Web Integration (Optional)
Integrate Reclaim verification into your website through a compatible browser extension
Optional Integration: This section is for websites that want to integrate with an extension built using the Reclaim Browser Extension SDK. If you're building an extension with popup/sidepanel verification, use Extension Integration instead.
Overview
Trigger Reclaim verification from your website through an installed browser extension. Users can verify without leaving your site - the extension handles all verification logic.
When to Use This
Choose web integration if:
- 🌐 You have a website (not building an extension)
- 🔌 Users have a compatible extension built with this SDK
- 🎨 You control the website UI (extension handles verification)
- 🔄 You want in-page verification without redirects
How It Works
The web integration establishes communication between your website and the Reclaim browser extension:
Flow Breakdown
- Your Website: Calls SDK with extension ID
- Content Script Bridge: Receives request from webpage
- Extension Background: Orchestrates verification
- Offscreen Document: Generates proofs
- Provider Tab: Handles authentication
- Proofs Returned: Sent back to your website
Get Your API Credentials First
🔑 Required: Get Your API Credentials Before Integration
Before you can integrate Reclaim verification into your website, you must obtain your API credentials. These credentials (APP_ID and APP_SECRET) are essential for creating verification requests.
Get Your API Credentials Now →
You'll need:
APP_ID: Your unique application identifierAPP_SECRET: Your application secret key (keep secure!)
Without these credentials, you cannot initialize the SDK or start verification flows.
Prerequisites
Before integrating, ensure you have:
- ✅ Completed the Installation guide
- ✅ Obtained your API credentials (
APP_IDandAPP_SECRET) from the API Key guide - ✅ Access to a Reclaim-compatible browser extension (or built one using Extension Integration)
- ✅ A web application (React, Vue, vanilla JavaScript, etc.)
Extension Requirement: Users must have a Reclaim-compatible extension installed. You can either:
- Build your own extension using Extension Integration
- Use the official Reclaim extension (if available)
- Partner with existing extension providers
Key Differences from Extension Integration
| Aspect | Extension Integration | Web Integration |
|---|---|---|
| Who builds | You build the extension | You use existing extension |
| User installs | Your extension | Any compatible extension |
| Control | Full control | Limited to verification API |
| UI Location | Extension popup/panel | Your website |
| Complexity | Higher (extension dev) | Lower (just web code) |
Extension ID
The most important configuration for web integration is the Extension ID. This identifies which browser extension will handle verification requests.
Finding the Extension ID
For Chrome extensions:
- Navigate to
chrome://extensions - Enable "Developer mode" (top-right toggle)
- Find the extension
- Copy the ID (shown under the extension name)
Example ID: abcdefghijklmnopqrstuvwxyz123456
Storing the Extension ID
Development:
Production:
Extension ID Changes: The extension ID changes between development and production builds. Ensure you use the correct ID for each environment.
Architecture Benefits
For Developers
- ✅ No Extension Development: Just integrate SDK in your web app
- ✅ Faster Integration: Standard web development workflow
- ✅ Framework Agnostic: Works with React, Vue, Angular, vanilla JS
- ✅ Easier Updates: Update your website without extension review process
For Users
- ✅ Single Extension: One extension works across multiple websites
- ✅ No Page Reloads: Verification happens in-place
- ✅ Trusted Source: Extension from verified publisher
- ✅ Consistent UX: Familiar verification flow across sites
Security Considerations
Extension Trust
Users must trust the browser extension since it:
- Handles sensitive authentication flows
- Generates cryptographic proofs
- Has access to provider credentials
Best Practices:
- Use well-known, audited extensions
- Clearly communicate which extension is required
- Provide extension installation instructions
- Verify extension authenticity
Website Security
Your website should:
- Validate proofs server-side (never trust client-side proofs alone)
- Use HTTPS for all communication
- Implement Content Security Policy (CSP)
- Handle extension not installed gracefully
Browser Compatibility
Web integration works in browsers supporting Chrome extensions:
| Browser | Support | Notes |
|---|---|---|
| Chrome | ✅ | Full support |
| Edge | ✅ | Chrome Web Store extensions work |
| Brave | ✅ | Chrome Web Store extensions work |
| Opera | ✅ | Chrome Web Store extensions work |
| Firefox | ⏳ | Coming soon (Firefox addons) |
| Safari | ⏳ | Coming soon (Safari extensions) |
Integration Approaches
You have two approaches for web integration:
1. Direct Client-Side Integration (Quick Start)
Pass credentials directly in your frontend code. Not recommended for production.
Pros:
- ✅ Fastest to implement
- ✅ No backend required
- ✅ Good for prototypes
Cons:
- ❌ Exposes application secret
- ❌ Not secure for production
- ❌ Credentials visible in client code
2. Server-Side Configuration (Production)
Generate verification requests on your backend, only pass configuration to frontend.
Pros:
- ✅ Secure - secrets stay on server
- ✅ Backend validation
- ✅ User authorization
- ✅ Production-ready
Cons:
- ❌ Requires backend API
- ❌ More complex setup
Production Warning: Never expose your Application Secret in client-side code. Always use server-side configuration for production deployments.
Example Use Cases
DeFi Applications
Verify user credentials before token operations:
Social Platforms
Authenticate users with provider credentials:
Identity Verification
Proof of account ownership:
Next Steps
Proceed to setup and implementation:
- Setup - Configure SDK in your web application
- Usage - Implement verification flows
- Troubleshooting - Common issues and solutions
Extension Installation Guide
For users of your website, provide clear instructions:
Or detect and prompt automatically (covered in Usage guide).