The server side connectCallback should provide a host to connect to and optionally a username and a password/key. The ssh2 package supports keyboard-interactive authentication, so if connectCallback does not return credentials, the client should display a form for the user to enter a username and password.