Authenticate
Last edit: Oct 13, 2026
Checks of credentials against the user. Every field returns true when the given credential is valid for this user
type Authenticate {
jwt(algorithm: JwtAlgorithm = HS256, token: String!): Boolean!
otp_code(code: String!, drift: Int): Boolean!
password(password: String!): Boolean!
temporary_token(token: String!): Boolean!
}
Fields
jwt (Boolean)
True when the given JWT was issued for the user, has not expired and has not been invalidated
-
algorithm(JwtAlgorithm)
Algorithm the token was signed with
-
token(String)
JWT to check
otp_code (Boolean)
True when the given code is the current 6-digit time-based one-time password (TOTP) of the user
-
code(String)
One-time password provided by the user
-
drift(Int)
Number of seconds a code may lag behind the server clock and still be accepted
password (Boolean)
True when the given password matches the password of the user
-
password(String)
Plain text password to check
temporary_token (Boolean)
True when the given temporary token belongs to the user and has not expired
-
token(String)
Temporary token to check