Authentication

Social Authentication

Connect your Refgrow administrator account with popular OAuth providers:

• Google
• GitHub

To enable social authentication:

1. Go to your account settings
2. Navigate to the "Authentication" tab
3. Select the social providers you want to enable
4. Follow the prompts to connect your accounts

Two-Factor Authentication (2FA)

Enable 2FA for an extra layer of security on your Refgrow administrator account:

1. Go to your account settings
2. Navigate to the "Security" tab
3. Click "Enable 2FA"
4. Scan the QR code with an authenticator app like Google Authenticator or Authy
5. Enter the verification code to confirm setup
6. Save your backup codes in a secure location

Once enabled, you'll need to enter both your password and a time-based one-time password (TOTP) from your authenticator app when logging in.

Integrating with Your Existing User System

If you already have users in your application, you can integrate Refgrow with your existing authentication:

JWT Authentication

Pass a JSON Web Token (JWT) when embedding the Refgrow affiliate dashboard:

<div 
  id="refgrow-affiliate-dashboard"
  data-program-id="YOUR_PROGRAM_ID"
  data-program-email="user@example.com"
  data-auth-token="eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
></div>

<script src="https://cdn.refgrow.com/js/affiliate-dashboard.js"></script>

The JWT should include:

• email: The affiliate's email address
• name: The affiliate's display name
• exp: Expiration timestamp

Sign the JWT with your Refgrow API secret from your program settings.

Setting Up a Custom Authentication Endpoint

For advanced integration, you can set up a custom authentication endpoint:

1. Create an API endpoint in your application that validates user credentials
2. Configure this endpoint in your Refgrow program settings under "Authentication"
3. Refgrow will call this endpoint when affiliates attempt to log in

Your endpoint should:

• Accept POST requests with username/password or token
• Return a JSON response with authentication status and user details
• Include proper CORS headers if your application and Refgrow are on different domains

Example Endpoint Response:

{
  "success": true,
  "user": {
    "email": "affiliate@example.com",
    "name": "John Doe",
    "id": "user_12345",
    "customData": {
      "accountType": "premium",
      "joinedDate": "2023-01-15"
    }
  }
}