Authentication Context

Authentication context is information about who is calling an API.

If a Velo function doesn't receive authentication context, it treats the call as if it was made by an anonymous site visitor. This restricts the Velo functions you can use in your code without overriding authentication using elevate(). Learn more about access type and permissions.

Providing your HTTP functions with authentication context allows you to:

• Authorize only users with the right permissions for each Velo function, such as admins or site members.
• Use functions that return different responses based on the user who calls them, such as getCurrentMember().

The SDK client uses authorization strategies to authorize and authenticate SDK API calls. This associates your SDK function calls with the site that hosts your HTTP functions and the authentication context of who is making the API call to send to your HTTP function.