Documentation

Integrate Continue with StoatBoard

Use one issuer and standard OpenID Connect discovery. StoatBoard verifies a linked Stoat identity without asking users or developers to handle a Stoat session token.

Start here

Create the client before writing integration code

1. Application
Describe the product users will authorize.
2. Client
Choose Web or SPA and register exact redirect URIs.
3. Integration
Follow discovery and the Authorization Code with PKCE tutorial.

Open developer portal Read the setup guide

Choose your path

Tutorial

Build a first confidential Web integration with discovery, PKCE, state and nonce.

Open

How-to guides

Configure Web and SPA clients, go from localhost to production, rotate, verify and revoke.

Open

Reference

Endpoints, client types, scopes, claims, lifetimes, limits and protocol errors.

Open

Explanation

Understand the bot proof, trust boundary, independent status and privacy model.

Open

Protocol starting point

Issuer: https://stoatboard.com
Discovery: https://stoatboard.com/.well-known/openid-configuration

Do not hard-code the other endpoints. Discover them from the issuer, and use a maintained OpenID Connect client library to validate the ID token and JWKS.

Create an application Start the tutorial