Authentication

next-auth

Authentication Providers in NextAuth.js are OAuth definitions that allow users to sign in with their favourite pre-existing logins. You can use any of the many predefined providers or write your own custom OAuth configuration - https://next-auth.js.org/configuration/providers/oauth

This is preferred over standard email:password management as we no longer have to worry about the safety of storing and transmitting sensitive data. It also offloads any personal updates (e.g. profile picture or name) to the third-party services.

OAuth Providers

We currently implement the following providers:

• Google
  • Domain/organisation restrictions are possible, such as disallowing any non @aucklanduni.ac.nz Google account

It is also possible to extend the SSO openId sign-on to integrate with syntax - https://next-auth.js.org/configuration/providers/oauth#using-a-custom-provider