auth interface