Add password login

You'll learn how to register SqlOS, seed an owned client, and sign in through the hosted login UI.

Goal#

Users sign in at /sqlos/auth/login with email and password. Your app uses the OAuth authorization code flow with PKCE.

Steps#

1. Register SqlOS with password auth enabled (default):

builder.AddSqlOS<AppDbContext>(options =>
{
    options.AuthServer.SeedOwnedWebApp(
        "web",
        "My App",
        "https://localhost:5001/auth/callback");
    options.AuthServer.SeedAuthPage(page =>
    {
        page.PageTitle = "Sign in";
        page.EnablePasswordSignup = true;
    });
});

2. Map routes after Build():

app.MapSqlOS();

3. Start the app and open /sqlos/auth/authorize with your client id, redirect URI, and PKCE challenge (the Todo sample shows a full flow).

4. Verify: complete login and confirm your app receives tokens at the callback URL.

Expected outcome#

• Hosted login and signup pages render with your branding
• OAuth /authorize and /token endpoints respond on your origin
• Users and sessions appear in /sqlos/admin/auth/

Next steps#

• Email OTP for passwordless sign-in
• Social sign-in
• GitHub sign-in
• Headless auth for a custom SPA UI