How it works

import { V3 as pasetoV3 } from "paseto";

app.get("/waaard/login", async (req, res) => {
  // (optional) get and use the session ID you provided earlier
  const sessionID = req.query["session_id"];

  // Decrypt the user data
  const encrypted = req.query["encrypted_auth_data"];
  const decrypted = await pasetoV3.decrypt(
    encrypted,
    ' your login app secret ',
  );

  // authn contains email, username, and organizations
  const { waaardID, provider, authn } = decrypted;

  // (optional) Save waaardID, provider, and user details

  // (optional) Set secure cookies to remember the user
  // NOTE(🔐): don't forget Expires/MaxAge, HTTPOnly, & Secure
});
        

export class ClientLoginAuthData {
  // ID for the user, according to Waaard
  public waaardID: string;

  // Provider the user used to login (ex. 'twitter', 'github')
  public provider: string;

  // Client App ID (this, you already have)
  public clientAppID: string;

  // ISO string which represents when the user was created
  public createdAtISO8601: string;

  // Available AuthN information, normalized across providers
  public authn: {
    // Username (not "display name"),
    // only used sites where user names *cannot be changed* (ex. Reddit)
    username?: string;

    // Email address
    email?: string;

    // Organizations, if any (ex. Github)
    organizations?: ClientLoginOrganization[];
  };
}