That would be after signin or signup API is called. You can refer to this to know how to handle signin/signup events on the frontend: https://supertokens.io/docs/thirdpartyemailpassword/common-customizations/handling-signinup-success#2-handling-signin--signup-event-on-the-frontend