Add “Sign in with Protext”.

<script src="https://protext.org/sdk.js"
  data-client-id="px_…"
  data-scope="openid profile email context:work"></script>

<button data-protext-signin></button>
<input name="name"  data-protext="identity.name">
<input name="email" data-protext="contact.email">
<textarea data-protext="work.building"></textarea>

<script>
document.addEventListener("protext:signed-in", e => {
  // e.detail = { id_token, access_token, context, … }
  console.log(e.detail.context.items);
});
</script>

Public client with PKCE; no secret in the browser. The redirect URI is the page itself unless you set data-redirect-uri.

issuer:        https://protext.org
discovery:     https://protext.org/.well-known/openid-configuration
scopes:        openid profile email offline_access
               context:identity context:contact context:link
               context:work context:interest context:memory context:pref
token response adds:  context (bundle), context_token (RS256 JWS)
later reads:   GET https://protext.org/api/v0/context
               Authorization: Bearer <access_token>

Node example with openid-client is in the repo under examples/. Verify id_token / context_token against /.well-known/jwks.json.

curl -X POST https://protext.org/oidc/register \
  -H 'content-type: application/json' \
  -d '{"client_name":"My app","redirect_uris":["https://myapp.com/cb"]}'
→ { "client_id": "px_…", … }

Self-registered apps are labelled as such on the consent screen. Register below to attach the app to your account instead.

Log in or claim a handle to register apps under your account — or use the curl above.