Headless Auth How-To

Implementation guide

Build your own login and signup UI

The canonical walkthrough now lives in Guides so app-owned authentication UI is discoverable as a first-class SqlOS workflow.

Open the guide

What moved#

Use Build your own login and signup UI for the complete implementation:

1. configure UseHeadlessAuthPage(...) and BuildUiUrl;
2. keep credentialed browser calls on a supported same-site/CORS boundary;
3. start /authorize with client state and S256 PKCE;
4. render the server-owned identify, credential, organization, and MFA views;
5. validate callback state and exchange the code with the original verifier;
6. add product-owned signup fields without taking over identity state.

This URL remains as a compatibility entry point for existing links. It is intentionally not a second copy of the walkthrough.

Reference material#

• Headless Auth — mode behavior, supported branches, and configuration notes
• HTTP API Reference — exact routes and action-result contract
• Hosted vs Headless — choose which UI model fits the application
• Example applications — runnable Next.js and Angular clients