Password Authentication

Choose and implement registration, verification, login, password recovery, and account password management

AuthOS release 0.8.5 TypeScript SDK 0.8.0 Latest-only documentation

Overview

AuthOS supports native email and password authentication alongside OAuth providers. Use this sequence to create an account, verify its email address, establish a session, recover access, and manage passwords safely.

Capabilities

  • Email verification is required before password login.
  • Passwords are hashed securely with Argon2.
  • Password reset is delivered by email.
  • Authenticated users can change a password after current-password verification.
  • OAuth-created accounts can add a password as another login method.
  • Verification and reset email can use organization-specific SMTP.

Prerequisites

Before implementing password authentication:

  • Install the SDK with npm install @drmhse/sso-sdk.
  • Record your AuthOS instance URL.
  • Configure SMTP platform-wide or for the organization that sends verification and password-reset emails.

Follow the password authentication sequence

Step Guide Outcome
1 Registration Create an account and enforce password requirements.
2 Email verification Complete the required verification step before login.
3 Login and sessions Sign in and complete MFA when required.
4 Password reset Recover access without exposing whether an account exists.
5 Account management Change a password or add one to an OAuth-created account.
6 Troubleshooting and security Apply security guidance and handle SDK errors.

User Registration

Continue with Registration for basic and organization-aware registration, a complete React form, and password requirements.

Email Verification

Continue with Email verification to understand the verification checkpoint between registration and login.

Login with Email and Password

Continue with Login and sessions for basic password login and a complete MFA-aware React form.

Password Reset Workflow

Continue with Password reset for reset requests, emailed tokens, and the complete recovery UI.

Change Password (Authenticated Users)

Use Account management to let an authenticated user change their password.

Set Password for OAuth Users

Use Account management to add password login to an account originally created through OAuth.

Best Practices

Review Troubleshooting and security for password strength, UX, SMTP, and operational security guidance.

Error Handling

Use the error-handling reference for status-specific AuthOS SDK responses.

Next Steps

Pages