Developers · PeerTalk

Components

The PeerTalk platform consists of three components.

peertalk-chatPrivate

Real-time anonymous chat platform: token chat rooms, DMs, embeddable widget, moderation, premium and wallet alerts.

JavaScriptNode.js · Fastify · uWebSocketsPostgreSQL · Redis

peertalkid-serverPrivate

Anonymous identity provider: 12-word recovery phrase, Ed25519 challenge login, JWT access/refresh tokens, OpenID discovery.

JavaScriptNode.js · ExpressSQLite

peertalkid-jsv1.0.0

Official JavaScript SDK for PeerTalkID — browser client, Node.js token verification & Express middleware, React hooks.

JavaScriptESMNode ≥ 18 · React ≥ 17

Quick start

Add “Login with PeerTalkID” to any website in two lines.

<script src="https://id.peertalk.chat/peertalkid-button.js"></script>
<peertalkid-button onlogin="onLogin"></peertalkid-button>

<script>
  function onLogin(session) {
    console.log('Logged in as', session.accountId, session.isPremium);
  }
</script>

Embed a PeerTalk chat widget

<iframe src="https://widget.peertalk.chat/token/<TOKEN_ADDRESS>"
        style="width:100%;height:600px;border:0" allow="clipboard-write"></iframe>

More examples and the visual widget configurator: id.peertalk.chat/integration · peertalk.chat/integration

SDK & downloads

The SDK is distributed directly from PeerTalkID — no third-party registry required.

npm install https://id.peertalk.chat/sdk/peertalkid-js-1.0.0.tgz

Usage

// Browser
import { PeerTalkID } from 'peertalkid-js';
const client = new PeerTalkID();
client.login('https://your-site.com/callback');

// Node.js / Express
import { verifyToken, peertalkidMiddleware } from 'peertalkid-js/server';
app.use('/api', peertalkidMiddleware({ required: true }));

// React
import { usePeerTalkID, PeerTalkIDProvider, PeerTalkIDButton } from 'peertalkid-js/react';

Without a bundler (ES module)

<script type="module">
  import { PeerTalkID } from 'https://id.peertalk.chat/sdk/peertalkid-js/index.js';
</script>

peertalkid-js-1.0.0.tgz README.md peertalkid-button.js

API reference

Base URL https://id.peertalk.chat · JSON over HTTPS · Bearer tokens (JWT, issuer https://id.peertalk.chat, audience peertalkid-clients).

Method	Endpoint	Description
POST	`/auth/register`	Create an account from a client-derived public key (wallet hash only, no personal data).
POST	`/auth/challenge`	Request a one-time login challenge for a public key.
POST	`/auth/login`	Submit the Ed25519-signed challenge; returns access + refresh token.
POST	`/auth/refresh`	Rotate the refresh token and issue a new access token.
POST	`/auth/verify`	Validate an access token and return the session.
POST	`/auth/logout`	Revoke the current session.
POST	`/auth/logout-all`	Revoke all sessions of the account.
GET	`/auth/sessions`	List active sessions of the account.
GET	`/auth/notifications`	Account notifications.
POST	`/auth/profile`	Update display name / avatar seed.
GET	`/api/userinfo`	OpenID-style user info for a bearer token.
POST	`/api/verify`	Server-to-server token verification for integrators.
GET	`/api/status`	Service and database health.
GET	`/avatar/:seed`	Deterministic SVG avatar for a seed.
GET	`/.well-known/openid-configuration`	OpenID discovery document.
GET	`/health`	Liveness probe.

Security model

PeerTalkID never sees a secret. The 12-word recovery phrase is generated and stored only in the user's browser; a key pair is derived locally (PBKDF2-SHA-256, 210,000 iterations → Ed25519). The server stores a salted hash of the public key and short-lived session records — no email, phone number, password or IP address is linked to an account. Logins are challenge–response signatures with single-use nullifiers to prevent replay. Chat messages on PeerTalk are encrypted at rest and expire automatically.

Keys derived client-side; the phrase never leaves the browser.

Only a salted hash of the public key is stored.

Ed25519 challenge–response with single-use nullifiers.

No email, phone, password or IP address linked to an account.

License

PeerTalk, PeerTalkID and peertalkid-js

Ownership. The PeerTalk and PeerTalkID software, including source code, object code, designs, documentation, names and logos (“Software”), is the exclusive property of its owner and is protected by copyright and trademark law.
Integration grant. You may use the public PeerTalkID API, the peertalkid-js SDK and the embeddable widgets free of charge to integrate login and chat into your own website or application.
Restrictions. Except under a separate written agreement you may not copy, modify, distribute, sublicense, sell, rent, host as a service, or reverse-engineer the Software or any part of its server components.
Commercial licensing. Source code licenses, white-label deployments and transfer of rights are available under a separate commercial agreement. Contact contact@peertalk.chat.
No warranty. The Software is provided “as is”, without warranty of any kind. In no event shall the owner be liable for any claim, damages or other liability arising from the use of the Software.

Third-party notices

PeerTalk is built with the following open-source packages. Their licenses apply to those packages only.

Package	Version	License	Used by
Loading…

Changelog

Version	Changes
`1.0.0`	Initial PeerTalk release — anonymous token chat, DMs, embeddable widget, PeerTalkID login, premium, moderation tools, wallet alerts, peertalkid-js SDK.

Build on PeerTalk & PeerTalkID