Building Custom Authentication in SAP CAP

This guide presents a practical example of how to implement custom authentication in SAP CAP (Node.js). It demonstrates key architectural decisions, security considerations, and integration steps for creating a robust and extensible authentication layer.

Project Setup

Configuration Entry Point

The key to enabling custom authentication in CAP is the auth configuration in package.json.
This tells the CAP runtime to use your custom middleware handler for all incoming requests, allowing full control of the identity verification process.

{
  "cds": {
    "requires": {
      "auth": {
        "impl": "auth/basic-auth.ts"
      }
    }
  }
}