Nuxt

Use @authbound/nuxt when you want module setup, auto-imported components, and a verification server route.

Install

pnpm add @authbound/nuxt

Environment

AUTHBOUND_SECRET_KEY=sk_test_...
AUTHBOUND_SESSION_SECRET=replace-with-a-random-32-byte-secret
AUTHBOUND_WEBHOOK_SECRET=whsec_...
NUXT_PUBLIC_AUTHBOUND_PK=pk_test_...
NUXT_PUBLIC_AUTHBOUND_POLICY_ID=YOUR_POLICY_ID
AUTHBOUND_API_URL=https://api.authbound.io

Copy YOUR_POLICY_ID from the Authbound dashboard.

Configure the module

nuxt.config.ts

import { asPolicyId } from "@authbound/nuxt";

export default defineNuxtConfig({
  modules: ["@authbound/nuxt"],
  css: ["@authbound/vue/styles.css"],
  authbound: {
    policyId: asPolicyId(process.env.NUXT_PUBLIC_AUTHBOUND_POLICY_ID!),
    publishableKey: process.env.NUXT_PUBLIC_AUTHBOUND_PK,
    apiKey: process.env.AUTHBOUND_SECRET_KEY,
    sessionSecret: process.env.AUTHBOUND_SESSION_SECRET,
    protectedRoutes: ["/dashboard"],
    publicRoutes: ["/", "/verify"],
    providerOptions: {
      eudi: {
        responseMode: "dc_api.jwt",
        expectedOrigins: ["https://merchant.example"],
      },
    },
  },
});

The module adds these server routes for the browser SDK and server reconciliation. Your secret key and session secret stay server-side.

Route	Purpose
`POST /api/authbound/verification`	Create a verification and pending browser binding
`POST /api/authbound/session`	Finalize the SDK session after verified status
`POST /api/authbound/webhook`	Receive Authbound webhook events
`POST /api/authbound/stations/:stationId/entry`	Station entry handoff
`GET /api/authbound/stations/:stationId/display`	Station entry display state
`GET /api/authbound/stations/:stationId/display/events/sse`	Station display SSE feed
`GET /api/authbound/stations/:stationId/operator`	Operator console state
`GET /api/authbound/stations/:stationId/operator/events/sse`	Operator SSE feed
`GET /api/authbound/stations/:stationId/verifications/:verificationId/disclosure`	Operator disclosure view

Use these BFF routes with station UI from @authbound/vue when you build station entry or operator flows.

The Nuxt module does not register GET /api/authbound/status or a sign-out (DELETE /api/authbound) route. If your app needs them, add server-side Nitro handlers that read or clear the HttpOnly SDK session cookie.

Verification page

pages/verify.vue

<template>
  <AuthboundVerificationWall
    title="Verify your age"
    subtitle="Use your EU Digital Identity Wallet to continue."
    start-button-text="Start verification"
    :on-verified="({ verificationId, status }) => {
      console.log('Verified', verificationId, status);
    }"
  >
    <main>
      <h1>Verified</h1>
      <p>You can now continue.</p>
    </main>
  </AuthboundVerificationWall>
</template>

Route protection

By default, the browser SDK calls POST /api/authbound/session after verified status. The Nuxt server route checks the pending verification cookie and same-origin request, fetches the signed verification result from Authbound with your secret key, then creates the HttpOnly Authbound session cookie used by protectedRoutes. SDK-managed sessions require navigator.locks. Same-origin tabs serialize verification creation and session finalization under a lock keyed by the resolved endpoint origin. If you need to support a browser or embedded webview without Web Locks, set sessionMode: "manual" and create the trusted session on your server. For production, use that SDK-managed cookie for same-origin route UX, and process webhooks or signed results to store durable backend state. If you want to own all session creation yourself, set sessionMode: "manual" and create your app session after your trusted webhook or result flow completes.

Review route protection and webhooks before production.

Start here

Identity verification

Credential issuance

AI

Install

Environment

Configure the module

Verification page

Route protection

Next

​Install

​Environment

​Configure the module

​Verification page

​Route protection

​Next

Install

Environment

Configure the module

Verification page

Route protection

Next