As an example on how to use two factor authentication you will need a Graphweaver app. For this page we assume that you have already followed the Adding Password Authentication guide.

This creates a new Graphweaver app that has a connected Sqlite database.

By default the Graphweaver API is deny all. This means that any request to the server will come back with a FORBIDDEN message.

Let’s switch this to implicit allow so that we can just focus on the authentication.

Authorisation

There is a helper method that will help us switch to implicit allow which looks like this:

import { setImplicitAllow } from "@exogee/graphweaver-auth";
setImplicitAllow(true);

For this how to add the above code to the ./src/backend/index.ts file. This will give access to every entity for every request.

<aside> ⚠️ You will want to remove this and add your own access control lists to each entity. For more information on how to do this see the Implementing Authorization page.

</aside>

We will need to add a new table to this datasource so let’s look at this next.

Authentication Table

In order to use the secondary authentication methods we need to save information to a data source. As the password example we are using uses Sqlite we will continue with that.