Ready to deploy
Next.js
App Router, server-side code exchange, HttpOnly session cookies, token validation, and sign-out.
OPEN-SOURCE EXAMPLES
See NamoID authentication working before you integrate it.
Try a real Hosted Auth flow, inspect the source, and start from the framework closest to your application.
These are public Test applications. Use a test email and never enter production or sensitive data.
HOSTED AUTH
Choose an integration
Ready to deploy
React SPA
Browser-only React with Authorization Code + PKCE and no client secret in frontend code.
Next
Next.js + Supabase
NamoID owns authentication while Supabase stores application data behind an authenticated server boundary.
Source only
Express + React
A separate Express API manages the confidential code exchange and application session for React.