***
title: "AuthService"
generated: true
---------------
Contains methods relating to [Session](/current/core/reference/typescript-api/entities/session#session), [AuthenticatedSession](/current/core/reference/typescript-api/entities/authenticated-session#authenticatedsession) & [AnonymousSession](/current/core/reference/typescript-api/entities/anonymous-session#anonymoussession) entities.
```ts title="Signature"
class AuthService {
constructor(connection: TransactionalConnection, configService: ConfigService, sessionService: SessionService, eventBus: EventBus)
authenticate(ctx: RequestContext, apiType: ApiType, authenticationMethod: string, authenticationData: any) => Promise;
createAuthenticatedSessionForUser(ctx: RequestContext, user: User, authenticationStrategyName: string) => Promise;
verifyUserPassword(ctx: RequestContext, userId: ID, password: string) => Promise;
destroyAuthenticatedSession(ctx: RequestContext, sessionToken: string) => Promise;
}
```
### authenticate
\
RequestContext, apiType: ApiType, authenticationMethod: string, authenticationData: any) => Promise<AuthenticatedSession | InvalidCredentialsError | NotVerifiedError>`} />
Authenticates a user's credentials and if okay, creates a new [AuthenticatedSession](/current/core/reference/typescript-api/entities/authenticated-session#authenticatedsession).
### createAuthenticatedSessionForUser
\RequestContext, user: User, authenticationStrategyName: string) => Promise<AuthenticatedSession | NotVerifiedError>`} />
### verifyUserPassword
\RequestContext, userId: ID, password: string) => Promise`} />
Verify the provided password against the one we have for the given user. Requires
the [NativeAuthenticationStrategy](/current/core/reference/typescript-api/auth/native-authentication-strategy#nativeauthenticationstrategy) to be configured.
### destroyAuthenticatedSession
\RequestContext, sessionToken: string) => Promise`} />
Deletes all sessions for the user associated with the given session token.