Authentication & Authorization Packages
Authentication, authorization, and identity/session libraries for handling login, permissions, and access control securely (JWT, Passport, Sanctum).
Packages in Authentication & Authorization
Kind
Sort:Used by Most Apps
hvac
Python client library for HashiCorp Vault's secrets, authentication, and system-backend REST APIs.
passport-facebook
A Passport.js strategy for authenticating users with Facebook Login using OAuth 2.0.
saml
A Go implementation of the SAML 2.0 standard for building service providers and identity providers with single sign-on support.
oauth-1.0a
OAuth 1.0a request signing for Node.js and the browser, so you can authorize requests with any HTTP client you already use.
passport-ldapauth
A Passport.js authentication strategy that verifies usernames and passwords against an LDAP or Active Directory server.
check-password-strength
A lightweight, fully-typed password strength checker built on plain JavaScript regex rules.
csrf-sync
Stateful CSRF protection for Express using the Synchronizer Token Pattern, built to replace the deprecated csurf package.
scim2-parse-filter
Parses and evaluates RFC 7644 SCIM 2.0 filter expressions into a typed AST you can test, stringify, expand, or flatten in TypeScript.
django-allauth
Integrated Django app for authentication, registration, and social login
fastapi-users
Ready-to-use, fully customizable user registration, authentication, and management for FastAPI applications.
Symfony SecurityBundle
Symfony's full-stack authentication and authorization layer, configuring firewalls, authenticators, and access rules from YAML
oidc
OpenID Connect (OIDC) and OAuth2 client and server library for Go, certified by the OpenID Foundation.
Laravel Fortify
Frontend-agnostic authentication backend for Laravel, powering login, registration, and 2FA
Flask-Limiter
Rate limiting for Flask applications with pluggable storage backends and per-route limits
TwoFactorAuth
PHP library for TOTP-based two-factor authentication with pluggable QR code providers
Social Auth Core
The core authentication backend engine behind Python Social Auth, supporting OAuth, OpenID, and SAML.
cookies-next
Get, set, and delete cookies with one API across Next.js client, server, and edge contexts
PySAML2
Pure Python implementation of the SAML 2.0 standard for SSO and identity federation
jwcrypto
Python implementation of the full JOSE specification set for JSON Web Signing, Encryption, Keys, and Tokens.
python-ldap
Object-oriented Python bindings for LDAP directory servers, built on OpenLDAP's C client library.
express-basic-auth
Plug-and-play HTTP Basic Auth middleware for Express, with static users, custom authorizers, and timing-safe comparisons.
supertokens-auth-react
Prebuilt, customizable React UI for SuperTokens authentication — login, signup, MFA, and session management out of the box.
rpassword
Cross-platform Rust library for securely reading passwords from the terminal.
totp-rs
RFC 6238-compliant TOTP two-factor authentication for Rust
