Authentication

Streamify separates two types of users: merchants (platform owners) who log in at streamify.com, and viewers (end-users) who authenticate on your streaming platform.

Merchant authentication

Merchant accounts are managed by Clerk. Each merchant belongs to one or more organizations. Permissions are role-based within organizations.

Viewer authentication

Viewers authenticate on your branded streaming platform. Streamify provides:

• Email + password authentication
• Social login (Google, Apple)
• Magic link sign-in
• Guest access with restricted content

Viewer sessions are isolated per organization — a viewer on platform-a.com cannot access platform-b.com even if they use the same email.

Multi-tenant access control

Streamify is a multi-tenant platform. Each organization has:

• Its own viewer database
• Its own content library
• Its own subscription plans
• Its own custom domain

Content gating is enforced at the server level — unauthenticated or unauthorized viewers cannot access protected video URLs.

Session tokens

Viewer session tokens are JWT-based with a short expiry. Refresh tokens are stored in httpOnly cookies. Session revocation propagates within 60 seconds.

Custom auth flows

Enterprise plans can customize the authentication UI, add SSO (SAML, OIDC), or integrate with an existing identity provider. Contact support to enable these features.