# SansPassword [](https://travis-ci.org/promptworks/sans_password)
Passwordless authentication helpers for [Guardian](https://github.com/ueberauth/guardian).
Take a look at the [demo app](https://github.com/promptworks/sans_password_demo).
## Installation
Add `sans_password` to your list of dependencies in `mix.exs`:
```elixir
def deps do
[{:sans_password, "~> 1.0.0-beta"}]
end
```
Next, follow Guardian's [installation instructions](https://github.com/ueberauth/guardian#installation) to setup a Guardian module.
Now, you should have a `Guardian` module, so you can sprinkle in `SansPassword`.
```elixir
defmodule MyApp.Guardian do
use Guardian, otp_app: :my_app
use SansPassword
...
@impl true
def deliver_magic_link(user, magic_token, extra_params) do
user
|> MyMailer.magic_link_email(magic_token, extra_params)
|> MyMailer.deliver
end
end
```
`SansPassword` uses two token types:
* `magic` - This token will be sent to your users in an email. They are very short-lived and will be sent to your users via email. This token will be included in the "magic link" to your app.
* `access` - This token will allow your users to request content from your app.
This part is VERY important, you need to configure the TTLs for the token types that `SansPassword` uses:
```elixir
config :guardian, MyApp.Guardian,
secret_key: "super secret key",
issuer: "my_app",
token_ttl: %{
"magic" => {30, :minutes},
"access" => {1, :days}
}
```
## Usage
SansPassword provides just a few convenience functions.
```elixir
# We'll assume you have a user record
{:ok, user} = Repo.insert(%User{email: "user@example.com"})
# Send a login link that will allow the user to login
{:ok, magic_token, _claims} = MyApp.Guardian.send_magic_link(user)
# If you're building an API, you'll probably want to convert the magic token to an access token
{:ok, access_token, _claims} = MyApp.Guardian.exchange_magic(magic_token)
# If you're storing sessions, you can sign your users in like this
{:ok, user, _claims} = MyApp.Guardian.decode_magic(magic_token)
MyApp.Guardian.Plug.sign_in(user)
```
### Trackable (optional)
To track your users sessions, see [guardian_trackable](https://github.com/promptworks/guardian_trackable).
### Accessing the current user
Under the hood, SansPassword just uses Guardian, so to get the current user, just say:
```elixir
Guardian.Plug.current_resource(conn)
```
