Scribe Auth Node

Most calls to Scribe's API require authentication and authorization. This library simplifies this process.

You first need a Scribe account and a client ID. Both can be requested at support[atsign]scribelabs[dotsign]ai or through Intercom on https://platform.scribelabs.ai if you already have a Scribe account.

This library interacts directly with our authentication provider AWS Cognito meaning that your username and password never transit through our servers.

Installation

Add the dependency to your package.json and save it:

``
"dependencies": {
"@scribelabsai/auth": ">=2.0.0"
}
`

Install it from command line:

`
npm install
`

Requirements

This library requires Node.js >= 16.20.0

Methods

$3

`javascript
import { Auth, Tokens } from '@scribelabsai/auth';
const access = new Auth(clientId);
access.changePassword('username', 'password', 'newPassword');
`

$3

`javascript
import { Auth, Tokens } from '@scribelabsai/auth';
const access = new Auth(clientId);
access.forgotPassword('username', 'password', 'confirmationCode');
`

$3

##### With username and password

`javascript
import { Auth, Tokens } from '@scribelabsai/auth';
const access = new Auth(clientId);
access.getTokens({ username: 'username', password: 'password' });
`

##### With username and password (MFA enabled)

`javascript
import { Auth, Tokens, Challenge } from '@scribelabsai/auth';
const access = new Auth(clientId);
const result = await access.getTokens({ username: 'username', password: 'password' });

// Check if MFA challenge is required
if ('challengeName' in result && result.challengeName === 'SOFTWARE_TOKEN_MFA') {
// Prompt user for MFA code from their authenticator app
const mfaCode = '123456'; // Get this from user input
const tokens = await access.respondToAuthChallengeMfa(
result.user,
mfaCode,
result.challengeParameters
);
console.log(tokens);
} else {
// No MFA required, result is already the tokens
console.log(result);
}
`

##### With refresh token

`javascript
import { Auth, Tokens } from '@scribelabsai/auth';
const access = new Auth(clientId);
access.getTokens({ refreshToken: 'refreshToken' });
`

$3

#### Disclaimer: revokeToken(refreshToken) is not ready yet, you may use our Python lib or call AWS services directly.

Flow

- If you never have accessed your Scribe account, it probably still contains the temporary password we generated for you. You can change it directly on the platform or with the changePassword method. You won't be able to access anything else until the temporary password has been changed.

- Once the account is up and running, you can request new tokens with getTokens. You will initially have to provide your username and password. The access and id tokens are valid for up to 30 minutes. The refresh token is valid for 30 days.

- While you have a valid refresh token, you can request fresh access and id tokens with getTokens but using the refresh token this time, so you're not sending your username and password over the wire anymore.

- You can get your federated id by using getFederatedId and providing your id token. The federated id will allow you to use getFederatedCredentials to get an access key id, secret key and session token.

- Every API call to be made to Scribe's API Gateway needs to have a signature. You can get the signature for your request by using getSignatureForRequest. Provide the request you'll be using and your credentials (use getFederatedCredentials` to get them).

---

To flag an issue, open a ticket on Github and contact us on Intercom through the platform.