Authentication Guide

MyCLI generates a complete authentication system supporting multiple strategies.

Strategies

| Strategy | Description | |----------|-------------| | JWT | Access tokens with configurable expiry | | Refresh Token | Long-lived refresh token rotation | | Session | Server-side session (via @fastify/session or express-session) | | OAuth | Google, GitHub, Facebook providers | | Magic Link | Passwordless email-based login | | OTP | One-time password via email/SMS | | Passkeys | WebAuthn/FIDO2 passkey authentication | | MFA | TOTP-based multi-factor (Google Authenticator compatible) |

Setup

my add auth
# Or with specific strategies:
my create api --auth --auth-strategies jwt,refresh-token,oauth,mfa

Generated Files

• src/modules/auth/auth.service.ts — Core auth logic
• src/modules/auth/auth.routes.ts — Login/register/refresh/logout endpoints
• src/modules/auth/auth.middleware.ts — Request authentication guard
• src/modules/auth/token.service.ts — JWT sign/verify
• src/modules/auth/password.service.ts — Argon2 hashing
• src/modules/auth/otp.service.ts — OTP generation + verification
• src/modules/auth/mfa.service.ts — TOTP generation + verification + recovery codes
• src/modules/auth/oauth.service.ts — OAuth state + provider exchange
• src/modules/auth/magic-link.service.ts — Magic link generation
• src/modules/auth/passkeys.service.ts — WebAuthn credential management
• src/modules/auth/verification-token.store.ts — Email verification tokens

ORM Support

Templates adapt to your configured ORM:

• Prisma, Drizzle, TypeORM, Sequelize, MikroORM, Mongoose

Enterprise SSO

my add enterprise-auth --providers google,azure-ad,keycloak,saml,ldap

Generates providers for:

• Azure AD (OIDC)
• Keycloak (OIDC)
• Google Workspace (OIDC)
• SAML 2.0
• LDAP / Active Directory