WoosoolWoosool

Developers

Sign in with Woosool, signed event notifications, developer access and safe storage for app secrets.

Build on Woosool with widely supported standards instead of a proprietary kit. Let people sign in to your apps with their Woosool account, receive signed notifications when things change, automate Injaz through its API and hand Aman secrets to your programs when they start.

Developers

The challenge

  1. Locked-in integrations

    Proprietary integrations tie your code to one vendor. Moving later means rewriting everything.

  2. Secrets in plain files

    Access keys get copied into chats, laptops and code. Replacing them is a chore nobody wants.

  3. Unverified events

    Unsigned event notifications can be forged, and missed ones are hard to recover.

Connected

How Woosool helps

  • Sign in with Woosool

    Woosool Account works as a standard sign-in provider, so any common sign-in library can add “Sign in with Woosool” to your app, with the security features you would expect.

  • A real developer console

    Register personal or organisation apps, set up the consent screen people see, create personal access keys and watch per-app usage.

  • Signed notifications you can resend

    Every event notification (webhook) is signed so you can check it really came from Woosool, and any delivery can be sent again.

  • Secrets that never touch disk

    Aman’s secrets manager keeps app secrets for each environment, with revisions and rollback. The woosool-vault command-line tool hands them to your program without writing files.

  • Injaz API and automation

    Use personal access keys with the documented API, start rules from events in your other tools and send signed notifications back out.

  • Works with standard mail and calendar apps

    Reach mail, calendars and contacts from any standard app or tool, using app passwords instead of your account password.

Security

Admin and security controls

  1. 01
    Limited access per app: access granted to Barid is refused by Khazna
  2. 02
    A clear consent screen for every app
  3. 03
    Notification secrets and signing keys encrypted at rest
  4. 04
    Read-only access keys for servers and per-environment access in Aman
  5. 05
    Aman organisation policies
  6. 06
    Injaz access keys stored in a form that cannot be reversed

Developers

Questions and answers

Can I add “Sign in with Woosool” to my app?

Yes. Register your app in the Developers console and use any standard sign-in library.

Where can Aman send secrets?

To the configuration files and formats developers and servers commonly use. You can also import secrets from an existing configuration file.

Can I move issues from another tracker?

Yes. Injaz imports the export files of other issue trackers, and its search syntax follows what most teams already know.

One account. Every app. Your data.

Create a Woosool account and start with Barid, Yoom, Khazna and the rest of the suite.