- Step 01Register your app
In your Olyron org dashboard, open Developer Apps and register an OAuth client to receive an app_key and client_secret.
- Step 02Redirect to Olyron
Send users to the authorize endpoint with your app_key and redirect URI. Olyron handles login when needed.
- Step 03Exchange the code
After approval, Olyron redirects with a one-time code. POST it to the token endpoint with your client_secret to receive the user profile.
Field 01 · Developers
Sign in with Olyron
Two API calls. Full OAuth flow. Your users sign in once and get access across every service you build.
- GET
/api/sso/authorizeRedirect with app_key, redirect_uri and state.
- POST
/api/sso/tokenExchange the one-time code with your client_secret, server-side.
- 200 OK
{ user: { id, email, full_name, avatar_url } }The user profile, as application/json.
- API calls
- 2
- SDKs required
- 0
- Auth-code flow
- OAuth 2.0
Field 02 · Quickstart
How it works
Olyron Identity uses a standard OAuth 2.0 authorization-code flow.
Field 03 · Code
Authorize, then exchange.
The redirect runs in the browser. The code exchange runs on your server, where the client secret stays.
Call 01 · Browser
Redirect to Olyron
sign-in-button.tsxGET /api/sso/authorize // Build the authorize URLconst OLYRON_URL = "https://accounts.olyron.com";const params = new URLSearchParams({ app_key: "your-app-key", redirect_uri: "https://yourapp.com/auth/callback", state: crypto.randomUUID(), // CSRF protection}); // Redirect the userwindow.location.href = `${OLYRON_URL}/api/sso/authorize?${params}`;Call 02 · Server
Exchange the code (server-side)
auth/callback/route.tsPOST /api/sso/token // In your callback handlerconst res = await fetch( "https://accounts.olyron.com/api/sso/token", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ code: searchParams.get("code"), app_key: "your-app-key", client_secret: process.env.OLYRON_CLIENT_SECRET, }), }); const { user } = await res.json();// user = { id, email, full_name, avatar_url } await createSession(user);Response
Token response shape
200 OK · application/jsonPOST /api/sso/token { "user": { "id": "a1b2c3d4-...", "email": "user@example.com", "full_name": "Jordan Lee", "avatar_url": "https://..." }}
Field 04 · Why Identity
Why build on Olyron Identity
Sign-in, sessions, and MFA
MFA, session management, and brute-force protection handled for you.
Org-aware tokens
JWTs carry organization context and RBAC roles out of the box.
Five-minute integration
Two API calls: authorize and token. No SDK required.
Secret rotation
Rotate client secrets from the dashboard with zero downtime.
Field 05 · Integrate
Ready to integrate?
Create an account, register an app, and accept Sign in with Olyron.