V8-archive: Authenticating user in a custom endpoint

[dev4449]

Feature Request

1. Adding useful information to the docs about how to authenticate a user in a custom endpoint.
2. implying that 'project name' is needed before the path of the custom endpoint:
   docs state:
   The following file path: A file stored in public/extensions/custom/endpoints/example/endpoints.php will be accesible in /custom/example endpoint. When using directories the entrypoint file is endpoints.php.
   '_' is missing before the '/custom/example'
   

   What problem does this feature solve?

How do you think this should be implemented?

Would you be willing to work on this?

Yes, of course

[circletime]

Perhaps this is related:
https://github.com/directus/docs/issues/163

[gianpesto]

@benhaynes I've made my first custom endpoint and would like to authenticate the user in it, is there any example in the docs somewhere? 🙏🏼 thänk yöü!

[benhaynes]

Hmm, that would be a question for @rijkvanzanten

[rijkvanzanten]

Passing that on to @bjgajjar

[gianpesto]

pass it around @bjgajjar 😂

[herrfinke]

@bjgajjar I'd be interested in this as well. Currently there seems to be no good option/example on how to limit access to custom endpoints? By default anyone (without authentication) can use all custom endpoints. We'd like to limit it to logged in users/access the user-object.

[joaojoyce]

Any workaround for this?

Is there any way to check if the user is authenticated inside the handler?

[apiraino]

I've dug a little bit into the Directus source code and prepared a basic example on how to authenticate a user on a custom endpoint with a static token.
The example is composed of a small mixin that retrieves the auth token from the request and then pass it to the Directus API, plus a sample custom endpoint implementing the mixin.
https://gist.github.com/apiraino/aa2a2302afa54b3e1c22b990acddc8cf

Pretty basic but it should give the idea.

Directus exposes its public APIs under \Directus\Services, there's a lot of interesting stuff there.

hth

[apiraino]

Also, cross-referencing with the documentation is useful:
https://docs.directus.io/api/authentication.html