You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
"Configure Authentication with OIDC standard, OR a generic option that lets you bring your own auth server",
20
+
"Configure in-app wallets with OIDC standard, or a generic endpoint that lets you bring your own auth server",
21
21
});
22
22
23
-
# Configuration
23
+
# Bring your own auth
24
24
25
-
We offer two options to setup in-app wallets with custom auth, one that is based on the [OIDC (Open ID Connect)](https://openid.net/developers/how-connect-works/) standard, and a generic option that lets you bring your own auth server. You can also use both options together if needed.
25
+
You can attach wallets to your existing users using the `jwt`and `auth_endpoint` strategies.
26
26
27
-
## OIDC compatible auth
27
+
- The `jwt` strategy is based on the [OIDC (Open ID Connect)](https://openid.net/developers/how-connect-works/) standard
28
+
- The `auth_endpoint` strategy is a generic option that lets you bring your own auth server.
The OIDC auth set-up is a good option if you use an external auth provider like `Auth0`, `firebase`, `cognito` etc. that publishes the JWK for checking the authenticity of the token.
30
41
@@ -44,12 +55,13 @@ You will be asked to enter the following values
44
55
- The URL of the JWKS file (public key): This is used to verify the token was signed by you.
45
56
- The `aud` value of the idToken: This is used to verify that thirdweb is the intended user of the token
46
57
47
-
### Authenticating a user via OIDC-compatible auth
Generic auth is a lower-level option that can be used when you have your own auth server that you use to authenticate users.
100
139
@@ -127,35 +166,47 @@ The endpoint should return a JSON body containing the following fields:
127
166
128
167
You can also pass a list of headers. These headers will be sent with every request to your verification endpoint. You can use these to authenticate the request.
129
168
130
-
### Authenticating a user via generic auth
169
+
### Usage example
131
170
132
171
Once you've logged in with your own auth, you can pass the user's JWT to the in-app wallet to authenticate and connect.
0 commit comments