Plain OIDC — works with any framework. Your users' accounts are stored in Russia, as 152-FZ requires. Email, Yandex ID or VK ID sign-in takes an evening, no backend of your own.
The first connection is made on your ZERNO project.
climate-wear.ru · 413 чел. входило за 7 дней
Sign-in sits at the single point every one of your users passes through — and sees what the site itself never does.
No SDK of ours: any library that speaks OpenID Connect works with us out of the box.
# 1. Все адреса берутся из метаданных
GET https://id.zerno.one/.well-known/openid-configuration
# 2. Отправляем человека на форму входа
GET https://id.zerno.one/oauth/authorize
?response_type=code
&client_id=<ваш client_id>
&redirect_uri=https://<ваш домен>/auth/callback
&scope=openid+email+profile
&state=<случайная строка в сессии>
&code_challenge=<S256 от code_verifier>
&code_challenge_method=S256
# 3. Меняем код на токены — сервер-сервер, секрет в браузер не попадает
POST https://id.zerno.one/oauth/token
grant_type=authorization_code&code=<code>
&client_id=<ваш client_id>&client_secret=<секрет>
&code_verifier=<verifier>The price follows the number of sites and the paperwork you need — not the number of your users. Monthly actives are a ceiling on the plan, not a line on the invoice.