Introduction

Introduction

ForgeConnect is the identity layer for the Forge ecosystem.

What is ForgeConnect

ForgeConnect is a standalone identity and authentication service that provides a single canonical user UUID across the entire Forge ecosystem. It supports multiple authentication methods -- email/password, magic codes, OAuth, Solana wallets, passkeys, and TOTP two-factor -- all linked to one identity. It sits below every other service (Nomu, ForgePay, etc.) and has zero dependencies on them.

Features

Email / Password

Traditional registration with email verification and bcrypt-hashed passwords.

Magic Code (OTP)

Passwordless email codes. Auto-registers new users on first use.

OAuth Providers

Google, Discord, Twitter, and Apple via popup-based flows.

Wallet Login

Solana (and Ethereum) wallet signature verification with challenge/response.

Passkeys (WebAuthn)

Passwordless, phishing-resistant biometric login. Bypasses 2FA by design.

Two-Factor (TOTP)

Optional TOTP-based 2FA with AES-encrypted secrets and hashed recovery codes.

How It Works

Your App

React / Next.js

React SDK

@forge-connect/react

ForgeConnect API

Hono + RS256 JWTs

Database + Redis

Neon Postgres / Upstash

What You Get

  • LoginModal -- a multi-step login modal with support for every auth method
  • AccountModal -- account management with profile, logins, wallets, and security tabs
  • AccountButton -- a drop-in sign-in / account button
  • Five hooks (useForgeConnect, useUser, useWallets, useSessions, useAdmin) for full programmatic control
  • A typed API client that wraps every REST endpoint