Sign in with Mentra

import * as oidc from "openid-client";

const config = await oidc.discovery(
  new URL("https://account.mentraglass.com"),
  process.env.MENTRA_CLIENT_ID!,
  { client_secret: process.env.MENTRA_CLIENT_SECRET!, id_token_signed_response_alg: "EdDSA" },
  oidc.ClientSecretPost(process.env.MENTRA_CLIENT_SECRET!),
);

// When someone clicks "Sign in with Mentra":
const verifier = oidc.randomPKCECodeVerifier();
const state = oidc.randomState();
const nonce = oidc.randomNonce();
// Keep verifier, state and nonce for this browser (a short-lived, HttpOnly cookie), then redirect to:
const url = oidc.buildAuthorizationUrl(config, {
  redirect_uri: "https://notes.example.com/auth/callback",
  scope: "openid email profile",
  code_challenge: await oidc.calculatePKCECodeChallenge(verifier),
  code_challenge_method: "S256",
  state,
  nonce,
});

// On your redirect URI:
const tokens = await oidc.authorizationCodeGrant(config, new URL(request.url), {
  pkceCodeVerifier: verifier,
  expectedState: state,
  expectedNonce: nonce,
  idTokenExpected: true,
});

import { createMentraAuth } from "@mentra/auth";

const mentraAuth = createMentraAuth({ packageName: "com.example.notes" });
const user = await mentraAuth.verifyToken(tokens.access_token);

user.mentraUserId; // the same id your miniapp sees on the phone
user.clientId;     // your website's client ID; null for a request from the phone