Users & Access
Member Areas
Create restricted content zones with frontend authentication — manage members, control access, and build members-only experiences.
What are Member Areas
Restricted content for authenticated users
Member areas let you create parts of your website that are only accessible to logged-in users. This is separate from the back-office user system — members are your website visitors, not your content team.
Common use cases:
- Premium content — articles, courses, or resources behind a login wall
- Client portals — project updates, documents, or reports for specific clients
- Community areas — members-only forums, discussions, or resources
- Subscription content — content tiers based on membership level
Contact Management
Manage your members
Members are managed through the Contacts system. Each contact represents a registered user on your frontend:
- Profile data — name, email, username, and custom fields
- Status tracking — Active, Pending, or Suspended
- Groups — organize contacts into groups (e.g., Contacts, Newsletter subscribers)
- Language preference — each member can have a preferred language
- Activity tracking — last login date and registration date
You can add custom fields per project to collect additional member data (company, phone, preferences, etc.).
Authentication
Frontend login system
Svalla provides a complete authentication system for frontend members:
- Login — members authenticate with email/username and password via the API
- JWT tokens — secure access tokens (1 hour) and refresh tokens (7 days) are issued
- Registration — new members can sign up through a registration form on your frontend
- Password reset — members can request a password reset via email
- Account verification — email verification workflow for new registrations
Your frontend application handles the UI (login form, registration page), while Svalla manages the authentication logic and token generation through the API.
Restricted Content
Mark content as members-only
Any post or page can be marked as restricted. When a page is restricted:
- The API returns a restricted flag with the content
- Your frontend checks if the user is authenticated before showing the content
- Unauthenticated users are redirected to the login page
- You can filter restricted content in API queries
Restriction works at the post level, so you have fine-grained control over which individual pages require authentication.
Contact Groups
Organize members into groups
The group system lets you categorize members:
- Contact group — general registered members
- Newsletter group — users subscribed to email updates
Groups can be used to:
- Send targeted communications
- Filter member lists in the back-office
- Control access to different content areas
- Track subscription and membership status