Authentication & Identity
If you wish to make client-side calls, you need to configure a JSON Web Token, also known at JWT, so that we can read data from your authentication or identity platform.
A JWT is a cryptographically verified payload that can be passed with HTTP requests, like a cookie. They pass information between server-side systems via your end-user's client, without allowing the information to be altered or tampered with. You can find out more about JWT here.
You can add, view, or manage your Authentication & Identity integrations with a few simple steps.
Adding an Authentication & Identity Integration
To add an authentication or identity connection, navigate to Integrations, then click 'Add an Authentication Method'.
You will be prompted to name your integration, then enter your JWT Public Key and JWT Claim Key.
The Claim key specifies which claim in the JWT will be used to retrieve a customer record from your Stripe integration(s). For example, if your JWTs contain an 'email' field containing the user's email address, the JWT Claim Key would be 'email'. Fields containing either an email address or a Stripe customer ID can be specified.
Your Public Key and Claim Key will generally be provided by your ID provider. Details for how to find these for some common identity providers are available here:
Once complete, click 'Save JWT and Continue'.
Completing this step allows us to securely validate your user data server-side when processing client-side requests and make decisions based on the JWT payload.
Your integration will be created, and you'll land on the Manage page for the JWT connection.
Managing an Authentication & Identity Integration
To manage an authentication method, navigate to Integrations and locate the relevant integration in your list, then click 'Manage'. If you have just created your integration, you will have landed on the 'Manage' page already.
Here you will see three cards: Manage, Public Key, and Delete Integration.
Manage
The Manage card allows you to view and update your integration details, including the Name, Description, Claim Key, and Linked Brands.
Be sure to click 'Update' once done.
Public Key
The Public Key card allows you to update your integration's public key.
Once entered, click Update.
Delete Integration
You may choose to delete your integration at any time.
To do this, click the 'Delete' button in the Delete Integration card.
You will be prompted to confirm that you wish to delete the integration. This action cannot be undone, however you can create a new integration using the same Public Key at a later date, if needed.
If you wish to continue, click 'Delete'. Otherwise, click 'Cancel'.
Any changes to your integration will be available immediately in your preview environment, and will be available in other environments after creating a version and publishing it to that environment.