\n\nIt’s like config overrides on steroids—with actual reuse and structure. - Internal Tester
\n
Today, we’re launching something we’ve been quietly working on for months: the SuperTokens Extensions System —our new plugin-based customization layer designed to make authentication extensibility powerful, consistent, and finally reusable.
\nSuperTokens has always been flexible. Need to override a function? Go ahead. Want to tweak a recipe? Dive into the config. But as teams scale and customizations pile up, this model breaks down fast. Logic gets tangled inside initialization files. Sharing overrides becomes impossible. And worse, you end up re-implementing the same tweaks across projects.
\nWe asked ourselves: what if customizations could be modular, shareable, and cleanly separated?
\nThat’s what Extensions aim to solve.
\nThink of Extensions as plugins, but for auth.
\nThey let you:
\nNo more wrestling with sprawling config files. With Extensions, you write code once, and reuse it everywhere.
\n\nSuperTokens.init({\n\n// ...\n\nexperimental: {\n\nplugins: [emailDeliveryPlugin, captchaPlugin, auditLogger],\n\n},\n\n});We invited developers—both seasoned SuperTokens users and complete newcomers—to put the system through its paces. Here’s what we learned from their feedback:
\nBasic overrides are rock solid: Testers were able to override signIn, signUp, and other functions cleanly, using the new plugin structure.
Before/After execution pattern felt natural and powerful.
\n“It gives me the opportunity to do something before triggering a function and also after.” - Internal Tester
\nClean separation of logic: Developers appreciated moving override logic out of SuperTokens.init and into self-contained plugins. One tester remarked that it made the config “more readable and maintainable.”
Initial setup via CLI was smooth for most users:
\n\n\n“Straightforward and convenient.” – Internal Tester
\n
Despite the positive response, the launch surfaced a few key pain points:
\nThe initial guide suggested a trial by fire approach of “Try implementing a plugin”. This was not a real guide—it’s but more of a prompt.
\nMultiple testers internal testers found our examples too complex with no proper onboarding.
\nInconsistency in terminology led to confusion. Terms like “plugin” and “extension” were used interchangeably.
\n“It was a ‘draw the rest of the owl’ moment.” – Internal Tester
\nFixes underway:
\nWe’re working on focused “before/after” code examples
\nWe’ll simplify plugin examples and add step-by-step walkthroughs
\nTerminology is being standardized across the docs
\nMany users didn’t know what to build or how to start. Even though the system worked, the entry point wasn’t clear.
\n\n\n“Without prior SuperTokens knowledge, I had no idea what a plugin should do.” – Internal Tester
\n
We hear you—and we’re shipping onboarding tasks like:
\n“Build a captcha plugin from scratch”
\n“Log all failed sign-ins to a database”
\n“Inject custom UI components for password reset”
\nTesters reported that the example plugins were a little obtuse and followed a paradigm that didn’t seem intuitive.
\nWe’re rewriting these examples to match what people expect: concise, instructional, and minimal.
\nHere’s how testers scored the new system:
\n| Category | \nAvg. Score (out of 5) | \n
|---|---|
| Initial Setup Experience | \n3.8 | \n
| Documentation Clarity | \n2.6 | \n
| TypeScript Support | \n5.0 | \n
| Error Handling | \n4.0 | \n
| API Intuitiveness | \n3.9 | \n
| API Flexibility | \n4.8 | \n
📚 Launching guided plugin tasks for common use cases
\n🛠️ Improving plugin typing and reference docs
\n📦 Publishing more plugins to showcase the system
\n🧪 Opening up for more real-world testing
\nYou can still be part of shaping this system. Whether you’re a power user or just curious, we’d love your feedback:
\nTry building a plugin
\nIntegrate an existing one
\nTell us what’s confusing, broken, or awesome
\nYou can find our quick get started guide here
\nPlease reach out to us if you have any questions through Discord.
\nLet’s build the future of modular auth—together. 🔌
","frontmatter":{"date":"June 30, 2025","title":"SuperTokens Extensions: Customize Auth Your Way","cover":"supertokens-extensions.png","author":"Joel Coutinho","description":"Discover how SuperTokens Extensions bring modular, reusable, and powerful customization to authentication with a new plugin-based system."},"fields":{"slug":"/supertokens-extensions/"}},"site":{"siteMetadata":{"title":"SuperTokens Blog"}}},"pageContext":{"id":"18316c13-2a98-533c-b2f5-f70d2abd00d0","fields__slug":"/supertokens-extensions/","__params":{"fields__slug":"supertokens-extensions"}}}, "staticQueryHashes": []}