Solutions
Sign-in for native apps.
Native apps are public clients: they can’t keep a secret. Synq treats them that way, with the flow the standards recommend for them.
BuiltA React Native SDK and Android wallet sign-in are being built.
The system browser and PKCE
Native apps sign in through the system browser with the code flow and PKCE, to redirect URIs that match exactly.
Refresh tokens that rotate
Every refresh token works once, and one used twice ends the whole session, so a stolen token gives itself away.
Passkeys on the device
People sign in with the passkeys their phone already syncs.
Read next
Want it before it is finished?
Tell us what you are building and which sign-in your users need.