tapdoor

Authentication relay · OAuth 2.0 return endpoint

Sign-in relay for partner sites.

tapdoor provides the fixed return address that partner sites register with their identity provider. When a visitor approves a sign-in, the provider directs the browser to tapdoor, and tapdoor forwards it, in a single redirect, to the site that requested the sign-in.

Pass-through only

The authorisation code and state parameter issued by the identity provider are forwarded unchanged to the requesting site. They are not opened, exchanged or altered on this host.

Nothing retained

The relay operates no accounts, sessions or databases and writes no request log. Once the redirect has been sent, no record of the visit remains here.

No tracking

No cookies are set, no analytics or advertising code is loaded and no third-party resource is requested. Every page on this host is a single static file.

Relay operational TLS 1.2+ · HTTP/2 · 0 cookies · 0 scripts

Arrived here directly? No sign-in can be started from this address. Return to the site you were using and begin the sign-in from its own login page.