Security and Login
Start here for security-aware workflows in Wappler: session context, login-related server logic, and safe state handling.
Login, Access, and Protected Data
Use this hub when you are setting up identity and access. Start with the security provider, then move into login, page restriction, account flows, and protected server logic.
Choose a security path
Section titled “Choose a security path”Start with provider setup, then follow login, access rules, account flows, and secure server logic.
Start here
Setting up Site Security Settings
Understand Wappler Security Providers, provider types, and the shared settings that power login and access control across a project.
Login: Create a Working User Login Page
See the real Demo Projects HQ login flow, from the page form to the shared Security Provider.
Security: Restricting Access to Your Page
Use the App Root security properties to understand shared layout protection, page-specific access rules, and the inspector fields that control login and permission redirects.
Securing Routed Pages and Layouts
Protect routed pages and shared layouts by combining provider setup, route rules, and secure server-side checks.
Security Provider fundamentals
See how Security Providers drive login sessions, action restrictions, and protected page flows across a Wappler project.
Complete account flows
Register and Auto Login
Plan a registration flow in Wappler that creates the account, starts the session, and hands the user into the app cleanly.
Logout Button and Session Exit
Build a predictable logout flow in Wappler so sessions end cleanly and protected areas become inaccessible immediately.
Role-Based Redirects After Login
Use provider permissions and route decisions to send different Wappler users to the right post-login destination.
Logged-In User Context
Use session-backed identity in Wappler pages and actions so the app can show the current user safely and consistently.
Current User: Page Data Binding
Use Demo Projects HQ to load /api/auth/current_user with a page-level dmx-serverconnect component and bind it safely in App Connect.
Password Reset: Request and Token Flow
Plan the first half of a Wappler password-reset flow: request handling, token generation, and safe handoff into reset links.
Password Reset: Update and Re-entry
Complete the Wappler password-reset flow by validating the token, storing the new password safely, and guiding the user back into login.
Google OAuth Login
Understand how Google OAuth fits into Wappler security flows, from provider setup to callback handling and protected routes.
Server-side enforcement and context
Secure Server-Side Data
Learn how Wappler protects server actions with shared providers, session context, and permission-aware enforcement.
Using Globals in Server Connect
Use Globals in Server Connect to manage shared project settings such as database connections, security providers, mailer settings, and other reusable server-side configuration.
Server Connect Actions: Session & Cookie inputs
Understand session vs cookie data, how they relate to login/auth, and how to use them as inputs in actions.
Demo walkthrough: User update (routing + session + security)
Use the real users/update.json action in Demo Projects HQ to connect route params, session context, permissions, and a secure database update.
Go to
Data Flow and APIs
Start here for data flow in Wappler: server-side actions, client-side bindings, and your first dynamic data flow.
How-To Guides
Browse practical how-to entry points across Wappler so you can jump straight into guided task-based learning.
Wappler Docs Index
Structured hub for Wappler learning paths across onboarding, how-to guides, reference tours, switching guides, and product-area indexes.