TiloBox
Back to directory
SuperTokens project preview

SuperTokens

Open-source authentication and session management provider with self-hosted control.

LicenseApache-2.0
GitHub stars15.3k
Last commit2 weeks ago
Tags6 topics
SsoAuthenticationAuthorizationOauth2JwtSession Management
Overview

Why consider SuperTokens?

SuperTokens is an open-core authentication engine that provides modular login recipes and session tokens. It is built for engineering teams needing self-hosted data control and flexible auth architecture.

Guided learning

Learn SuperTokens by building

Practical setup notes, real use cases, and copy-ready examples in one focused guide.

1 min read 3 sections
In this guide3 sections

Overview and Architecture

SuperTokens provides an open source user authentication architecture designed for developers to build fast while retaining full data ownership (https://supertokens.com).

SuperTokens architecture consists of three building blocks: a Frontend SDK for session management and UI, a Backend SDK providing auth APIs, and the SuperTokens Core HTTP service handling core authentication logic and database operations. This separation ensures that frontend clients interact with application backend endpoints, while the backend orchestrates calls to the core service.

SuperTokens is an open-core alternative to proprietary login providers like Auth0 or AWS Cognito that allows on-premises deployment to maintain full control of user data.

Supported Authentication Features

Supported authentication features include passwordless login, social login, email password authentication, session management, multi-factor authentication, and multi-tenancy enterprise SSO.

Configuration

The SuperTokens core service configuration establishes default network listening on port 3567 with access token validity configured in seconds:

yaml
1core_config_version: 0

SuperTokens core source code is distributed under the Apache License Version 2.0. This permissive licensing model allows teams to inspect, modify, and integrate core capabilities without proprietary restrictions.

Related tools

More options with a similar category or technology profile.

SuperTokens FAQs

SuperTokens is listed as a Developer Tools tool on TiloBox. Review the overview, features, and official documentation on this page to decide whether it solves your specific workflow.

Start with the project's GitHub repository and official website for supported installation and deployment instructions. Test the setup with representative data or a small project before rolling it out more widely.

SuperTokens is listed under the Apache-2.0 license. Read the complete license text and the project's notices before using, modifying, or distributing the software.

Production readiness depends on your requirements. Review maintenance activity, security practices, documentation, backup and upgrade procedures, and compatibility with your stack; then validate it in a non-production environment.

SuperTokens is listed as an alternative to Firebase Auth. Compare the core workflow, deployment model, integrations, and licensing against your must-have requirements before switching.