Passwordless Login API

Description

A user can be logged in without a password using the API documented below.

This functionality can be used only in CloudCode (Java, JS or Codeless), the reason for this restriction is that a malicious use of this API can easily compromise application's security. As a result, this API must be used from a controlled environment.

Method

Backendless.UserService.login(objectId): Promise<Backendless.User>;

where:

Argument	Description
objectId	Unique identifier of the user account which is used for login operation. String value.

Return Value

The BackendlessUser object containing user data.

{  
  "objectId" : value,  
  "user-token": value,   
  "prop-name1":value,  
  "prop-name2":value,  
  "prop-name3":value,  
  ...  
}

The "objectId" property is a unique identifier assigned by Backendless to the user account. The "user-token" value identifies the user session initiated by the Login operation.

Example

The example below logs in as the user account associated with the following objectId: "4D584E4D-05A3-4AC4-90C7-B80D1584E7AD".

Backendless.UserService.login( "4D584E4D-05A3-4AC4-90C7-B80D1584E7AD" )
 .then( function( loggedInUser ) {
   })
 .catch( function( error ) {
   })

CloudCode Codeless Reference

where:

Argument	Description
object id	Unique identifier of the user account which is used for login operation.
return user	Optional parameter. When this option is checked, the operation returns the BackendlessUserobject containing user data.

Important

This Codeless block is only available in CloudCode due to the security reasons. If this operation is exposed to users, then your application can be compromised.

This operation allows developers to log in to a specific user account without credentials such as identity or password. The operation only requires a unique identifier of a user (object id).

Consider the following record in the Users data table:

The example below logs in as "alice@yourmail.com" associated with the objectId: "4D584E4D-05A3-4AC4-90C7-B80D1584E7AD".

The BackendlessUser object will look as shown below after the Codeless logic runs: