Authentication & Authorization Packages
Authentication, authorization, and identity/session libraries for handling login, permissions, and access control securely (JWT, Passport, Sanctum).
Packages in Authentication & Authorization
Kind
Sort:Used by Most Apps
react-turnstile
React bindings for Cloudflare Turnstile — a privacy-first CAPTCHA alternative with a declarative component and a full imperative ref API.
casl
Isomorphic JavaScript/TypeScript authorization library for defining and checking fine-grained user permissions.
Laravel UI
Bootstrap, Vue, and React front-end scaffolding for Laravel applications
passport-oauth2
A generic OAuth 2.0 authentication strategy for Passport, the base class most provider-specific Passport login strategies are built on.
firebase-js-sdk
Google's official client SDK for building web and Node.js apps on Firebase's backend services.
sessions
Cookie and filesystem session management for Go's net/http, with pluggable backends and key rotation.
node-machine-id
Cross-platform unique machine ID discovery for Node.js, no admin rights required
workos-node
Official Node.js SDK for the WorkOS API, wrapping SSO, SCIM directory sync, and enterprise user management in a typed client.
Laravel Socialite
An expressive OAuth 1 & 2 client for Laravel that handles social login boilerplate
@azure/msal-browser
Client-side authentication library for browser SPAs, implementing OAuth 2.0 Authorization Code Flow with PKCE against Microsoft Entra ID.
connect-redis
Redis-backed session store for Express and Connect apps, built on express-session's Store interface.
@clerk/backend
The official JavaScript SDK for Clerk's Backend API and JWT session verification.
Passport-SAML
SAML 2.0 authentication strategy for Passport, supporting ADFS, Okta, Shibboleth, and OneLogin.
argon2-cffi
Secure, high-level password hashing for Python using Argon2
oidc-provider
Certified OAuth 2.0 and OpenID Connect authorization server you mount into your own Node.js app.
jwx
A complete, opinionated Go implementation of the JOSE stack: JWT, JWS, JWE, JWK, and JWA.
securecookie
Encodes and decodes authenticated, optionally encrypted cookie values for Go web applications, guarding session data from tampering.
node-oauth2-server
Framework-agnostic, RFC 6749/6750-compliant OAuth 2.0 server module for Node.js with native async/await and PKCE support.
ssh
A higher-level, net/http-inspired Go API for building custom SSH servers on top of golang.org/x/crypto/ssh.
jsrsasign
Pure JavaScript cryptography library for RSA/ECDSA/DSA signing, X.509 certificates, ASN.1, JWS/JWT, and CMS.
OAuthLib
Generic, spec-compliant OAuth1, OAuth2, and OpenID Connect implementation for Python
argon2
Node.js bindings to the reference Argon2 password hashing implementation
python-jose
A JOSE implementation in Python for JWS, JWE, JWK, and JWT signing/encryption
keytar
Native Node.js bindings for storing passwords in the OS keychain
