Auth quickstart

1. 1Create a developer account

   Register at /register and sign in to the dashboard.

2. 2Create an application

   Dashboard → Applications → New application. Copy the API key and API secret (secret is shown once).

3. 3Configure redirect URI

   Add your callback URL, e.g. http://localhost:3000/api/auth/callback — must match exactly when exchanging the code.

4. 4Enable providers

   Open Providers and enable Email and/or social sign-in for your app.

5. 5Redirect users to authorize

   Send users to the authorize URL (see OAuth flow). After login they return with ?code=...

6. 6Exchange code for tokens

   POST to /oauth/token from your backend using client_id, client_secret, code, and redirect_uri.

Example authorize URL

https://platform.sohojx.com/oauth/authorize?client_id=YOUR_API_KEY&redirect_uri=https://myapp.com/callback&response_type=code&scope=openid%20profile%20email&state=RANDOM_CSRF