I am currently developing an application using Spring Boot and React. I am using Spring Security with OAuth2. When users visit my React application and request data from my Spring Boot backend, they are prompted to log in. They have the option to log in via GitHub or Google. This setup uses JSESSIONIDs, following the standard documentation.