formio-auth

Form.io authentication and authorization specialist — resource-backed login (Login plus Role Assignment Actions), role-based access control and group permissions, SSO via OIDC/OAuth/SAML/LDAP with provider role mapping, Token Swap, Custom JWT for Enterprise/on-prem (signed with JWT_SECRET), email-token (passwordless) auth, and JWT/session mechanics (the x-jwt-token header, jti Session ID, logout, 2FA, reCAPTCHA). Use when the user asks to configure how users authenticate — SSO, OIDC, OAuth, SAML, LDAP, Token Swap, Custom JWT, passwordless auth, JWT, sessions, roles, permissions, RBAC, group permissions, 2FA, or reCAPTCHA in Form.io. Not for: designing the resource map or data model (see formio-resource-planner); orchestrating an app build (see formio-application); adding a Login or Role Assignment Action to one form — per-form action settings, priorities, conditions (see formio-actions); REST endpoint lookups (see formio-api); wiring a login screen into Angular (see formio-angular).