LEADSTRIUMSoftware universe
AUTHENTICATION

Sign people in with CoreID.

Leadstrium keeps identity in one place. LaunchPad participates as a public OIDC client and uses Authorization Code with S256 PKCE.

1

Start authorization

Send the user through the CoreID authorization flow with a fresh state, nonce and PKCE verifier.

2

Return to your registered callback

Validate state and nonce, then exchange the authorization code through the supported CoreID token boundary.

3

Keep customer sessions revocable

Do not expose access or refresh tokens to browser JavaScript. LaunchPad stores its own tokens encrypted at rest behind an opaque browser selector.

LaunchPad's registered callback

https://leadstrium.com/auth/callback

This is LaunchPad's callback, not a reusable callback for third-party applications. Third-party CoreID registration belongs in the Core developer/administration experience.