Authentication

// Register
await base.collection('users').create({
  email: 'user@example.com',
  password: 'securepassword123',
  passwordConfirm: 'securepassword123',
  name: 'Jane Doe',
})

// Login
const auth = await base.collection('users').authWithPassword(
  'user@example.com',
  'securepassword123',
)

console.log(auth.token)   // JWT token
console.log(auth.record)  // User record

// Start OAuth2 flow (opens popup)
const auth = await base.collection('users').authWithOAuth2({
  provider: 'google',
})

// Configure in Base settings
// IAM_URL=https://hanzo.id
// IAM_CLIENT_ID=app-myapp
// IAM_CLIENT_SECRET=...

const auth = await base.collection('users').authWithOAuth2({
  provider: 'hanzo',
})

// Check if authenticated
base.authStore.isValid

// Get current user
base.authStore.record

// Get token
base.authStore.token

// Listen to auth changes
base.authStore.onChange((token, record) => {
  console.log('Auth changed:', record?.email)
})

// Logout
base.authStore.clear()

// Authenticated users only
@request.auth.id != ""

// Only the record owner
@request.auth.id = userId

// Admin role required
@request.auth.role = "admin"

// Specific collection auth
@request.auth.collectionName = "admins"

// Request verification email
await base.collection('users').requestVerification('user@example.com')

// Confirm verification (from email link token)
await base.collection('users').confirmVerification(token)

// Request password reset
await base.collection('users').requestPasswordReset('user@example.com')

// Confirm reset
await base.collection('users').confirmPasswordReset(
  token,
  'newpassword123',
  'newpassword123',
)