NAuthConfig
Package: @nauth-toolkit/core
Type: Interface
Main configuration object for nauth-toolkit. This page intentionally stays minimal - the full option reference is documented inline in the configuration guide.
- NestJS
- Express
- Fastify
import { NAuthConfig } from '@nauth-toolkit/nestjs';
import { NAuthConfig } from '@nauth-toolkit/core';
import { NAuthConfig } from '@nauth-toolkit/core';
Overview
NAuthConfig is the main configuration object for nauth-toolkit, but its full option reference is documented inline in the configuration guide to avoid splitting context across multiple pages.
- See Configuration for the complete
NAuthConfigreference (all options, defaults, and examples).
Recent additions
recaptcha: Google reCAPTCHA v2/v3/Enterprise bot protection. Configureenabled,provider,minimumScore. Use@RequireRecaptcha()decorator on protected endpoints. See RecaptchaConfig and reCAPTCHA Guide.mfa.adaptive.blockedSignIn.scope: control whether Adaptive MFA blocks apply to the user, device, or IP.deviceandipare identified by client-supplied values, so a request presenting a different one is re-scored rather than blocked; a request presenting none stays blocked. Useuserwhen the block must be unconditional.emailNotifications.suppress.mfaMethodAdded: opt-in email notification when an additional MFA method is added.signup.emailVerification.baseUrl: base URL for email verification links. When configured, verification emails include a clickable link with the code (format:${baseUrl}?code=${code}). The consumer app handles routing. Supports both development (localhost) and production URLs.apiKeys: API key authentication. Configureenabled,allowUserCreation,header,maxKeysPerUser,maxExpiryDays,allowIndefinite, and per-keyipRestrictions. Protect routes with the@AllowApiKey()/@DenyApiKey()decorators. See the API Keys Guide.
Related Types
AdaptiveMFAUser- User interface for adaptive MFA risk eventsAdaptiveMFARiskEventPayload- Risk event payload interface