Skip to main content

AuthenticationMethod

An AuthenticationMethod represents the means by which a User is authenticated. There are two kinds: NativeAuthenticationMethod and ExternalAuthenticationMethod.

Signature

user

propertyUser

This method is used when an external authentication service is used to authenticate Vendure Users. Examples of external auth include social logins or corporate identity servers.

Signature

constructor

method(input: DeepPartial<ExternalAuthenticationMethod>) => ExternalAuthenticationMethod

strategy

propertystring

externalIdentifier

propertystring

metadata

propertyany

This is the default, built-in authentication method which uses a identifier (typically username or email address) and password combination to authenticate a User.

Signature

constructor

method(input?: DeepPartial<NativeAuthenticationMethod>) => NativeAuthenticationMethod

identifier

propertystring

passwordHash

propertystring

verificationToken

propertystring | null

passwordResetToken

propertystring | null

identifierChangeToken

propertystring | null

A token issued when a User requests to change their identifier (typically an email address)

pendingIdentifier

propertystring | null

When a request has been made to change the User's identifier, the new identifier will be stored here until it has been verified, after which it will replace the current value of the identifier field.

Was this chapter helpful?
Report Issue
Edited Feb 25, 2026ยทEdit this page