Google (SSO)

Google Authentication uses your Google account to authenticate via the Lit Login Server or your own Login Server. This can be used to mint a PKP and then sign messages.

Prerequisites

Lit Login Server & Lit Auth Server URLs. Please refer to Auth Services section.

1. Sign in with Google

   To sign in with Google, you can use the authenticate function provided by the GoogleAuthenticator.

   import { GoogleAuthenticator } from "@lit-protocol/auth";
   
   const authData = await GoogleAuthenticator.authenticate(
     "https://login.litgateway.com"
   );
   

2. Get or Mint a PKP

   You can select an existing PKP associated with your account or mint a new one.

   Mint a fresh PKP

   const res = await litClient.authService.mintWithAuth({
     authData: authData,
   });
   

3. Generate Auth Context

   Use your newly minted PKP to create an AuthContext. This method will cache two things:

   1. session key pair - a temporary cryptographic key pair generated on the client side that acts as a temporary identity for the client application. It consists of:
      • A public key - shared with the Lit nodes
      • A secret key (private key) - kept securely on the client
   2. Delegation AuthSig aka. the inner auth sig - a cryptographic attestation from the Lit Protocol nodes that authorises your session key to act on behalf of your PKP.

   
   const authContext = await authManager.createPkpAuthContext({
     authData: authData, // <-- Retrieved earlier
     pkpPublicKey: pkpInfo.pubkey, // <-- Minted earlier
     authConfig: {
       resources: [
         ["pkp-signing", "*"],
         ["lit-action-execution", "*"],
       ],
       expiration: new Date(Date.now() + 1000 * 60 * 60 * 24).toISOString(),
       statement: "",
       domain: window.location.origin,
     },
     litClient: litClient,
   });