Scopes and claims
Every scope, what the person is told, what you receive, and which need review.
Connectez-vous pour voir votre propre ID client de test dans les exemples.
Ask for the least you need. People see every scope on the consent screen, and a sensitive scope makes the live app wait for our review.
| Scope | Consent screen says | Claims | Review to go live |
|---|---|---|---|
| openid | (not shown) | sub, sid | no |
| profile | See your name and profile picture | name | no |
| See your email address | email, email_verified | no | |
| offline_access | Stay signed in when you are not using it | a refresh token | no |
| age | See whether your age is verified and whether you are an adult where you live | age | yes |
| membership | See your Atheron membership plan | membership | yes |
| wallet | See the crypto wallet addresses linked to your account | wallets | yes |
| licences | See which products you have bought | plan | yes |
| creator | See whether you are an ATON creator, your creator level and your Aurora Creator plan | creator | yes |
An unknown scope, or one your client is not registered for, is refused with invalid_scope rather than silently dropped.
sub
sub is the ID your app knows the person by. It is made for your app alone: another app gets a different sub for the same person, so nobody can join two apps' user lists on it (OpenID Connect pairwise identifiers; our discovery document lists pairwise in subject_types_supported). It never changes for your app, your test and live clients get the same one, and it is the only thing to key your own account records on. Never key on email: people change it.
Apps of one team can share one sub per person, for example a web app and a mobile app with one user table. An owner of a verified team (every owner verified, or the business passed its check) switches it on in the app's settings before the app signs anybody in; after that the IDs an app has handed out never change.
Webhooks and the events stream use the same sub your app was given. Outside apps never receive sid.
age
verified says an identity check proved their date of birth. adult says whether they are an adult where that check placed them, by the age of majority of their province or state; it is null when nothing was verified. Everybody with an account is sixteen or over. You never receive the date of birth or the country.
{ "age": { "verified": true, "adult": true, "sixteen_or_over": true } }membership
{ "membership": { "tier": "elite", "name": "Aurora", "active": true } }wallets
Addresses the person linked and proved by signature, up to twenty. Families: evm, solana, bitcoin, cosmos, ton, sui, aptos.
{ "wallets": [ { "family": "evm", "address": "0x..." }, { "family": "solana", "address": "..." } ] }plan and creator
See the full shapes in our claims reference; both are read as of the moment you ask userinfo.
Demandez à Atlas
Assistant IAPosez n'importe quelle question sur Se connecter avec Atheron, l'API ou le portail. La réponse vient de notre documentation, avec les liens des pages utilisées.