Guides

Quick start
Authenticate the user
- Use account password authentication
- Use SMS verification code authentication
- Use social login authentication
- Use scan code login authentication
- Certify in Mini Program
- Implement single sign-on (SSO)
- Single sign-on on the mobile terminal
- Multi-factor authentication (MFA)
- Extend the authentication process
- Personalize the guard
Authority management for users
Authorization
Manage user accounts
Manage User Directory
Management Application
Become a source of federal authentication identity
Connect to an external identity provider (IdP)
Open up WeChat ecology
Migrate users to Authing
Management organization
Expandable capabilities
Audit Log
Configure security information
Configure user pool information
Deployment plan
Frequently Asked Questions FAQs

¶ Use Account & Password to Authenticate

Update Time: 2024-10-10 07:28:40

In Authing, account passwords are divided into the following three forms:

Email + password login
Username + password login
Phone number + password login

When providing users with account and password authentication methods, as an IT system administrator or developer, you also need to implement the following functions:

Password reset: the password can be retrieved by email verification code or SMS verification code;
Modify the password: You can reset the password with the existing password. To use Authing to achieve these functions, we provide three different integrate methods:
[Use Authing Hosting landing page](#Use Hosting landing page)，Without a line of code, you can sample-sso.authing.cn experience。
[Use Authing Embedded login component provided](#Use Embedded login component provided)，It can be integrated into your web and mobile projects. You don't need to implement the login form UI yourself.
[Use API & SDK](#Use -api-sdk)，Authing It provides restful and graphql APIs and SDKs in more than 10 languages or frameworks. You can customize the UI and authentication process based on this.
Use Authing hosted login page. No coding work needed. You can experience it through sample-sso.authing.cn.
Using the embedded login component provided by Authing. It can be integrated into your web and mobile projects. You don't need to implement the login form UI yourself.
Use API & SDK. Authing provides APIs in two forms, RESTFul and GraphQL, and SDKs in more than 10 languages or frameworks. You can customize the UI and authentication process based on this.

¶ Registration

After the user has successfully registered, the system will send a welcome email to the user's mailbox:

You can turn off the option of registering to send welcome email in the console settings > security information > user pool security configuration, and you can also modify the default welcome email template in the console settings > message service.

After the user has successfully registered, Authing will send a verification email to the user's mailbox:

The user can verify the mailbox by clicking the verify button.

By default, accounts with unverified mailboxes can log in. You can also modify this configuration in the application details:

After the user logs in successfully, it will call back to the callback link you configured. You can get user information here. For details, please see: Use Authing hosted login page to authenticate.

¶ Modify password

Users can modify password in the personal center.

The embedded login component and the online hosting login page are basically the same in style and interaction. The difference is that the online hosting login page is fully managed and maintained by Authing, which is completely independent of your application. The embedded login component can be integrated in your application. For detailed usage, please see: Use the embedded login component to authenticate.

。

¶ Use API & SDK

¶ Register

Language

Use 用户池 ID（UserPool ID）和应用 ID（AppID）初始化 Java SDK 的 AuthenticationClient:

import cn.authing.core.auth.AuthenticationClient;
// Use  AppId 和 appHost 进行初始化
AuthenticationClient authentication = new AuthenticationClient(APP_ID, APP_HOST);

authenticationClient.setSecret("AUTHING_APP_SECRET");

Use registerByEmail 方法：

String email = "test@example.com";
String password = "123456";
User user = authenticationClient.registerByEmail(new RegisterByEmailInput(email, password)).execute();

Language

Use 用户池 ID（UserPool ID）和应用 ID（AppID）初始化 Java SDK 的 AuthenticationClient:

import cn.authing.core.auth.AuthenticationClient;
// Use  AppId 和 appHost 进行初始化
AuthenticationClient authentication = new AuthenticationClient(APP_ID, APP_HOST);

authenticationClient.setSecret("AUTHING_APP_SECRET");

Use loginByEmail 方法：

String email = "test@example.com";
String password = "123456";
User user = authenticationClient.loginByEmail(new LoginByEmailInput(email, password)).execute();

¶ Reset password

Language

Use 用户池 ID（UserPool ID）和应用 ID（AppID）初始化 Java SDK 的 AuthenticationClient:

import cn.authing.core.auth.AuthenticationClient;
// Use  AppId 和 appHost 进行初始化
AuthenticationClient authentication = new AuthenticationClient(APP_ID, APP_HOST);

authenticationClient.setSecret("AUTHING_APP_SECRET");

Use 手机号验证码重置密码：

String phone = "phone number";
String code = "1234";
String password = "123456";
authenticationClient.resetPasswordByPhoneCode(phone, code, password).execute();

Use 邮箱验证码重置密码：

String email = "test@example.com";
String code = "1234";
String password = "123456";
authenticationClient.resetPasswordByEmailCode(email, code, password).execute();

¶ Modify password

Language

Use 用户池 ID（UserPool ID）和应用 ID（AppID）初始化 Java SDK 的 AuthenticationClient:

import cn.authing.core.auth.AuthenticationClient;
// Use  AppId 和 appHost 进行初始化
AuthenticationClient authentication = new AuthenticationClient(APP_ID, APP_HOST);

authenticationClient.setSecret("AUTHING_APP_SECRET");

如果用户之前没有设置过密码（比如由手机号、社会化登录等方式注册），不需要传入原始密码。

String newPassword = "123456";
User user = authenticationClient.updatePassword(newPassword).execute();

或者：

String oldPassword = "111111";
String newPassword = "123456";
User user = authenticationClient.updatePassword(newPassword, oldPassword).execute();

Prev: Authenticate the user Next: Use SMS verification code authentication

¶ Use Account & Password to Authenticate

¶ Use hosted login page

¶ Registration

¶ Login

¶ Modify password

¶ Use embedded login component

¶ Use API & SDK

¶ Register

¶ Login

¶ Reset password

¶ Modify password