What apps get
Authorization code + PKCE, ID tokens signed with published JWKS, and sub locked to the Twetch user id.
OpenID Connect identity provider
Sign in with Twetch
Third-party apps can add a button and a few environment variables. Users keep a stable Twetch account id even if they rotate signing keys.
Issuer
https://id.entangleit.com
Discovery is at https://id.entangleit.com/.well-known/openid-configuration
Connected to production Twetch at https://api.twetch.com. sub is the live Twetch user id.
What users see
Hosted login on this origin, then a consent screen naming the app, logo, and requested profile scopes.