Authentication & Authorization Packages
Authentication, authorization, and identity/session libraries for handling login, permissions, and access control securely (JWT, Passport, Sanctum).
Packages in Authentication & Authorization
Kind
Sort:Used by Most Apps
jsonwebtoken
The de facto Node.js library for signing, verifying, and decoding JSON Web Tokens.
jose
Zero-dependency JWT, JWS, JWE, and JWK toolkit for Node.js, browsers, and edge runtimes.
jwt
A zero-dependency Go implementation of JSON Web Tokens (JWT) with pluggable HMAC, RSA, RSA-PSS, ECDSA, and Ed25519 signing methods.
cookie-parser
Express middleware that parses HTTP Cookie headers into req.cookies, with support for signed and JSON-encoded cookie values.
bcrypt.js
A zero-dependency, pure JavaScript implementation of bcrypt for hashing and verifying passwords in Node.js and the browser.
PyJWT
A Python implementation of RFC 7519 for encoding, decoding, and verifying JSON Web Tokens.
AWS SDK for Go v2
The official AWS SDK for Go — type-safe, modular clients for every AWS service.
Better Auth
The most comprehensive, framework-agnostic authentication and authorization framework for TypeScript.
google-auth
The foundational Python library for authenticating to Google Cloud and Google APIs with OAuth2, service accounts, and Application Default Credentials.
bcrypt
Battle-tested password hashing for Node.js using the adaptive bcrypt algorithm.
google-api-nodejs-client
Google's officially supported Node.js client library for calling hundreds of Google APIs with built-in OAuth 2.0, API key, and service-account auth.
passport
Simple, unobtrusive authentication middleware for Node.js with 480+ pluggable strategies.
cookie
Basic HTTP cookie parser and serializer for HTTP servers, with zero dependencies and full RFC 6265 support.
express-rate-limit
Basic IP rate-limiting middleware for Express to throttle repeated requests and protect public APIs and sensitive endpoints.
supabase-js
The official isomorphic JavaScript SDK for Supabase — database, auth, realtime, storage, and edge functions in one client.
go-oidc
A Go client library for OpenID Connect, built on top of golang.org/x/oauth2.
@azure/identity
Microsoft Entra ID credential library that authenticates every Azure SDK client, from managed identity in production to CLI and browser login in development.
NextAuth.js
Open-source authentication for Next.js with OAuth, OIDC, email, and passkey sign-in.
jwt-decode
A lightweight TypeScript library for decoding JSON Web Token payloads and headers in the browser and Node.js.
express-session
Simple, pluggable session middleware for Express that signs session IDs into a cookie and delegates data storage to any compatible store.
openid-client
Certified OAuth 2 and OpenID Connect client for every modern JavaScript runtime.
otplib
TypeScript-first TOTP and HOTP library with a pluggable crypto/base32 architecture for Node, Bun, Deno, and browsers.
passport-local
Passport strategy for authenticating users with a username and password in Node.js and Express applications.
passport-google-oauth20
Google OAuth 2.0 authentication strategy for Passport.js and Node.js
