Developers
Sign in with Olyron
Two API calls. Full OAuth flow. Your users sign in once and get access across every service you build.
How it works
Olyron Identity uses a standard OAuth 2.0 authorization-code flow.
Register your app
In your Olyron org dashboard, open Developer Apps and register an OAuth client to receive an app_key and client_secret.
Redirect to Olyron
Send users to the authorize endpoint with your app_key and redirect URI. Olyron handles login when needed.
Exchange the code
After approval, Olyron redirects with a one-time code. POST it to the token endpoint with your client_secret to receive the user profile.
Redirect to Olyron
// Build the authorize URL
const OLYRON_URL = "https://accounts.olyron.com";
const params = new URLSearchParams({
app_key: "your-app-key",
redirect_uri: "https://yourapp.com/auth/callback",
state: crypto.randomUUID(), // CSRF protection
});
// Redirect the user
window.location.href =
`${OLYRON_URL}/api/sso/authorize?${params}`;Exchange the code (server-side)
// In your callback handler
const res = await fetch(
"https://accounts.olyron.com/api/sso/token",
{
method: "POST",
headers: { "Content-Type": "application/json" },
body: JSON.stringify({
code: searchParams.get("code"),
app_key: "your-app-key",
client_secret: process.env.OLYRON_CLIENT_SECRET,
}),
}
);
const { user } = await res.json();
// user = { id, email, full_name, avatar_url }
await createSession(user);Token response shape
{
"user": {
"id": "a1b2c3d4-...",
"email": "user@example.com",
"full_name": "Jordan Lee",
"avatar_url": "https://..."
}
}Why build on Olyron Identity
Enterprise-grade auth
MFA, session management, and brute-force protection handled for you.
Org-aware tokens
JWTs carry organization context and RBAC roles out of the box.
Five-minute integration
Two API calls: authorize and token. No SDK required.
Secret rotation
Rotate client secrets from the dashboard with zero downtime.
Ready to integrate?
Create an Olyron account, register your app, and start accepting Sign in with Olyron in under five minutes.