Signup and login that works great for both companies and consumers

Welcome your users with great signup and login, including invitation and forgot password emails, without you having to code it all.
Built to handle todays and tomorrows needs with flexible options like multi workspace access.

All your auth, with one click

Enable a diverse range of authentication methods with one click, including Passkeys, Multi-Factor Authentication (MFA), Single Sign-On (SSO), Security Assertion Markup Language (SAML), and integrations with Google and Microsoft. Easiest way to elevate your security, customer needs and making your backlog happy.

Looking good

Yes looks matter, and you want a cohesive user experience. Straight from the control center you can adapt visuals to your brand's identity and localising text to resonate with diverse audiences. So simple you can ask your teammates to do it.

RBACked

We truly meant it when we said we take you all the way. Roles is something that always goes along with users. Use the control center to create and assign roles. Leverage the roles to limit access to specific features in your app. Add, modify, or remove any way you please, without code releases.

Manage your users, and let your users manage theirs

Get an overview of all your users, invite new ones, or edit their details. Versatile enough for B2C and B2B scenarios, and usable by everyone.Embed the same feature in your app and give your users the power to invite and manage their own members.

A dream feature that never made it to the top of your backlog

User readiness, Subscription control, Feature control, All working together

Organisation, device, role or any other user parameter, use it to control your features.Embed subscription selection directly into the login process. All this and so much more new possibilities when everything is gathered in one control center.

Anytime anywhere any place

Moving to Nblocks? Bring your own customers with one simple import. Whether for frontend, backend, or both, or even API-only applications, Nblocks is versatile enough to cater to any app's needs. Designed to be lean for your early stages, and cost efficient and fast enough to manage thousands of new daily users as your business grows

Get started

Get user ready today

Built to work with any programming language or framework. No heavy code libraries. Just two code snippets away.

A redirect:

import { useEffect } from "react";

export default function Login() {

  // Replace this with your own APP ID
  const APP_ID = "XXX";

  // Immediately redirect the web browser to Nblocks login
  window.location.replace(`https://auth.nblocks.cloud/url/login/${APP_ID}`);
  return ("");
}

Copy this example

import { redirect } from 'next/navigation'
 
export default function Login() {

  // Replace this with your own APP ID
  const APP_ID = "XXX";

  // Immediately redirect the web browser to Nblocks login
  redirect(`https://auth.nblocks.cloud/url/login/${APP_ID}`);
}

Copy this example

@Component({
  template: '',
})
export class Login {
  constructor(
  ) {
    // Replace this with your own APP ID
    const APP_ID = "XXX";

    // Immediately redirect the web browser to Nblocks login
    window.location.replace(`https://auth.nblocks.cloud/url/login/${APP_ID}`);
  }
}

Copy this example

package com.mycompany.app;

import java.io.IOException;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

class LoginServlet extends HttpServlet {
    // Replace this with your own APP ID
    private static final String APP_ID = "XXX";
    private static final String LOGIN_URL = "https://auth.nblocks.cloud/url/login/";

    @Override
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        response.sendRedirect(LOGIN_URL + APP_ID);
    }
}

Copy this example

If you cannot find your stack in the example code you need to integrate this part manually.

Nblocks can be integrated with any stack or framework.
Essentially it's all about REST API calls or redirecting the user browser agent which is documented in more details in the API reference https://nebulr-group.github.io/nblocks-api-docs.

Use the other code examples to understand what should to be done and in what order.

We'd be happy to get feedback so we can add more code examples so don't forget to make a request, by joining our Discord https://discord.gg/kjWYdZ6f6G and spell it out.

Followed by a callback:

import React, { useEffect, useState } from "react";
import { Navigate, useLocation } from 'react-router-dom';
import { jwtVerify, createRemoteJWKSet } from "jose";

// Users will get back to this component after finishing login
export default function Callback() {

  // Replace this with your own APP ID
  const APP_ID = "XXX";

  const location = useLocation();
  const [accessToken, setAccessToken] = useState();

  useEffect(() => {
    const code = new URLSearchParams(location.search).get("code");
    if (code) {
      handleCallback(code);
    }
  }, []);

  const handleCallback = async (code) => {
    // Get tokens
    const tokens = await fetch(`https://auth.nblocks.cloud/token/code/${APP_ID}`,
      {
        method: "POST", headers: { "Content-Type": "application/json", },
        body: JSON.stringify({ code }),
      }
    ).then(res => res.json());

