Frequently Asked Questions

The Shirah Authentication Service is a centralized microservice that provides secure user authentication and authorization for all applications in the Shirah.co platform ecosystem. It handles user registration, login, JWT token management, service key authentication, and provides beautiful landing pages for authentication flows.

Our authentication service powers all major Shirah.co platform services including:

• • Portify - B2B Immigration Consulting
• • Pathway - B2C Immigration Services
• • Studendly - Student Admissions & Scholarships
• • Mploynow - Employment & Job Search

Yes, absolutely. We implement enterprise-grade security measures including encrypted password storage using bcrypt, JWT tokens with configurable expiration, rate limiting, secure API key management, and comprehensive input validation. All data transmission is encrypted using HTTPS.

Integration is straightforward with our comprehensive API documentation. You'll need to:

1. Obtain a service key for your application
2. Use the authentication endpoints for user login/registration
3. Handle JWT tokens for session management
4. Implement callback handling for landing page flows

Visit our API Documentation for detailed implementation guides.

We support multiple authentication methods:

• • JWT Tokens - For user session management
• • Service Keys - For service-to-service authentication
• • Email/Password - Traditional credential-based login
• • Landing Pages - Beautiful hosted authentication flows

JWT token expiration is configurable but defaults to 24 hours for access tokens. Refresh tokens have longer expiration periods. The system also supports automatic token refresh to maintain seamless user sessions without frequent re-authentication.

Password reset is handled through secure email verification. Simply use the "Forgot Password" link on any login page, enter your email address, and follow the instructions in the email you receive. The reset link expires after 1 hour for security purposes.

Yes, you have the right to delete your account and all associated data. Account deletion requests are processed within 30 days. Please note that deleting your authentication account will also affect your access to all Shirah.co platform services.

We collect only the minimum data necessary for authentication: email address, encrypted password, account creation date, and login timestamps. We do not collect personal information beyond what's required for secure authentication. For complete details, see our Privacy Policy.

For technical support, please contact our development team through the appropriate Shirah.co service you're using. For API integration issues, refer to our comprehensive documentation or check the system status page for any ongoing issues.

Yes, you can check the current system status and API health at https://auth.shirah.ca/api/health. This page shows real-time system status, response times, and any ongoing maintenance or issues.