I am writing a CMS in Kotlin that uses DSLs to pro...

# ktor

[wilyarti]

I am writing a CMS in Kotlin that uses DSLs to produce pages (Kotlinx). I need to add authentication for the administrative side of things and to create custom content for each user. Any ideas of a good fit for Ktor?

[tjohnn]

Have you seen this https://ktor.io/servers/features/authentication.html

[Dennis Schröder]

Will it be a decoupled, headless CMS?

[wilyarti]

I have looked at the Ktor authentication. I don't think it matches my needs as it's route based. I wanted a session based authentication with a token to manage access control...

[wilyarti]

@Dennis Schröder the pages and posts are held in a SQL database. The front end is written in react. The code is here: https://github.com/wilyarti/cms

[wilyarti]

I am a not a professional programmer.

[cy]

@wilyarti Could you please explain what do you mean by "token to manage access control" ?

[cy]

Session based auth is done by SessionAuthenticationProvider

[cy]

You can install it by https://api.ktor.io/1.2.4/io.ktor.auth/session.html functions

[cy]

This is to configure auth by sessions

[cy]

but you also need to configure sessions https://ktor.io/servers/features/sessions.html

[wilyarti]

Thanks @cy that will work perfectly. Instead of a token I will just use this feature.

[cy]

Also you see an example here: https://github.com/ktorio/ktor/blob/6638ea7abbecd71af0d70633a2f406587bd4a8fd/ktor-features/ktor-auth/jvm/test/io/ktor/tests/auth/SessionAuthTest.kt#L171

[cy]

It's a shame that we don't have it in our docs

[cy]

And here if you need a custom challenge or session validation: https://github.com/ktorio/ktor/blob/6638ea7abbecd71af0d70633a2f406587bd4a8fd/ktor-features/ktor-auth/jvm/test/io/ktor/tests/auth/SessionAuthTest.kt#L32

[wilyarti]

Cheers I will check it out :)

[wilyarti]

For anyone following. I used server based sessions with authentication to solve this. The source code is here(I found it hard to get a complete example): https://github.com/wilyarti/cms

[wilyarti]

I stole the authentication boiler plate from a forum... Still need to credit it in my source code