Anonymous Auth

Beta

This feature is in beta. Core behavior is stable, but some APIs or configuration may change before general availability.

Let users explore your app without registration. Anonymous accounts can be converted to permanent accounts later.

Captcha Protection

When captcha is enabled, anonymous sign-in is automatically protected by Cloudflare Turnstile. All client SDKs handle token acquisition transparently — no code changes needed.

Enable

// edgebase.config.ts
auth: {
  anonymousAuth: true,
}

Sign In Anonymously

JavaScript

const { user } = await client.auth.signInAnonymously();
// user.isAnonymous → true

Dart/Flutter

final result = await client.auth.signInAnonymously();

Swift

let result = try await client.auth.signInAnonymously()

Kotlin

val result = client.auth.signInAnonymously()

Java

Map<String, Object> result = client.auth().signInAnonymously();

C#

var result = await client.Auth.SignInAnonymouslyAsync();

C++

auto result = client.auth().signInAnonymously();

Convert to Email Account

JavaScript

await client.auth.linkWithEmail({
  email: 'user@example.com',
  password: 'securePassword',
});
// user.isAnonymous → false  (data preserved)

Dart/Flutter

await client.auth.linkWithEmail(email: 'user@example.com', password: 'securePassword');

Swift

try await client.auth.linkWithEmail(email: "user@example.com", password: "securePassword")

Kotlin

client.auth.linkWithEmail(email = "user@example.com", password = "securePassword")

Java

client.auth().linkWithEmail("user@example.com", "securePassword");

C#

await client.Auth.LinkWithEmailAsync("user@example.com", "securePassword");

C++

client.auth().linkWithEmail("user@example.com", "securePassword");

Convert to OAuth Account

JavaScript

await client.auth.linkWithOAuth('google');

Dart/Flutter

final url = await client.auth.linkWithOAuth('google');
await launchUrl(Uri.parse(url));

Swift

let url = try await client.auth.linkWithOAuth(provider: "google")

Kotlin

val url = client.auth.linkWithOAuth("google")

Java

String url = client.auth().linkWithOAuth("google");

C#

var url = client.Auth.LinkWithOAuth("google");

C++

auto url = client.auth().linkWithOAuth("google");

Access Rules

Use auth.isAnonymous in access rules to differentiate anonymous users:

access: {
  insert(auth) { return auth !== null && !auth.isAnonymous },  // Only registered users
  read(auth) { return auth !== null },  // Any authenticated user (including anonymous)
}

Auto-Cleanup

Stale anonymous accounts are automatically deleted after auth.anonymousRetentionDays (default: 30 days).