Auth Module

In this section of the documentation, you will find resources to learn more about the Auth Module and how to use it in your application.

Medusa has auth related features available out-of-the-box through the Auth Module. A module is a standalone package that provides features for a single domain. Each of Medusa's commerce features are placed in Commerce Modules, such as this Auth Module.

Auth Features#

• Basic User Authentication: Authenticate users using their email and password credentials.
• Third-Party and Social Authentication: Authenticate users using third-party services and social platforms, such as Google and GitHub.
• Authenticate Custom Actor Types: Create custom user or actor types, such as managers, authenticate them in your application, and guard routes based on the custom user types.
• Email Verification: Require email verification for new registrations and authentications.
• Multi-Factor Authentication (MFA): Add an extra layer of security with time-based one-time passwords (TOTP), backup recovery codes, and configurable disable policies.
• Custom Authentication Providers: Integrate third-party services with custom authentication providers.

Configure Auth Module#

The Auth Module accepts options for further configurations. Refer to this documentation for details on the module's options.

Providers#

Medusa provides the following authentication providers out-of-the-box. You can use them to authenticate admin users, customers, or custom actor types.