Bhauu Auth

Bhauu Identity ecosystem

Authentication built for connected apps

Bhauu Auth is the hosted authentication and OAuth authorization gateway for Bhauu Identity. Developers connect applications through Authorization Code and PKCE-based flows; users manage their shared identity in Bhauu Account.

Start BuildingRead Documentation

What is Bhauu Auth?

Bhauu Auth handles authentication and OAuth authorization for Bhauu Identity. Connected applications can use Bhauu-hosted sign-in while keeping their own product data and local application sessions.

One identity across connected apps

Bhauu Identity is the canonical user identity. It does not merge every app's own content or business data.

Hosted authentication

Applications send users to Bhauu-hosted sign-in instead of building a separate password form for each integration.

How Bhauu Auth works

  1. A registered app starts authorization with its client ID, state, and PKCE S256 challenge.
  2. The user authenticates on Bhauu Auth and reviews requested access where required.
  3. The app receives a one-time authorization code at its exact registered redirect URI.
  4. The client exchanges the code using the matching PKCE verifier and its registered authentication method.

Secure OAuth authorization

Authorization Code and PKCE S256 bind the code exchange to the original request. Exact redirect URI registration limits where a code can be sent.

Built for developers

Use the Developer Portal to register applications and configure their allowed origins and redirect URIs.

Developer resources

Frequently asked questions

What is Bhauu Auth?

Bhauu Auth is the hosted authentication and OAuth authorization gateway for applications connected to Bhauu Identity.

Does Bhauu Auth support OAuth?

Yes. Registered applications use the Authorization Code flow with PKCE S256 and an exact registered redirect URI.

What is PKCE?

PKCE binds a one-time authorization code to the application that started the sign-in request using a code challenge and verifier.

Do users need a separate Bhauu Identity for every app?

No. The same canonical Bhauu Identity can be used across connected apps. Each application still manages its own application data.

Where can developers find integration information?

Start with the public documentation. Application registration and configuration live in the Developer Portal.