Rose-Hulman Authentication Service

Have you ever wanted to be able to restrict your apps and websites to just Rose-Hulman's campus? Well now you can!

Learn more

How to add Rose-Hulman Authentication to your app

In order to use this service, you first need to register your app here. Please note that student generated tokens will only be valid for a single year. Do this by providing your Rose-Hulman username and password (assuring that you're actually a Rose-Hulman student) along with your secret. If you're using Firebase, you'll need to follow these instructions to generate the file needed for registration. Otherwise, make up a secure secret to use.

Once you've registered, you'll recieve a token that you must include when using the various client SDKs. This token is safe to save on your client app, but your secret must never be accessible by a client. However, assuming that you make the correct request and the user authenticates successfully, the SDK will return a JSON Web Token that you can use as your authentication mechanism for your app or a Firebase custom auth token if you're using Firebase. Please see the links for more information about how those work.

This service is provided by the CSSE department for the purpose of requiring RHIT authentication from the end user. It may be used by faculty, students and staff for projects related to their academic work. It may also be used for personal projects at the discretion of CSSE department. Please email csseadmin@rose-hulman.edu if you have any questions.

Let's verify that you are with Rose-Hulman
Do you want to change any defaults?
hours

After how long should it expire?

Are you using Firebase?
You need to upload a service account JSON file. This can be generated by following step 2 of these instructions.

We use JWTs for authentication, please select your signing algorithm.

See this article for more details
What is your private key?
Get your private key from the JSON file from these directions. We need your private key in order to sign the tokens, you can then verify them with your public key. If you need help generating a key-pair see this link
What is your secret?
Make up a secure secret that will be used to sign your JWTs.
Need inspiration? Try randomly generated secret: {{c.sampleSecret}}

Token: