Developer hub
Six pages, and the integration is covered.
CorePass Connector is an authentication and authorization service: it authenticates people with OAuth 2.0 and a QR code, and it moves verified identity data from the person or business who owns it to the application that asked for it. These pages describe both halves, in the order you will meet them.
The pages
- 01 · 5 min read Quickstart Four steps from an empty project to a working passwordless login: register the client, drop in the QR snippet, handle the callback, and make your first verified-data call.
- 02 · 7 min read Authentication How CorePass Connector authenticates a person with OAuth 2.0 and a QR code, what the login page has to contain, and what the token you get back identifies.
- 03 · 10 min read KYC data transfer Check what a person has verified, request the fields you need, follow the transfer through its statuses, and read the values out of the callback.
- 04 · 12 min read KYB attestations Ask a business for verified data, verify the RS256 attestation that carries the values, and ask a business to sign a message you wrote.
- 05 · 8 min read Webhooks Every callback CorePass Connector sends, how each one is signed, how to verify it without getting it wrong, and what happens when your endpoint is down.
- 06 · 6 min read API reference Every endpoint on the KYC and KYB APIs in one table, with the hosts, the authentication scheme, the status vocabularies and the closed set of error reasons.
Hosts. The login and KYC APIs live on the auth gateway (https://auth-develop.corepassdev.eu in the develop environment); the KYB merchant API lives on https://api-develop.corepassdev.eu. Your own deployment is given its own hostnames.
The login library. Exchanging an authorization code for a token is done with the CorePass app-auth library, which ships an example you can follow.
A worked example. The demo pet shop service and webapp implement business login, both data-request paths, signature requests, and a webhook receiver that verifies everything it is sent.