Authentication - Meru

Login is Meru-hosted: the SDK talks directly to Meru’s public auth endpoints with your public company app id (no secret on the client). Meru returns a wallet-auth token you pass as the Bearer on every wallet call.

The auth client

import { createMeruAuth } from "@meru.app/device-signer/auth";

const auth = createMeruAuth({
  authBase: "https://stablecoin-api.getmeru.com",
  companyId: "<your public company id>",
  passkeyDomain: "yourapp.com",
  storage: { /* getItem / setItem / removeItem */ },
});

final auth = MeruAuth(
  authBase: 'https://stablecoin-api.getmeru.com',
  companyId: '<your public company id>',
  passkeyDomain: 'yourapp.com',
);

let auth = MeruAuth(
    authBase: URL(string: "https://stablecoin-api.getmeru.com")!,
    companyId: "<your public company id>",
    passkeyDomain: "yourapp.com"
)

val auth = MeruAuth(
    context = applicationContext,
    authBase = "https://stablecoin-api.getmeru.com",
    companyId = "<your public company id>",
    passkeyDomain = "yourapp.com",
)

Methods

Call	What it does
`restore()`	Reload a persisted session at startup. Returns the session or null.
`sendEmailCode(email)`	Send an email OTP. Returns a dev code only on local/dev backends.
`verifyEmailCode(email, code)`	Verify the OTP → returns a session.
`enablePasskey()`	Turn on passkey sign-in for the signed-in user.
`loginWithPasskey(email?)`	Sign in with a passkey (usernameless if omitted).
`logout()`	Clear the persisted session.

On Android, the passkey calls (enablePasskey, loginWithPasskey) take an Activity context, e.g. auth.enablePasskey(activity).

Session persistence

The session is persisted in secure storage (Keychain / Keystore / EncryptedSharedPreferences), so call restore() once at startup:

const session = await auth.restore(); // null if not signed in

let session = auth.restore()

val session = auth.restore()

Ready to add Face ID / Touch ID / fingerprint? See Passkeys.