OLYRON
Local 
Request a demo

Field 01 · Developers

Sign in with Olyron

Two API calls. Full OAuth flow. Your users sign in once and get access across every service you build.

accounts.olyron.comSign in with Olyron
  1. GET/api/sso/authorize

    Redirect with app_key, redirect_uri and state.

  2. POST/api/sso/token

    Exchange the one-time code with your client_secret, server-side.

  3. 200 OK{ user: { id, email, full_name, avatar_url } }

    The user profile, as application/json.

API calls
2
SDKs required
0
Auth-code flow
OAuth 2.0

Field 02 · Quickstart

How it works

Olyron Identity uses a standard OAuth 2.0 authorization-code flow.
  1. Step 01Register your app

    In your Olyron org dashboard, open Developer Apps and register an OAuth client to receive an app_key and client_secret.

  2. Step 02Redirect to Olyron

    Send users to the authorize endpoint with your app_key and redirect URI. Olyron handles login when needed.

  3. Step 03Exchange the code

    After approval, Olyron redirects with a one-time code. POST it to the token endpoint with your client_secret to receive the user profile.

Field 03 · Code

Authorize, then exchange.

The redirect runs in the browser. The code exchange runs on your server, where the client secret stays.
  1. Call 01 · Browser

    Redirect to Olyron

    sign-in-button.tsxGET /api/sso/authorize
    // Build the authorize URLconst OLYRON_URL = "https://accounts.olyron.com";const params = new URLSearchParams({  app_key: "your-app-key",  redirect_uri: "https://yourapp.com/auth/callback",  state: crypto.randomUUID(), // CSRF protection}); // Redirect the userwindow.location.href =  `${OLYRON_URL}/api/sso/authorize?${params}`;
  2. Call 02 · Server

    Exchange the code (server-side)

    auth/callback/route.tsPOST /api/sso/token
    // In your callback handlerconst res = await fetch(  "https://accounts.olyron.com/api/sso/token",  {    method: "POST",    headers: { "Content-Type": "application/json" },    body: JSON.stringify({      code: searchParams.get("code"),      app_key: "your-app-key",      client_secret: process.env.OLYRON_CLIENT_SECRET,    }),  }); const { user } = await res.json();// user = { id, email, full_name, avatar_url } await createSession(user);
  3. Response

    Token response shape

    200 OK · application/jsonPOST /api/sso/token
    {  "user": {    "id": "a1b2c3d4-...",    "email": "user@example.com",    "full_name": "Jordan Lee",    "avatar_url": "https://..."  }}

Field 04 · Why Identity

Why build on Olyron Identity

  • Sign-in, sessions, and MFA

    MFA, session management, and brute-force protection handled for you.

  • Org-aware tokens

    JWTs carry organization context and RBAC roles out of the box.

  • Five-minute integration

    Two API calls: authorize and token. No SDK required.

  • Secret rotation

    Rotate client secrets from the dashboard with zero downtime.

Field 05 · Integrate

Ready to integrate?

Create an account, register an app, and accept Sign in with Olyron.