Skip to main content

Architecture

The Web SDK sits between your web application and the SophID mobile flow.

Browser Flow​

  1. Request a BST from your server.
  2. Pass that session data into the SDK.
  3. Launch the mobile handoff.
  4. Wait for a signed BRT.
  5. Submit or return the result for server-side verification.

Supported Contexts​

  • Phone browsers with deep links
  • Desktop browsers using QR handoff

Design Goal​

The browser owns transport and user interaction. The backend remains the source of truth for token creation and verification.