How to generate new Meteor login tokens (server side) in order to make a quick login link

Question

Meteor has a loginWithToken method, and there are resume tokens in the user object. So one can login using one of these tokens with loginWithToken. That works.

Is there a way to generate new login tokens, or should I just use the resume tokens to create a quick login link?

Jimmy Knoot · Answer 1 · 2015-10-30T08:41:09.747

23

As Johnny said, you can use the Accounts._generateStampedLoginToken() function, which is actually nothing special, just the following function:

_generateStampedLoginToken = function () {
  return {
    token: Random.secret(),
    when: new Date
  };
}

anyway, to use it, here is an example:

// Server //

// Creates a stamped login token
var stampedLoginToken = Accounts._generateStampedLoginToken();

/**
 * Hashes the stamped login token and inserts the stamped login token 
 * to the user with the id specified, adds it to the field 
 * services.resume.loginTokens.$.hashedToken. 
 * (you can use Accounts._hashLoginToken(stampedLoginToken.token) 
 * to get the same token that gets inserted)
 */
Accounts._insertLoginToken(user._id, stampedLoginToken);


// Client //

// Login with the stamped loginToken's token
Meteor.loginWithToken(stampedLoginToken.token);

edited Oct 30 '15 at 08:41

answered Oct 27 '15 at 12:07

Jimmy Knoot

2,378
20
29

Thank you for mentioning the internal methods that get called to generate the tokens! – arijeet Oct 29 '15 at 15:21
Quick question.. `Meteor.loginWithToken` is strictly client side right? – arijeet Oct 29 '15 at 15:27
@redskins80 yes, that is correct, you could generate the token via a Meteor method call or something, my comment says otherwise, let me edit that. – Jimmy Knoot Oct 30 '15 at 08:40
Does Meteor.loginWithToken require a package? I'm [getting errors](http://stackoverflow.com/questions/35419371/meteor-unable-to-call-loginwithtoken-from-meteor-or-accounts) – davis Feb 15 '16 at 21:27
Where are those Tokens stored? – Gobliins Jun 26 '18 at 15:27
very helpful – maudulus Jul 20 '20 at 17:34

John · Answer 2 · 2013-08-16T19:53:20.660

3

Yes, you can generate new tokens by calling Accounts._generateStampedLoginToken(). You can call it from within a login handler.

https://github.com/meteor/meteor/blob/master/packages/accounts-base/accounts_server.js#L114

edited Aug 16 '13 at 19:53

answered Aug 01 '13 at 19:15

John

3,866
6
33
37

How can you call this from client side? – Gobliins Jun 28 '18 at 14:38
Idk, this answer is 5 years old so I assume it's extremely out of date. – John Jul 11 '18 at 00:45
Answer is still correct. Code hasn't changed that much. ATM i use, `Meteor.methods` to call this function. Since i didn't find any Client sided API except the login function. – Gobliins Jul 12 '18 at 07:35

score 2 · Answer 3 · answered Dec 05 '15 at 09:27

2

it's 2015 - use one of these packages:

poetic:accounts-passwordless
acemtp:accounts-passwordless

http://fastosphere.meteor.com/?q=passwordless

answered Dec 05 '15 at 09:27

krivar

342
1
3
16

poetic:accounts-passwordless is pretty legit – brian Scroggins Jan 22 '16 at 16:23

How to generate new Meteor login tokens (server side) in order to make a quick login link

3 Answers3

Linked