Overview

HandCash Connect is an external service that developers can use for authentication and payment processing. It provides an authentication flow where users are redirected from the app to HandCash and then redirected back to the app with an authToken and sessionToken. The authToken is stored on the server and a new sessionToken is generated based on JWT. Developers have the flexibility to implement their own authentication system while using HandCash as the basis for authentication. Additionally, HandCash Connect allows developers to trigger payments through an internal API endpoint.

Features

• Authentication flow: Users are redirected to HandCash for authentication and redirected back to the app with an authToken and sessionToken.
• Exposing authToken as little as possible: The authToken is stored on the server and a new sessionToken is generated based on JWT.
• Flexibility in authentication system: Developers can implement their own authentication system and use HandCash as an external service.
• Triggering payments: The app can initiate payments by calling an internal API endpoint and sending the sessionToken as a Bearer token.

Installation

To use HandCash Connect, follow these steps:

1. Create your app on the HandCash dashboard or use the credentials from your existing app.
2. Add your app credentials to the .env.local file.
3. Install the dependencies.
4. Run the development server.
5. Open http://localhost:3000 in your browser to see the result.

Summary

HandCash Connect is a service that provides authentication and payment processing for developers. It offers an authentication flow where users are redirected to HandCash for authentication and redirected back to the app with an authToken and sessionToken. The authToken is stored on the server and a new sessionToken is generated based on JWT. This approach allows developers to implement their own authentication system while using HandCash as an external service. HandCash Connect also provides functionality to trigger payments through an internal API endpoint.