Authentication - Set up access token permissions with SvelteKit

Follow the following steps to start configure your authentication endpoint and start building your own security logic.

Quickstart

1. Install the liveblocks/node package

   $npm install @liveblocks/node

2. Set up authentication endpoint

   Users can only interact with rooms they have access to. You can configure permission access in an api/liveblocks-auth endpoint by creating the src/routes/api/liveblocks-auth/+server.ts file with the following code. This is where you will implement your security and define if the current user has access to a specific room.

   src/routes/api/liveblocks-auth/+server.ts

   import { type RequestEvent } from "@sveltejs/kit";import { Liveblocks } from "@liveblocks/node";
   const liveblocks = new Liveblocks({  secret: "sk_prod_xxxxxxxxxxxxxxxxxxxxxxxx",});
   export async function POST({ request }: RequestEvent) {  // Get the current user from your database  const user = __getUserFromDB__(request);
     // Start an auth session inside your endpoint  const session = liveblocks.prepareSession(    user.id,    { userInfo: user.metadata },  // Optional  );
     // Implement your own security, and give the user access to the room  const { room } = await request.json();  if (room && __shouldUserHaveAccess__(user, room)) {    session.allow(room, session.FULL_ACCESS);  }
     // Authorize the user and return the result  const { status, body } = await session.authorize();  return new Response(body, { status });}

3. Set up the client

   On the front end, you can now replace the publicApiKey option with authEndpoint pointing to the endpoint you just created.

   liveblocks.config.ts

   import { createClient } from "@liveblocks/client";
   const client = createClient({  authEndpoint: "/api/liveblocks-auth",});

   If you need to pass custom headers or data to your endpoint, you can use authEndpoint as a callback instead.

   liveblocks.config.ts

More information

Both userId and userInfo can then be used in your Svelte application as such:

const self = room.getSelf();console.log(self.id);console.log(self.info.color);