API Client Users and Verification

How Amerencio API client users, approvals, and verification work.

Client Users and Verification

Client users are Amerencio users who approve an API client to access specific data or actions.

Screenshot target: client user verification screen showing account verification, provider identity, approved scopes, and revoke access. #27

What a client user is

A client user connects an Amerencio account to an API client. The connection stores which client was approved, which scopes were granted, and whether the access is active.

Verification flow

1. The user starts an OAuth or API authorization flow.
2. Amerencio shows the requested access.
3. The user confirms the allowed scopes.
4. Amerencio stores the approved relationship.
5. Future API requests can use the approved scopes until access is revoked or expires.

Why email alone is not enough

External providers can show the same email in different ways, and emails can change. Amerencio should rely on stable provider identifiers, client user records, and stored approvals instead of only matching by email address.

Revoking access

Users can manage linked external accounts and API access from the account area. Sensitive changes can require account unlock.