Sweyam
Open Kasho
Live · Sign-in

One sign-in for every Sweyam app.

Sweyam Auth is the account behind Kasho and the rest of our apps. A passkey, two-step verification, and the same account anywhere that speaks OpenID Connect — including ReelStash and an app of your own.

Try it in KashoUse it in your app

What sign-in looks like

Nothing here signs you in. It shows the two methods.

How it works

Passkeys keep a reusable password out of the flow. OpenID Connect means the protocol is not ours to lock.

  • Passkeys

    Sign-in uses FIDO2 and WebAuthn. The private key stays on the device or a hardware token, so a phished password is not the way in.

  • A second step

    Accounts can require two-step verification. A console decides which people can open which apps, so an internal tool stays internal.

  • OpenID Connect

    Authorization code flow with PKCE, published discovery and signing keys. Any standard client works. ReelStash signs in through a plugin.

A client, in short

Discovery lives at auth.sweyam.com. Any OIDC library can complete the code flow.

oidc-client-tsAuthorization code + PKCE
import { UserManager } from "oidc-client-ts";

// Discovery: https://auth.sweyam.com/.well-known/openid-configuration
const auth = new UserManager({
  authority: "https://auth.sweyam.com",
  client_id: "your-app",
  redirect_uri: "https://your.app/callback",
  scope: "openid profile email",
});

await auth.signinRedirect();
const user = await auth.signinRedirectCallback();

Use it in your app

Write for a client ID, or open Kasho and sign in with the account that already exists.

Ask for a client IDSign in to Kasho