diff --git a/main/docs/get-started/universal-components/universal-components-overview.mdx b/main/docs/get-started/universal-components/universal-components-overview.mdx index 3a4940ce47..028e8cc43f 100644 --- a/main/docs/get-started/universal-components/universal-components-overview.mdx +++ b/main/docs/get-started/universal-components/universal-components-overview.mdx @@ -4,15 +4,6 @@ description: Learn what Auth0 Universal Components are and choose a platform to sidebarTitle: Auth0 Universal Components --- -import { ReleaseStageNotice } from "/snippets/ReleaseStageNotice.jsx" - - - Auth0 Universal Components is a library of pre-built UI components you can use to build your identity pipeline and experience inside your web and native applications. Built on [Auth0 SDKs](/docs/libraries) with an API-first approach, Universal Components allow you to embed Auth0's services, such as Organization management and MFA enrollment, without building the UI manually or managing high-privilege backend proxies. With Universal Components, you can: diff --git a/main/docs/get-started/universal-components/web/auth0-component-provider.mdx b/main/docs/get-started/universal-components/web/auth0-component-provider.mdx index 6a13d5a4b2..33499aaf51 100644 --- a/main/docs/get-started/universal-components/web/auth0-component-provider.mdx +++ b/main/docs/get-started/universal-components/web/auth0-component-provider.mdx @@ -31,6 +31,11 @@ Nest `Auth0ComponentProvider` in your authentication provider (`Auth0Provider`). + + + **Security recommendation:** For production applications that manage Organization configuration, Auth0 recommends the [Next.js setup](/docs/get-started/universal-components/auth0-component-provider#next-js) (Regular Web App). Next.js proxy mode stores tokens server-side, which reduces the attack surface compared to browser-stored tokens in a Single Page Application. If you use React SPA mode, review the [Token Storage](/docs/secure/security-guidance/data-security/token-storage) guidance to understand the tradeoffs. + + ```tsx App.tsx import { Auth0Provider } from "@auth0/auth0-react"; import { Auth0ComponentProvider } from "@auth0/universal-components-react/spa"; @@ -970,6 +975,10 @@ All custom methods are optional. Only implement the ones you need. Methods recei + + **Security recommendation:** For production applications that manage Organization configuration, Auth0 recommends the [Next.js setup](/docs/get-started/universal-components/auth0-component-provider#next-js) (Regular Web App). Next.js proxy mode stores tokens server-side, which reduces the attack surface compared to browser-stored tokens in a Single Page Application. If you use React SPA mode, review the [Token Storage](/docs/secure/security-guidance/data-security/token-storage) guidance to understand the tradeoffs. + + ```tsx App.tsx import { Auth0Provider } from "@auth0/auth0-react"; import { Auth0ComponentProvider } from "@auth0/universal-components-react/spa";