lardcanoe
I am using ash_auth for password/google registration/signup.
I was looking into also using it to let a user connect to a 3rd party service so I can track tokens, but I do NOT want to enable registration or signup for that.
This doesn’t seem to be a use case that ash auth currently allows. True? I should just use assent directly?
Where Next?
Trending in Questions
Other Trending Topics
Latest Ash Threads
Latest on Elixir Forum
Sponsor Spotlight
Error tracking, logs, APM, uptime and cron monitoring in one dev-friendly platform. Find and fix problems before your users notice.
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #deployment
- #library
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #elixirconf
- #channels
- #exunit
- #discussion
- #code-sync
- #javascript
- #podcasts
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #blog-post
- #elixir-ls
- #ai
- #elixirconf-us
- #phoenix_html
- #iex
- #graphql
- #genstage
- #websockets
- #supervisor
- #advent-of-code
- #distillery
- #processes
- #api
- #forms
- #hex
- #security
- #metaprogramming
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Error tracking, logs, uptime, and Just Enough APM. Built for developers.
Elixir, Erlang & BEAM conferences from Code Sync - join us in 2026!
Bringing learning, work and compliance together since 1987.
Producing high quality Elixir screencasts since 2017.
The deployment platform built for Elixir: PaaS ease, VPS control.
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"
Showing Posts 1 to 5- Show Best Posts
- Show All (oldest first)
- Show All (newest first)
zachdaniel
While it might be possible to make that work, I know that it was not designed/tested for that kind of use case. I think a case could be made that it can/should be added to
ash_auth, but for now I’d assume it’s not on the table. Perhaps open an issue on the repo to track that as a feature request? I imagine that if I or @jimsynz want to do something similar that we’re going to want to reuse all the goodies in AshAuthentication instead of hand rolling it from scratch.PRs welcome for this kind of feature, although want to run it by @jimsynz as well
jimsynz
I think you’re right @zachdaniel - it’s authentication adjacent so not really something I had considered. However, if you set up registration for this 3rd party service (let’s call it “guthib”) you can modify the
register_with_guthibcreate action to only work if the user already exists. That way you can still utilise the identity resource to keep track of their tokens and keep them fresh. It is a bit of a hack, and you’d have to manually implement your sign in UI so that it didn’t provide the guthib option to your users. I would welcome a PR that adds the ability to add identities to authenticated users.Good luck!
lardcanoe
It dawned on me after a bit of tinkering that ash_auth wasn’t gonna be the right approach anyway for me. I have a model where a User can be part of multiple Organizations, and I need to tie the refresh_tokens to a UserOrg, not a User. That was going to mean I would need to have the UserOrg also be an identity for ash_auth, which just wasn’t right (since I would be forced to define a strategy).
Ultimately,
assentwas like ~30 lines of code spread across the router, controller, and a tiny OAuth module. (Plus a new resource to store the tokens).Thank you for the feedback!
jimsynz
Glad you found a solution that works for you!
ajst7les
@jimsynz I was wondering if this was on the roadmap?