    // Verify the tokens result using public keys from Nblocks JWKS
    const { access_token, refresh_token, id_token } = tokens;
    const { payload } = await jwtVerify(
      access_token, createRemoteJWKSet(
          new URL('https://auth.nblocks.cloud/.well-known/jwks.json')
      ), { issuer: 'https://auth.nblocks.cloud' }
    );

    // Store the result in component state and localstorage
    window.localStorage.setItem('access_token', access_token);
    window.localStorage.setItem('refresh_token', refresh_token);
    window.localStorage.setItem('id_token', id_token);
    setAccessToken(payload);
    console.log("User access token", payload);
  };

  if (accessToken)
      return (<Navigate to={"/"}/>);
  else
    return (<p>Not logged in</p>);
}

Copy this example

'use client'

import { useSearchParams, redirect } from "next/navigation";
import { useEffect, useState } from "react";
import { jwtVerify, createRemoteJWKSet } from "jose";

// Users will get back to this component after finishing login
export default function Callback() {

  // Replace this with your own APP ID
  const APP_ID = "XXX";

  const searchParams = useSearchParams();
  const [accessToken, setAccessToken] = useState();

  useEffect(() => {
    const code = searchParams.get('code');
    if (code) {
      handleCallback(code);
    }
  }, [searchParams]);

  const handleCallback = async (code) => {
    // Get tokens
    const tokens = await fetch(`https://auth.nblocks.cloud/token/code/${APP_ID}`,
      {
        method: "POST", headers: { "Content-Type": "application/json", },
        body: JSON.stringify({ code }),
      }
    ).then(res => res.json());

    // Verify the tokens result using public keys from Nblocks JWKS
    const { access_token, refresh_token, id_token } = tokens;
    const { payload } = await jwtVerify(
      access_token, createRemoteJWKSet(
          new URL('https://auth.nblocks.cloud/.well-known/jwks.json')
      ), { issuer: 'https://auth.nblocks.cloud' }
    );

    // Store the result in component state and localstorage
    window.localStorage.setItem('access_token', access_token);
    window.localStorage.setItem('refresh_token', refresh_token);
    window.localStorage.setItem('id_token', id_token);
    setAccessToken(payload);
    console.log("User access token", payload);
  };

  if (accessToken)
      redirect("/");
  else
    return (<p>Not logged in</p>);
}

Copy this example

import { jwtVerify, createRemoteJWKSet } from 'jose';
import { ActivatedRoute } from '@angular/router';
import { HttpClient } from '@angular/common/http';
import { Component } from '@angular/core';

@Component({
  template: '<div>Logging in...</div>',
})
export class Callback {
  // Replace this with your own APP ID
  const APP_ID = "XXX";

  private accessToken: any;

  constructor(private activatedRoute: ActivatedRoute, private http: HttpClient) {
    const code = this.activatedRoute.queryParams['code'];
    if (code) {
      this.handleCallback(this.activatedRoute.queryParams['code']);
    }
  }

  private handleCallback(code: string) {
    // Get tokens
    this.http
      .post(`https://auth.nblocks.cloud/token/code/${this.APP_ID}`, {
        code: code,
      })
      .subscribe(async (tokens: any) => {
        // Verify the tokens result using public keys from Nblocks JWKS
        const { access_token, refresh_token, id_token } = tokens;
        const { payload } = await jwtVerify(
          access_token,
          createRemoteJWKSet(
            new URL('https://auth.nblocks.cloud/.well-known/jwks.json')
          ),
          { issuer: 'https://auth.nblocks.cloud' }
        );

        // Store the result in component state and localstorage
        window.localStorage.setItem('access_token', access_token);
        window.localStorage.setItem('refresh_token', refresh_token);
        window.localStorage.setItem('id_token', id_token);
        this.accessToken = payload;
        console.log('User access token', payload);
      });
  }
}

Copy this example

Check out docs

User ready - The full user story you wish you had, but never had the time to build

Signup and login that works great for both companies and consumers

All your auth, with one click

Looking good

RBACked

Manage your users, and let your users manage theirs

User readiness, Subscription control, Feature control, All working together

Anytime anywhere any place

Get user ready today

Pre-built front-end views

Views ready to use out of the box

Keep your authentication on brand

Localize for any market

Speak with your brand’s voice

B2B readiness

Enterprise SSO

User management

Roles and privileges

Organizations using multi tenancy

Bring your own users

Minimum effort, maximum security

ISO 27001 Certified

GDPR Compliant

Penetration tested

Build SaaS how it should be built today