Aura Auth

Discord Authorization Provider

Configure the Discord OAuth 2.0 provider in Aura Auth for authentication and authorization.

Discord

Set up Discord authorization provider to the authentication instance to Aura Auth.


What you'll learn

Through this quick start guide you are going to learn and understand the basics and how to set up Discord provider to Aura Auth.


Discord OAuth App

Register a Developer Application

The first step is register a Developer Application to grant to have acces to the user's accessible resources like Get current User (Used by Aura Auth), Message, Subscription, Channel, etc. For more detailed information read OAuth 2.

Registering a Discord a Developer application includes:

  • Name: The application name shown when the user tries to grant access to the app.
  • Redirects: The URL to which Discord OAuth will redirect, it should end in /auth/callback/discord for local and production environments.
    • Local environment: http://localhost:3000/auth/callback/discord.
    • Production environment: Set the URL of your production application.

Discord Aura Auth

Installation

Install the package using a package manager like npm, pnpm or yarn.

npm install @aura-stack/auth

Environment setup

Now, it's time to create and consume the Discord credentials required and used by Aura Auth, which include the client Id and client Secret and write them into a .env file.

Additionally set the secret used by Aura Auth to sign and encrypt the user's session.

.env
# Discord Credentials
AURA_AUTH_DISCORD_CLIENT_ID="discord_client_id"
AURA_AUTH_DISCORD_CLIENT_SECRET="discord_client_secret"

# Aura Secret
AURA_AUTH_SECRET="32-bytes-secret"

The AURA_AUTH_SECRET is recommended to be a random and high entropy key to avoid attackers deciphering the secret used by the Aura Auth application.

Configure the provider

Set the oauth option of the createAuth instance and writing "discord" name.

@/auth
import { createAuth } from "@aura-stack/auth"

export const auth = createAuth({
  oauth: ["discord"],
})

export const { handlers } = auth

Get HTTP Handlers

Use the HTTP handlers to consume the authentication logic and flow the Aura Auth library to be integrated into routers and frameworks.

backend.ts
import { handlers } from "@/auth"

export const { GET, POST } = handlers

The returned handlers include pre-built routes used in OAuth flows (/signIn/:oauth, /callback/:oauth, /session, /signOut and /csrfToken). You can mount them in Express, Hono, Next.js, or any runtime that supports native Request and Response APIs.


Resources

On this page