Skip to main content

Third-party credentials

Configure the third-party services used by auth-svc before deploying the backend. You can use our predefined configuration or set up your own accounts.

CredentialPurpose
auth0_domain, auth0_audienceUser authentication through Auth0
facetec_device_keyFaceTec biometric verification for keyshare backup and recovery
helius_api_keySolana transaction history through Helius

The mobile app and auth-svc must use matching Auth0 and FaceTec configuration for sign-in, backup, and recovery to work. The option you choose determines whether you can use the demo Android APK or need to build the app with your own configuration.

Option 1: use our predefined configuration

Email [email protected] to request:

  • Auth0 domain and audience
  • FaceTec device key
  • Helius API key
  • Auth0 application credentials for the policy admin dashboard, if you enable the policy engine

This configuration is compatible with our demo app. After deploying the backend, install the Android APK and enter your deployment's connection details in Server settings → Custom Backend.

Option 2: bring your own accounts

Set up your own accounts and obtain the following credentials:

See Third-Party Services for the other services required by the mobile app. For details on how these credentials are used by auth-svc, see the auth-svc documentation.

The demo Android APK uses our Auth0 tenant. To use your own tenant, build the React Native app with your configuration. See Run Your Own Backend.

Configure the variables

Open deploy/gcp/tf/global.tfvars and set the following values using the credentials from either option. Replace each YOUR_* placeholder with your value.

auth_provider      = "jwt"
auth0_domain       = "YOUR_AUTH0_DOMAIN"
auth0_audience     = "YOUR_AUTH0_AUDIENCE"
auth0_algorithms   = "RS256"
facetec_api_url    = "https://api.facetec.com/api/v4/biometrics"
facetec_device_key = "YOUR_FACETEC_DEVICE_KEY"
helius_api_key     = "YOUR_HELIUS_API_KEY"

The policy admin dashboard requires a separate Auth0 application. Configure its credentials if you enable the policy engine. See Enable the policy engine.