Skip to main content

External Issuers: Bringing Your Own Authentication

While Generflow can issue JWTs, we also support external issuers. This flexibility allows you to use your existing identity provider or auth system to issue JWTs that Generflow will accept.

⚠️ Provider Compatibility

The external issuers flow is compatible only with identity providers that support two key features: asymmetric JWT validation using JWKs (JSON Web Key Sets) and the ability to enrich tokens with custom claims derived from API requests.

To implement an external issuer:

  1. Configure your identity provider to issue JWTs with the required claims.
  2. Register your identity provider's public key or JWK endpoint with Generflow.
  3. Include the iss (issuer) claim in your JWTs.

Example of a JWT with an external issuer:

{
  "iss": "https://auth.yourdomain.com",
  "sub": "user123",
  "aud": "https://{your-domain}.nativeframe.com",
  "exp": 1616174698,
  "iat": 1616171098,
  "scopes": ["broadcaster"]
}

Generflow will validate these externally-issued JWTs using the registered public key or JWK endpoint.