Create tenant
Organize customer apps, memberships, roles, client apps, API keys, and billing context under a tenant.
Get Started
Follow the production path from tenant setup to verified server-side access checks.
Organize customer apps, memberships, roles, client apps, API keys, and billing context under a tenant.
Generate a client ID and secret. Store the secret server-side and never expose it in browser code.
Register the exact callback URL your app will use, such as https://app.example.com/auth/callback.
Use server-to-server verification with AUTH_GATEWAY_SECRET before granting access in your application.
Check plan limits, token verification volume, refresh/revoke flows, and runtime logs before production launch.
Copy/paste verify helper
Token verification is intentionally server-to-server and protected by the gateway secret.
await fetch("https://zdxauth.com/api/auth/tokens/verify", {
method: "POST",
headers: {
"Content-Type": "application/json",
Authorization: `Bearer ${process.env.AUTH_GATEWAY_SECRET}`
},
body: JSON.stringify({ token: accessToken })
});Use the onboarding assistant to review redirect URIs, origins, and callback implementation.
Start Onboarding