SuperTokens

SuperTokens

@supertokens.com

Open source user auth that is quick to implement (under 1 hour) & easy to customize Discord: http://supertokens.com/discord GitHub: http://github.com/supertokens https://supertokens.com

24 followers4 following85 posts

And that's a wrap on Supertokens Launch Week! 🎉 We shipped 5 new plugin families in 5 days, all designed to solve the annoying, repetitive work around auth so you can focus on your core product. Missed any of it? We wrote a blog post with the full recap! 🔗 supertokens.com/blog/launch-...

supertokens.comSuperTokens Launch Week 02: 7 Open-Source Auth PluginsOpen-source auth plugins you’ll reuse: profiling, banning, CAPTCHA, tenancy tools, and telemetry. React/Node ready.
View full thread

Supertokens Launch Week, Day 2: The captcha plugin Captchas don’t really need an introduction. It’s just that we made it super easy to add them to your Supertokens project 🧵

View full thread

The profile page plugin gives you exactly what it says on the box: a ready to use profile page. Fully customizable, as with all things Supertokens. It pairs really well with the progressive user profiling plugin 👇

Our third plugin is out! And this one is for all of you struggling with multi-tenant setups and user routing. We're happy to present our brand new 🎉 Tenant Discovery Plugin 🎉 As it says on the package, this plugin helps route your users to the appropriate tenant, based on their email 👇🔗

Add CAPTCHA verification to your SuperTokens authentication flows. This plugin integrates with reCAPTCHA v2, reCAPTCHA v3, and Cloudflare Turnstile to protect authentication endpoints from automated attacks. Node - github.com/supertokens/... React - github.com/supertokens/...

github.comsupertokens-plugins/packages/captcha-nodejs at main · supertokens/supertokens-pluginsContribute to supertokens/supertokens-plugins development by creating an account on GitHub.

🗓️ SuperTokens Launch Week Day 5: We rebuilt our docs from scratch. Because "your product is as good as your documentation." It’s a never-ending iterative process, and we feel like we’ve improved ours. Thread 🧵

View full thread

But structure wasn't enough. We standardized everything: same writing style, same page templates, same organization. We even use Vale (a linting tool) in CI to enforce consistency. No more "every page written by a different person" chaos. 👇

The results speak for themselves: • Users complete quickstart guides faster • Less page-hopping during sessions • Better user feedback • Developers can actually find what they need Sometimes good docs is just removing the friction. Full story here: supertokens.com/blog/rethink...

supertokens.comRethinking our documentationWe rebuilt our documentation from the ground up—reorganizing structure, enforcing consistency, and making it easier than ever for developers to navigate and customize authentication with SuperTokens.

🗓️ SuperTokens Launch Week Day 5: We rebuilt our docs from scratch. Because "your product is as good as your documentation." It’s a never-ending iterative process, and we feel like we’ve improved ours. Thread 🧵

View full thread

So we did something crazy: we built two entirely different documentation architectures. Spent months on each. Tested both with real users. Compared how people actually navigated vs. how we thought they would. Only then did we pick one. 👇

The winning approach: follow how auth actually works. • Quickstart (get running fast) • Authentication (methods and setup) • Additional Verification (MFA, email verification) • Post Authentication (sessions, user management) • Migration, Platform Config, Deployment Logic beats personalization. 👇

🗓️ SuperTokens Launch Week Day 5: We rebuilt our docs from scratch. Because "your product is as good as your documentation." It’s a never-ending iterative process, and we feel like we’ve improved ours. Thread 🧵

We tried to personalize everything. Different auth methods got different navigation. Recipes for different use cases. Seemed smart. Result? Navigation chaos. Users couldn't find anything. Good intentions, terrible execution. 👇

The breaking point: Users reported spending more time hunting through docs than actually implementing auth. Our "personalized" approach created 15 different ways to navigate the same information. We optimized for the wrong thing. 👇

🗓️ SuperTokens Launch Week Day 4: WebAuthn and Passkeys 🔐 Because typing passwords is so 2019. And because biometric auth is finally ready for prime time. Thread 🧵

View full thread

WebAuthn solves this with actual cryptography: • Your device generates a key pair • Private key never leaves your device • Public key goes to the server • Authentication = proving you have the private key No passwords to steal. No credentials to breach. 👇

🗓️ SuperTokens Launch Week Day 4: WebAuthn and Passkeys 🔐 Because typing passwords is so 2019. And because biometric auth is finally ready for prime time. Thread 🧵

The problem with passwords: Users forget them. They reuse weak ones. They get breached. They're annoying to type on mobile. Meanwhile, your phone already knows it's you. Your laptop has a fingerprint reader. Why are we still typing "password123"? 👇

🗓️ SuperTokens Launch Week Day 3: Introducing the SuperTokens AI Toolkit 🤖 1/ Manage your entire auth system directly from Claude, Cursor, or any LLM client 🧵

View full thread

4/ Building your own AI tools? We're including drop-in middleware to secure them with SuperTokens. Get session management, RBAC, and multi-tenancy for your AI workflows—instantly.

🗓️ SuperTokens Launch Week Day 3: Introducing the SuperTokens AI Toolkit 🤖 1/ Manage your entire auth system directly from Claude, Cursor, or any LLM client 🧵

2/ Stop context-switching between your editor, terminal, and auth dashboard. Just tell your AI: "Create a new admin user" or "Revoke all sessions for user@example.com" It handles the rest. Securely.

3/ No more hallucinated APIs - Reference up to date documentation inside your AI client. So when you ask for auth code, you get snippets that actually work today. Not outdated examples from old blog posts.

CLI Update: Remember that onboarding flow from earlier today? Our new CLI is what makes those tailored demos possible. We rebuilt create-supertokens-app to actually create apps you can use as a starting point OR as a learning tool. Thread 🧵

View full thread

The bigger vision: This standardization is step one toward `supertokens add email-password` in any existing project. Imagine adding auth to your current app with one command. Any framework, any setup. That's where we're heading. 👇

CLI Update: Remember that onboarding flow from earlier today? Our new CLI is what makes those tailored demos possible. We rebuilt create-supertokens-app to actually create apps you can use as a starting point OR as a learning tool. Thread 🧵

View full thread

The config compiler breakthrough: Instead of maintaining 20+ different config files, we built a system that generates the right setup based on your choices. Pick React + Node? You get React SDK configs. Pick Vue + Python? You get Vue + Python configs. One source of truth, infinite combinations. 👇

Why this matters for you: No more adapting examples to your stack. No more "this is close to what I need, I'll figure out the rest." `npx create-supertokens-app my-app` gives you a real starting point for YOUR stack. Copy, modify, ship. 👇

CLI Update: Remember that onboarding flow from earlier today? Our new CLI is what makes those tailored demos possible. We rebuilt create-supertokens-app to actually create apps you can use as a starting point OR as a learning tool. Thread 🧵

❓ The problem: when you name something "create-something-app", people expect it to create apps they can use as a starting point. While it sort-of did that, the intent behind it was different, which influenced the direction and design choices of the tool. 👇

What changed under the hood: • 20+ framework combinations, all standardized • Same routes across every stack (/auth, /dashboard, /) • Same UI patterns whether you pick React, Vue, or Angular • Latest stable versions of everything • Production-ready structure, not just demos 👇