Owns browser authentication state and communicates with All topics below start with Only the reset-code check explicitly supports a direct call:<\/p>\n A fetch failure for that operation replies with\n All event topics start with The worker listens to Client state describes the interface's current view of authentication. Server\nmodels and actions still enforce their own access control.<\/p>\n\/zotonic-auth<\/code>.\nIt checks and refreshes authentication, manages login\/logout and password\noperations, and synchronizes with other tabs. Use the authentication worker\nloaded by Zotonic's normal page setup.<\/p>\nCommands<\/h2>\n
model\/auth\/<\/code>. Unless stated otherwise, use\npublish<\/code> and observe the events below; commands do not return a direct reply.<\/p>\nTopic suffix<\/th> Payload and behavior<\/th><\/tr><\/thead> post\/check<\/code><\/td>Recheck authentication; payload is ignored.<\/td><\/tr> post\/refresh<\/code><\/td>Refresh authentication, passing the payload as refresh options.<\/td><\/tr> post\/logon<\/code><\/td>username<\/code>, password<\/code>, optional passcode<\/code>, rememberme<\/code>, code-new<\/code>, and test_passcode<\/code>.<\/td><\/tr>post\/form\/logon<\/code><\/td>Cotonic form payload: credentials under value<\/code>; message.username<\/code> overrides value.username<\/code> when non-empty. Also accepts value.is_username_check<\/code>, value.authuser<\/code>, and value.onauth<\/code>.<\/td><\/tr>post\/logoff<\/code><\/td>Log out; payload is ignored.<\/td><\/tr> post\/switch-user<\/code><\/td>{ user_id: ... }<\/code>; the server determines whether the switch is authorized.<\/td><\/tr>post\/onetime-token<\/code><\/td>{ token: ..., url: ... }<\/code> for an authentication handoff.<\/td><\/tr>post\/reset-code-check<\/code><\/td>username<\/code>, secret<\/code>, and optional passcode<\/code>. Supports a response topic and returns the server's reset-check response.<\/td><\/tr>post\/reset<\/code><\/td>username<\/code>, secret<\/code>, new password<\/code>, optional passcode<\/code>, rememberme<\/code>, onauth<\/code>, code-new<\/code>, and test_passcode<\/code>.<\/td><\/tr>post\/change<\/code><\/td>Current password<\/code>, new password_reset<\/code>, optional passcode<\/code>, onauth<\/code>, code-new<\/code>, and test_passcode<\/code>.<\/td><\/tr><\/tbody><\/table>\ncotonic.broker.publish("model\/auth\/post\/check", {});\n<\/code><\/pre>\ncotonic.broker.call("model\/auth\/post\/reset-code-check", {\n username: "reader",\n secret: resetSecret\n}).then(function(msg) {\n console.log("Reset check:", msg.payload);\n});\n<\/code><\/pre>\n{ result: "error", error: "fetch" }<\/code>.<\/p>\nEvents<\/h2>\n
model\/auth\/<\/code>.<\/p>\nTopic suffix<\/th> Payload<\/th> Retained<\/th><\/tr><\/thead> event\/auth<\/code><\/td>Authentication state, including status<\/code>, is_authenticated<\/code>, user_id<\/code>, username<\/code>, and preferences<\/code>.<\/td>Yes<\/td><\/tr> event\/auth-user-id<\/code><\/td>Current user ID when the worker enters its known-authentication state.<\/td> No<\/td><\/tr> event\/auth-changing<\/code><\/td>{ onauth, auth }<\/code> during an authentication transition.<\/td>No<\/td><\/tr> event\/auth-error<\/code><\/td>{ error, data }<\/code>.<\/td>No<\/td><\/tr> event\/auth-change-result<\/code><\/td>Server result of a password-change request.<\/td> No<\/td><\/tr> event\/ui-status<\/code><\/td>{ classes, status: { auth: "user" or "anonymous" } }<\/code>.<\/td>No<\/td><\/tr> event\/ping<\/code><\/td>"pong"<\/code> after subscriptions are installed.<\/td>Yes<\/td><\/tr><\/tbody><\/table>\n cotonic.broker.subscribe("model\/auth\/event\/auth", function(msg) {\n const auth = msg.payload;\n console.log("Authenticated:", auth.is_authenticated);\n});\n<\/code><\/pre>\nmodel\/ui\/event\/recent-activity<\/code> for keep-alive decisions,\nmodel\/sessionStorage\/event\/auth-user-id<\/code> for user changes, and\nmodel\/serviceWorker\/event\/broadcast\/auth-sync<\/code> for cross-tab checks. Its\nadvertised dependencies are cotonic#sessionStorage<\/code><\/a>, cotonic#localStorage<\/code><\/a>, and\ncotonic#sessionId<\/code><\/a>.<\/p>\nImplementation<\/h2>\n