AuthReturn’s shared sign-in
Select a node or connection
setup
identity
register
open app
sign in
ID token
AuthReturn operator
Google / Apple
App owner’s agent
AuthReturn + Cognito
User
App in the browser
App backend + data
setup
identity
register
open app
sign in
ID token
AuthReturn operator
Google / Apple
App owner’s agent
AuthReturn + Cognito
User
App in the browser
App backend + data
OAuth / OpenID Connect
Select a node or connection
once → repeat
browser
redirect
browser
return
redeem code
tokens
0 · Register client
1 · Start request
2 · Provider login
3 · Return code
4 · Exchange code
5 · Verify + use
once → repeat
browser redirect
browser return
redeem code
tokens
0 · Register client
1 · Start request
2 · Provider login
3 · Return code
4 · Exchange code
5 · Verify + use