type
AuthStrategy
One compiled external request-authentication strategy.
Properties
| Property | Type | Description |
|---|---|---|
Name | string | A stable lowercase kebab-case identifier used in diagnostics. |
Authenticate | func(AuthStrategyContext) (AuthStrategyResult, | Recognizes and authenticates the request without returning raw credentials or untrusted user data. |
How it works
Strategies run in declaration order after built-in session and API-key authentication. Return Authenticated false when the request does not belong to the strategy.
Strategies run in order and return not-applicable, authenticated, or rejected. They do not dynamically install identity providers.