Auth

Auth gives your app users. A person signs up once, signs in whenever they return, and from then on every request your app makes is made as that person. Your database, storage and realtime rules read that identity to decide what the person may see and change. This section teaches Auth from both sides at once. For every feature you will see:

What it is and when to use it.
In Studio: where to click, and what each setting means.
In your app: the client calls that use it.

Where Auth lives in Studio

Open your project, pick an environment, and choose Users & auth under Access. Its sidebar is the map for this whole section:

Studio group	Pages	Learn
People	Users, Organizations, Invitations, Roles	Users, Organizations, Invitations, Roles
Sign-in	Authentication flow, Sign-in & registration, Email templates, Attributes, Social providers, Company sign-in, OAuth servers, Domains	Flow, Password sign-in, Social, Company sign-in, Attributes, Emails, Redirects
Security	Password policy, Multi-factor, Account recovery, Devices, Sessions, Attack protection, Restrictions	Passwords, Two-step, Recovery, Devices, Sessions, Lockout, Restrictions
Developers	Token profiles, User API keys, Machines & agents, Auth webhooks	Tokens, API keys, Machines & agents, Webhooks
Records	Sign-in activity, Import & export	Activity, Import and export

Learn it in this order

Understand the model

How Auth works explains users, sessions and tokens. Configuring Auth shows where every setting lives in Studio.

Choose how people sign in

Start with email and password, then add email codes, sign-in links, social sign-in or passkeys.

Protect accounts

Set a password policy, offer two-step verification, and turn on attack protection.

Build the experience

Sessions, the user profile, verification, organizations and Auth in React.

Connect other systems

Token profiles, user API keys, auth webhooks and import and export.

A first taste

const { user } = await pawabase.auth.signUp({ email: "ada@example.com", password: "a long passphrase" });

pawabase.auth.onAuthStateChange((event, session) => {
  console.log(event, session?.user.email);     // SIGNED_IN, SIGNED_OUT, TOKEN_REFRESHED …
});

await pawabase.auth.signOut();

result = pb.auth.sign_up(email="ada@example.com", password="a long passphrase")

pb.auth.on_auth_state_change(lambda event, session: print(event))

pb.auth.sign_out()

Getting started

Sign-in methods

Sign-up

Security

People

Developers

Where Auth lives in Studio

Learn it in this order

A first taste

​Where Auth lives in Studio

​Learn it in this order

​A first taste

Where Auth lives in Studio

Learn it in this order

A first taste