OAuth2 Integration

VeryAI's OAuth2 integration provides secure biometric authentication using a standard OAuth 2.0 / OpenID Connect flow while protecting user privacy through app-scoped identifiers rather than exposing raw biometric data.

When to Use OAuth2#

• Apps requiring persistent user identifiers for account linking or activity tracking
• Organizations preferring familiar OAuth-style login flows
• Use cases not requiring zero-knowledge proof anonymity

For maximum privacy without persistent identifiers, see ZK Integration instead.

Authentication Flow#

The OAuth2 flow involves five steps:

• 1. Authorization Request — Redirect users to VeryAI Connect with client credentials
• 2. User Verification — Displays QR code for palm scanning via mobile app
• 3. Authorization Code — Returned upon successful verification
• 4. Token Exchange — Converts authorization code to access tokens
• 5. API Access — Uses bearer tokens for protected resources

Base URL#

https://api.very.org/oauth2

Endpoints#

The flow uses three endpoints — GET /authorize, POST /token, and GET /userinfo. For full parameter tables, response fields, and error codes, see the API Reference.

Getting Started#

Register your app and get credentials on the Getting Started page, or go directly to the Developer Portal.