.

Note: Using cookies is required for SSR requests to work with JWT tokens.

You can disable use of cookie storage by setting cookie to false, like so:

auth: {
  cookie: false
}

Otherwise the auth token will be stored in a cookie named by default as: auth._token.{provider}.

plugins

If you have any nuxt plugin that depends on $auth you have to specify it here instead of top-level plugins option in nuxt.config.js.

See Extending Auth Plugin

resetOnError

  • Default: false

Either a boolean or a function is accepted. If a function is passed, it will take the same arguments as onError handlers and return Boolean to inform whether a reset should be performed.

If enabled, user will be automatically logged out if an error happens. (For example when token expired)

rewriteRedirects

  • Default: true

If enabled, user will redirect back to the original guarded route instead of redirect.home.

fullPathRedirect

Default: false

If true, use the full route path with query parameters for redirect

vuex.namespace

  • Default: auth

Vuex store namespace for keeping state.

scopeKey

  • Default: scope

user object property used for scope checking (hasScope). Can be either an array or a object.

PreviousAPINextstorage

Last updated