Login

Tonomy ID allows users to log in securely without passwords, eliminating credential phishing risks and reducing login friction. This is ideal for Web2 apps needing high-security authentication or privacy by default and Web3 apps requiring private key-based transaction authorization.

Before You Start

Ensure your app is registered with the Tonomynetwork (See Register Your Web4 App)

For local testing, run your app on http://localhost:3000 and connect to the testnet

1. Configure network

Set your network at the start of your app (e.g., in App.tsx for React):

import { setSettings } from '@tonomy/tonomy-id-sdk';

//Testnet Configuration
setSettings({
    ssoWebsiteOrigin: "https://accounts.testnet.tonomy.io",
    blockchainUrl: "https://blockchain-api-testnet.tonomy.io",
    communicationUrl: "wss://communication.tonomy.io",
    currencySymbol: "TONO",
});

//Mainnet Configuration
setSettings({
    ssoWebsiteOrigin: "https://accountstonomy.io",
    blockchainUrl: "https://blockchain-api.tonomy.io",
    communicationUrl: "wss://communication.testnet.tonomy.io",
    currencySymbol: "TONO",
});

2. Open Login Flow

This will open the Tonomy ID app (via QR or deep link)

/login

import { ExternalUser } from '@tonomy/tonomy-id-sdk';

async function onButtonPress() {
    await ExternalUser.loginWithTonomy({ callbackPath: '/callback' });
}

Request data sharing

Request user information by adding a dataRequest object.

/login

const dataRequest = { username: true };
await ExternalUser.loginWithTonomy({ callbackPath: '/callback', dataRequest, });

3. Callback page

On your /callback page:

/callback

const { user } = await ExternalUser.verifyLoginResponse();

4. Persist User Session

Check user status when your app starts (e.g., in App.tsx):

import { ExternalUser, isErrorCode, SdkErrors } from '@tonomy/tonomy-id-sdk';
​
async function checkSession() {
  try {
    const user = await ExternalUser.getUser();
    console.log('User session:', user);
  } catch (e) {
    if (isErrorCode(e, [SdkErrors.AccountNotFound, SdkErrors.UserNotLoggedIn])) {
      console.log('User not logged in');
    } else {
      console.error('Error fetching user:', e);
    }
  }
}