Interface: OcPopupResult
Defined in: popup.ts:63 (opens in a new tab)
PropertiesLink to this section
| Property | Type | Description | Defined in |
|---|---|---|---|
account | OcPopupAccount | Account payload from the auth host, unsigned: trust only the verified token. did_oc is the account's opaque identifier, the same at every site; the email and Bitcoin address stay private unless the user grants a scope. | popup.ts:68 (opens in a new tab) |
token | string | The session JWT, bound to your origin. Hand it once to your own server, which verifies it and keeps it in an httpOnly cookie; never in localStorage, where any script on the page can read it. Family sites (*.ochk.io) can ignore it: the Domain=.ochk.io cookie rides home on its own. | popup.ts:74 (opens in a new tab) |