A
Passkeys first
Sign in with your fingerprint, face or device PIN. Passkeys can’t be phished, reused or leaked.
One account for everything.
Sign in once to every TheJat app. Passkeys instead of passwords, sessions you can see and end, and alerts when something changes.
01/Security
Built to be boring for attackers
Your keys, not our guesswork.
Every sign-in path follows the current standards, and every session is visible and revocable from your account.
B
Sessions you control
See every device that’s signed in and end any of them. Changing your password signs out the rest.
C
Alerts that matter
New device, new passkey, password changed: you hear about it immediately, by email.
02/Developers
Standard OpenID Connect
Add “Sign in with TheJat” in minutes.
Register your app in the console, then point any OIDC library at the discovery document. Authorization code + PKCE, rotating refresh tokens, RS256-signed ID tokens.
# 1. Discover endpoints GET /api/.well-known/openid-configuration # 2. Send the user to sign in (PKCE S256 required) GET /api/oauth/authorize?response_type=code&client_id=…&redirect_uri=…&scope=openid%20profile%20email&code_challenge=…&code_challenge_method=S256&state=… # 3. Exchange the code on your server POST /api/oauth/token grant_type=authorization_code&code=…&code_verifier=… # 4. Read the profile GET /api/oauth/userinfo Authorization: Bearer …
03/Ecosystem
One login across the family
Works everywhere you do.
01
Short
Links, QR codes and bio pages.
short.thejat.in
02
Vault
End-to-end encrypted passwords.
vault.thejat.in
03
TheJat.in
Articles, courses and notes.
thejat.in
04
Your next app
Register it in the console in a minute.
anything.thejat.in