ConvexAuthServerConfig
Configuration for setupConvexAuthServer.
Properties​
| Property | Type | Description |
|---|---|---|
allowedOrigins? | string[] | Origins beyond the request's own Host trusted by every handler's CSRF origin check, for deployments where the two differ (e.g. a proxy that rewrites Host). See isTrustedOrigin. |
convexUrl | string | The Convex deployment URL used server-side. |
cookieOptions | AuthCookieOptions | Auth cookie attributes for every handler; secure is required. |
refreshSession | RefreshSessionFn | The app's refreshSession mutation reference. |
signIn | ExposedSignInFn[] | The sign-in functions of the methods to expose through the auth proxy. This should include all the Convex backend functions in your app that can issue auth sessions (e.g. account creation, log in with existing account…). Anything not listed is refused, so this allowlist is the proxy's entire API surface. Listing a function here is all the wiring an auth method needs. |
signOut | SignOutFn | The app's signOut mutation reference. |