# Trellis supports more Composer auth types than the docs claim

**URL:** https://discourse.roots.io/t/trellis-supports-more-composer-auth-types-than-the-docs-claim/29932
**Category:** trellis
**Tags:** trellis
**Created:** 2025-09-23T16:20:49Z
**Posts:** 5

## Post 1 by @andronocean — 2025-09-23T16:20:49Z

I noticed something while setting up a new Trellis project yesterday: the docs at [Composer HTTP Basic Authentication | Trellis Docs | Roots](https://roots.io/trellis/docs/composer-http-basic-authentication/) only explain adding `http-basic` as a supported Composer `auth.json` type. Worse, they say “only HTTP basic authentication is supported”.

But this is not so! @TangRufus added support for the `bearer`, `gitlab-oauth`, `gitlab-token`, `github-oauth`, and `bitbucket-oauth` authentication types in [https://github.com/roots/trellis/pull/1413](https://github.com/roots/trellis/pull/1413) a couple years ago.

And I know it works 'cause I use it :grin:. It’s wonderful for adding private git repos as dependencies in Bedrock.

I’m guessing a documentation update fell through the cracks. I figured I should post about it here so more people know about the feature, and hopefully spur a correction in the docs.

---

## Post 2 by @ben — 2025-09-23T19:12:10Z

Thanks, reported here [Trellis Composer auth docs are missing latest updates · Issue #551 · roots/docs · GitHub](https://github.com/roots/docs/issues/551)

Any interest in doing a docs PR?

---

## Post 3 by @andronocean — 2025-09-24T00:56:54Z

Sure, I can put one together when I get a chance. Should the name of the doc stay the same, or move to, say, `composer-authentication.md`?

---

## Post 4 by @ben — 2025-09-24T01:26:57Z

Good call on the naming. If you want to contribute to the existing doc, I can rename it before deploying (requires me changing the config on the site)

---

## Post 5 by @ben — 2026-03-10T17:57:29Z

Long overdue update, new docs are out:

> **[Composer Authentication | Trellis Docs](https://roots.io/trellis/docs/composer-authentication/)**
>
> Set up Composer authentication in Trellis to access private packages, commercial plugins, and authenticated repositories during deployment.