SuperTokens

Open-source user authentication platform offering modular recipes for email-password, passwordless, social login, and session management. Designed for self-hosting so teams keep control of auth data and reduce reliance on third-party auth providers. Setup includes prebuilt UI components or SDK helper functions to build custom login flows.

Trusted by HackerRank, Rollbar, ESPN Cricinfo, Curology, Salad, and other startups and enterprises. SuperTokens differentiates from Auth0, Firebase Auth, and AWS Cognito by offering full self-hosted deployment, custom domain support so login flows live on your domain without redirects, and a recipe-based architecture that lets you compose only the auth methods you need. Supports 25+ frameworks across web, mobile, and backend.

Key capabilities:

• Recipe-based architecture: email-password, passwordless (magic links, OTP), social login, session management, user roles
• Self-hosted or managed deployment, auth served from your custom domain
• 25+ framework SDKs: JavaScript, Go, Python, React, Angular, Vue, Android, Flutter, iOS
• Plugins for tenant discovery, captcha, user banning, and custom extensions
• Migration paths from Auth0 including bulk and lazy user migration

Teams building SaaS, mobile apps, or internal tools who want production-grade auth without vendor lock-in. Suits startups that need email-password and social login quickly, and enterprises requiring SSO, multi-tenancy, or custom domain auth. Developers benefit from framework-specific SDKs, prebuilt UI components, and session management with rotating refresh tokens.