Authentication & Authorization Packages
Authentication, authorization, and identity/session libraries for handling login, permissions, and access control securely (JWT, Passport, Sanctum).
Packages in Authentication & Authorization
Kind
Sort:Used by Most Apps
React OAuth (Google)
Typed React hooks and components for Google Sign-In, One Tap, and OAuth2 login built on Google's Identity Services SDK.
python3-saml
Add SAML 2.0 single sign-on and single logout to Python applications
@fastify/cookie
Fast, secure cookie parsing and signing plugin for Fastify applications
xml-crypto
TypeScript library for signing, verifying, and encrypting XML documents using the W3C XMLDSig and XMLEnc standards.
set-cookie-parser
Parse raw Set-Cookie header values into structured JavaScript cookie objects
passport-headerapikey
A lightweight Passport.js strategy for authenticating requests with a header-based API key.
Open Policy Agent (OPA)
Open source policy engine for unified authorization and compliance decisions across your stack.
djangorestframework-simplejwt
A JSON Web Token authentication plugin for Django REST Framework, with token rotation, blacklisting, and pluggable signing built in.
league/oauth2-client
A framework-agnostic PHP client for building OAuth 2.0 login and API-authorization flows.
Flask-Login
User authentication and session management for Flask applications
PyOTP
Python library for generating and verifying TOTP/HOTP one-time passwords for 2FA
speakeasy
A Node.js library for generating and verifying RFC 4226 (HOTP) and RFC 6238 (TOTP) one-time passcodes for two-factor authentication.
Standard Webhooks (Python)
Python reference implementation for verifying Standard Webhooks HMAC-signed webhook payloads
Flask-WTF
Simple integration of Flask and WTForms with built-in CSRF, file upload, and reCAPTCHA support
zxcvbn-ts
A TypeScript rewrite of Dropbox's zxcvbn password strength estimator, with pluggable dictionaries and async matcher support.
oauth2-rs
An extensible, strongly-typed Rust implementation of the OAuth2 protocol (RFC 6749) with PKCE, introspection, revocation, and device flow support.
ldap3
A pure Python LDAP v3 client library for querying and managing directory servers without any C bindings or system OpenLDAP dependency.
node-sshpk
Parse, convert, fingerprint, sign and verify SSH and X.509 keys in pure Node.js, with zero dependency on ssh-keygen or OpenSSL binaries.
passport-openidconnect
OpenID Connect authentication strategy for Passport, letting Node.js apps delegate login to any compliant identity provider.
passport-apple
Passport.js OAuth2 strategy for Sign in with Apple, handling Apple's JWT client-secret generation and POST-based callback flow.
Vault API
The official Go client library for HashiCorp Vault, providing typed access to secrets, auth methods, and system endpoints.
SAML Jackson (Polis)
Open-source SAML 2.0 and OIDC library that turns enterprise SSO logins into a plain OAuth 2.0 flow for your Node.js app.
Google2FA
A framework-agnostic PHP implementation of HOTP and TOTP one-time passwords, compatible with Google Authenticator and similar apps.
go-keyring
Cross-platform Go library for storing secrets in the OS-native keyring or keychain.
