8 posts tagged with "OAuth & OIDC"

Sagara GunathungaSep 25, 2026 · 32 min

The Architect's Guide to React Authentication: Choosing a Flow, a Store and a Boundary

Three decisions define React authentication architecture: which flow, where tokens live, and where enforcement happens. A guide for technical decision makers.

Sagara GunathungaSep 17, 2026 · 25 min

React Authentication Best Practices: The 2026 Checklist

A practical checklist for React authentication: flows, token storage, session handling, XSS and CSRF defence, and the mistakes that ship most often.

Sagara GunathungaSep 15, 2026 · 17 min

Best Authentication Libraries for React in 2026

An honest comparison of React authentication libraries and platforms: Better Auth, Clerk, Auth0, Supabase, WSO2 and more, with real trade-offs.

Sagara GunathungaSep 10, 2026 · 19 min

Open Source and Self-Hosted Auth for React in 2026

Compare open source and self-hosted authentication for React apps: authentik, Keycloak, SuperTokens, Authelia and WSO2, with honest trade-offs.

Himesh SiriwardanaSep 7, 2026 · 24 min

JWT-Based Authentication in React: Storage, Validation and the localStorage Question

Where to store JWTs in a React app, how to validate them, and why localStorage is usually the wrong answer.

Himesh SiriwardanaSep 7, 2026 · 24 min

Passwordless Login in React: Passkeys, Magic Links and OTP

Add passwordless login to a React app. Compare passkeys, magic links and email OTP, then implement each with working code and honest trade-offs.

Himesh SiriwardanaSep 4, 2026 · 16 min

OAuth 2.0 and OIDC in React: The Authorization Code Flow with PKCE, Explained

How the OAuth 2.0 authorization code flow with PKCE works in a React SPA, why the implicit flow died, and how to implement it correctly.