--- source_url: "https://stytch.com/docs/api-reference/consumer/frontend-sdks/react/prebuilt-ui/login/configuration" title: StytchLogin Configuration - Stytch Docs mirrored_at: 2026-08-14T13:04:35.311Z host: stytch.com cited_in_42a: true mirror_canonical: "https://index.42a.ai/stytch.com/docs/api-reference/consumer/frontend-sdks/react/prebuilt-ui/login/configuration" --- > **Original source:** https://stytch.com/docs/api-reference/consumer/frontend-sdks/react/prebuilt-ui/login/configuration array required The products array allows you to specify the authentication methods that you would like to expose to your users.The order of the products that you include here will also be the order in which they appear in the login form, with the first product specified appearing at the top of the login form.Currently the JavaScript SDK supports our `emailMagicLinks`, `oauth`, `passwords`, `otp`, `passkeys` and `crypto` products.`passkeys` must be used with another authentication factor and cannot be used alone.If the only product specified is `oauth`, and the only OAuth provider specified is google with `one_tap` set to true, the login form will not be displayed. Instead, we will only show the Google One Tap prompt in the upper right of the user’s browser. object The options for Email Magic Links. This is required if `emailMagicLinks` is present in the products array. Show properties string The URL that will appear in your email template and accepts a token (ex: you implement ‘[https://example.com/authenticate?token=123](https://example.com/authenticate?token=123)’ in your app and pass ‘[https://example.com/authenticate](https://example.com/authenticate)’ as the redirect URL). This link should route to an endpoint that authenticates your user via Stytch’s authenticate endpoint and redirect to your app’s experience for existing users. number The expiration of the Magic Link sent in the login email, in minutes. Defaults to 60 minutes. The minimum expiration is 5 minutes and the maximum is 7 days (10080 mins). string The URL that will appear in your email template and accepts a token (ex: you implement ‘[https://example.com/authenticate?token=123](https://example.com/authenticate?token=123)’ in your app and pass ‘[https://example.com/authenticate](https://example.com/authenticate)’ as the redirect URL). This link should route to an endpoint that authenticates your user via Stytch’s authenticate endpoint and redirect to your app’s experience for new users. number The expiration of the Magic Link sent in the signup email, in minutes. Defaults to 7 days. The minimum expiration is 5 minutes and the maximum is 7 days (10080 mins). string Custom template ID for login emails. By default, it will use your default email template. Templates can be added in the [Stytch dashboard](https://stytch.com/dashboard/templates) using our built-in customization options or custom HTML templates with type “Magic links - Login”. string Custom template ID for sign-up emails. By default, it will use your default email template. Templates can be added in the [Stytch dashboard](https://stytch.com/dashboard/templates) using our built-in customization options or custom HTML templates with type “Magic links - Sign-up”. string Used to determine which language to use when sending the user this delivery method. Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. “en”.Supported languages are English (“en”), Spanish (“es”), French (“fr”) and Brazilian Portuguese (“pt-br”); if no value is provided, the copy defaults to English. object The options for Email or SMS One-Time Passcodes. This is required if `otp` is present in the products array. Show properties array required Specifies which OTP methods to display. Valid values are `'email'`, `'sms'` and `'whatsapp'`. The order of the products that you include here will also be the order in which they appear in the login form, with the first product specified appearing at the top of the login form. number The expiration for the one-time passcode, in minutes. The default expiration is 2 minutes. The minimum expiration is 1 minute and the maximum is 10 minutes. string Custom template ID for signup emails. By default, it will use your default email template. Templates can be added in the [Stytch dashboard](https://stytch.com/dashboard/templates) using our built-in customization options or custom HTML templates with type “OTP”. string Custom template ID for OTP emails. By default, it will use your default email template. Templates can be added in the [Stytch dashboard](https://stytch.com/dashboard/templates) using our built-in customization options or custom HTML templates with type “OTP”. string Used to determine which language to use when sending the user this delivery method. Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. “en”.Supported languages are English (“en”), Spanish (“es”), French (“fr”) and Brazilian Portuguese (“pt-br”); if no value is provided, the copy defaults to English. object The options for OAuth. This is required if `oauth` is present in the products array. Show properties array required Specifies which OAuth providers to display. Show properties string required The provider type. Currently we support `google`, `microsoft`, `apple`, `github`, `gitlab`, `facebook`, `discord`, `salesforce`, `slack`, `amazon`, `bitbucket`, `coinbase`, `linkedin`, `twitch`, `twitter` (a.k.a. X), `yahoo`, `snapchat`, `shopify`, `figma`, and `tiktok`. boolean Whether to display the Google One Tap prompt in the top right corner of the user’s browser. This parameter is only allowed if the type is set to `google`. boolean Controls whether the Google One Tap prompt is automatically dismissed when the user taps outside of it. This parameter is only allowed if the type is set to `google` and `one_tap` is set to true. Defaults to true. string Supported behaviors for positioning Google One Tap. The actual behavior depends on browser support and Google’s One Tap implementation. The position options are: - `floating`: Display the One Tap prompt using a native browser prompt if available, or in the top right corner otherwise. This is the default option. - `floatingOrEmbedded`: Display the One Tap prompt using a native browser prompt if available, or embedded in the existing SDK login form otherwise. - `embeddedOnly`: Display the One Tap prompt embedded in the existing SDK login form if a native browser prompt is not available, or not at all otherwise. This option is not recommended for new applications. - `forceLegacyEmbedded`: Attempt to display the One Tap prompt embedded in the existing SDK login form, even if a native browser prompt is supported. This option is not recommended. It disables native browser FedCM support even where it is available, and will stop being honored by Google in the future. array\[string\] An optional array of scopes that Stytch will request for your application in addition to the base set of scopes required for login. object An object with any additional parameters that you’d like to pass along to the OAuth provider (for example, `login_hint`, for providers that support it). string The URL that Stytch will redirect to after a successful OAuth login. This should be a page in your application that handles the OAuth callback. string The URL that Stytch will redirect to after a successful OAuth sign-up. This should be a page in your application that handles the OAuth callback. object The options for Passwords. This is required if `passwords` is present in the products array. Show properties string The URL to redirect to after a successful password login. string The URL that will appear in password reset emails and accepts a token. This link should route to an endpoint in your application that renders the password reset UI. number The number of minutes that the password reset token sent in password reset emails will be valid for. Defaults to 30 minutes. string Custom template ID for password reset emails, configured via [the Branding page](https://stytch.com/dashboard/templates) in the Stytch Dashboard. If this value is not specified, your default password reset template will be used. string Used to determine which language to use when sending the user this delivery method. Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. “en”.Supported languages are English (“en”), Spanish (“es”), French (“fr”) and Brazilian Portuguese (“pt-br”); if no value is provided, the copy defaults to English. object The options for Passkeys. Show properties string Sets the domain option for both WebAuthn registration and authentication. Defaults to the current page’s hostname. object The options for session management. Show properties number Set the session lifetime to be this many minutes from now; minimum of 5 and a maximum of 527040 minutes (366 days).