Auth deep-link hosts
Tracked as OD-9. Staging custom URL schemes and AuthKit redirect / logout URIs are locked (Blake / Platform, WorkOS staging). Universal Links hosts and assetlinks remain TBD.
Locked (product + WorkOS staging)
| Item | Value |
|---|---|
| Staging AuthKit Client ID | client_01M2VWKF87Q557H9D37BFKC52H (public; safe to document) |
| Android / iOS package | com.pocketlabs.clubhouseleague |
| Staging redirect (default for staging builds) | clubhouseleague-staging://auth/callback |
| Production redirect scheme | clubhouseleague://auth/callback |
| Staging logout / returnTo (default for staging) | clubhouseleague-staging://signed-out |
| Production logout / returnTo | clubhouseleague://signed-out |
| Auth methods | Magic Auth + Google + Apple on; passwords off |
WorkOS staging AuthKit redirect allowlist includes both clubhouseleague-staging://auth/callback and clubhouseleague://auth/callback. Logout / returnTo allowlist includes both clubhouseleague-staging://signed-out and clubhouseleague://signed-out.
Build wiring: Staging builds use the staging Client ID and clubhouseleague-staging:// schemes. A production Client ID exists in WorkOS, but production WorkOS mutations stay locked until billing — do not point production builds at the staging Client ID or staging schemes.
TBD (Blake / Platform) — remaining OD-9
- Universal Links / App Links hostnames
- Associated domains /
assetlinks.jsonconfiguration - Any additional WorkOS allowlist HTTPS hosts (if required beyond custom URL schemes)
See Auth delivery and OD-9.