SDK Overview
Install the provider-safe AuthenSee SDK for hosted sessions and auth-result exchange.
SDK Overview
The public AuthenSee SDK is the provider-backend entry point. It creates hosted flow sessions and exchanges one-time auth-result codes using your provider secret key. ZK proof generation and passkey ceremonies run inside the AuthenSee-controlled hosted runtime, not inside provider applications.
Integrating from your own app? Use the hosted popup: drop in
@rebellion-systems/authensee-embedand callAuthenSee.open(). The passkey ceremony runs on AuthenSee's own origin inside the hosted flow; your backend uses this SDK only for session creation and result exchange.
Installation
Keep @rebellion-systems/authensee-sdk on your server. The package requires a
provider sk_ secret key and must not be bundled into browser code.
Packages
| Package | Purpose |
|---|---|
@rebellion-systems/authensee-sdk | Provider-safe server SDK for hosted sessions and auth-result exchange |
@rebellion-systems/authensee-embed | Framework-agnostic drop-in — launches the hosted flow in a popup (AuthenSee.open()) |
How to integrate
Recommended for providers: the hosted popup
Create a session on your backend, drop in @rebellion-systems/authensee-embed, and call AuthenSee.open() to launch the co-branded AuthenSee flow in a popup for enrollment, auth, or recovery — then exchange the one-time result code on your server. This is the integration path for third-party apps: the passkey ceremony runs on AuthenSee's own origin, the only place it's allowed to (a cross-origin iframe can't run it). A full redirect works too. See the embed guide and the hosted pages guide.
Initialization
Create the provider SDK client on your backend with your secret key:
The provider SDK never returns reusable hosted session tokens or AuthenSee runtime identifiers.
Provider SDK methods
| Method | Description |
|---|---|
createSession(input) | Create a hosted enrollment/authentication session and return a flowCode / hostedUrl for the browser flow. |
exchangeAuthResult(authResultCode) | Exchange a one-time callback code for provider-scoped auth claims and token. |
getAuthResult(id) | Fetch a provider-owned auth result summary by id. |
Platform support
| Platform | Minimum version | Notes |
|---|---|---|
| Backend JavaScript runtimes | Node 20+ or compatible | Requires server-side fetch and provider secret key |
| Browser | N/A | Do not bundle the provider SDK into browser code |
Next steps
- Authentication guide -- Exchange hosted-flow results
- Hosted pages guide -- Launch hosted enrollment and authentication
- Embed guide -- Use the popup-first browser drop-in