OAuth2 Integration
VeryAI's OAuth2 integration provides secure biometric authentication using a standard OAuth 2.0 / OpenID Connect flow while protecting user privacy through app-scoped identifiers rather than exposing raw biometric data.
Live Demo
See the OAuth2 flow in action with our interactive demo app.
When to Use OAuth2
- Apps requiring persistent user identifiers for account linking or activity tracking
- Organizations preferring familiar OAuth-style login flows
- Use cases not requiring zero-knowledge proof anonymity
For maximum privacy without persistent identifiers, see ZK Integration instead.
Authentication Flow
The OAuth2 flow involves five steps:
- 1. Authorization Request — Redirect users to VeryAI Connect with client credentials
- 2. User Verification — Displays QR code for palm scanning via mobile app
- 3. Authorization Code — Returned upon successful verification
- 4. Token Exchange — Converts authorization code to access tokens
- 5. API Access — Uses bearer tokens for protected resources
Base URL
https://api.very.org/oauth2Endpoints
The flow uses three endpoints — GET /authorize, POST /token, and GET /userinfo. For full parameter tables, response fields, and error codes, see the API Reference.
Getting Started
Register your app and get credentials on the Getting Started page, or go directly to the Developer Portal.
