---
title: "Configure visitor auth"
method: POST
path: "/sapi/project/{projectId}/auth/config"
tags: ["Visitor Auth"]
---

# Configure visitor auth

`POST /sapi/project/{projectId}/auth/config`

## Request

- Base URL: `https://api.websitepublisher.ai`
- URL: `https://api.websitepublisher.ai/sapi/project/{projectId}/auth/config`
- Auth: OAuth 2 (authorization code, authorization URL `https://api.websitepublisher.ai/dapi/oauth/authorize`, token URL `https://api.websitepublisher.ai/dapi/oauth/token`, scopes: `read`, `write`)

Enable email-based login for website visitors. Use method 'link' for magic link email or 'code' for 6-digit verification code. Visitors authenticate via the SAPI session flow.

## Path parameters

- `projectId` integer, required

## Request body

- VisitorAuthConfig
  - `enabled` boolean: Enable or disable visitor auth (default: true)
  - `methods` string[]: Auth methods: link=magic link email, code=6-digit code
  - `success_url` string: Redirect URL after successful verification (e.g. /welkom)
  - `session_ttl_verified` integer: Verified session duration in seconds (min 3600, max 2592000)
  - `require_name` boolean: Ask visitor for name during auth (default: false)
  - `allowed_domains` string[], nullable: Email domain whitelist (e.g. ["bedrijf.nl"]). Null = all domains allowed.

## Response `200`

Visitor auth configured

---

[API](https://skmtc.dev/websitepublisher/apis/websitepublisher-ai-api.md) · [All operations](https://skmtc.dev/websitepublisher/apis/websitepublisher-ai-api/llms.txt) · [OpenAPI document](https://skmtc.dev/websitepublisher/apis/websitepublisher-ai-api/revisions/e9df1ef10551?raw)