Quickstart

1. Create an application

Open Applications, sign in with a passkey, click Create application. Save the client secret once.

2. Configure environment

export OIDC_ISSUER=https://0trust.cloud
export OIDC_CLIENT_ID=...
export OIDC_CLIENT_SECRET=...
export OIDC_REDIRECT_URI=http://localhost:3000/callback
export OIDC_SCOPES=\"openid profile email offline_access\"

3. Pick a language

Go · JavaScript · Python

# Go
go get github.com/0TrustCloud/otrust-go

# JavaScript
npm install @0trust/otrust-js

# Python
pip install otrust

4. Run the login flow

Build authorize URL with PKCE S256 → user signs in with passkey on 0trust.cloud → exchange code for tokens → validate id_token with JWKS.

# Validate discovery
curl -sS https://0trust.cloud/.well-known/openid-configuration | head

5. Next

API reference · Self-host platform image · Manage apps