Login with Railway can be used securely across web and native apps.
Web apps (confidential clients, like server side apps) authenticate with client secrets.
Native apps (public clients like CLIs, SPAs and mobile apps) use PKCE.
Need persistent sessions? Request offline_access to get a refresh token, so users stay logged in without having to re-authorize again and again.