Required bindings
| Binding | Purpose |
|---|---|
DB |
D1 relational storage. |
CACHE |
KV cache for discovery, keys, and branding. |
STORAGE |
R2 object storage for assets and exports. |
EMAIL_QUEUE |
Transactional email queue. |
AUDIT_QUEUE |
Audit event queue. |
SESSION_REVOCATION |
Durable Object for session revocation state. |
Required secrets
| Secret | Purpose |
|---|---|
KEK |
Envelope encryption for instance signing keys. |
PEPPER |
Server side password and token hashing pepper. |
BOOTSTRAP_TOKEN |
Protects instance initialization in self-hosted deployments. |
Deployment checks
After deployment, verify health, OIDC discovery, JWKS, Hosted Auth configuration, and at least one authorization redirect from the instance issuer.
curl https://xid.dev/v1/health
curl https://xid.dev/.well-known/openid-configuration
curl https://xid.dev/jwks
curl https://xid.dev/auth/config