LINE - KavachOS

Setup

1

Get credentials

Go to the LINE Developers Console and create a provider and channel. Choose LINE Login as the channel type. Add your redirect URI:

https://your-app.com/api/kavach/auth/oauth/callback/line

2

Configure

lib/kavach.ts

import { createKavach } from 'kavachos';
import { oauth } from 'kavachos/auth';
import { lineProvider } from 'kavachos/auth';

const kavach = await createKavach({
  database: { provider: 'sqlite', url: 'kavach.db' },
  plugins: [
    oauth({
      providers: [
        lineProvider(
          process.env.LINE_CLIENT_ID!,
          process.env.LINE_CLIENT_SECRET!,
        ),
      ],
    }),
  ],
});

LINE_CLIENT_ID=...
LINE_CLIENT_SECRET=...

Scopes

Default scopes: openid, profile, email

Scope	What it unlocks
`openid`	OIDC identity token
`profile`	Display name and profile picture
`email`	Email address (requires email permission approval)

The email scope requires an additional approval step in the LINE Developer Console. You must agree to the LINE Login email permission terms and submit for review.

Endpoints

Method	Path	Description
GET	`/auth/oauth/authorize/line`	Redirect to LINE
GET	`/auth/oauth/callback/line`	Handle callback

Last modified on April 29, 2026