Lemma IAM Developer Docs

curl -X POST https://lemma.id/api/v1/sites/register \
  -H "Content-Type: application/json" \
  -d '{
    "site_domain": "yourcompany.com",
    "company_name": "Your Company Inc",
    "admin_email": "[email protected]",
    "plan": "starter"
  }'

curl -X POST https://lemma.id/api/v1/sites/YOUR_SITE_ID/permissions \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "permission_id": "admin",
    "display_name": "Administrator",
    "scope": ["*"],
    "description": "Full access"
  }'

<script src="https://lemma.id/static/js/lemma-iam-sdk.js"></script>

<script>
const lemmaIAM = new LemmaIAM({
    apiKey: 'YOUR_API_KEY',
    siteId: 'YOUR_SITE_ID'
});

// Check if user has access
const hasAccess = await lemmaIAM.verifyAccess(
    '/admin/users', 
    'read'
);

if (hasAccess) {
    // Show protected content
} else {
    // Redirect to access request
}
</script>

User → Your Site: "Login with email"
Your Site → Lemma API: POST /api/v1/iam/request-access
Lemma → User Email: Confirmation link
User → Lemma: Click confirmation
Lemma → User Browser: Permission lemma (Ed25519 signed)
User Browser → Local Storage: Store encrypted credential
User → Your Site: Return with credential
Your Site → Client (0.36µs): Verify Ed25519 signature
Client → Your Site: ✅ Access granted

Every 5 minutes (background):
Your Site → Lemma API: Verify with fresh nonce
Lemma → Your Site: ✅ Still valid (or ❌ revoked)

{
  "site_domain": "yourcompany.com",
  "company_name": "Your Company Inc",
  "admin_email": "[email protected]",
  "plan": "starter"
}

{
  "success": true,
  "site_id": "site_abc123",
  "api_key": "lemma_api_xyz789",
  "issuer_did": "did:lemma:a1b2c3...",
  "crypto_engine": "rust_ed25519_oprf"
}

{
  "permission_id": "admin",
  "display_name": "Administrator",
  "scope": ["*"],
  "description": "Full access to all resources"
}

{
  "site_id": "site_abc123",
  "user_email": "[email protected]",
  "permission_level": "admin",
  "redirect_url": "https://yourcompany.com/dashboard"
}

{
  "site_id": "site_abc123",
  "user_did": "did:lemma:user456",
  "resource": "/admin/users",
  "action": "read",
  "user_lemmas": [...]  // From user's wallet
}

{
  "success": true,
  "has_access": true,
  "verification_time_us": 87.3,
  "crypto_engine": "rust_ed25519_oprf"
}

<script src="https://lemma.id/static/js/lemma-iam-sdk.js"></script>

// Initialize
const lemmaIAM = new LemmaIAM({
    apiKey: 'YOUR_API_KEY',
    siteId: 'YOUR_SITE_ID'
});

// Check access (client-side, 0.36µs)
const result = await lemmaIAM.verifyAccess(
    '/admin/users',  // resource
    'read'           // action
);

if (result.hasAccess) {
    showAdminPanel();
} else {
    redirectToAccessRequest();
}

// Express.js example
app.get('/admin/*', async (req, res, next) => {
    const hasAccess = await lemmaIAM.verifyAccess(
        req.path,
        'read'
    );
    
    if (hasAccess) {
        next();
    } else {
        res.status(403).send('Access denied');
    }
});

import requests

# Verify access
response = requests.post('https://lemma.id/api/v1/auth/verify', 
    json={
        'site_id': 'site_abc123',
        'user_did': 'did:lemma:user456',
        'resource': '/admin/users',
        'action': 'read',
        'user_lemmas': user_credentials
    }
)

result = response.json()
has_access = result['has_access']

// 1. User requests access
<form onsubmit="requestAccess(event)">
    <input type="email" id="userEmail" placeholder="Enter your email">
    <button type="submit">Request Access</button>
</form>

<script>
async function requestAccess(e) {
    e.preventDefault();
    const email = document.getElementById('userEmail').value;
    
    await fetch('https://lemma.id/api/v1/iam/request-access', {
        method: 'POST',
        headers: { 'Content-Type': 'application/json' },
        body: JSON.stringify({
            site_id: 'YOUR_SITE_ID',
            user_email: email,
            permission_level: 'admin',
            redirect_url: window.location.href
        })
    });
    
    alert('Check your email to complete setup!');
}
</script>

// 2. Verify access on page load
<script>
async function checkAccess() {
    const lemmaIAM = new LemmaIAM({
        apiKey: 'YOUR_API_KEY',
        siteId: 'YOUR_SITE_ID'
    });
    
    const result = await lemmaIAM.verifyAccess('/admin', 'read');
    
    if (result.hasAccess) {
        document.getElementById('admin-panel').style.display = 'block';
    } else {
        window.location.href = '/request-access';
    }
}

window.addEventListener('DOMContentLoaded', checkAccess);
</script>