Login

Authenticate a user and create a session.

When to use: Implement sign-in in your application.

Prerequisites

• Completed Quickstart

• A running PostgreSQL instance with GL IAM configured

5-Line Core

result = await gateway.authenticate(
    credentials=PasswordCredentials(email="[e-mail]", password="SecurePass123"),
    organization_id="default",
)
user, token = result.unwrap()

Step-by-Step

1

Setup Gateway

from gl_iam import IAMGateway
from gl_iam.core.types import PasswordCredentials
from gl_iam.providers.postgresql import PostgreSQLProvider, PostgreSQLConfig

config = PostgreSQLConfig(
    database_url="postgresql+asyncpg://postgres:postgres@localhost:5432/gliam"
)
provider = PostgreSQLProvider(config)
gateway = IAMGateway.from_fullstack_provider(provider)

2

Authenticate

result = await gateway.authenticate(
    credentials=PasswordCredentials(
        email="[e-mail]",
        password="SecurePass123"
    ),
    organization_id="default",
)

3

Handle Result

if result.is_ok:
    user, token = result.unwrap()
    print(f"Welcome, {user.display_name}!")
    print(f"Access token: {token.access_token[:20]}...")
else:
    print(f"Login failed: {result.error.message}")

4

Expected Output

Welcome, Alice!
Access token: eyJhbGciOiJIUzI1N...

You've implemented user login!

Complete Example

Create login.py:

"""GL IAM Login Example."""

import asyncio

from gl_iam import IAMGateway
from gl_iam.core.types import PasswordCredentials
from gl_iam.providers.postgresql import PostgreSQLProvider, PostgreSQLConfig

DATABASE_URL = "postgresql+asyncpg://postgres:postgres@localhost:5432/gliam"


async def main():
    # Setup
    config = PostgreSQLConfig(database_url=DATABASE_URL)
    provider = PostgreSQLProvider(config)
    gateway = IAMGateway.from_fullstack_provider(provider)

    # Login
    result = await gateway.authenticate(
        credentials=PasswordCredentials(
            email="[e-mail]",
            password="SecurePass123"
        ),
        organization_id="default",
    )

    # Handle result
    if result.is_ok:
        user, token = result.unwrap()
        print(f"Welcome, {user.display_name or user.email}!")
        print(f"Access token: {token.access_token[:50]}...")
    else:
        print(f"Login failed: {result.error.code} - {result.error.message}")

    await provider.close()


if __name__ == "__main__":
    asyncio.run(main())

Run it:

uv run login.py

Common Pitfalls

Pitfall	Solution
Missing organization_id	Always pass organization context
User enumeration	Return same error for "not found" and "wrong password"
Exposing tokens	Never log full tokens or pass in URLs

Next Steps

• User - Understand the User object you received

• Validate - Verify tokens on protected endpoints