Authentication & Authorization Packages
Authentication, authorization, and identity/session libraries for handling login, permissions, and access control securely (JWT, Passport, Sanctum).
Packages in Authentication & Authorization
Kind
Sort:Used by Most Apps
go-jose
The canonical Go implementation of JSON Web Encryption, Signature, and Token standards (JWE, JWS, JWT).
passport-jwt
A Passport.js strategy for authenticating requests using JSON Web Tokens
otp
A Go library for generating and validating TOTP and HOTP one-time passcodes, compatible with Google Authenticator.
ldap
A pure-Go LDAP v3 client implementing bind, search, modify, and extended operations for directory-backed authentication and identity systems.
SimpleWebAuthn Browser
Browser-side WebAuthn client for passkey registration, authentication, and feature detection in web apps.
node-jwks-rsa
A Node.js library that retrieves RSA, EC, and OKP signing keys from a JWKS endpoint, with caching and rate limiting built in.
jsonwebtoken
Create and decode JSON Web Tokens in Rust in a strongly typed way
bcrypt (Python)
A Python library for secure password hashing using the bcrypt algorithm with an adjustable work factor
aws-config
Resolves AWS credentials and shared configuration for every AWS SDK for Rust client.
Azure Identity (Python)
Microsoft Entra ID token authentication for Azure SDK clients in Python
itsdangerous
A small Python toolkit for cryptographically signing data so you can trust it hasn't been tampered with when it comes back from an untrusted client.
OTPAuth
HOTP and TOTP one-time password library for Node.js, Deno, Bun, and browsers
@nestjs/passport
The official NestJS integration module for the Passport authentication middleware
zxcvbn
A realistic password strength estimator that models how attackers actually guess passwords, not arbitrary composition rules.
go-grpc-middleware
A collection of reusable gRPC interceptors for Go covering auth, logging, retries, validation, and recovery.
keyring-rs
Cross-platform Rust library for storing passwords and secrets in the OS-native credential store
@nestjs/jwt
Official NestJS module for signing, verifying, and decoding JWTs
Authlib
The ultimate Python library for building OAuth 1/2 and OpenID Connect clients and servers.
Laravel Sanctum
Featherweight token and SPA authentication for Laravel applications
@supabase/ssr
The official framework-agnostic Supabase client for server-side rendering apps, handling cookie-based auth sessions.
passport-github2
A Passport.js strategy for authenticating Node.js applications with GitHub via OAuth 2.0.
@octokit/auth-app
GitHub App authentication strategy for JavaScript and Octokit
firebase-admin-node
Firebase Admin Node.js SDK for privileged, server-side access to Firebase Authentication, Firestore, Realtime Database, Cloud Messaging, and Storage.
webauthn
A spec-conformant WebAuthn and FIDO2 passkey server library for Go, handling registration and authentication ceremonies for passwordless and multi-factor login.
