App Auth

[projects.auth]
enabled = true
allowedOrigins = ["https://app.example.com"]
redirectUrls = ["https://app.example.com/auth/callback"]
emailPassword = true
magicLink = true
passwordMinLength = 14
accessTokenTtlSeconds = 900
refreshTokenTtlSeconds = 604800
sessionIdleTtlSeconds = 86400
sessionMaxTtlSeconds = 604800
magicLinkTtlSeconds = 900
passwordResetTtlSeconds = 900

import { createKorveAuthClient } from "@korve-dev/app-auth/browser";

const auth = createKorveAuthClient({
  apiUrl: "https://api.korve.dev",
  project: "storefront",
});

await auth.signUpWithPassword({
  email: "user@example.com",
  password: "a unique strong password",
  redirectUrl: `${location.origin}/auth/callback`,
});
await auth.signInWithPassword("user@example.com", "a unique strong password");

await auth.requestMagicLink("user@example.com", `${location.origin}/auth/callback`);
const session = await auth.handleEmailLinkCallback();

Set-Cookie: __Host-korve-access=<opaque>; Path=/; HttpOnly; Secure; SameSite=Lax
Set-Cookie: __Host-korve-refresh=<opaque>; Path=/; HttpOnly; Secure; SameSite=Lax