Skip to Content

Configuration

⚡ 3 min read

Configure authentication settings including RP ID, access token expiration, and legal URLs.


What the Configuration Panel Does

The Configuration panel manages core authentication settings with several key components:

  • Domain authentication (RP ID) - Required for WebAuthn passkey functionality
  • Token lifetime - Access token expiration periods (1 hour to 1 year)
  • Legal compliance - Terms of Service and Privacy Policy URLs for authentication modals

Panel description:

Located in the top-right section, the panel shows: “Manage your project with general settings, appearance customization, notification controls, privacy settings, and advanced options.”

Critical: Incorrect RP ID configuration will prevent WebAuthn from working. This setting must match your application’s domain exactly.


Prerequisites

  • Your application’s domain name (e.g., example.com or localhost for development)
  • (Optional) URLs for Terms of Service and Privacy Policy documents

Opening the Configuration Panel

  1. Log in to Transcodes Console 
  2. Open your project
  3. Locate the Authentication Kit Cluster
  4. Click the gear icon (⚙️) labeled “Configuration”
  5. The panel opens on the right side

Configuration Panel

The Configuration panel appears on the right with a purple “Auth Configuration” accordion section.


Configuring Settings

The Configuration panel contains an accordion section titled “Auth Configuration” with four fields.

Example configuration shown in the panel:

Configuration Panel Details

The panel shows:

  • Domain Host: example.my-app.com
  • Access Token Expiration: 7 Days (dropdown)
  • Terms of Service URL: http://example.my-app.com/terms
  • Privacy Policy URL: https://example.my-app.com/privacy

Each field includes helper text explaining its purpose.


1. Set Domain Host (RP ID)

The RP ID (Relying Party ID) determines the domain under which WebAuthn credentials are scoped.

To set RP ID:

  1. Locate the Domain Host (Relying Party ID) field
  2. Enter your domain name (no protocol, no port)
EnvironmentRP ID Example
Local developmentlocalhost
Production (root)example.com
Production (subdomain)app.example.com

Rules:

  • Domain name only (no https://, no port :3000, no path)
  • Examples: localhost, example.com, app.example.com

Critical: RP ID must match your application’s domain exactly. Incorrect configuration will prevent WebAuthn from working.


2. Choose Access Token Expiration

Control how long access tokens remain valid before requiring refresh.

To set token expiration:

  1. Locate the Access Token Expiration dropdown
  2. Select one of the available options

Available options:

DurationRecommended for
1 HourHigh-security apps (banking, financial)
7 DaysStandard web apps (default)
60 DaysMobile apps, consumer apps
90 DaysIntranet, long sessions
1 YearIoT, background services

3. Add Terms of Service URL (Optional)

To add ToS URL:

  1. Locate the Client Terms of Service URL field
  2. Enter your full URL (must include https://)
  3. Example: https://example.com/terms
  4. Leave blank if not available

Where this appears:

Auth Modal with Legal Links

The link appears in the bottom-left corner of the authentication modal.


4. Add Privacy Policy URL (Optional)

To add Privacy Policy URL:

  1. Locate the Client Privacy Policy URL field
  2. Enter your full URL (must include https://)
  3. Example: https://example.com/privacy
  4. Leave blank if not available

The link appears in the authentication modal alongside the Terms of Service link.


5. Save Configuration

To save:

  1. Click the purple Save Auth Configuration button at the bottom
  2. Wait for confirmation message
  3. Changes take effect immediately

Unsaved Changes: Always save before leaving the panel. Changes are lost if you navigate away without saving.


What to do next?

After configuring your project:

  1. Get your webworker.js script
  2. Customize authentication UI
  3. Follow Integration Guide for your framework
Last updated on