Use Xano authentication in your WeWeb apps

Connect WeWeb to Xano Auth to handle user authentication, sessions, and access control.

Manage users and security

Authenticate users using Xano endpoints via workflow actions, and use the resulting session in your WeWeb app:

  • Call your Xano signup and login endpoints using workflow actions such as Authenticate
  • Sessions returned by Xano are stored and reused by WeWeb after authentication actions
  • Control access to pages and components based on the authenticated user in WeWeb
  • Trigger workflows after authentication actions such as login, signup, or logout
  • Build custom login and signup flows using workflows and Xano endpoints
  • Use conditional logic based on authentication state in WeWeb
  • Authentication sessions are reused automatically in subsequent requests after login
  • Keep authentication logic in Xano while handling UI and workflows in WeWeb

What WeWeb supports natively

Category Feature What it does
Setup Xano Auth Set Xano as your Authentication System and configure it with your instance, workspace, and API credentials.
Data source Xano data source Use Xano together with your data connection; authentication sessions are included in requests after login.
UI elements Pre-built auth UI blocks Ready-made Login, Signup, and Reset Password forms with validation, error handling, and workflows.
Auth flows Signup, Login, Logout Use workflow actions such as Authenticate, along with session actions, to call Xano authentication endpoints and store sessions.
Token management Store/Fetch/Validate token Authentication responses store the session and allow fetching the current user; requests include this session automatically.
Social OAuth Login provider action OAuth flows depend on your Xano setup and available endpoints; integration behavior should match your configured authentication endpoints.
Page protection Private pages + roles Use authenticated user data returned by Xano to control access to pages and components.
Forgot password Reset password flow UI block + Xano /auth/reset-password endpoint for magic links and email resets.
User context Session variables Exposes user data, roles, and tokens from /me, bindable for personalization and conditionals.

Why use WeWeb with Xano Auth

Using Xano Auth with WeWeb keeps authentication aligned with your backend logic while giving you full control over the frontend experience.

Perfect for:

  • SaaS apps backed entirely by Xano
  • Client portals connected to Xano user data
  • Internal tools with role-based access
  • Admin dashboards secured by Xano Auth
  • Multi-tenant apps using Xano as the backend

And more…

Integrating Xano Auth with WeWeb

Integrating Xano Auth with WeWeb is straightforward:

  1. Set Xano as your authentication system in WeWeb
  2. Add an Authenticate action to the workflow where you want to sign users in or sign them up
  3. Confige the action with your Xano endpoint, HTTP method, and request body
  4. Map the response so WeWeb can store the authentication state
  5. Use the authenticated state in your app logic and UI after the action runs successfully

For step-by-step instructions, see the official docs.

Best practices & limitations

  • Let Xano handle identity and permissions
  • Use WeWeb for frontend access control and UX
  • Handle token expiration and refresh explicitly
  • Test protected routes and edge cases thoroughly

FAQs

1. How do I set up the Xano Auth?

Set Xano as your authentication system in WeWeb, then use the Authenticate action inside a workflow to call your Xano authentication endpoint. Configure the endpoint, HTTP method, and request body based on your Xano setup.

2. What UI components does it provide?

Ready-made Login, Signup, and Reset Password form blocks with built-in validation, loading states, and Xano endpoint calls.

3. Does it handle token storage automatically?

Yes, Login/Sign up actions store bearer tokens, Fetch user calls /auth/me, tokens auto-forward to Xano data source calls.​

4. Can I use social logins like Google?

Yes, Login provider workflow action handles OAuth redirects, consent screens, and token exchange with Xano.

5. How does page protection work with Xano roles?

Map Xano /auth/me roles to WeWeb user groups, then set pages private or use conditional visibility on components.

6. What happens on logout?

Sign out action clears tokens/sessions, resets user context, and redirects to your login page.

7. Do I need the Xano data source installed too?

Yes, install both Xano Auth (for login) and Xano data source (for authenticated CRUD calls post-login).