Glossary
The words these docs use, each in a line.
Account API: the API at <issuer>/me that a signed-in person calls about themselves: profile, wallets, ways to sign in, sessions, passkeys, consents. See the account API.
API: one of a brand's resource servers, registered with an identifier and its scopes. Access tokens are issued for one API at a time. See Apps and APIs.
App: something people sign in to through a brand: a web app, a single-page app, a native app, a machine, or an agent. Each has a client id. See Apps and APIs.
Brand: one user pool with its own issuer, sign-in methods and look. An org has one or more. See Orgs and brands.
Brand's own app: an app the brand made for itself (first_party). It skips the consent step and may do what other apps can't, such as adding a way to sign in.
Consent: what a person allowed an app outside the brand's own to do. See Consent.
Grant: what a person allowed one app in one session. Refresh tokens belong to a grant; ending it ends them all.
Hosted pages: the sign-in, sign-up and consent pages a brand's issuer serves, in the brand's look.
Identity: one way a person signs in: an email address, a wallet, a passkey, an account at a provider. One person has up to 20. See Users and identities.
Issuer: a brand's OpenID Connect provider, at its own host. Everything a person does to sign in happens there.
Link request: what the account API makes when a person adds a way to sign in: the sign-in that finishes it carries it. See Linking.
Management API: the API an org's servers and dashboard call to manage its brands, apps, users and the rest. See the management API.
Org: a company using Synq: it owns brands, members and the bill. See Orgs and brands.
Problem document: how Synq's APIs answer an error, with a stable code. See Errors.
Route mount: the routes @synqauth/nextjs answers in an app (/api/auth/… by default), which hold the session's tokens on the server. See the SDK reference.
Session: a person signed in to a brand in one browser, across its apps. See Sessions and tokens.
Token gate: a rule that lets someone into an app only while their wallets hold certain tokens. See Token gates.