Create Oauth providers

Binding a new OIDC identity to a user is a trust decision, so it goes through the same cryptographic verification as OAUTH_LOGIN: the enclave’s Signer independently fetches and verifies the token’s signature against the issuer’s JWKS, and the iss/aud pair must be trusted — either a built-in social provider or an issuer you’ve registered as a Custom OIDC Provider. The oidcToken you submit is re-verified end-to-end; nothing in this request is trusted at face value.

enum<string>

required

Enum options: ACTIVITY_TYPE_CREATE_OAUTH_PROVIDERS_V2

string

required

Timestamp (in milliseconds) of the request, used to verify liveness of user requests.

string

required

Unique identifier for a given Organization.

object

required

The parameters object containing the specific intent data for this activity.

Show details

array

required

A list of Oauth providers.

Show item details

boolean

Enable to have your activity generate and return App Proofs, enabling verifiability.

A successful response returns the following fields:

object

required

The activity object containing type, intent, and result

Show activity details

curl --request POST \
  --url https://api.0xkey.io/public/v1/submit/create_oauth_providers \
  --header 'Accept: application/json' \
  --header 'Content-Type: application/json' \
  --header "X-Stamp: <string> (see Authorizations)" \
  --data '{
    "type": "ACTIVITY_TYPE_CREATE_OAUTH_PROVIDERS_V2",
    "timestampMs": "<string> (e.g. 1746736509954)",
    "organizationId": "<string> (Your Organization ID)",
    "parameters": {
        "userId": "<string>",
        "oauthProviders": [
            {
                "providerName": "<string>",
                "oidcToken": "<string> (raw id_token JWT, re-verified inside the enclave)"
            }
        ]
    }
}'

import { ZeroXKey } from "@0xkey-io/sdk-server";

const zeroXKey = new ZeroXKey({
  apiBaseUrl: "https://api.0xkey.io",
  apiPublicKey: process.env.API_PUBLIC_KEY!,
  apiPrivateKey: process.env.API_PRIVATE_KEY!,
  defaultOrganizationId: process.env.ORGANIZATION_ID!,
});

const response = await zeroXKey.apiClient().createOauthProviders({
  userId: "<string> (The ID of the User to add an Oauth provider to)",
  oauthProviders: [{ // A list of Oauth providers.,
    providerName: "<string> (Human-readable name to identify a Provider.)",
    oidcToken: "<string> (the raw id_token JWT — re-verified inside the enclave)",
  }]
});

{
  "activity": {
    "id": "<activity-id>",
    "status": "ACTIVITY_STATUS_COMPLETED",
    "type": "ACTIVITY_TYPE_CREATE_OAUTH_PROVIDERS_V2",
    "organizationId": "<organization-id>",
    "timestampMs": "<timestamp> (e.g. 1746736509954)",
    "result": {
      "activity": {
        "id": "<string>",
        "organizationId": "<string>",
        "status": "<string>",
        "type": "<string>",
        "intent": {
          "createOauthProvidersIntentV2": {
            "userId": "<string>",
            "oauthProviders": [
              {
                "providerName": "<string>",
                "oidcToken": "<string>"
              }
            ]
          }
        },
        "result": {
          "createOauthProvidersResultV2": {
            "providerIds": [
              "<string>"
            ]
          }
        },
        "votes": "<array>",
        "fingerprint": "<string>",
        "canApprove": "<boolean>",
        "canReject": "<boolean>",
        "createdAt": "<string>",
        "updatedAt": "<string>"
      }
    }
  }
}

curl --request POST \
  --url https://api.0xkey.io/public/v1/submit/create_oauth_providers \
  --header 'Accept: application/json' \
  --header 'Content-Type: application/json' \
  --header "X-Stamp: <string> (see Authorizations)" \
  --data '{
    "type": "ACTIVITY_TYPE_CREATE_OAUTH_PROVIDERS_V2",
    "timestampMs": "<string> (e.g. 1746736509954)",
    "organizationId": "<string> (Your Organization ID)",
    "parameters": {
        "userId": "<string>",
        "oauthProviders": [
            {
                "providerName": "<string>",
                "oidcToken": "<string> (raw id_token JWT, re-verified inside the enclave)"
            }
        ]
    }
}'

import { ZeroXKey } from "@0xkey-io/sdk-server";

const zeroXKey = new ZeroXKey({
  apiBaseUrl: "https://api.0xkey.io",
  apiPublicKey: process.env.API_PUBLIC_KEY!,
  apiPrivateKey: process.env.API_PRIVATE_KEY!,
  defaultOrganizationId: process.env.ORGANIZATION_ID!,
});

const response = await zeroXKey.apiClient().createOauthProviders({
  userId: "<string> (The ID of the User to add an Oauth provider to)",
  oauthProviders: [{ // A list of Oauth providers.,
    providerName: "<string> (Human-readable name to identify a Provider.)",
    oidcToken: "<string> (the raw id_token JWT — re-verified inside the enclave)",
  }]
});

{
  "activity": {
    "id": "<activity-id>",
    "status": "ACTIVITY_STATUS_COMPLETED",
    "type": "ACTIVITY_TYPE_CREATE_OAUTH_PROVIDERS_V2",
    "organizationId": "<organization-id>",
    "timestampMs": "<timestamp> (e.g. 1746736509954)",
    "result": {
      "activity": {
        "id": "<string>",
        "organizationId": "<string>",
        "status": "<string>",
        "type": "<string>",
        "intent": {
          "createOauthProvidersIntentV2": {
            "userId": "<string>",
            "oauthProviders": [
              {
                "providerName": "<string>",
                "oidcToken": "<string>"
              }
            ]
          }
        },
        "result": {
          "createOauthProvidersResultV2": {
            "providerIds": [
              "<string>"
            ]
          }
        },
        "votes": "<array>",
        "fingerprint": "<string>",
        "canApprove": "<boolean>",
        "canReject": "<boolean>",
        "createdAt": "<string>",
        "updatedAt": "<string>"
      }
    }
  }
}

Webhooks

Public API

Create Oauth providers