Identity Content Hub
Engineering insights, tutorials, and updates from the WSO2 Identity Platform team.
Guided tracks, start to production.
User authentication for modern applications
Secure login and session patterns for web, mobile, single-page, native, and backend applications, including React, Next.js, Vue.js, Nuxt, and other frameworks.
AI agent identity & MCP authorization
Agent identity, authentication, delegated access, consent, and authorization across MCP clients, servers, and tools.
Regulations & compliance
How privacy, security, and digital identity regulations shape the design and operation of IAM systems.
Latest articles
8 articlesOpen Source and Self-Hosted Auth for React in 2026
Compare open source and self-hosted authentication for React apps: authentik, Keycloak, SuperTokens, Authelia and WSO2, with honest trade-offs.
JWT-Based Authentication in React: Storage, Validation and the localStorage Question
Where to store JWTs in a React app, how to validate them, and why localStorage is usually the wrong answer.
Passwordless Login in React: Passkeys, Magic Links and OTP
Add passwordless login to a React app. Compare passkeys, magic links and email OTP, then implement each with working code and honest trade-offs.
OAuth 2.0 and OIDC in React: The Authorization Code Flow with PKCE, Explained
How the OAuth 2.0 authorization code flow with PKCE works in a React SPA, why the implicit flow died, and how to implement it correctly.
React Authentication: The Complete Guide
Learn how authentication works in a React app: OAuth 2.0 with PKCE, token storage, protected routes, and sessions, apply component-driven pattern with working WSO2 React SDK.
The extensible, API-first platform to orchestrate identity for every human and AI agent at scale. 100% open source.