Documentation

Overview Refresh tokens let users stay logged in without re‑entering credentials! When an access token expires, use a refresh token to get a new access token (and a new refresh token)! Step 1: Enable Refresh Tokens for Your Client First, make sure your client is configured for refresh tokens:

This guide describes how to interact with public metadata endpoints (non-authenticated) and verify notification delivery configurations using the Test Communication API. Part A: Public APIs (No Authentication Required) These public endpoints can be accessed directly from any client or web application without attaching authentication headers. 1. Public Test / Health

Overview Two-Factor Authentication (2FA) adds an extra layer of security: users enter a password and an OTP to log in! This mode is called password_and_otp in Fabrixly-IDS. Step 1: Configure 2FA for Your Client First, set up your client in Fabrixly-IDS to use 2FA: Admin

Overview Password-only authentication is the traditional login method using email (or mobile number) and password. It's simple and familiar to most users. Configuration Step 1: Set Up Fabrixly-IDS Client Configure your OIDC client in the Admin Console or via API: Admin Console: 1. Go to Clients

Overview OTP-only authentication allows users to log in without a password—they just enter their email or mobile number, receive a one-time passcode, and enter it to log in! It's secure and user-friendly. Step 1: Configure Your Fabrixly-IDS Client First, set up your OIDC

This guide describes how to manage multi-tenant Organizations and Subdomains inside Fabrixly-IDS using the Organization REST APIs. 🔐 Authentication & Prerequisites All organization management endpoints require administrative authentication. To call them: 1. Include the Token in the Authorization Header: Add -H "Authorization: Bearer <your-admin-jwt-token&

Overview Fabrixly-IDS allows users to log in with their mobile phone number instead of an email! Works with all auth modes (password, OTP, 2FA, flexible)! Step 1: Configure Mobile Login for Your Client First, enable mobile login for your OIDC client! Admin Console Setup 1. Go to Fabrixly-IDS

Magic links let users log in by clicking a one-time link sent to their email — no passwords or OTPs required. Fabrixly-IDS handles token generation, storage, expiry, and email delivery automatically. How It Works 1. Your app calls POST /api/auth/magic-link with the user's email

Overview The Implicit Flow was designed for browser-based single-page apps (SPA) that can't keep a client secret secure. It returns tokens directly from the authorization endpoint. ⚠️ Important: Authorization Code Flow with PKCE is now recommended instead of Implicit Flow for SPAs! But we still support it

Overview The Hybrid Flow combines aspects of Authorization Code Flow and Implicit Flow! It returns some tokens immediately from the authorization endpoint and an authorization code that can be exchanged for more tokens! It's useful for apps that want both immediate tokens and refresh tokens! Step 1: Configure