What is Flowsta?
A decentralized Single Sign-On (SSO) system where users create one identity and use it everywhere
The Big Picture
Flowsta is a decentralized authentication service built on Holochain. Users create an account once at login.flowsta.com, manage it at flowsta.com, and use it to sign in to any website integrated with Flowsta Auth.
Think "Login with Google" but decentralized, privacy-first, and censorship-resistant.
The Flowsta Ecosystem
login.flowsta.com
Where users authenticate
- • Signup/login page
- • OAuth consent screen
- • Password authentication
- • Recovery phrase setup
flowsta.com
Where users manage accounts
- • Profile settings
- • Security management
- • Activity history
- • Premium subscriptions
dev.flowsta.com
Where developers integrate
- • Create applications
- • Manage API keys
- • View analytics
- • Billing dashboard
How Users Experience Flowsta
User Visits Your App
They see your "Login with Flowsta" button alongside other login options.
Redirect to login.flowsta.com
Your app redirects them to login.flowsta.com with OAuth parameters.
User Authenticates
They log in (or sign up if new), then approve your app's permission request on the consent screen.
Return with Auth Code
User is redirected back to your callback URL with an authorization code.
Exchange for Token
Your backend exchanges the code for an access token and receives user profile data (DID, username, email if requested).
How You Integrate
OAuth 2.0 + PKCE
Standard OAuth 2.0 Authorization Code Flow with PKCE. No client secrets needed for browser/mobile apps.
- ✓Works in browsers and mobile apps
- ✓Industry-standard protocol
- ✓Secure by default
What You Receive
After authentication, you get user profile data via JWT token:
- • DID - W3C Decentralized Identifier
- • Username - User's chosen username
- • Display Name - Full name
- • Profile Picture - Avatar URL
- • Email - If user consents
- • Agent Key - Holochain public key
Why Choose Flowsta?
For Your Users
- •One account everywhere - Works across all Flowsta partner sites
- •True privacy - Zero-knowledge architecture
- •User-owned identity - Censorship-resistant DIDs
For Developers
- •Quick integration - Add SSO in minutes
- •Zero-knowledge MAU - Analytics without tracking
- •Free tier - 10,000 MAU included