Authenticate the user

This authentication part (steps 1-2) is the same to authentication with an existing user base.

  1. Redirect user to Redirect URL
  2. Session management

1. Redirect user to Redirect URL

On successful authentication (e.g. with passkeys or email magic link), the user is redirected to the Redirect URL in the browser.

2. Session management

If the user has successfully authenticated and been redirected to the Redirect URL, you need to take care of session management for your application.

Here, you have two options:

2.1 Corbado session management

We recommend to read through the general Corbado session documentation before implementation.

Corbado offers secure and easy session management that you can use out-of-the-box.

Depending on your application’s setup, you have different choices for protecting routes with Corbado’s session management. Please see Sessions - Protecting routes for details.

Sessions

2.2 Own session management

If you have no existing user base, we strongly recommend to use Corbado’s session management, as this will save you a lot of implementation time and is a proven solution.

If you want to keep your existing session management, you can keep that of course and use Corbado only for authentication. Please see Own session management for details.

Own Session Management