This is the description of the plugin.
npm install strapi-googleauth-extendedstrapi-googleauth-extended is a Strapi plugin that simplifies Google OAuth authentication for your users. With seamless integration into Strapi's user management system, this plugin helps you manage user login and profile information efficiently. The plugin uses Google's OAuth 2.0 authorization to retrieve user details and ensures secure JWT-based authentication.
It's an enhanced version of the strapi-google-auth plugin by storing the registered users in the strapi
1. Official Google API integration
2. Strapi's default user-permission collection integration
3. JWT authentication for secure access
4. Automatic handling of first-time registrations
5. User-friendly and customizable
6. Secure and sanitized responses
``bash`
npm install strapi-googleauth-extended
or
`bash`
yarn add strapi-googleauth-extended
Activate the plugin by adding the following lines to your config/plugins.js file:
`js`
module.exports = {
"strapi-google-auth-extended": {
enabled: true,
},
};Configuration
1. Create a Google Cloud Project:
. Go to the Google Cloud Console.
. Create a new project or select an existing one.
2. Create OAuth Consent Screen:
. In the left navigation menu, go to APIs & Services > OAuth consent screen.
. Set up your consent screen by providing the required information, such as application name, support email, and scopes.
3. Create OAuth Client ID:
. Navigate to Credentials.
. Click Create Credentials and select OAuth Client ID.
. Configure the OAuth Client by choosing "Web Application" and specifying your Authorized redirect URIs.
4. Obtain Client ID and Client Secret:
. After creating the OAuth client, you will receive a Client ID and Client Secret. Save these details for later use.
5. Set Up Redirect URL and Scopes:
. Add your redirect URL (e.g., https://yourapp.com/callback) in the OAuth Client configuration.
. Define the scopes required for your application (e.g., email, profile).
. In the Strapi Admin panel, navigate to the plugin settings page.
. Enter your Client ID, Client Secret, Redirect URL, and the required scopes in the respective fields.
. Save your settings.
`js`
{
method: 'GET',
path: 'STRAPI_BACKEND_URL/strapi-googleauth-extended/init',
}
This will redirect your users to the Google login page. After a successful login, Google will redirect the user back to your specified redirect URL with an authorization code as a query parameter:
arduino
Copy code
https://REDIRECT_URL?code=AUTH_CODE
Use the received authorization code to authenticate the user by making a POST request to the following endpoint:
`js`
{
method: 'POST',
path: 'STRAPI_BACKEND_URL/strapi-googleauth-extended/user-profile',
data: {
code: AUTH_CODE
}
}
This will generate a JWT token for the authenticated user.
To retrieve the authenticated user's details, use the JWT token obtained in the previous step:
`js`
{
method: 'GET',
path: 'STRAPI_BACKEND_URL/strapi-googleauth-extended/me',
headers: {
Authorization: 'Bearer
}
}Step 4: Update User Password
If you need to allow users to update their passwords, send a POST request with the JWT token and new password:
`js``
{
method: 'POST',
path: 'STRAPI_BACKEND_URL/strapi-googleauth-extended/update-password',
headers: {
Authorization: 'Bearer
},
data: {
"password": "
}
}
The plugin will automatically store new users in Strapi's Users content manager when they log in for the first time. If the user already exists, they will not be added again.
Ensure that your Strapi installation is secure by using HTTPS.
Regularly update your Google OAuth credentials and monitor your Google Cloud project for security alerts.