jamesedmonston / graphql-authentication
GraphQL authentication for your headless Craft CMS applications.
Package info
github.com/jamesedmonston/graphql-authentication
Type:craft-plugin
pkg:composer/jamesedmonston/graphql-authentication
3.1.0
2026-02-26 17:18 UTC
Requires
- php: ^8.2
- abraham/twitteroauth: ^7.0
- craftcms/cms: ^5.0.0
- google/apiclient: ^2.16.0
- lcobucci/jwt: ^4.0.0 || ^5.0.0
- league/oauth2-facebook: ^2.2.0
- thenetworg/oauth2-azure: ^2.2.0
Requires (Dev)
- craftcms/ecs: dev-main
- craftcms/phpstan: dev-main
- craftcms/rector: dev-main
This package is auto-updated.
Last update: 2026-06-12 11:03:34 UTC
README
GraphQL Authentication adds a JWT authentication layer to your Craft CMS GraphQL endpoint.
Plugin Overview
- Adds support for user registration and authentication (see Authentication)
- Adds support for Two-Factor Authentication (see Two-Factor Authentication)
- Adds support for Magic Link Authentication (see Magic Authentication)
- Adds support for social sign-in – currently Google, Facebook, Twitter, Apple, and Microsoft (see Social)
- Adds ability to define per-section user restrictions (queries and mutations can be limited to author-only) (see User Settings)
- Checks mutation fields against schema permissions, and prevents fields being saved if user is trying to access private entries/assets
- Adds ability to assign unique schemas for each user group
- Adds ability to restrict user queries and mutations to Craft multi-site sites
- Adds ability to mark fields as private – stopping users from querying/mutating fields on entries
- Adds a unique, per-user query cache
Use the table below to determine which version of the plugin you should install.
| Craft CMS Version | Plugin Version |
|---|---|
| 5 | 3 |
| 4 | 2 |
| 3 | 1 |
Documentation
You can view the documention for the plugin here.