Guides Integration
Initiate An Authorization
To initialize an authorization, you must redirect users to AgeWallet. The information you pass in your request will initiate an age verification session which will be exchanged for a token in a future step.
GET
https://app.agewallet.io/user/authorizeParameters
| Parameter | Required | Purpose |
|---|---|---|
| client_id | Yes | Your assigned Client ID. |
| redirect_uri | Yes | Your callback URL (must match registration exactly). |
| response_type | Yes | Always code. |
| scope | Yes | Must be openid age. |
| state | Yes | A random, unpredictable string for CSRF protection. |
| nonce | Yes | A random string to mitigate replay attacks. |
| code_challenge | Yes | The PKCE challenge derived from your code_verifier. |
| code_challenge_method | Yes | Must be S256. |
| metadata | Optional | Opaque per-verification string (max 4096 UTF-8 bytes). Round-trips through /userinfo. See Pass-through Metadata. |
After Authorization
After successful login, the user is redirected back to your redirect_uri with an authorization code and the state you provided:
https://yourapp.com/callback?code=AUTH_CODE_HERE&state=YOUR_ORIGINAL_STATE&client_id=YOUR_CLIENT_ID