AuthManager

​

When to use

​

Role

• Login — LoginAsync(username, password) authenticates via a configured HttpRequestAsset, persists the encrypted user data to SecureStorage.
• Cached token validation — TryValidateCachedToken() loads persisted credentials and validates against the server.
• Auto-injection — AuthTokenInterceptor automatically adds the auth token header to every outgoing IHttpClient request.
• Guest login — GuestLogin(data) creates an unauthenticated session for anonymous users.
• Logout — LogoutAsync() clears local state and notifies the server.

​

Inspector configuration

​

API Reference

​

Code

using Molca;
using Molca.Networking.Auth;
using UnityEngine;

public class LoginController : MonoBehaviour
{
    [Inject] private AuthManager _auth;

    private async void Start()
    {
        await RuntimeManager.WaitForInitialization();

        // Try restoring a cached session
        if (_auth.HasCachedToken)
        {
            bool valid = await _auth.TryValidateCachedToken();
            if (valid)
            {
                Debug.Log("Session restored");
                return;
            }
        }
    }

    public async void OnLogin(string username, string password)
    {
        bool success = await _auth.LoginAsync(username, password);
        if (success)
            Debug.Log($"Logged in as {_auth.User.GetUserId()}");
    }

    public async void OnLogout()
    {
        await _auth.LogoutAsync();
    }
}

​

Events

• AuthEvents.LoggedIn — fired after successful login/guest login with AuthLoggedInEventData
• AuthEvents.LoggedOut — fired after logout/clear with AuthLoggedOutEventData

​

Troubleshooting

• TryValidateCachedToken returns false: the cached token has expired or the server endpoint is unreachable. User must log in again.
• Auth header not sent on requests: ensure authTokenKey matches the header name the server expects. The interceptor fires automatically on requests built through IHttpClient.

​

Related

• HttpClient — underlying transport; auth headers injected automatically
• IHttpRequestInterceptor — AuthTokenInterceptor implements this
• SecureStorage — encrypted local credential persistence