Auth

Manage your app’s login methods using local configuration files

You’re viewing developer documentation

This documentation is for developers working with the Base44 developer platform. For information about managing login methods in the app editor, see Managing login and registration.

Authentication controls how your app’s users sign in, register, and access its features. Auth config lets you manage login methods as a local JSONC file that you sync with Base44 using the CLI.

Configure

Your auth config is a single JSONC file at base44/auth/config.jsonc. You can customize the directory path with the authDir property in your project configuration. Pull the current config from Base44 with auth pull, then push changes with auth push or deploy.

You can also toggle login methods from the command line with auth password-login, auth social-login, and auth sso.

Example

{
  "enableUsernamePassword": true,
  "enableGoogleLogin": false,
  "enableMicrosoftLogin": false,
  "enableFacebookLogin": false,
  "enableAppleLogin": false,
  "googleOAuthMode": "default",
  "googleOAuthClientId": null,
  "enableSSOLogin": false,
  "ssoProviderName": null,
  "useWorkspaceSSO": false
}

Field reference

enableUsernamePassword · boolean

Allow users to sign in with an email address and password. Defaults to false.

enableGoogleLogin · boolean

Allow users to sign in with Google. Defaults to false.

enableMicrosoftLogin · boolean

Allow users to sign in with Microsoft. Defaults to false.

enableFacebookLogin · boolean

Allow users to sign in with Facebook. Defaults to false.

enableAppleLogin · boolean

Allow users to sign in with Apple. Defaults to false.

googleOAuthMode · "default" | "custom"

How Google OAuth credentials are sourced. Use default to use Base44-managed credentials, or custom to use your own OAuth client. Defaults to default.

googleOAuthClientId · string | null

Custom Google OAuth client ID. Only used when googleOAuthMode is custom. Set this with auth social-login google enable --client-id. The matching client secret is stored as a project secret, not in this file. Defaults to null.

enableSSOLogin · boolean

Allow users to sign in with the configured SSO identity provider. Toggle with auth sso enable|disable. Mutually exclusive with social login. Defaults to false.

ssoProviderName · string | null

Name of the configured SSO provider when enableSSOLogin is true. One of google, microsoft, github, okta, or custom. Set by auth sso enable --provider. Defaults to null.

useWorkspaceSSO · boolean

Whether this app uses the SSO provider enforced at the workspace level instead of its own ssoProviderName. Set by a workspace admin in workspace settings, not by the auth sso command. Defaults to false.

If your config has no login methods enabled, the CLI warns that users will be locked out when you push. Make sure at least one login method is enabled.

See also

• auth pull: Fetch auth config from Base44
• auth push: Push auth config to Base44
• auth password-login: Enable or disable password login
• auth social-login: Enable or disable social login providers
• auth sso: Configure SSO identity providers
• deploy: Deploy all project resources
• Managing login and registration: Configure login options in the dashboard