Integrate Convex with Clerk

Create a JWT Template based on Convex

In the Clerk Dashboard, navigate to the JWT Templates(opens in a new tab)page. Select the New template button to create a new template based on Convex.

Once the Convex template is created, you will be redirected to the template's page. You can now configure the template to your needs.

The Convex template will pre-populate the default audience (aud) claim required by Convex. You can include additional claims as necessary. Shortcodes are available to make adding dynamic user values easy.

By default, Clerk will sign the JWT with a private key automatically generated for your application, which is what most developers use for Convex. If you so choose, you can customize this key.

Configure Convex with the Clerk issuer domain

The next step is to configure Convex with the issuer domain provided by Clerk. From your Clerk JWT template screen, find the Issuer input and click to Copy the URL.

In your convex folder, add an auth.config.js file with the following configuration:

convex/auth.config.js
export default {
  providers: [
    {
      domain: "https://your-issuer-url.clerk.accounts.dev/",
      applicationID: "convex",
    },
  ]
};

Replace the domain string with the Issuer URL you copied.

Deploy your changes to Convex

Run npx convex dev to automatically sync your configuration to your backend.

Install @clerk/clerk-react

Install Clerk's React SDK by running the following command in your terminal:

terminal
npm install @clerk/clerk-react

terminal
yarn add @clerk/clerk-react

terminal
pnpm add @clerk/clerk-react

Set environment keys

In your React project's root folder, you may have an .env.local file alongside package.json and other configuration files. If you don't see it, create it.

Add the following code to your .env.local file to set your public key.

Pro tip! If you are signed into your Clerk Dashboard(opens in a new tab), you can copy your publishable key below.

.env.local
VITE_CLERK_PUBLISHABLE_KEY={{pub_key}}

Configure the Clerk and Convex providers

Both Clerk and Convex have Provider components that are required to wrap your React application to provide the authentication and client context.

You may have already had a <ConvexProvider> configured. Be sure that <ClerkProvider> wraps ConvexProviderWithClerk, and that useAuth is passed to ConvexProviderWithClerk.

src/main.tsx
import React from "react";
import ReactDOM from "react-dom/client";
import App from "./App";
import "./index.css";
import { ClerkProvider, useAuth } from "@clerk/clerk-react";
import { ConvexProviderWithClerk } from "convex/react-clerk";
import { ConvexReactClient } from "convex/react";
 
// Import your publishable key
const PUBLISHABLE_KEY = import.meta.env.VITE_CLERK_PUBLISHABLE_KEY
 
if (!PUBLISHABLE_KEY) {
  throw new Error("Missing Publishable Key")
}
 
const convex = new ConvexReactClient(import.meta.env.VITE_CONVEX_URL as string);
 
ReactDOM.createRoot(document.getElementById("root")!).render(
  <React.StrictMode>
    <ClerkProvider publishableKey={PUBLISHABLE_KEY}>
      <ConvexProviderWithClerk client={convex} useAuth={useAuth}>
        <App />
      </ConvexProviderWithClerk>
    </ClerkProvider>
  </React.StrictMode>
);

Access user identity in Convex queries and mutations

You can access the user information from the JWT in Convex queries and mutations. Use the ctx.auth.getUserIdentity() which returns the parsed information from the JWT, or null if the client isn't authenticated.

import type { UserIdentity } from 'convex/server';
import { query } from './_generated/server';
 
export default query(async (ctx) => {
  const user = await ctx.auth.getUserIdentity();
  
  if (user === null) {
    return null;
  }
  
  return user.tokenIdentifier;
});

You can customize the information in the JWT by navigating to the JWT Templates(opens in a new tab)page in the Clerk Dashboard. All the keys must be valid OpenID standard claims(opens in a new tab).

Finished!

You now have a fully functioning React and Convex application with Clerk authentication. Be aware that Convex may require usage of their custom hooks and methods rather than Clerk's, such as using Convex's useConvexAuth() hook instead of Clerk's useAuth() hook in some cases. For more informationon how to use Convex with Clerk, check out the Convex docs(opens in a new tab).