React Auth

Authentication patterns specific to React and SPAs.

Why Iframe Authentication Is Difficult
Iframe-based auth looks like a clean way to embed a sign-in form. The browser thinks otherwise. Here's what actually breaks — cookies, postMessage, ITP, focus, autofill — and the patterns that survive contact with real users.
May 4, 2026 8 min read

Explore other topics

Authentication
Foundations, flows, and patterns for user authentication on the modern web.
Browse
OAuth & OIDC
OAuth 2.0, OpenID Connect, PKCE, and federated identity in depth.
Browse
JWT
Tokens, signatures, claims, and the things that go wrong with JWTs.
Browse
Security
Threats, mitigations, and defensive design for auth systems.
Browse
Passwordless
Magic links, OTPs, passkeys, and what to use when.
Browse
Multi-Tenant Auth
Designing auth for B2B SaaS — orgs, roles, and isolation.
Browse