Basic Authentication

Email/password authentication using the internal Users table in the helper file.

Basic Authentication uses the internal Users table with email and hashed password. It supports registration, email verification, login, logout, password resets, invite completion, and magic-link sign-in.

Scope

• Internal Users table and fields (e.g., email, passwordHash, isVerified, isEnabled)

• Page-level actions for auth screens

• Server-side hooks for workflows and notifications

Core Workflows

• Registration ➜ verification email sent ➜ user verified

• Login ➜ access to restricted pages

• Forgot/Reset password ➜ time-bound token ➜ set new password

• Developer invite completion ➜ developer-issued token ➜ set new password (authInviteComplete)

• Magic link ➜ request sign-in link ➜ click link ➜ token-based login

• Logout ➜ session cleanup

Building Blocks

• Actions: authRegister, authVerify, authLogin, authLogout, authForgot, authMagicRequest, authReset, authInviteComplete, authResend

• Hooks: onRegistration, onLogin, onAuthNotifier

• Data: Users table stores email and password hash; verification/reset tokens are treated as secrets

Version Note

• Magic-link support was added in BetterForms 3.4.x.

Next

• See User Registration & Verification for step-by-step guidance

• See Password Management for forgot/reset and admin reset patterns