encore-auth

To authenticate API callers in Encore.ts, you create an auth handler, wire it to a Gateway, and use getAuthData within endpoints to access user identity data for protected requests.

Service-to-service authentication in Encore.ts automatically propagates auth data across internal calls, allowing downstream services to securely access the original caller's identity without re-authenticating the request.

Yes, you can secure Encore endpoints using JWT, API key, and cookie-based authentication patterns. The auth handler validates these tokens to identify callers before routing requests to protected endpoints.

The best way to protect Encore.ts endpoints is registering an authHandler with a Gateway to intercept requests, validate caller credentials, and apply authentication rules before routing to protected endpoints.

You access authenticated user data inside Encore.ts endpoints by calling the built-in getAuthData function, which retrieves the parsed identity information validated by your Gateway's auth handler.