octokanDocs
Verified identity
Prove a user is who they claim to be.
Anyone can claim to be anyone from the browser. If you act on who the visitor is (refunds, account lookups), sign their id on your server with the identity secret from Settings > Install & identity. octokan then marks them verified.
Never put the secret in client code or a NEXT_PUBLIC_ variable. If it leaks, regenerate it in Settings.