Custom domains

Hanko Cloud projects can now be configured with a custom domain. That means that your Hanko API URL can be changed from e.g. https://be11cd95-4125-45db-65e7-a62a64dacb97.hanko.io to auth.yourdomain.com.

Setting up a custom domain for a project effectively removes cross-domain from your setup, which has a number of benefits:

1. OAuth consent screen displaying your domain instead of hanko.io. This is a big one and the main reason we're allowing custom domains for all projects, not only Pro subscribers. When your users click on Sign in with Google, they are redirected to a Google login / consent page that shows them which website will be granted access to their Google email address. The domain displayed here should be yours, not us. That's now possible with custom domains.
2. The new device trust feature requires a custom domain to work reliably across all browsers, since Hanko stores the device trust flag in a cookie that cannot be cross-domain in some browsers due to tracking protection defaults.

‍

All projects that have activated either at least one social SSO provider or device trust should configure their custom domain as soon as possible.