Google authentication¶

Configuration¶

To use Google login with Hasura, create a Project on https://console.developers.google.com/. You can know more about using Google login from https://developers.google.com/identity/.
Register an application with Google, obtain the client ID and client secret.
Now you need to configure the Hasura auth microservice with these credentials.
To configure, go to the conf/auth.yaml file inside your Hasura project.
Under google, set the array of clientIds.

Note

The google key might be commented out. Make sure to uncomment it if it is.

auth.yaml
google:
  clientIds: ["String"]
  clientSecret:
    secretKeyRef:
      key: auth.google.client_secret
      name: hasura-secrets

clientIds: The client IDs obtained when creating the application. This is an array of strings. For example, it could be an array of your web client ID, iOS client ID etc.
clientSecret: The client secret obtained when creating the application. As you see in the above code snippet, client secret is a reference to a hasura project secret called auth.google.client_secret. To add your client secret to hasura project secrets, run the following command from your project directory.
```
$ hasura secret update auth.google.client_secret
```
Choose your device and Google SDK from here: https://developers.google.com/identity/choose-auth

Web apps¶

For web apps, use the Google SDK to integrate with Hasura auth.

See here how to use it: https://developers.google.com/identity/sign-in/web/

Mobile apps¶

For mobile apps, you can use Google SDK to integrate with Hasura auth.

See here for more information:

API¶

Login / signup¶

Use Google SDK from above to obtain the id_token (or idToken) of the logged in Google user. (In some older platforms you might receive an access_token (or accessToken). In that case, you can replace id_token with access_token in the rest of article.)
Once the id_token is obtained, send the id_token to the Hasura auth microservice:

POST auth.<cluster-name>.hasura-app.io/v1/login HTTP/1.1
Content-Type: application/json

{
  "provider" : "google",
  "data" : {
     "id_token": "String",
  }
}

If successful, this will return a response as follows:

HTTP/1.1 200 OK
Content-Type: application/json

{
  "auth_token": "b4b345f980ai4acua671ac7r1c37f285f8f62e29f5090306",
  "hasura_id": 79,
  "new_user": true,
  "hasura_roles": [
      "user"
  ]
}

If the user is a new user, new_user will be true, else false.
To check if the current user is logged in, make a call to: /v1/user/info.
To logout, make a call to /v1/user/logout.
To get the Hasura credentials of the current logged in user, /v1/user/info.

« previous | next »

Was this page helpful?