Setting the file. One moment.
Subchapter 21.4
references/recipes.mdMarkdown5 KBView on GitHub
Post-auth patterns. Hooks below are imported from @clerk/expo unless noted; they mirror @clerk/react.
Canonical docs (fetch to re-verify if the installed SDK is newer than 3.6.x): — plus and pages under the Expo reference
local-credentialspasskeysimport { useUser } from '@clerk/expo'
const { user, isLoaded } = useUser()
// user is null until loaded/signed in — always guard
// user.fullName, user.firstName, user.imageUrl, user.primaryEmailAddress?.emailAddressFor a full profile management UI on a dev build, prefer the native UserProfileView / UserButton (prebuilt-components.md) over hand-built screens.
import { useClerk } from '@clerk/expo'
const { signOut } = useClerk()
<Pressable onPress={() => signOut()}>...</Pressable>Organizations must be enabled in the dashboard. For deeper org work (roles, invitations, RBAC) load the clerk-orgs skill — the hooks are identical in Expo.
import { useOrganization, useOrganizationList } from '@clerk/expo'
const { organization } = useOrganization()
const { setActive, userMemberships } = useOrganizationList({
userMemberships: { infinite: true },
})
// Current: organization?.name ?? 'Personal account'
// Switch: setActive({ organization: membership.organization.id })
// List: userMemberships.data?.map((m) => m.organization) — guard while undefinedRoute guards are client-side only; authorize on the server:
import { useAuth } from '@clerk/expo'
const { getToken } = useAuth()
const res = await fetch(`${API_URL}/endpoint`, {
headers: { Authorization: `Bearer ${await getToken()}` },
})Verify the token server-side with Clerk’s backend SDK for your server framework (e.g. @clerk/backend‘s verifyToken, or the framework SDK’s getAuth). Clerk has no official Expo Router API-routes (+api.ts) integration — treat any server code as a normal backend and use @clerk/backend.
Associate the Expo push token with the Clerk user:
import { useUser } from '@clerk/expo'
import * as Notifications from 'expo-notifications'
import { useEffect } from 'react'
export function PushTokenRegistrar() {
const { user, isLoaded } = useUser()
useEffect(() => {
if (!isLoaded || !user) return
;(async () => {
const { status } = await Notifications.requestPermissionsAsync()
if (status !== 'granted') return
const token = (await Notifications.getExpoPushTokenAsync()).data
await user.update({
unsafeMetadata: { ...user.unsafeMetadata, expoPushToken: token },
})
})()
}, [isLoaded, user])
return null
}unsafeMetadata is client-writable; anything that must be trusted belongs in publicMetadata, written server-side via the Backend SDK.unsafeMetadata.expoPushToken, POST to https://exp.host/--/api/v2/push/send.Dev build only. Stores the user’s credentials in the keychain, gated by Face ID / Touch ID / device biometrics, for fast re-sign-in.
Prerequisites: npx expo install expo-local-authentication (plus expo-secure-store from setup), iOS NSFaceIDUsageDescription in app.json → ios.infoPlist.
import { useLocalCredentials } from '@clerk/expo/local-credentials'
const { hasCredentials, setCredentials, authenticate, biometricType } = useLocalCredentials()
// After a successful password sign-in, offer to enable biometrics:
await setCredentials({ identifier: emailAddress, password })
// On later launches, if hasCredentials:
const signInResource = await authenticate() // prompts biometrics, performs the sign-inPassword-based instances only — it replays stored credentials. Confirm the exact return shape against node_modules/@clerk/expo/dist/local-credentials/*.d.ts before wiring UI.
Dev build only. Install the separate @clerk/expo-passkeys package, then import from the @clerk/expo/passkeys subpath — the subpath re-exports the peer package (this install/import pairing is intentional and matches the docs). Pass it to the provider and enable passkeys in the dashboard:
import { passkeys } from '@clerk/expo/passkeys'
<ClerkProvider publishableKey={publishableKey} tokenCache={tokenCache} __experimental_passkeys={passkeys}>Requires associated-domains setup (iOS) / asset links (Android). Fetch https://clerk.com/docs/reference/expo/passkeys (opens in a new tab) for the current platform configuration before implementing — this surface is still experimental and changes.
If Clerk resources (user, session) should survive offline cold starts, pass resourceCache from @clerk/expo/resource-cache to the provider (__experimental_resourceCache). @clerk/expo/secure-store is the deprecated alias — never use it in new code.