# zkLogin

Koseli harnesses the zkLogin feature from the SUI Blockchain, providing users with a secure and privacy-preserving method to access Web3 decentralized applications (dApps). Utilizing zero-knowledge proofs, zkLogin ensures seamless login experiences for Koseli users, preserving their privacy while accessing their favorite dApps with familiar Web2 accounts such as Google, Facebook, and Twitch.

#### How zkLogin Works:

1. Ephemeral key pair: For every zkLogin, a short-lived key pair is generated. The private key is used to sign the transaction whereas the public key is included in the nonce field of JWT token and sent to the OAuth providers during web2 login.
2. Web2 Login and JWT Token: Once a user successfully authenticates with OAuth providers, the JWT token gets signed.
3. Wallet Creation: A unique Sui wallet is created based on the user’s  ID, dApp application ID, and a secret salt, and assets are held/owned by this wallet for any kind of claims within the app
4. Zero-Knowledge Proof Generation: Zero-Knowledge proof is generated which proves all the following statements:
   1. The signed JWT token is not tampered with.
   2. The signed JWT token consists of the public key and the valid period - epoch.
   3. The key pair is valid. 
5. Transaction: The blockchain transaction is formed and signed with the ephemeral private key and broadcasted along with the zk-proof.
6. Transaction Verification: The broadcasted transaction will be executed on-chain only if the zk-proof verifies.

For comprehensive insights into zkLogin and Enoki's role in ensuring a secure login experience, please explore the [zkLogin Official Documentation](https://docs.sui.io/concepts/cryptography/zklogin) and [Enoki](https://enoki.mystenlabs.com/). 

<br>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.koseli.xyz/our-components/zklogin.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.