> For the complete documentation index, see [llms.txt](https://fifo-docs.gitbook.io/colibri/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://fifo-docs.gitbook.io/colibri/colibri-webauth/webauth.md).

# Overview

`@colibri/webauth` provides one client for [SEP-10](/colibri/colibri-webauth/sep10.md) classic-account and [SEP-45](/colibri/colibri-webauth/sep45.md) contract-account authentication. It returns a JWT, not an asset token. Routing is explicit and never falls back to another protocol.

```sh
deno add jsr:@colibri/webauth jsr:@colibri/core npm:@stellar/stellar-sdk
```

Colibri implements [SEP-45](/colibri/colibri-webauth/sep45.md) v0.1.1 with legacy address credentials. Server-provided address-v2 or delegated challenge credentials are not accepted. This is a WebAuth compatibility boundary, separate from Core's transaction signer support.

## Guides

* [Discovery and routing](/colibri/colibri-webauth/discovery.md)
* [Authenticate a classic account](/colibri/colibri-webauth/sep10.md)
* [Authenticate a contract account](/colibri/colibri-webauth/sep45.md)
* [JWTs and errors](/colibri/colibri-webauth/jwt.md)

See the [API and error reference](/colibri/reference/reference.md) for exact exported symbols and complete error contexts.

[SEP-10](/colibri/colibri-webauth/sep10.md)'s [`Sep10Signer`](/colibri/colibri-webauth/sep10.md) supports asynchronous Core envelope signers through both `authenticate()` and `sep10.signChallenge()`. See [wallet signing](/colibri/colibri-webauth/sep10.md#wallet-and-asynchronous-signers) for verification, cancellation and multisig semantics. [SEP-45](/colibri/colibri-webauth/sep45.md) authorization handlers remain a separate capability.