Self-Host / Server
Rebuild the apps model for self-hosting.
In Sendity Cloud, an app is the configuration boundary between a website and the verification backend. Self-hosted installations need the same concept, even if you expose it through your own admin UI or seed it from configuration.
Required fields
- public_app_id
- Safe to expose in markup. Used by the Client when creating challenges.
- client_secret
- Server-side credential for adapters and trusted backend calls. Show it once when created; store only a hashed form where possible.
- allowed_origins
- Origins allowed to create browser challenges for this app.
- channels
- Enabled verification channels and their server-side destinations.
Secret handling
Client secrets are operational credentials. Generate them with enough entropy, show them once, allow rotation and never render them back to users as copyable masked values. The browser Client only needs the public app id.