Sign in

The sign in flow follows the same pattern as the sign up flow but instead of redirecting to the registration page, it redirects to the login page.

Expressjs

app.get("/", (req, res) => {
  ory
    .toSession({ cookie: req.header("cookie") })
    .then((data) => res.json(data))
    .catch(() =>
      res.redirect(`${process.env.ORY_SDK_URL}/self-service/login/browser`),
    )
})

Next.js

import ory from "@/lib/ory"
import { redirect } from "next/navigation"
import { headers } from "next/headers"

export default async function Page() {
  let session = null
  try {
    session = await ory.toSession({
      cookie: (await headers()).get("cookie") || "",
    })
  } catch (error) {
    redirect(`${process.env.ORY_SDK_URL}/self-service/login/browser`)
  }

  return <pre>{JSON.stringify(session, null, 2)}</pre>
}

Go

login_handler.go

package main

import (
	"io"
	"net/http"
)

// LoginHandler handles the /login route
func (app *App) loginHandler(writer http.ResponseWriter, request *http.Request) {
	// Get cookies from the request
	cookies := request.Header.Get("Cookie")

	// Try to verify session with Ory
	session, response, err := app.ory.FrontendAPI.ToSession(request.Context()).Cookie(cookies).Execute()

	// If there's an error or session is not active, redirect to login UI
	if err != nil || (err == nil && !*session.Active) {
		http.Redirect(writer, request, app.tunnelUrl+"/self-service/login/browser", http.StatusSeeOther)
		return
	}

	// If session is valid, send the session data as JSON response
	writer.Header().Set("Content-Type", "application/json")
	writer.WriteHeader(http.StatusOK)
	// Use io.Copy to copy the response body to the writer
	io.Copy(writer, response.Body)
}

You can alternatively set return_to to a custom URL. This custom URL must be allow-listed in your project's configuration; otherwise, the request will fail. If allow-listed, this URL will be used as the return URL for the sign in flow:

https://$ORY_SDK_URL/self-service/login/browser?return_to=https://example.com/dashboard